From 5da613de64fd4f752d945beb7b2464feb18b041f Mon Sep 17 00:00:00 2001
From: Stefan Reimer <stefan@zero-downtime.net>
Date: Fri, 15 May 2020 16:07:01 +0100
Subject: [PATCH] First kiam implementation incl. docs

---
 charts/kubezero-kiam/Chart.yaml               |    2 +-
 charts/kubezero-kiam/README.md                |   69 +
 charts/kubezero-kiam/README.md.gotmpl         |   40 +
 .../kubezero-kiam/kiam-grafana-dashboard.json | 2933 +++++++++++++++++
 charts/kubezero-kiam/kiam_architecure.png     |  Bin 0 -> 43992 bytes
 .../kubezero-kiam/templates/certificates.yaml |   28 +
 charts/kubezero-kiam/templates/namespace.yaml |    6 +
 charts/kubezero-kiam/values.yaml              |   15 +-
 8 files changed, 3085 insertions(+), 8 deletions(-)
 create mode 100644 charts/kubezero-kiam/README.md
 create mode 100644 charts/kubezero-kiam/README.md.gotmpl
 create mode 100644 charts/kubezero-kiam/kiam-grafana-dashboard.json
 create mode 100644 charts/kubezero-kiam/kiam_architecure.png
 create mode 100644 charts/kubezero-kiam/templates/certificates.yaml
 create mode 100644 charts/kubezero-kiam/templates/namespace.yaml

diff --git a/charts/kubezero-kiam/Chart.yaml b/charts/kubezero-kiam/Chart.yaml
index f341d4a..d2fc880 100644
--- a/charts/kubezero-kiam/Chart.yaml
+++ b/charts/kubezero-kiam/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: kubezero-kiam
 description: KubeZero Umbrella Chart for Kiam
 type: application
-version: 0.1.0
+version: 0.1.1
 home: https://kubezero.com
 icon: https://cdn.zero-downtime.net/assets/logo_small.png
 keywords:
diff --git a/charts/kubezero-kiam/README.md b/charts/kubezero-kiam/README.md
new file mode 100644
index 0000000..9eee72a
--- /dev/null
+++ b/charts/kubezero-kiam/README.md
@@ -0,0 +1,69 @@
+kubezero-kiam
+=============
+KubeZero Umbrella Chart for Kiam
+
+Current chart version is `0.1.1`
+
+Source code can be found [here](https://kubezero.com)
+
+## Chart Requirements
+
+| Repository | Name | Version |
+|------------|------|---------|
+| https://uswitch.github.io/kiam-helm-charts/charts/ | kiam | 5.7.0 |
+
+## KubeZero default configuration
+We run agents on the controllers as well, so we force eg. ebs csi controllers and others to assume roles etc.
+This means we need to run kiam containers on the controllers using `hostnetwork: true`.
+Therefore we also change the default port from 443 to 6444 to not collide with the potential api-server port on the controllers.
+Make sure any firewall rules between controllers and workers are adjusted accordingly.
+
+## Kiam Certificates
+The required certificates for Kiam server and agents are provided by a local cert-manager, which is configured to have a cluster local self-signing CA as part of the KubeZero platform.  
+[Kiam TLS Config](https://github.com/uswitch/kiam/blob/master/docs/TLS.md#cert-manager)  
+[KubeZero cert-manager](../kubezero-cert-manager/README.md)
+
+## Metadata restrictions
+Required for the *csi ebs plugin* and most likely various others assuming basic AWS information.
+
+- `/latest/meta-data/instance-id`
+- `/latest/dynamic/instance-identity/document`
+
+## Chart Values
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| kiam.agent.host.iptables | bool | `true` |  |
+| kiam.agent.log.level | string | `"warn"` |  |
+| kiam.agent.prometheus.servicemonitor.enabled | bool | `false` |  |
+| kiam.agent.sslCertHostPath | string | `"/etc/ssl/certs"` |  |
+| kiam.agent.tlsSecret | string | `"kiam-agent-tls"` |  |
+| kiam.agent.tolerations[0].effect | string | `"NoSchedule"` |  |
+| kiam.agent.tolerations[0].key | string | `"node-role.kubernetes.io/master"` |  |
+| kiam.agent.whiteListRouteRegexp | string | `"^/latest/(meta-data/instance-id|dynamic)"` |  |
+| kiam.server.assumeRoleArn | string | `"arn:aws:iam::123456789012:role/kiam-server-role"` |  kiam server IAM role to assume, required as we run the agents next to the servers normally |
+| kiam.server.deployment.enabled | bool | `true` |  |
+| kiam.server.deployment.replicas | int | `1` |  |
+| kiam.server.log.level | string | `"warn"` |  |
+| kiam.server.nodeSelector."node-role.kubernetes.io/master" | string | `""` |  |
+| kiam.server.prometheus.servicemonitor.enabled | bool | `false` |  |
+| kiam.server.service.port | int | `6444` |  |
+| kiam.server.service.targetPort | int | `6444` |  |
+| kiam.server.sslCertHostPath | string | `"/etc/ssl/certs"` |  |
+| kiam.server.tlsSecret | string | `"kiam-server-tls"` |  |
+| kiam.server.tolerations[0].effect | string | `"NoSchedule"` |  |
+| kiam.server.tolerations[0].key | string | `"node-role.kubernetes.io/master"` |  |
+| kiam.server.useHostNetwork | bool | `true` |  |
+
+## Debugging
+- Verify iptables rules on hosts to be set by the kiam agent:  
+  `iptables -L -t nat -n --line-numbers`  
+  `iptables -t nat -D PREROUTING <wrong rule>`
+
+## Resources
+- https://github.com/uswitch/kiam
+- https://www.bluematador.com/blog/iam-access-in-kubernetes-kube2iam-vs-kiam
+
+---
+![Architecture](kiam_architecure.png)  
+Image Credits: Blue Matador, Inc.
diff --git a/charts/kubezero-kiam/README.md.gotmpl b/charts/kubezero-kiam/README.md.gotmpl
new file mode 100644
index 0000000..037f292
--- /dev/null
+++ b/charts/kubezero-kiam/README.md.gotmpl
@@ -0,0 +1,40 @@
+{{ template "chart.header" . }}
+{{ template "chart.description" . }}
+
+{{ template "chart.versionLine" . }}
+
+{{ template "chart.sourceLinkLine" . }}
+
+{{ template "chart.requirementsSection" . }}
+
+## KubeZero default configuration
+We run agents on the controllers as well, so we force eg. ebs csi controllers and others to assume roles etc.
+This means we need to run kiam containers on the controllers using `hostnetwork: true`.
+Therefore we also change the default port from 443 to 6444 to not collide with the potential api-server port on the controllers.
+Make sure any firewall rules between controllers and workers are adjusted accordingly.
+
+## Kiam Certificates
+The required certificates for Kiam server and agents are provided by a local cert-manager, which is configured to have a cluster local self-signing CA as part of the KubeZero platform.  
+[Kiam TLS Config](https://github.com/uswitch/kiam/blob/master/docs/TLS.md#cert-manager)  
+[KubeZero cert-manager](../kubezero-cert-manager/README.md)
+
+## Metadata restrictions
+Required for the *csi ebs plugin* and most likely various others assuming basic AWS information.
+
+- `/latest/meta-data/instance-id`
+- `/latest/dynamic/instance-identity/document`
+
+{{ template "chart.valuesSection" . }}
+
+## Debugging
+- Verify iptables rules on hosts to be set by the kiam agent:  
+  `iptables -L -t nat -n --line-numbers`  
+  `iptables -t nat -D PREROUTING <wrong rule>`
+
+## Resources
+- https://github.com/uswitch/kiam
+- https://www.bluematador.com/blog/iam-access-in-kubernetes-kube2iam-vs-kiam
+
+---
+![Architecture](kiam_architecure.png)  
+Image Credits: Blue Matador, Inc.
diff --git a/charts/kubezero-kiam/kiam-grafana-dashboard.json b/charts/kubezero-kiam/kiam-grafana-dashboard.json
new file mode 100644
index 0000000..61dde81
--- /dev/null
+++ b/charts/kubezero-kiam/kiam-grafana-dashboard.json
@@ -0,0 +1,2933 @@
+{
+  "__inputs": [],
+  "__requires": [
+    {
+      "type": "grafana",
+      "id": "grafana",
+      "name": "Grafana",
+      "version": "5.2.2"
+    },
+    {
+      "type": "panel",
+      "id": "graph",
+      "name": "Graph",
+      "version": "5.0.0"
+    },
+    {
+      "type": "panel",
+      "id": "heatmap",
+      "name": "Heatmap",
+      "version": "5.0.0"
+    },
+    {
+      "type": "panel",
+      "id": "singlestat",
+      "name": "Singlestat",
+      "version": "5.0.0"
+    }
+  ],
+  "annotations": {
+    "list": [
+      {
+        "builtIn": 1,
+        "datasource": "-- Grafana --",
+        "enable": true,
+        "hide": true,
+        "iconColor": "rgba(0, 211, 255, 1)",
+        "name": "Annotations & Alerts",
+        "type": "dashboard"
+      }
+    ]
+  },
+  "description": "Kiam cache, response & health metrics",
+  "editable": true,
+  "gnetId": 3831,
+  "graphTooltip": 0,
+  "id": null,
+  "iteration": 1533922855243,
+  "links": [],
+  "panels": [
+    {
+      "collapsed": false,
+      "gridPos": {
+        "h": 1,
+        "w": 24,
+        "x": 0,
+        "y": 0
+      },
+      "id": 17,
+      "panels": [],
+      "title": "Stats",
+      "type": "row"
+    },
+    {
+      "aliasColors": {},
+      "bars": false,
+      "dashLength": 10,
+      "dashes": false,
+      "datasource": "$datasource",
+      "fill": 1,
+      "gridPos": {
+        "h": 4,
+        "w": 6,
+        "x": 0,
+        "y": 1
+      },
+      "id": 7,
+      "legend": {
+        "alignAsTable": true,
+        "avg": false,
+        "current": false,
+        "hideEmpty": true,
+        "hideZero": true,
+        "max": false,
+        "min": false,
+        "rightSide": true,
+        "show": false,
+        "total": true,
+        "values": true
+      },
+      "lines": true,
+      "linewidth": 1,
+      "links": [],
+      "nullPointMode": "null as zero",
+      "percentage": false,
+      "pointradius": 5,
+      "points": false,
+      "renderer": "flot",
+      "seriesOverrides": [],
+      "spaceLength": 10,
+      "stack": false,
+      "steppedLine": false,
+      "targets": [
+        {
+          "expr": "sum by (pod, handler) (delta(kiam_metadata_success_total[$interval]))",
+          "format": "time_series",
+          "intervalFactor": 2,
+          "legendFormat": "{{handler}} - {{pod}} ",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "thresholds": [],
+      "timeFrom": null,
+      "timeShift": null,
+      "title": "Number of successful responses from a handler",
+      "tooltip": {
+        "shared": true,
+        "sort": 2,
+        "value_type": "individual"
+      },
+      "type": "graph",
+      "xaxis": {
+        "buckets": null,
+        "mode": "time",
+        "name": null,
+        "show": true,
+        "values": []
+      },
+      "yaxes": [
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        },
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        }
+      ],
+      "yaxis": {
+        "align": false,
+        "alignLevel": null
+      }
+    },
+    {
+      "aliasColors": {},
+      "bars": false,
+      "dashLength": 10,
+      "dashes": false,
+      "datasource": "$datasource",
+      "fill": 1,
+      "gridPos": {
+        "h": 4,
+        "w": 6,
+        "x": 6,
+        "y": 1
+      },
+      "id": 37,
+      "legend": {
+        "alignAsTable": true,
+        "avg": false,
+        "current": true,
+        "hideEmpty": true,
+        "hideZero": true,
+        "max": false,
+        "min": false,
+        "rightSide": false,
+        "show": false,
+        "total": true,
+        "values": true
+      },
+      "lines": true,
+      "linewidth": 1,
+      "links": [],
+      "nullPointMode": "null as zero",
+      "percentage": false,
+      "pointradius": 5,
+      "points": false,
+      "renderer": "flot",
+      "seriesOverrides": [],
+      "spaceLength": 10,
+      "stack": false,
+      "steppedLine": false,
+      "targets": [
+        {
+          "expr": "sum by (code, pod) (delta(kiam_metadata_responses_total[$interval]))",
+          "format": "time_series",
+          "intervalFactor": 1,
+          "legendFormat": "{{code}} {{pod}}",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "thresholds": [],
+      "timeFrom": null,
+      "timeShift": null,
+      "title": "Responses from mocked out metadata handlers",
+      "tooltip": {
+        "shared": true,
+        "sort": 2,
+        "value_type": "individual"
+      },
+      "type": "graph",
+      "xaxis": {
+        "buckets": null,
+        "mode": "time",
+        "name": null,
+        "show": true,
+        "values": []
+      },
+      "yaxes": [
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        },
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        }
+      ],
+      "yaxis": {
+        "align": false,
+        "alignLevel": null
+      }
+    },
+    {
+      "aliasColors": {},
+      "bars": false,
+      "dashLength": 10,
+      "dashes": false,
+      "datasource": "$datasource",
+      "fill": 1,
+      "gridPos": {
+        "h": 4,
+        "w": 6,
+        "x": 12,
+        "y": 1
+      },
+      "id": 34,
+      "legend": {
+        "alignAsTable": true,
+        "avg": false,
+        "current": true,
+        "hideEmpty": true,
+        "hideZero": true,
+        "max": false,
+        "min": false,
+        "rightSide": false,
+        "show": false,
+        "total": true,
+        "values": true
+      },
+      "lines": true,
+      "linewidth": 1,
+      "links": [],
+      "nullPointMode": "null as zero",
+      "percentage": false,
+      "pointradius": 5,
+      "points": false,
+      "renderer": "flot",
+      "seriesOverrides": [],
+      "spaceLength": 10,
+      "stack": false,
+      "steppedLine": false,
+      "targets": [
+        {
+          "expr": "sum by (pod) (delta(kiam_metadata_empty_role_total[$interval]))",
+          "format": "time_series",
+          "intervalFactor": 1,
+          "legendFormat": "{{pod}}",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "thresholds": [],
+      "timeFrom": null,
+      "timeShift": null,
+      "title": "Number of empty roles returned",
+      "tooltip": {
+        "shared": true,
+        "sort": 2,
+        "value_type": "individual"
+      },
+      "type": "graph",
+      "xaxis": {
+        "buckets": null,
+        "mode": "time",
+        "name": null,
+        "show": true,
+        "values": []
+      },
+      "yaxes": [
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        },
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        }
+      ],
+      "yaxis": {
+        "align": false,
+        "alignLevel": null
+      }
+    },
+    {
+      "aliasColors": {},
+      "bars": false,
+      "dashLength": 10,
+      "dashes": false,
+      "datasource": "$datasource",
+      "fill": 1,
+      "gridPos": {
+        "h": 4,
+        "w": 6,
+        "x": 18,
+        "y": 1
+      },
+      "id": 38,
+      "legend": {
+        "alignAsTable": true,
+        "avg": false,
+        "current": true,
+        "hideEmpty": true,
+        "hideZero": true,
+        "max": false,
+        "min": false,
+        "rightSide": false,
+        "show": false,
+        "total": true,
+        "values": true
+      },
+      "lines": true,
+      "linewidth": 1,
+      "links": [],
+      "nullPointMode": "null as zero",
+      "percentage": false,
+      "pointradius": 5,
+      "points": false,
+      "renderer": "flot",
+      "seriesOverrides": [],
+      "spaceLength": 10,
+      "stack": false,
+      "steppedLine": false,
+      "targets": [
+        {
+          "expr": "sum by (handler, pod) (delta(kiam_metadata_find_role_errors_total[$interval]))",
+          "format": "time_series",
+          "intervalFactor": 1,
+          "legendFormat": "{{handler}} {{pod}}",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "thresholds": [],
+      "timeFrom": null,
+      "timeShift": null,
+      "title": "Number of errors finding the role for a pod",
+      "tooltip": {
+        "shared": true,
+        "sort": 2,
+        "value_type": "individual"
+      },
+      "type": "graph",
+      "xaxis": {
+        "buckets": null,
+        "mode": "time",
+        "name": null,
+        "show": true,
+        "values": []
+      },
+      "yaxes": [
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        },
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        }
+      ],
+      "yaxis": {
+        "align": false,
+        "alignLevel": null
+      }
+    },
+    {
+      "aliasColors": {},
+      "bars": false,
+      "dashLength": 10,
+      "dashes": false,
+      "datasource": "$datasource",
+      "fill": 1,
+      "gridPos": {
+        "h": 4,
+        "w": 6,
+        "x": 0,
+        "y": 5
+      },
+      "id": 39,
+      "legend": {
+        "alignAsTable": true,
+        "avg": false,
+        "current": true,
+        "hideEmpty": true,
+        "hideZero": true,
+        "max": false,
+        "min": false,
+        "rightSide": false,
+        "show": false,
+        "total": true,
+        "values": true
+      },
+      "lines": true,
+      "linewidth": 1,
+      "links": [],
+      "nullPointMode": "null as zero",
+      "percentage": false,
+      "pointradius": 5,
+      "points": false,
+      "renderer": "flot",
+      "seriesOverrides": [],
+      "spaceLength": 10,
+      "stack": false,
+      "steppedLine": false,
+      "targets": [
+        {
+          "expr": "sum by (handler, pod) (delta(kiam_metadata_find_role_errors_total[$interval]))",
+          "format": "time_series",
+          "intervalFactor": 1,
+          "legendFormat": "{{handler}} {{pod}}",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "thresholds": [],
+      "timeFrom": null,
+      "timeShift": null,
+      "title": "Number of errors finding the role for a pod",
+      "tooltip": {
+        "shared": true,
+        "sort": 0,
+        "value_type": "individual"
+      },
+      "type": "graph",
+      "xaxis": {
+        "buckets": null,
+        "mode": "time",
+        "name": null,
+        "show": true,
+        "values": []
+      },
+      "yaxes": [
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        },
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        }
+      ],
+      "yaxis": {
+        "align": false,
+        "alignLevel": null
+      }
+    },
+    {
+      "aliasColors": {},
+      "bars": false,
+      "dashLength": 10,
+      "dashes": false,
+      "datasource": "$datasource",
+      "fill": 1,
+      "gridPos": {
+        "h": 4,
+        "w": 6,
+        "x": 6,
+        "y": 5
+      },
+      "id": 41,
+      "legend": {
+        "alignAsTable": true,
+        "avg": false,
+        "current": true,
+        "hideEmpty": true,
+        "hideZero": true,
+        "max": false,
+        "min": false,
+        "rightSide": false,
+        "show": false,
+        "total": true,
+        "values": true
+      },
+      "lines": true,
+      "linewidth": 1,
+      "links": [],
+      "nullPointMode": "null as zero",
+      "percentage": false,
+      "pointradius": 5,
+      "points": false,
+      "renderer": "flot",
+      "seriesOverrides": [],
+      "spaceLength": 10,
+      "stack": false,
+      "steppedLine": false,
+      "targets": [
+        {
+          "expr": "sum by (pod) (delta(kiam_sts_issuing_errors_total[$interval]))",
+          "format": "time_series",
+          "intervalFactor": 1,
+          "legendFormat": "{{pod}}",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "thresholds": [],
+      "timeFrom": null,
+      "timeShift": null,
+      "title": "Number of errors issuing credentials",
+      "tooltip": {
+        "shared": true,
+        "sort": 2,
+        "value_type": "individual"
+      },
+      "type": "graph",
+      "xaxis": {
+        "buckets": null,
+        "mode": "time",
+        "name": null,
+        "show": true,
+        "values": []
+      },
+      "yaxes": [
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        },
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        }
+      ],
+      "yaxis": {
+        "align": false,
+        "alignLevel": null
+      }
+    },
+    {
+      "aliasColors": {},
+      "bars": false,
+      "dashLength": 10,
+      "dashes": false,
+      "datasource": "$datasource",
+      "fill": 1,
+      "gridPos": {
+        "h": 4,
+        "w": 6,
+        "x": 12,
+        "y": 5
+      },
+      "id": 45,
+      "legend": {
+        "alignAsTable": true,
+        "avg": false,
+        "current": true,
+        "hideEmpty": true,
+        "hideZero": true,
+        "max": false,
+        "min": false,
+        "rightSide": false,
+        "show": false,
+        "total": true,
+        "values": true
+      },
+      "lines": true,
+      "linewidth": 1,
+      "links": [],
+      "nullPointMode": "null as zero",
+      "percentage": false,
+      "pointradius": 5,
+      "points": false,
+      "renderer": "flot",
+      "seriesOverrides": [],
+      "spaceLength": 10,
+      "stack": false,
+      "steppedLine": false,
+      "targets": [
+        {
+          "expr": "sum by (pod) (kiam_k8s_dropped_pods_total)",
+          "format": "time_series",
+          "intervalFactor": 1,
+          "legendFormat": "{{pod}}",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "thresholds": [],
+      "timeFrom": null,
+      "timeShift": null,
+      "title": "Number of dropped pods because of full buffer",
+      "tooltip": {
+        "shared": true,
+        "sort": 2,
+        "value_type": "individual"
+      },
+      "type": "graph",
+      "xaxis": {
+        "buckets": null,
+        "mode": "time",
+        "name": null,
+        "show": true,
+        "values": []
+      },
+      "yaxes": [
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        },
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        }
+      ],
+      "yaxis": {
+        "align": false,
+        "alignLevel": null
+      }
+    },
+    {
+      "aliasColors": {},
+      "bars": false,
+      "dashLength": 10,
+      "dashes": false,
+      "datasource": "$datasource",
+      "description": "Number of assume role calls currently executing",
+      "fill": 1,
+      "gridPos": {
+        "h": 4,
+        "w": 6,
+        "x": 18,
+        "y": 5
+      },
+      "id": 60,
+      "legend": {
+        "avg": false,
+        "current": false,
+        "hideEmpty": true,
+        "hideZero": true,
+        "max": false,
+        "min": false,
+        "show": false,
+        "total": false,
+        "values": false
+      },
+      "lines": true,
+      "linewidth": 1,
+      "links": [],
+      "nullPointMode": "null as zero",
+      "percentage": false,
+      "pointradius": 5,
+      "points": false,
+      "renderer": "flot",
+      "seriesOverrides": [],
+      "spaceLength": 10,
+      "stack": false,
+      "steppedLine": false,
+      "targets": [
+        {
+          "dimensions": {},
+          "expr": "sum by (pod) (kiam_sts_assumerole_current)",
+          "format": "time_series",
+          "highResolution": false,
+          "intervalFactor": 1,
+          "legendFormat": "{{pod}}",
+          "metricName": "",
+          "namespace": "",
+          "period": "",
+          "refId": "A",
+          "region": "default",
+          "statistics": [
+            "Average"
+          ],
+          "target": ""
+        }
+      ],
+      "thresholds": [],
+      "timeFrom": null,
+      "timeShift": null,
+      "title": "Number of assume role calls currently executing",
+      "tooltip": {
+        "shared": true,
+        "sort": 2,
+        "value_type": "individual"
+      },
+      "type": "graph",
+      "xaxis": {
+        "buckets": null,
+        "mode": "time",
+        "name": null,
+        "show": true,
+        "values": []
+      },
+      "yaxes": [
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        },
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        }
+      ],
+      "yaxis": {
+        "align": false,
+        "alignLevel": null
+      }
+    },
+    {
+      "aliasColors": {},
+      "bars": false,
+      "dashLength": 10,
+      "dashes": false,
+      "datasource": "$datasource",
+      "fill": 1,
+      "gridPos": {
+        "h": 4,
+        "w": 12,
+        "x": 0,
+        "y": 9
+      },
+      "id": 29,
+      "legend": {
+        "alignAsTable": true,
+        "avg": false,
+        "current": false,
+        "hideEmpty": true,
+        "hideZero": true,
+        "max": false,
+        "min": false,
+        "rightSide": true,
+        "show": false,
+        "total": true,
+        "values": true
+      },
+      "lines": true,
+      "linewidth": 1,
+      "links": [],
+      "nullPointMode": "null as zero",
+      "percentage": false,
+      "pointradius": 5,
+      "points": false,
+      "renderer": "flot",
+      "seriesOverrides": [],
+      "spaceLength": 10,
+      "stack": false,
+      "steppedLine": false,
+      "targets": [
+        {
+          "expr": "sum (delta(kiam_sts_cache_hit_total[$interval])) by (pod)",
+          "format": "time_series",
+          "intervalFactor": 2,
+          "legendFormat": "{{pod}}",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "thresholds": [],
+      "timeFrom": null,
+      "timeShift": null,
+      "title": "Number of cache hits to the metadata cache",
+      "tooltip": {
+        "shared": true,
+        "sort": 2,
+        "value_type": "individual"
+      },
+      "type": "graph",
+      "xaxis": {
+        "buckets": null,
+        "mode": "time",
+        "name": null,
+        "show": true,
+        "values": []
+      },
+      "yaxes": [
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        },
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        }
+      ],
+      "yaxis": {
+        "align": false,
+        "alignLevel": null
+      }
+    },
+    {
+      "aliasColors": {},
+      "bars": false,
+      "dashLength": 10,
+      "dashes": false,
+      "datasource": "$datasource",
+      "fill": 1,
+      "gridPos": {
+        "h": 4,
+        "w": 12,
+        "x": 12,
+        "y": 9
+      },
+      "id": 40,
+      "legend": {
+        "alignAsTable": true,
+        "avg": false,
+        "current": false,
+        "hideEmpty": true,
+        "hideZero": true,
+        "max": false,
+        "min": false,
+        "rightSide": true,
+        "show": false,
+        "total": false,
+        "values": false
+      },
+      "lines": true,
+      "linewidth": 1,
+      "links": [],
+      "nullPointMode": "null as zero",
+      "percentage": false,
+      "pointradius": 5,
+      "points": false,
+      "renderer": "flot",
+      "seriesOverrides": [],
+      "spaceLength": 10,
+      "stack": false,
+      "steppedLine": false,
+      "targets": [
+        {
+          "expr": "sum (delta(kiam_sts_cache_miss_total[$interval])) by (pod)",
+          "format": "time_series",
+          "intervalFactor": 2,
+          "legendFormat": "{{pod}}",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "thresholds": [],
+      "timeFrom": null,
+      "timeShift": null,
+      "title": "Number of cache misses to the metadata cache",
+      "tooltip": {
+        "shared": true,
+        "sort": 0,
+        "value_type": "individual"
+      },
+      "type": "graph",
+      "xaxis": {
+        "buckets": null,
+        "mode": "time",
+        "name": null,
+        "show": true,
+        "values": []
+      },
+      "yaxes": [
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        },
+        {
+          "format": "short",
+          "label": null,
+          "logBase": 1,
+          "max": null,
+          "min": null,
+          "show": true
+        }
+      ],
+      "yaxis": {
+        "align": false,
+        "alignLevel": null
+      }
+    },
+    {
+      "cards": {
+        "cardPadding": null,
+        "cardRound": null
+      },
+      "color": {
+        "cardColor": "#b4ff00",
+        "colorScale": "linear",
+        "colorScheme": "interpolateReds",
+        "exponent": 0.5,
+        "max": null,
+        "min": null,
+        "mode": "spectrum"
+      },
+      "dataFormat": "tsbuckets",
+      "datasource": "$datasource",
+      "description": "Bucketed histogram of handler timings. Tagged by handler",
+      "gridPos": {
+        "h": 5,
+        "w": 12,
+        "x": 0,
+        "y": 24
+      },
+      "heatmap": {},
+      "highlightCards": true,
+      "id": 9,
+      "legend": {
+        "show": false
+      },
+      "links": [],
+      "targets": [
+        {
+          "expr": "sum(rate(kiam_metadata_handler_latency_seconds_bucket{handler=\"credentials\"}[$interval])) by (le)",
+          "format": "heatmap",
+          "interval": "",
+          "intervalFactor": 2,
+          "legendFormat": "{{le}}",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "title": "Credentials responsetime",
+      "tooltip": {
+        "show": true,
+        "showHistogram": false
+      },
+      "transparent": false,
+      "type": "heatmap",
+      "xAxis": {
+        "show": true
+      },
+      "xBucketNumber": null,
+      "xBucketSize": null,
+      "yAxis": {
+        "decimals": null,
+        "format": "s",
+        "logBase": 1,
+        "max": null,
+        "min": null,
+        "show": true,
+        "splitFactor": null
+      },
+      "yBucketBound": "upper",
+      "yBucketNumber": null,
+      "yBucketSize": null
+    },
+    {
+      "cards": {
+        "cardPadding": null,
+        "cardRound": 0
+      },
+      "color": {
+        "cardColor": "#bf1b00",
+        "colorScale": "sqrt",
+        "colorScheme": "interpolateReds",
+        "exponent": 0.5,
+        "max": null,
+        "min": null,
+        "mode": "spectrum"
+      },
+      "dataFormat": "tsbuckets",
+      "datasource": "$datasource",
+      "description": "Bucketed histogram of handler timings. Tagged by handler",
+      "gridPos": {
+        "h": 5,
+        "w": 12,
+        "x": 12,
+        "y": 24
+      },
+      "heatmap": {},
+      "highlightCards": true,
+      "id": 10,
+      "legend": {
+        "show": false
+      },
+      "links": [],
+      "targets": [
+        {
+          "expr": "sum(rate(kiam_metadata_handler_latency_seconds_bucket{handler=\"roleName\"}[$interval])) by (le)",
+          "format": "heatmap",
+          "interval": "",
+          "intervalFactor": 2,
+          "legendFormat": "{{le}}",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "title": "roleHandler responsetime",
+      "tooltip": {
+        "show": true,
+        "showHistogram": false
+      },
+      "type": "heatmap",
+      "xAxis": {
+        "show": true
+      },
+      "xBucketNumber": null,
+      "xBucketSize": null,
+      "yAxis": {
+        "decimals": null,
+        "format": "ms",
+        "logBase": 1,
+        "max": null,
+        "min": null,
+        "show": true,
+        "splitFactor": null
+      },
+      "yBucketBound": "upper",
+      "yBucketNumber": null,
+      "yBucketSize": null
+    },
+    {
+      "cards": {
+        "cardPadding": null,
+        "cardRound": null
+      },
+      "color": {
+        "cardColor": "#b4ff00",
+        "colorScale": "linear",
+        "colorScheme": "interpolateReds",
+        "exponent": 0.5,
+        "max": null,
+        "min": null,
+        "mode": "spectrum"
+      },
+      "dataFormat": "tsbuckets",
+      "datasource": "$datasource",
+      "description": "Bucketed histogram of assumeRole timings",
+      "gridPos": {
+        "h": 6,
+        "w": 24,
+        "x": 0,
+        "y": 29
+      },
+      "heatmap": {},
+      "highlightCards": true,
+      "id": 42,
+      "legend": {
+        "show": false
+      },
+      "links": [],
+      "targets": [
+        {
+          "expr": "sum(rate(kiam_sts_assumerole_timing_seconds_bucket[$interval])) by (le)",
+          "format": "heatmap",
+          "intervalFactor": 2,
+          "legendFormat": "{{le}}",
+          "refId": "A",
+          "target": ""
+        }
+      ],
+      "title": "assumeRole timings",
+      "tooltip": {
+        "show": true,
+        "showHistogram": false
+      },
+      "transparent": false,
+      "type": "heatmap",
+      "xAxis": {
+        "show": true
+      },
+      "xBucketNumber": null,
+      "xBucketSize": null,
+      "yAxis": {
+        "decimals": null,
+        "format": "s",
+        "logBase": 1,
+        "max": null,
+        "min": null,
+        "show": true,
+        "splitFactor": null
+      },
+      "yBucketBound": "auto",
+      "yBucketNumber": null,
+      "yBucketSize": null
+    },
+    {
+      "collapsed": true,
+      "gridPos": {
+        "h": 1,
+        "w": 24,
+        "x": 0,
+        "y": 24
+      },
+      "id": 15,
+      "panels": [
+        {
+          "cacheTimeout": null,
+          "colorBackground": false,
+          "colorValue": false,
+          "colors": [
+            "#299c46",
+            "rgba(237, 129, 40, 0.89)",
+            "#d44a3a"
+          ],
+          "datasource": "$datasource",
+          "format": "none",
+          "gauge": {
+            "maxValue": 100,
+            "minValue": 0,
+            "show": false,
+            "thresholdLabels": false,
+            "thresholdMarkers": true
+          },
+          "gridPos": {
+            "h": 3,
+            "w": 2,
+            "x": 0,
+            "y": 25
+          },
+          "id": 27,
+          "interval": null,
+          "links": [],
+          "mappingType": 1,
+          "mappingTypes": [
+            {
+              "name": "value to text",
+              "value": 1
+            },
+            {
+              "name": "range to text",
+              "value": 2
+            }
+          ],
+          "maxDataPoints": 100,
+          "nullPointMode": "connected",
+          "nullText": null,
+          "postfix": "",
+          "postfixFontSize": "50%",
+          "prefix": "",
+          "prefixFontSize": "50%",
+          "rangeMaps": [
+            {
+              "from": "null",
+              "text": "N/A",
+              "to": "null"
+            }
+          ],
+          "sparkline": {
+            "fillColor": "rgba(31, 118, 189, 0.18)",
+            "full": false,
+            "lineColor": "rgb(31, 120, 193)",
+            "show": true
+          },
+          "tableColumn": "",
+          "targets": [
+            {
+              "expr": "min(kube_daemonset_status_number_available{namespace=\"$namespace\",daemonset=~\".*kiam-server\"}) without (instance, pod)",
+              "format": "time_series",
+              "intervalFactor": 2,
+              "legendFormat": "",
+              "refId": "A"
+            }
+          ],
+          "thresholds": "",
+          "title": "Available Replicas",
+          "type": "singlestat",
+          "valueFontSize": "80%",
+          "valueMaps": [
+            {
+              "op": "=",
+              "text": "0",
+              "value": "null"
+            }
+          ],
+          "valueName": "current"
+        },
+        {
+          "cacheTimeout": null,
+          "colorBackground": false,
+          "colorValue": false,
+          "colors": [
+            "#299c46",
+            "rgba(237, 129, 40, 0.89)",
+            "#d44a3a"
+          ],
+          "datasource": "$datasource",
+          "format": "none",
+          "gauge": {
+            "maxValue": 100,
+            "minValue": 0,
+            "show": false,
+            "thresholdLabels": false,
+            "thresholdMarkers": true
+          },
+          "gridPos": {
+            "h": 3,
+            "w": 10,
+            "x": 2,
+            "y": 25
+          },
+          "id": 12,
+          "interval": null,
+          "links": [],
+          "mappingType": 1,
+          "mappingTypes": [
+            {
+              "name": "value to text",
+              "value": 1
+            },
+            {
+              "name": "range to text",
+              "value": 2
+            }
+          ],
+          "maxDataPoints": 100,
+          "nullPointMode": "connected",
+          "nullText": null,
+          "postfix": "",
+          "postfixFontSize": "50%",
+          "prefix": "",
+          "prefixFontSize": "50%",
+          "rangeMaps": [
+            {
+              "from": "null",
+              "text": "N/A",
+              "to": "null"
+            }
+          ],
+          "sparkline": {
+            "fillColor": "rgba(31, 118, 189, 0.18)",
+            "lineColor": "rgb(31, 120, 193)",
+            "show": true
+          },
+          "tableColumn": "",
+          "targets": [
+            {
+              "expr": "sum(rate(container_cpu_usage_seconds_total{namespace=\"$namespace\",pod_name=~\".*kiam-server.*\"}[$interval]))",
+              "format": "time_series",
+              "intervalFactor": 2,
+              "legendFormat": "",
+              "refId": "A"
+            }
+          ],
+          "thresholds": "",
+          "title": "CPU usage",
+          "type": "singlestat",
+          "valueFontSize": "80%",
+          "valueMaps": [
+            {
+              "op": "=",
+              "text": "0",
+              "value": "null"
+            }
+          ],
+          "valueName": "current"
+        },
+        {
+          "aliasColors": {},
+          "bars": false,
+          "dashLength": 10,
+          "dashes": false,
+          "datasource": "$datasource",
+          "fill": 1,
+          "gridPos": {
+            "h": 6,
+            "w": 12,
+            "x": 12,
+            "y": 25
+          },
+          "id": 24,
+          "legend": {
+            "alignAsTable": true,
+            "avg": false,
+            "current": false,
+            "hideEmpty": true,
+            "hideZero": true,
+            "max": false,
+            "min": false,
+            "rightSide": true,
+            "show": false,
+            "total": false,
+            "values": false
+          },
+          "lines": true,
+          "linewidth": 1,
+          "links": [],
+          "nullPointMode": "null as zero",
+          "percentage": false,
+          "pointradius": 5,
+          "points": false,
+          "renderer": "flot",
+          "seriesOverrides": [
+            {
+              "alias": "Out",
+              "yaxis": 2
+            }
+          ],
+          "spaceLength": 10,
+          "stack": false,
+          "steppedLine": false,
+          "targets": [
+            {
+              "expr": "sum(rate(container_network_receive_bytes_total{namespace=\"$namespace\",pod_name=~\".*kiam-server-.*\"}[$interval])) by (pod_name)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "In {{pod_name}}",
+              "refId": "B"
+            },
+            {
+              "expr": "sum(rate(container_network_transmit_bytes_total{namespace=\"$namespace\",pod_name=~\".*kiam-server-.*\"}[$interval])) by (pod_name)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "Out {{pod_name}}",
+              "refId": "A",
+              "target": ""
+            }
+          ],
+          "thresholds": [],
+          "timeFrom": null,
+          "timeShift": null,
+          "title": "Network traffic",
+          "tooltip": {
+            "shared": true,
+            "sort": 2,
+            "value_type": "individual"
+          },
+          "type": "graph",
+          "xaxis": {
+            "buckets": null,
+            "mode": "time",
+            "name": null,
+            "show": true,
+            "values": []
+          },
+          "yaxes": [
+            {
+              "format": "Bps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            },
+            {
+              "format": "Bps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            }
+          ],
+          "yaxis": {
+            "align": false,
+            "alignLevel": null
+          }
+        },
+        {
+          "cacheTimeout": null,
+          "colorBackground": false,
+          "colorValue": false,
+          "colors": [
+            "#299c46",
+            "rgba(237, 129, 40, 0.89)",
+            "#d44a3a"
+          ],
+          "datasource": "$datasource",
+          "format": "none",
+          "gauge": {
+            "maxValue": 100,
+            "minValue": 0,
+            "show": false,
+            "thresholdLabels": false,
+            "thresholdMarkers": true
+          },
+          "gridPos": {
+            "h": 3,
+            "w": 2,
+            "x": 0,
+            "y": 28
+          },
+          "id": 21,
+          "interval": null,
+          "links": [],
+          "mappingType": 1,
+          "mappingTypes": [
+            {
+              "name": "value to text",
+              "value": 1
+            },
+            {
+              "name": "range to text",
+              "value": 2
+            }
+          ],
+          "maxDataPoints": 100,
+          "nullPointMode": "connected",
+          "nullText": null,
+          "postfix": "",
+          "postfixFontSize": "50%",
+          "prefix": "",
+          "prefixFontSize": "50%",
+          "rangeMaps": [
+            {
+              "from": "null",
+              "text": "N/A",
+              "to": "null"
+            }
+          ],
+          "sparkline": {
+            "fillColor": "rgba(31, 118, 189, 0.18)",
+            "full": false,
+            "lineColor": "rgb(31, 120, 193)",
+            "show": true
+          },
+          "tableColumn": "",
+          "targets": [
+            {
+              "expr": "max(kube_daemonset_status_desired_number_scheduled{namespace=\"$namespace\",daemonset=~\".*kiam-server\"}) without (instance, pod)",
+              "format": "time_series",
+              "intervalFactor": 2,
+              "legendFormat": "",
+              "refId": "A"
+            }
+          ],
+          "thresholds": "",
+          "title": "Desired Replicas",
+          "type": "singlestat",
+          "valueFontSize": "80%",
+          "valueMaps": [
+            {
+              "op": "=",
+              "text": "0",
+              "value": "null"
+            }
+          ],
+          "valueName": "current"
+        },
+        {
+          "cacheTimeout": null,
+          "colorBackground": false,
+          "colorValue": false,
+          "colors": [
+            "#299c46",
+            "rgba(237, 129, 40, 0.89)",
+            "#d44a3a"
+          ],
+          "datasource": "$datasource",
+          "format": "decbytes",
+          "gauge": {
+            "maxValue": 100,
+            "minValue": 0,
+            "show": false,
+            "thresholdLabels": false,
+            "thresholdMarkers": true
+          },
+          "gridPos": {
+            "h": 3,
+            "w": 10,
+            "x": 2,
+            "y": 28
+          },
+          "id": 31,
+          "interval": null,
+          "links": [],
+          "mappingType": 1,
+          "mappingTypes": [
+            {
+              "name": "value to text",
+              "value": 1
+            },
+            {
+              "name": "range to text",
+              "value": 2
+            }
+          ],
+          "maxDataPoints": 100,
+          "nullPointMode": "connected",
+          "nullText": null,
+          "postfix": "",
+          "postfixFontSize": "50%",
+          "prefix": "",
+          "prefixFontSize": "50%",
+          "rangeMaps": [
+            {
+              "from": "null",
+              "text": "N/A",
+              "to": "null"
+            }
+          ],
+          "sparkline": {
+            "fillColor": "rgba(31, 118, 189, 0.18)",
+            "lineColor": "rgb(31, 120, 193)",
+            "show": true
+          },
+          "tableColumn": "",
+          "targets": [
+            {
+              "expr": "sum(container_memory_usage_bytes{namespace=\"$namespace\",pod_name=~\".*kiam-server-.*\"})",
+              "format": "time_series",
+              "hide": false,
+              "instant": false,
+              "intervalFactor": 2,
+              "legendFormat": "",
+              "refId": "A"
+            }
+          ],
+          "thresholds": "",
+          "title": "Memory usage",
+          "type": "singlestat",
+          "valueFontSize": "80%",
+          "valueMaps": [
+            {
+              "op": "=",
+              "text": "0",
+              "value": "null"
+            }
+          ],
+          "valueName": "current"
+        }
+      ],
+      "title": "Server",
+      "type": "row"
+    },
+    {
+      "collapsed": true,
+      "gridPos": {
+        "h": 1,
+        "w": 24,
+        "x": 0,
+        "y": 25
+      },
+      "id": 19,
+      "panels": [
+        {
+          "cacheTimeout": null,
+          "colorBackground": false,
+          "colorValue": false,
+          "colors": [
+            "#299c46",
+            "rgba(237, 129, 40, 0.89)",
+            "#d44a3a"
+          ],
+          "datasource": "$datasource",
+          "format": "none",
+          "gauge": {
+            "maxValue": 100,
+            "minValue": 0,
+            "show": false,
+            "thresholdLabels": false,
+            "thresholdMarkers": true
+          },
+          "gridPos": {
+            "h": 3,
+            "w": 2,
+            "x": 0,
+            "y": 26
+          },
+          "id": 28,
+          "interval": null,
+          "links": [],
+          "mappingType": 1,
+          "mappingTypes": [
+            {
+              "name": "value to text",
+              "value": 1
+            },
+            {
+              "name": "range to text",
+              "value": 2
+            }
+          ],
+          "maxDataPoints": 100,
+          "nullPointMode": "connected",
+          "nullText": null,
+          "postfix": "",
+          "postfixFontSize": "50%",
+          "prefix": "",
+          "prefixFontSize": "50%",
+          "rangeMaps": [
+            {
+              "from": "null",
+              "text": "N/A",
+              "to": "null"
+            }
+          ],
+          "sparkline": {
+            "fillColor": "rgba(31, 118, 189, 0.18)",
+            "full": false,
+            "lineColor": "rgb(31, 120, 193)",
+            "show": true
+          },
+          "tableColumn": "",
+          "targets": [
+            {
+              "expr": "min(kube_daemonset_status_number_available{namespace=\"$namespace\",daemonset=~\".*kiam-agent\"}) without (instance, pod)",
+              "format": "time_series",
+              "intervalFactor": 2,
+              "legendFormat": "",
+              "refId": "A"
+            }
+          ],
+          "thresholds": "",
+          "title": "Available Replicas",
+          "type": "singlestat",
+          "valueFontSize": "80%",
+          "valueMaps": [
+            {
+              "op": "=",
+              "text": "0",
+              "value": "null"
+            }
+          ],
+          "valueName": "current"
+        },
+        {
+          "cacheTimeout": null,
+          "colorBackground": false,
+          "colorValue": false,
+          "colors": [
+            "#299c46",
+            "rgba(237, 129, 40, 0.89)",
+            "#d44a3a"
+          ],
+          "datasource": "$datasource",
+          "format": "none",
+          "gauge": {
+            "maxValue": 100,
+            "minValue": 0,
+            "show": false,
+            "thresholdLabels": false,
+            "thresholdMarkers": true
+          },
+          "gridPos": {
+            "h": 3,
+            "w": 10,
+            "x": 2,
+            "y": 26
+          },
+          "id": 13,
+          "interval": null,
+          "links": [],
+          "mappingType": 1,
+          "mappingTypes": [
+            {
+              "name": "value to text",
+              "value": 1
+            },
+            {
+              "name": "range to text",
+              "value": 2
+            }
+          ],
+          "maxDataPoints": 100,
+          "nullPointMode": "connected",
+          "nullText": null,
+          "postfix": "",
+          "postfixFontSize": "50%",
+          "prefix": "",
+          "prefixFontSize": "50%",
+          "rangeMaps": [
+            {
+              "from": "null",
+              "text": "N/A",
+              "to": "null"
+            }
+          ],
+          "sparkline": {
+            "fillColor": "rgba(31, 118, 189, 0.18)",
+            "lineColor": "rgb(31, 120, 193)",
+            "show": true
+          },
+          "tableColumn": "",
+          "targets": [
+            {
+              "expr": "sum(rate(container_cpu_usage_seconds_total{namespace=\"$namespace\",pod_name=~\".*kiam-agent.*\"}[$interval]))",
+              "format": "time_series",
+              "intervalFactor": 2,
+              "legendFormat": "",
+              "refId": "A"
+            }
+          ],
+          "thresholds": "",
+          "title": "CPU usage",
+          "type": "singlestat",
+          "valueFontSize": "80%",
+          "valueMaps": [
+            {
+              "op": "=",
+              "text": "0",
+              "value": "null"
+            }
+          ],
+          "valueName": "current"
+        },
+        {
+          "aliasColors": {},
+          "bars": false,
+          "dashLength": 10,
+          "dashes": false,
+          "datasource": "$datasource",
+          "fill": 1,
+          "gridPos": {
+            "h": 6,
+            "w": 12,
+            "x": 12,
+            "y": 26
+          },
+          "id": 25,
+          "legend": {
+            "alignAsTable": false,
+            "avg": false,
+            "current": false,
+            "hideEmpty": true,
+            "hideZero": true,
+            "max": false,
+            "min": false,
+            "rightSide": false,
+            "show": false,
+            "total": false,
+            "values": false
+          },
+          "lines": true,
+          "linewidth": 1,
+          "links": [],
+          "nullPointMode": "null as zero",
+          "percentage": false,
+          "pointradius": 5,
+          "points": false,
+          "renderer": "flot",
+          "seriesOverrides": [
+            {
+              "alias": "/Out/",
+              "yaxis": 2
+            }
+          ],
+          "spaceLength": 10,
+          "stack": false,
+          "steppedLine": false,
+          "targets": [
+            {
+              "expr": "sum(rate(container_network_receive_bytes_total{namespace=\"$namespace\",pod_name=~\".*kiam-agent-.*\"}[$interval])) by (pod_name)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "In {{pod_name}}",
+              "refId": "B"
+            },
+            {
+              "expr": "sum(rate(container_network_transmit_bytes_total{namespace=\"$namespace\",pod_name=~\".*kiam-agent-.*\"}[$interval])) by (pod_name)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "Out {{pod_name}}",
+              "refId": "A",
+              "target": ""
+            }
+          ],
+          "thresholds": [],
+          "timeFrom": null,
+          "timeShift": null,
+          "title": "Network traffic",
+          "tooltip": {
+            "shared": true,
+            "sort": 2,
+            "value_type": "individual"
+          },
+          "type": "graph",
+          "xaxis": {
+            "buckets": null,
+            "mode": "time",
+            "name": null,
+            "show": true,
+            "values": []
+          },
+          "yaxes": [
+            {
+              "format": "Bps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            },
+            {
+              "format": "Bps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            }
+          ],
+          "yaxis": {
+            "align": false,
+            "alignLevel": null
+          }
+        },
+        {
+          "cacheTimeout": null,
+          "colorBackground": false,
+          "colorValue": false,
+          "colors": [
+            "#299c46",
+            "rgba(237, 129, 40, 0.89)",
+            "#d44a3a"
+          ],
+          "datasource": "$datasource",
+          "format": "none",
+          "gauge": {
+            "maxValue": 100,
+            "minValue": 0,
+            "show": false,
+            "thresholdLabels": false,
+            "thresholdMarkers": true
+          },
+          "gridPos": {
+            "h": 3,
+            "w": 2,
+            "x": 0,
+            "y": 29
+          },
+          "id": 22,
+          "interval": null,
+          "links": [],
+          "mappingType": 1,
+          "mappingTypes": [
+            {
+              "name": "value to text",
+              "value": 1
+            },
+            {
+              "name": "range to text",
+              "value": 2
+            }
+          ],
+          "maxDataPoints": 100,
+          "nullPointMode": "connected",
+          "nullText": null,
+          "postfix": "",
+          "postfixFontSize": "50%",
+          "prefix": "",
+          "prefixFontSize": "50%",
+          "rangeMaps": [
+            {
+              "from": "null",
+              "text": "N/A",
+              "to": "null"
+            }
+          ],
+          "sparkline": {
+            "fillColor": "rgba(31, 118, 189, 0.18)",
+            "full": false,
+            "lineColor": "rgb(31, 120, 193)",
+            "show": true
+          },
+          "tableColumn": "",
+          "targets": [
+            {
+              "expr": "max(kube_daemonset_status_desired_number_scheduled{namespace=\"$namespace\",daemonset=~\".*kiam-agent\"}) without (instance, pod)",
+              "format": "time_series",
+              "intervalFactor": 2,
+              "legendFormat": "",
+              "refId": "A"
+            }
+          ],
+          "thresholds": "",
+          "title": "Desired Replicas",
+          "type": "singlestat",
+          "valueFontSize": "80%",
+          "valueMaps": [
+            {
+              "op": "=",
+              "text": "0",
+              "value": "null"
+            }
+          ],
+          "valueName": "current"
+        },
+        {
+          "cacheTimeout": null,
+          "colorBackground": false,
+          "colorValue": false,
+          "colors": [
+            "#299c46",
+            "rgba(237, 129, 40, 0.89)",
+            "#d44a3a"
+          ],
+          "datasource": "$datasource",
+          "format": "decbytes",
+          "gauge": {
+            "maxValue": 100,
+            "minValue": 0,
+            "show": false,
+            "thresholdLabels": false,
+            "thresholdMarkers": true
+          },
+          "gridPos": {
+            "h": 3,
+            "w": 10,
+            "x": 2,
+            "y": 29
+          },
+          "id": 32,
+          "interval": null,
+          "links": [],
+          "mappingType": 1,
+          "mappingTypes": [
+            {
+              "name": "value to text",
+              "value": 1
+            },
+            {
+              "name": "range to text",
+              "value": 2
+            }
+          ],
+          "maxDataPoints": 100,
+          "nullPointMode": "connected",
+          "nullText": null,
+          "postfix": "",
+          "postfixFontSize": "50%",
+          "prefix": "",
+          "prefixFontSize": "50%",
+          "rangeMaps": [
+            {
+              "from": "null",
+              "text": "N/A",
+              "to": "null"
+            }
+          ],
+          "sparkline": {
+            "fillColor": "rgba(31, 118, 189, 0.18)",
+            "lineColor": "rgb(31, 120, 193)",
+            "show": true
+          },
+          "tableColumn": "",
+          "targets": [
+            {
+              "expr": "sum(container_memory_usage_bytes{namespace=\"$namespace\",pod_name=~\".*kiam-agent-.*\"})",
+              "format": "time_series",
+              "hide": false,
+              "intervalFactor": 2,
+              "legendFormat": "",
+              "refId": "A"
+            }
+          ],
+          "thresholds": "",
+          "title": "Memory usage",
+          "type": "singlestat",
+          "valueFontSize": "80%",
+          "valueMaps": [
+            {
+              "op": "=",
+              "text": "0",
+              "value": "null"
+            }
+          ],
+          "valueName": "current"
+        }
+      ],
+      "title": "Agent",
+      "type": "row"
+    },
+    {
+      "collapsed": true,
+      "gridPos": {
+        "h": 1,
+        "w": 24,
+        "x": 0,
+        "y": 26
+      },
+      "id": 47,
+      "panels": [
+        {
+          "aliasColors": {},
+          "bars": false,
+          "dashLength": 10,
+          "dashes": false,
+          "datasource": "$datasource",
+          "description": "Total number of RPCs completed on the server, regardless of success or failure.",
+          "fill": 1,
+          "gridPos": {
+            "h": 4,
+            "w": 12,
+            "x": 0,
+            "y": 39
+          },
+          "id": 49,
+          "legend": {
+            "avg": false,
+            "current": false,
+            "hideEmpty": true,
+            "hideZero": true,
+            "max": false,
+            "min": false,
+            "show": false,
+            "total": false,
+            "values": false
+          },
+          "lines": true,
+          "linewidth": 1,
+          "links": [],
+          "nullPointMode": "null as zero",
+          "percentage": false,
+          "pointradius": 5,
+          "points": false,
+          "renderer": "flot",
+          "seriesOverrides": [],
+          "spaceLength": 10,
+          "stack": false,
+          "steppedLine": false,
+          "targets": [
+            {
+              "expr": "sum (increase(grpc_server_handled_total{namespace=\"$namespace\",pod=~\".*kiam-.*\"}[$interval])) by (grpc_code, grpc_method, pod)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "{{grpc_method}} {{grpc_code}} {{pod}}",
+              "refId": "A",
+              "target": ""
+            }
+          ],
+          "thresholds": [],
+          "timeFrom": null,
+          "timeShift": null,
+          "title": "grpc server handled total",
+          "tooltip": {
+            "shared": true,
+            "sort": 2,
+            "value_type": "individual"
+          },
+          "type": "graph",
+          "xaxis": {
+            "buckets": null,
+            "mode": "time",
+            "name": null,
+            "show": true,
+            "values": []
+          },
+          "yaxes": [
+            {
+              "format": "short",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            },
+            {
+              "format": "reqps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": false
+            }
+          ],
+          "yaxis": {
+            "align": false,
+            "alignLevel": null
+          }
+        },
+        {
+          "aliasColors": {},
+          "bars": false,
+          "dashLength": 10,
+          "dashes": false,
+          "datasource": "$datasource",
+          "description": "Total number of RPCs started on the server.",
+          "fill": 1,
+          "gridPos": {
+            "h": 4,
+            "w": 12,
+            "x": 12,
+            "y": 39
+          },
+          "id": 52,
+          "legend": {
+            "avg": false,
+            "current": false,
+            "hideEmpty": true,
+            "hideZero": true,
+            "max": false,
+            "min": false,
+            "show": false,
+            "total": false,
+            "values": false
+          },
+          "lines": true,
+          "linewidth": 1,
+          "links": [],
+          "nullPointMode": "null as zero",
+          "percentage": false,
+          "pointradius": 5,
+          "points": false,
+          "renderer": "flot",
+          "seriesOverrides": [
+            {
+              "alias": "/Rate.*/",
+              "yaxis": 2
+            }
+          ],
+          "spaceLength": 10,
+          "stack": false,
+          "steppedLine": false,
+          "targets": [
+            {
+              "expr": "sum (increase(grpc_server_started_total{namespace=\"$namespace\",pod=~\".*kiam-server-.*\"}[$interval])) by (grpc_method, pod)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "{{grpc_method}} {{pod}}",
+              "refId": "A",
+              "target": ""
+            }
+          ],
+          "thresholds": [],
+          "timeFrom": null,
+          "timeShift": null,
+          "title": "grpc server started total",
+          "tooltip": {
+            "shared": true,
+            "sort": 2,
+            "value_type": "individual"
+          },
+          "type": "graph",
+          "xaxis": {
+            "buckets": null,
+            "mode": "time",
+            "name": null,
+            "show": true,
+            "values": []
+          },
+          "yaxes": [
+            {
+              "format": "short",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            },
+            {
+              "format": "reqps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            }
+          ],
+          "yaxis": {
+            "align": false,
+            "alignLevel": null
+          }
+        },
+        {
+          "aliasColors": {},
+          "bars": false,
+          "dashLength": 10,
+          "dashes": false,
+          "datasource": "$datasource",
+          "description": "Total number of RPC stream messages received on the server.",
+          "fill": 1,
+          "gridPos": {
+            "h": 4,
+            "w": 12,
+            "x": 0,
+            "y": 43
+          },
+          "id": 50,
+          "legend": {
+            "avg": false,
+            "current": false,
+            "hideEmpty": true,
+            "hideZero": true,
+            "max": false,
+            "min": false,
+            "show": false,
+            "total": false,
+            "values": false
+          },
+          "lines": true,
+          "linewidth": 1,
+          "links": [],
+          "nullPointMode": "null as zero",
+          "percentage": false,
+          "pointradius": 5,
+          "points": false,
+          "renderer": "flot",
+          "seriesOverrides": [],
+          "spaceLength": 10,
+          "stack": false,
+          "steppedLine": false,
+          "targets": [
+            {
+              "expr": "sum (increase(grpc_server_msg_received_total{namespace=\"$namespace\",pod=~\".*kiam-.*\"}[$interval])) by (grpc_method, pod)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "{{grpc_method}} {{pod}}",
+              "refId": "A",
+              "target": ""
+            }
+          ],
+          "thresholds": [],
+          "timeFrom": null,
+          "timeShift": null,
+          "title": "grpc server msg received total",
+          "tooltip": {
+            "shared": true,
+            "sort": 2,
+            "value_type": "individual"
+          },
+          "type": "graph",
+          "xaxis": {
+            "buckets": null,
+            "mode": "time",
+            "name": null,
+            "show": true,
+            "values": []
+          },
+          "yaxes": [
+            {
+              "format": "short",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            },
+            {
+              "format": "reqps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            }
+          ],
+          "yaxis": {
+            "align": false,
+            "alignLevel": null
+          }
+        },
+        {
+          "aliasColors": {},
+          "bars": false,
+          "dashLength": 10,
+          "dashes": false,
+          "datasource": "$datasource",
+          "description": "Total number of gRPC stream messages sent by the server.",
+          "fill": 1,
+          "gridPos": {
+            "h": 4,
+            "w": 12,
+            "x": 12,
+            "y": 43
+          },
+          "id": 51,
+          "legend": {
+            "avg": false,
+            "current": false,
+            "hideEmpty": true,
+            "hideZero": true,
+            "max": false,
+            "min": false,
+            "show": false,
+            "total": false,
+            "values": false
+          },
+          "lines": true,
+          "linewidth": 1,
+          "links": [],
+          "nullPointMode": "null as zero",
+          "percentage": false,
+          "pointradius": 5,
+          "points": false,
+          "renderer": "flot",
+          "seriesOverrides": [],
+          "spaceLength": 10,
+          "stack": false,
+          "steppedLine": false,
+          "targets": [
+            {
+              "expr": "sum (increase(grpc_server_msg_sent_total{namespace=\"$namespace\",pod=~\".*kiam-.*\"}[$interval])) by (grpc_method, pod)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "{{grpc_method}} {{pod}}",
+              "refId": "A",
+              "target": ""
+            }
+          ],
+          "thresholds": [],
+          "timeFrom": null,
+          "timeShift": null,
+          "title": "grpc server msg sent total",
+          "tooltip": {
+            "shared": true,
+            "sort": 2,
+            "value_type": "individual"
+          },
+          "type": "graph",
+          "xaxis": {
+            "buckets": null,
+            "mode": "time",
+            "name": null,
+            "show": true,
+            "values": []
+          },
+          "yaxes": [
+            {
+              "format": "short",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            },
+            {
+              "format": "reqps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            }
+          ],
+          "yaxis": {
+            "align": false,
+            "alignLevel": null
+          }
+        }
+      ],
+      "title": "Grpc server stats",
+      "type": "row"
+    },
+    {
+      "collapsed": true,
+      "gridPos": {
+        "h": 1,
+        "w": 24,
+        "x": 0,
+        "y": 27
+      },
+      "id": 54,
+      "panels": [
+        {
+          "aliasColors": {},
+          "bars": false,
+          "dashLength": 10,
+          "dashes": false,
+          "datasource": "$datasource",
+          "description": "Total number of RPCs completed by the client, regardless of success or failure.",
+          "fill": 1,
+          "gridPos": {
+            "h": 4,
+            "w": 12,
+            "x": 0,
+            "y": 28
+          },
+          "id": 55,
+          "legend": {
+            "avg": false,
+            "current": false,
+            "hideEmpty": true,
+            "hideZero": true,
+            "max": false,
+            "min": false,
+            "show": false,
+            "total": false,
+            "values": false
+          },
+          "lines": true,
+          "linewidth": 1,
+          "links": [],
+          "nullPointMode": "null as zero",
+          "percentage": false,
+          "pointradius": 5,
+          "points": false,
+          "renderer": "flot",
+          "seriesOverrides": [],
+          "spaceLength": 10,
+          "stack": false,
+          "steppedLine": false,
+          "targets": [
+            {
+              "expr": "sum (increase(grpc_client_handled_total{namespace=\"$namespace\",pod=~\".*kiam-.*\"}[$interval])) by (grpc_code, grpc_method, pod)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "{{grpc_method}} {{grpc_code}} {{pod}}",
+              "refId": "A",
+              "target": ""
+            }
+          ],
+          "thresholds": [],
+          "timeFrom": null,
+          "timeShift": null,
+          "title": "grpc client handled total",
+          "tooltip": {
+            "shared": true,
+            "sort": 2,
+            "value_type": "individual"
+          },
+          "type": "graph",
+          "xaxis": {
+            "buckets": null,
+            "mode": "time",
+            "name": null,
+            "show": true,
+            "values": []
+          },
+          "yaxes": [
+            {
+              "format": "short",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            },
+            {
+              "format": "reqps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": false
+            }
+          ],
+          "yaxis": {
+            "align": false,
+            "alignLevel": null
+          }
+        },
+        {
+          "aliasColors": {},
+          "bars": false,
+          "dashLength": 10,
+          "dashes": false,
+          "datasource": "$datasource",
+          "description": "Total number of RPCs started on the client.",
+          "fill": 1,
+          "gridPos": {
+            "h": 4,
+            "w": 12,
+            "x": 12,
+            "y": 28
+          },
+          "id": 58,
+          "legend": {
+            "avg": false,
+            "current": false,
+            "hideEmpty": true,
+            "hideZero": true,
+            "max": false,
+            "min": false,
+            "show": false,
+            "total": false,
+            "values": false
+          },
+          "lines": true,
+          "linewidth": 1,
+          "links": [],
+          "nullPointMode": "null as zero",
+          "percentage": false,
+          "pointradius": 5,
+          "points": false,
+          "renderer": "flot",
+          "seriesOverrides": [
+            {
+              "alias": "/Rate.*/",
+              "yaxis": 2
+            }
+          ],
+          "spaceLength": 10,
+          "stack": false,
+          "steppedLine": false,
+          "targets": [
+            {
+              "expr": "sum (increase(grpc_client_started_total{namespace=\"$namespace\",pod=~\".*kiam-.*\"}[$interval])) by (grpc_method, pod)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "{{grpc_method}} {{pod}}",
+              "refId": "A",
+              "target": ""
+            }
+          ],
+          "thresholds": [],
+          "timeFrom": null,
+          "timeShift": null,
+          "title": "grpc client started total",
+          "tooltip": {
+            "shared": true,
+            "sort": 2,
+            "value_type": "individual"
+          },
+          "type": "graph",
+          "xaxis": {
+            "buckets": null,
+            "mode": "time",
+            "name": null,
+            "show": true,
+            "values": []
+          },
+          "yaxes": [
+            {
+              "format": "short",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            },
+            {
+              "format": "reqps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            }
+          ],
+          "yaxis": {
+            "align": false,
+            "alignLevel": null
+          }
+        },
+        {
+          "aliasColors": {},
+          "bars": false,
+          "dashLength": 10,
+          "dashes": false,
+          "datasource": "$datasource",
+          "description": "Total number of RPC stream messages received on the client.",
+          "fill": 1,
+          "gridPos": {
+            "h": 4,
+            "w": 12,
+            "x": 0,
+            "y": 32
+          },
+          "id": 56,
+          "legend": {
+            "avg": false,
+            "current": false,
+            "hideEmpty": true,
+            "hideZero": true,
+            "max": false,
+            "min": false,
+            "show": false,
+            "total": false,
+            "values": false
+          },
+          "lines": true,
+          "linewidth": 1,
+          "links": [],
+          "nullPointMode": "null as zero",
+          "percentage": false,
+          "pointradius": 5,
+          "points": false,
+          "renderer": "flot",
+          "seriesOverrides": [],
+          "spaceLength": 10,
+          "stack": false,
+          "steppedLine": false,
+          "targets": [
+            {
+              "expr": "sum (increase(grpc_client_msg_received_total{namespace=\"$namespace\",pod=~\".*kiam-.*\"}[$interval])) by (grpc_method, pod)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "{{grpc_method}} {{pod}}",
+              "refId": "A",
+              "target": ""
+            }
+          ],
+          "thresholds": [],
+          "timeFrom": null,
+          "timeShift": null,
+          "title": "grpc client msg received total",
+          "tooltip": {
+            "shared": true,
+            "sort": 2,
+            "value_type": "individual"
+          },
+          "type": "graph",
+          "xaxis": {
+            "buckets": null,
+            "mode": "time",
+            "name": null,
+            "show": true,
+            "values": []
+          },
+          "yaxes": [
+            {
+              "format": "short",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            },
+            {
+              "format": "reqps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            }
+          ],
+          "yaxis": {
+            "align": false,
+            "alignLevel": null
+          }
+        },
+        {
+          "aliasColors": {},
+          "bars": false,
+          "dashLength": 10,
+          "dashes": false,
+          "datasource": "$datasource",
+          "description": "Total number of gRPC stream messages sent by the client.",
+          "fill": 1,
+          "gridPos": {
+            "h": 4,
+            "w": 12,
+            "x": 12,
+            "y": 32
+          },
+          "id": 57,
+          "legend": {
+            "avg": false,
+            "current": false,
+            "hideEmpty": true,
+            "hideZero": true,
+            "max": false,
+            "min": false,
+            "show": false,
+            "total": false,
+            "values": false
+          },
+          "lines": true,
+          "linewidth": 1,
+          "links": [],
+          "nullPointMode": "null as zero",
+          "percentage": false,
+          "pointradius": 5,
+          "points": false,
+          "renderer": "flot",
+          "seriesOverrides": [],
+          "spaceLength": 10,
+          "stack": false,
+          "steppedLine": false,
+          "targets": [
+            {
+              "expr": "sum (increase(grpc_client_msg_sent_total{namespace=\"$namespace\",pod=~\".*kiam-.*\"}[$interval])) by (grpc_method, pod)",
+              "format": "time_series",
+              "intervalFactor": 1,
+              "legendFormat": "{{grpc_method}} {{pod}}",
+              "refId": "A",
+              "target": ""
+            }
+          ],
+          "thresholds": [],
+          "timeFrom": null,
+          "timeShift": null,
+          "title": "grpc client msg sent total",
+          "tooltip": {
+            "shared": true,
+            "sort": 2,
+            "value_type": "individual"
+          },
+          "type": "graph",
+          "xaxis": {
+            "buckets": null,
+            "mode": "time",
+            "name": null,
+            "show": true,
+            "values": []
+          },
+          "yaxes": [
+            {
+              "format": "short",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            },
+            {
+              "format": "reqps",
+              "label": null,
+              "logBase": 1,
+              "max": null,
+              "min": null,
+              "show": true
+            }
+          ],
+          "yaxis": {
+            "align": false,
+            "alignLevel": null
+          }
+        }
+      ],
+      "title": "Grpc client stats",
+      "type": "row"
+    }
+  ],
+  "refresh": "30s",
+  "schemaVersion": 16,
+  "style": "dark",
+  "tags": [
+    "Kubernetes",
+    "Kiam"
+  ],
+  "templating": {
+    "list": [
+      {
+        "current": {
+          "selected": true,
+          "text": "staging",
+          "value": "staging"
+        },
+        "hide": 0,
+        "label": "Source",
+        "name": "datasource",
+        "options": [],
+        "query": "prometheus",
+        "refresh": 1,
+        "regex": "",
+        "type": "datasource"
+      },
+      {
+        "current": {},
+        "datasource": "$datasource",
+        "hide": 0,
+        "includeAll": false,
+        "label": "Namespace",
+        "multi": false,
+        "name": "namespace",
+        "options": [],
+        "query": "label_values(kiam_metadata_responses_total, namespace)",
+        "refresh": 1,
+        "regex": "",
+        "sort": 0,
+        "tagValuesQuery": "",
+        "tags": [],
+        "tagsQuery": "",
+        "type": "query",
+        "useTags": false
+      },
+      {
+        "allValue": null,
+        "current": {
+          "selected": false,
+          "tags": [],
+          "text": "5m",
+          "value": "5m"
+        },
+        "hide": 0,
+        "includeAll": false,
+        "label": "Interval",
+        "multi": false,
+        "name": "interval",
+        "options": [
+          {
+            "selected": false,
+            "text": "1m",
+            "value": "1m"
+          },
+          {
+            "selected": false,
+            "text": "3m",
+            "value": "3m"
+          },
+          {
+            "selected": true,
+            "text": "5m",
+            "value": "5m"
+          },
+          {
+            "selected": false,
+            "text": "10m",
+            "value": "10m"
+          },
+          {
+            "selected": false,
+            "text": "30m",
+            "value": "30m"
+          },
+          {
+            "selected": false,
+            "text": "1h",
+            "value": "1h"
+          },
+          {
+            "selected": false,
+            "text": "6h",
+            "value": "6h"
+          },
+          {
+            "selected": false,
+            "text": "12h",
+            "value": "12h"
+          },
+          {
+            "selected": false,
+            "text": "1d",
+            "value": "1d"
+          },
+          {
+            "selected": false,
+            "text": "7d",
+            "value": "7d"
+          },
+          {
+            "selected": false,
+            "text": "14d",
+            "value": "14d"
+          },
+          {
+            "selected": false,
+            "text": "30d",
+            "value": "30d"
+          }
+        ],
+        "query": "1m,3m,5m,10m,30m,1h,6h,12h,1d,7d,14d,30d",
+        "type": "custom"
+      }
+    ]
+  },
+  "time": {
+    "from": "now-24h",
+    "to": "now"
+  },
+  "timepicker": {
+    "refresh_intervals": [
+      "5s",
+      "10s",
+      "30s",
+      "1m",
+      "5m",
+      "15m",
+      "30m",
+      "1h",
+      "2h",
+      "1d"
+    ],
+    "time_options": [
+      "5m",
+      "15m",
+      "1h",
+      "6h",
+      "12h",
+      "24h",
+      "2d",
+      "7d",
+      "30d"
+    ]
+  },
+  "timezone": "browser",
+  "title": "Kiam",
+  "uid": "000000070",
+  "version": 32
+}
diff --git a/charts/kubezero-kiam/kiam_architecure.png b/charts/kubezero-kiam/kiam_architecure.png
new file mode 100644
index 0000000000000000000000000000000000000000..0ef4bde70b5273e7918275ebfbbd3194d0416f90
GIT binary patch
literal 43992
zcmce-byQqUv?tm)1OfyJB)BvXoZu3i5L|-0Yp_NeI!H)x?M8xo2p-&>KpJ;<I!N$_
zK=A2&-^|>(Yi7N>)_b$w`KM29t9^Fus`~Y=b0Rg>6(2u({s;g7JXU%muMGfT!2tlw
zcw7t=WfLu&0sufS*HqO}czAgD{YeN#%+dr-PEC1dN*Wp(uC1*V6&0yia=wQ^C@CrX
z`uc8A*L2g}@lS4U?(_5WKi?o1NgA^t-e13dg@lC2%ge)Hu*u0uS65dJ4UPKx`unqk
z-(jNJdW?v&u)E#G%RHOkQIfyoUn7@CuDjE+w1Bs(@T;cii*&=wukP1_UpK>*>+0%`
zj*ccKCf2p(X1#beHaC%bTX%Q2ov|JgN-w_Zv7UYqq#(eY93L<02+?%lUhb|LU2bW!
z;^3sfYqNXtGgNZjpYKl<<b9rMfE?BC?(X1d|F0na-F<{EHwoN@Gq%j8q@?5`Nj+AT
z&QX*?hKX=|a{Lgv-PP3<6BG02&!59!feJI0kRr|7&GE}3r?&oYje}WxP`$m`;c64M
ztLux|xw(rBqvPY_`}3p7h=|l$kL8M((edG##@eMI?`1DXb93`mGtEjj)j}PX(XX(M
zj*c%Dq8BHJg^iJhUN2{ha_3>uR$7YpR~OfV#gU)Ae>icj?M~h<^`)n$PyHA`UE2`;
z?VX<s>!a60B@N~;j@IYbCV#Yy<}?PHulVo{4GqoI<s&}|_1JMPE-p^>bj?<jRCi{t
zIGTL=qA#Pxo~sSKzWjZDd2+Y6H0H{!Xvn!a+?m}FFuU2`J=iqqFJ5lQHaRlfKisw6
zoVO4eg8Y5hH&b!;y(lL;do02z!1PUWaxy<ZKMoG|>FMeA;d0gY1YaK?XNV5!^3Q#3
zA0bLaMAXtz+t^!NT%9tPnNr#cgJ=p4WQGPudLE`*zB5p+bdieF<ZSVfbW0L9hY034
zDMVSy&n%86=Y6~wt2-+O+1uF_1ldAjtxa9z`@CNvch<|x%R5HD=9I+m*2I0ZR@1SO
z;N;|79_#NMsH<r!g1&cSWo6akeDXARGXenkx}zj7qvN-D&>ezGTR?E`T?s`A`rq6C
zcbA3FA!WTK<)f|>ISKJF5n>|8#Ys6b*(&-ID7?0qm`zlgTN4x_yPN(3XV+wRqI8~C
znZA-bN^|cagm|73d>wB8cTRO357A))PQrh_<<EW-Z`F7r5I_Qu_Iqo+{mG<Z5^WY8
zfXgMkt?pm$9gz$G$hHc5?$wUVtYQI(4V+%?os|yyVFB_l-onk#m%mI8`Je+%h-(nd
z*(DXPeksJG11K3G@G`m0=_G2v=7u3MRw&Lb()xucK)$aGG1Hy$>i|Y-{L&OHIO0!I
zn~~7fYSV~eiZUFHo{<*F<FYy5?jmRQ0*Dj**)O%NR<{TNASPeiQ{H*|*Fyhs^p59b
zX)+W;`W;01=pE?*?caMZ36)B^kz<Y!m2CTw7VX4XOu#+b8q~SH{Jazzuex{u^YGQN
z8!i`bYo0OloIL*`63}e-`&mZ*`+Gh0m^6sE2<dusyQh6JW7y`Ojd+$sRr(juVS+0X
zW5Wo8XbW4`d4ouz12TN7&JSaQvcv~iGA9#GE?bQg68+D-y;l@WO-G52R>j5PHpgUA
zquI>%ly*{njt=56=RsvhgGVgKfTi-4y8Umw&E&EM^zWTPJbU&Z7nyoys~M}|&%&-U
z{7#=0B|Yd>g5H;QC##nhsA{{u80xe~PHFh?gZm=#3<C68venEaUpv{yWT<vTqFK8V
z(fjU|&9$egx=Qd7obh;^Zk1pJs29pJwWzV=6pVEYj!I9_s+##6n9qMl&=w3BRM3=8
zR*<iK&SaEGBnaM3Ss<@Mv-~lu6E*v#F6X#6nAUXPwFTE94d)1pUc_*e_kobYoK75k
zerwrmqDS)>-KiFCe6G~+I)|qJ{pVX`Q4OUB4$MA4vB~NXEid!UTH12YTO7<HzEPIr
zU`g44PdcvhY=<1^lIF|1e9kK=^HRw=ZJ5O9yu`h{512Wx0uO58@w6#J8E|;_Q{8x>
zG$*9L03i@-il;y${7FefHPcIY|9TWBj%D(dHH*}o6N6+4)uo1;GxB1ORHwRuV38P0
zq?)_ciXl>Ux)#nwofe_#rW0Hk>7z#FIKA+PVJ+7#0I%uROoO2J7Q-f9A4Zol)cLY`
zdi;sz3}Th>ku=xV;ggrqD!<Cv@!ukcpDZSR3~Lzg%~^cr)$rqHIkx2E>;;R)uF9~9
znq)51WMW?<e|8HKx)Z@MD~w9MH0DHpaS|OzhV~WE?-6B9b5RloBm8B02z{94h5D%<
z|CMEPTiWvZ0tmgG!O>f=S(YBDNA+@&r(o;}@cP`)RWE>@3z$n#Vwykp2cJdij(3iE
ztkVduf=1Q#Ns{(cIX=;a#F~*#vri5R$6qcA6IftFDN3biKH>5zoT@$2v{9T9uLZui
z0{94O?b8P`;6y_|N%SDt-zqCUx+Z=t{JPgF@j<Tepaave{HW|>o|2w1!(@YB?#=f{
zM#9@9MoSqc`Fwh?OLsIoN07qf(D~Ig)gy+ld4jRLb%g_(t2Oz|dav0Ge_+(YpKY7x
z`a^_J4`h;`?-XVmCtnouG^bi~O+JStlA0{`go}wm;0@#KSshUBW6@(4H*YxArLVCD
zZMwOj3173~WXNoKCZp4${pT};ZJ4yT;gU<Kubp%iRx(3^!|8~8PXpBu?=Y>XXDj=^
zy)@uSPoN*A$UI3PF(PYm%h$j%-@dG?X#Uwl_Wm{HB6<NQpuQVX5v;e><0>9XQ0MsY
zft{rom%v$V)r6C4nF4nC#wBh}W+xC)Sb$fdvP1a1^3PHto>(Gg)C~qIUcz?qV=Pjf
zsf`j~dG;#U9wsxI^Ab+p{s+mA=?ppQyEI5#_$GfZ3#<{{$Yo+soh3)AG_-<6<J&m~
zOdQ|XK7bV#fbXn=L-K8{fey`(JJ!IBA;0phi_dqeEjQEhLgDOB<6ry2upyFf7Yd5i
zKjA~uxp?q#5*NOdU4E<24PS<M6EGzb!;20nUrWDx3Et2(uB!=!x9^rvWV6fs;ijWZ
ztVz9bq@0)-rnj=MNm96fv16@T`QmozB9!=WGV&#hVIG9GNkx`Jj-dA-Wc$?n-~Qgl
z^U=|>;mdqS&=5mk-}=vu;TARsuT1~ZiIr9)Y4((C=Au~_N^7fN9*fqyFrS(2d4iga
z7z<nbYJmpaIjXM8M{`)O4z*I{E9b@w99eSO_l@yj{+xg^P=+L+y5Ml4vt{7yeCf8u
z9F}2;C>QR%rL&2z+Bz+O9TSfHG`FVaI<0%Qv%US`z}2@FfzF6pn&?h2;-$p0!MB0!
zLph{pReJSzv3~Fp@~|r@1FAT>9MLOK?4ZVzvjNq>&4rn=Ms;e(wr2m|3wVLoRK2`X
zw(mtc5ECjwSLU(s95dsJ%2!-pBt5+ATl_!dY{7Yl$F7t_BwKG;GH%`M^wpP*Dk|6R
zZU?e(%4Vnn8Tos8GyXV=bg0&RgFjeh-wry}x1^d^nQz$d^Apr2(na5X53kw+p^Rsq
zww*<0iQBm_5@3kjyBAhakbDcJVa~~85LqTZCbikMVt}cnK7Hv$JZwwC=<&paU_)AD
zyjq0<@8c%)#j~2aP+1wNsN=Ly(z+_&Zj-gtn}-yW9@{%2p0Ts+Mk7-1A1})_L4aoE
zj@qgCw)zZ?Cs!vwh2VaOmZY}vh2)FEBH7hSlmJ+za+s0ldN#T5ls$_7NE`V<MbhCr
zx-ucX8=Mr`DqN`okLCs&$5s)n<_v^#BvE&DP7AYNeX_^^##2d}T|!<KA^>&jfy;;&
z;9m#H7S2Grs&L}u5dU9VAb{_Fxe3r7KDDH;j=8jOdRtGK6vsr!CJGoy=4e(P&9~<R
z9%FTjyrQAQmKiTV0N9#E%UfjdgR$7aPm`#F;s4vu>(n+bfN~tvUh5s4Dp_Jx3zU1#
z20r!4!k7>()de*bBBb}Ukeh<k#oW(%N{fjI`CH2MGSG7oD4}0*XWza!UIhxqGofkv
zB;C?di^QG1Ico4V82NSXtq(}bszm%AJ=+_KA4t0GTncF8Fj}z_$}9(rCqYi%3+k@j
z{<%6hv{xns^k1vMDQb(3S#GmFURP_t(YoY=lG<`0Uw|51D8B(Q1<I9)NfHVuhR7WI
z+{9~O4k{SDJ-4%GZL!Kn0hV5ON&vuRmFVJEgt;O*fcMiE1a%@tFgYqR^Knp&;KToP
z!@Wuv)x&#E<^oSOqkP@bX;NCBi;o7N+=4p@v}kXiUFjGj)BLTA%phOxzwrP7q~3MF
zAa(#?3f1X18Xyi}>Hlzpl%0P5A?IMZ-DydaGI%3CzQ8(!^W+)XLqas$N7qlT=v>(c
zCF?~Dnh-QY@g&uiM|sY>>-Y|HvOE<7iPG{4zY<CD>)VKMLq6W8=(~Fn2QMZ7gD$^Z
zXu0R_sls%`np(@G7o5?8?ci6(gI6OuJL-$38MLmL0Jf{~FQqDb?$*~$PXW0IIpaN(
z7Lzoy4t#(nGQ=>pXo$j^(hN-+u6XDMe6UHs_~huz3Xq0l5Evp$9Or*tb=Ua=QSBSb
z4n#)ykH3$W1d%{j=@5=5G-u)|MkUcz1ZFbiEP<lGH9ijcVS*gMV~iYg3wqahjJ3mY
zWq0@axZNDQ--Aki6r*Cj4akH1F?4+P5<w*gN7F>|;c<WuXDO8lgQ4-tySvIiQ}g~B
z{qgbr=`C@xPZ$&<7hz2*f`2N6M27yu+Qm#+zAd+-BQ!!fLQJyX69U>bkwNMX@DbN`
zKGtMNzFyp9VT(?Ax-Ny(QE3Bs)~u<2Bw0n6!dREe-i3$_;Gc&W+hB2R+UikR<!VE`
zok`P~G5eADwn9a+c6L;UCxd*HWs*xpXQxaa76ZkwK3_{&_Ky}Z8zl7z(3$$#!=0k;
z6uX7Z2|hingN}I@shn<#?M1%7CP<yhp2pIj55HyPSi>su8@)3Gr7FJ|!ITcRRJqS+
zueGm!9?^5Mp}-oF7LsOV2ThRj*e5^0q~Z|AcRs}spHTkxt@^y|n>O*Z9zOm=&c+y@
zy`B3B2X^9qJBZe&*4Gtj=homSl$ohoDd86wGZrWRJ$5PPohBtw7b3nn^e2%jEiae(
z&$E6I^JvMjsyd#flDu@9o+-Q~tOk)FSW)jXAYoC;gRLRpNdHqe3!7yKyyQ&7m3(JK
zFGGCsqXllbIp8Oj{lfJOW0Hl5%Hr3LvGI)^mg5UMWSPER`V)P%(F^s3zE`jN+N|!o
z5riQG!~wA-Y0Ch)4}|ZzJKS6DDo6<4+lIYt58a8NrLJSe5+1o?v)^46`9ZEJGmpW+
z@<7MDs%qA*K$ai9Q8ohcVjtQr`zcXc8nCjnA0YO8Xp67Zp%(6PynU;;e!eDr^<9i&
zGuo5mtwTlnvTUu&4Kjz-X~^~Rm;DU+K)5r^mBn6o>ErH3geQ$4U<n&GNJ1Ck6?tAb
ze@`3vW>4CtzJVFHM=XF(ltx@rw*a@Tt1z*2ge(&z!5I9AiCU0E2Xp(Kz+rAHP<U78
zrK6Jb*Umuu@lTw`(T%fT#*KuphW+c^zay9k64eVkIyXxm&tSyk>ZqXr7%u~-sA4SO
z?(X;6vnUBNaxw|7w6;`NhCC)2;=s_)5DZPV3G6|b{%#E%0}2$c-feNB7V?gM{?)1P
z8LS>J&VN_B88k8DrI?{ar5bquVoYgN>Ypx~<qmFEEjefCg`X_lE^*5jW1Bbb_}Z1S
z9P?^*ThNE5eMS2tv`bA{FOSX6Hf<aJ;j;;GVDx7Q{`fEFG1CU2*xg#Vy%$(OOV09k
zqBD=|+5F|JFHRk348=H$%7EeiXLYU>>Us69$S)HmpCQ5V-##9fa>OX)U#km(gY%<i
z1-eNDNw(9^<fVVz;wqp`#j|LbzAokXa3bD^FqUQjmy$n4YA%@KMTO+Qme+{YdV!N$
zfN9M2*>-s{a%zc^l=`k8A;AOQI?eeFQ#_|B*r<hL*wO42vlQ#Bh&PBej|u~x<)dMf
z3W}sT5m@86fT<J;-^L2S<Y4r;H#RGXoUxAguLlTpN=}}_&L(?oGenuc6G%0czQm}`
zp%DW)v~$dS3NGE_nqNgzaU!2$88<pKG8AsM{r(c;8VM%ly>~$Bsr{mc2#OZl<>SgB
z^7sNhg_CC7Ym0bgw1NpUr$ZV?6YW5twp2q75=={}@{HS;o)<^^*6)CBEDuKH&!Uf<
zURmB6V)dm`R2F~yv8t$F#?hVPiA+Co5U=HU^{ec&P{^#))L;udKz`7#$qM-_F3=Km
zyiPXWxSG7aPL1QY+p&_ZFDp)Om{PAE@o3RkP<8}S5T+8$@b4T;6TXZ;Yj#txn5}*-
zm$IxGP>4ftFwa0NNJe%u%la8)<rplQI$QSa=2ye#saM6qeCom174S47XEly}79yuy
z87y{rass0A^s67(?3A`&`ATg#CrGxA+a!w?^gji4wr8=XhE>+>wmN=E2+H!HF1c!<
z___J!1N}j=H;muDGE=;t^sIDDdv-?iHJYT#Aa{XiDh{p#Ye_H_39;c7B^enn$X$<j
zTJ;FcHl?n(g0jnvSJW5kIW^dsGc((b8mECiH`T!Ho@%rEkNK*@MbL%r5y{r3m;^C)
zma6%$Xs@0%Tw{t@3mSKte~=rg7tqN)+^x9u%YNt^3UUUCt4E;bq*k>R(pR7RjwhBA
z-_lm6nnt(Wd_{nI(Ig@$k@gKrz~htymeYK4f4=wd1$gS_{-bvBUO|?%h+IZQOwVqd
z1a>@zV6Cb&@AL$fB2TY>>$4)yg=L8Q5aGS3!AceOX{F-P;A5ThZQW-@QfvI>;Pid@
zH3-jIIoj_1`MsUBbwv@(SWAy<g$%W_&bnQ6Z4Bre%9ukeTz{aCfD=Vm=t~^0EFWfb
zDx?Gy_aQ#e-+II7wz6b!`nFe-VXUnR2-bheE+|JiSk~g<#|NL6tUw$10lx8@Ld4h>
zf3~cjJ&VWGX1K!1vTVdHnGFd3mQaC?|3diVr+0~rv8Gr;g=(ZQxxxj;Zd2EFc8Vzb
z*A_@?%Md1sp&N?=OTrVzzTzkD^U%)Q=RZq06m7?#Id1*>Pjl8<y2+IZbE7kIT!1<4
z6z4jixf9#ntJDA#5jI38u6&=lbV{qzaV{4z+M`y5+Im-P#`J<xZ*PQU;*b5VDMA~z
zBJfedWxsQPJ3ei5(6y1Bp~I=un=445A{@=j>uR@S3oM^6CW9~C#s(%vS>Ve@$VkJ{
z`XZn>Xh0ldCS_X80aK(W8bEnfh7MSz(eg+B?{>cWtfFv4*MG7b1BfFH56~~Oo7`ME
z@o{e{4&OLY1q4GcIp2;<rKC{wa#y0z3HX>@m&>*h;nh^NL^OvEc<`#dZb$HUqXFMC
zRaA~$^uoviF0*AWaC;t105QWH5?_oEpk-Xey(<EcKYC1qgQ|D=3kem8kXqN+6_8Z%
zvXBG1Civ3@^ec)C$u_4;G0*_i?Oza|o@azVUc!_>0TyBu{Ikx|v9ulj!P-9kw-iMw
z0BqDFsgQ*`b14)~CZQ@$1hVkA`llxR=Ez~zl{gX<2<5{C(mB4+c0N?$e#`N4A{`|}
z27#-Lz?hW;iGUj3jLCK=D4M^nV&=F$+aEPwa)W|O5g$0fc7h(*M$M1)FN|3KR?OCw
zvz>t1GsCHEI?kU^MyO5TiW!~4vx})FAey%*mA?6;Pie}U=}xr_j3qDRl}Am{{-c;!
zSPziaVENFi;#r?o$0jMc@b*dvkh_wU^nla+>ubV_S(ev{5#ZM9cvZI$w}+SD0a7=E
zrTchBMxSms+MPGkWWMjm{2R>E;53I)KMdNpPspsTCsaIt1sCm?S{GQ02NIPVwTjmO
zk*;TMYD9N$FnG>e4K0%Bn)L3X%4FrwnV!Dh_01R`iZ}Th2p4Byybi%z_xsuSb{xqR
zUlz4R&UkJ5Ja{X4{TndIAj@Z~@VY}0rS<;lx*t&F9o)rxFgcoHO=r#9EFz-A4PC?x
z@7@W{(<#yD`3cCHuRtJT_JYt9Nu_(ft$=%_kdhhk^ch;5KD0OW7C98{A##6U;(q#Z
zik#7?kLlM(LNnx0s#S-Zi5P{6Scw4$MWuiK5v31{K2^S5_)dl#B3DtDkB)hhId0Ad
z_Gm2qE7OlbT}2k2Q)xrTfwG_S5-`B=Juhezd}jhGvVuoClsrNCD(VL>X!X#!|MHi@
zN95iHrEWvOZ~P!XyMT>i9Zx1a+);Y)Zk23Pyl}mgq_!|<F5ftbLoV!%j8cAeL6V!s
zdymt@)<LH5>KFKe!m{#ZQ)mw>enpkGL^$l=>Ndnv_vUs=W`_`MP;nBd3(|rxy{m;@
zo`zJy+IAmu9+>4H=%wQlb(PhO#ts8p>;3IV!Bj{&B10rhe@J=Nx`%Sf80xAF-%91%
zi5I9qKp&D`b1_zgmjHPrH1VHQOeLn6FlAgUR>;1DG>?aKT-CaNu$6&}tC}w6hiNGJ
zs%Nn`pYO^$5wYF;^eW;HcIsnzy84*~68HkVo+rseT~0h9M&kmve*Z4sqZ2yExN?x2
z-sa$+E2;^1Gl>s>LXjjf-5L*^rQF!U*>+Pt8jr+k6Z)(S=i)u*&5G+yJ=t|r;pY9B
zPEDOeS~261YVyt@RiNS6<qX`|Iy3!gE%~kn!M7HQP}s6~cn9ZM`<k!67kR_lX@+F^
z=o6++b@2tS+hxXZiafRBRhl*^T<G0=qdVX9Z{Y{X6-aUn{`fdhwa!S<3@Mfb5paLh
z9|iCzBIErsnGD6D@rUE%*9Bdq$)sAf@vLz*j$h9}$0%h-O&3paIjsD(ii0-Od}#w#
zl(@m6W>CDW2oI1RoZM+5B6C|%bi#<n7ruliq~XV<v*-fRr$Nrm9+p7yiJ#WaV65Ag
z1ja*i+HfzKi8_B8J8-czht3&^$2j)7LN(8-G#JDL>vD?uo_lhGZ)sBv2(0*W3{k%G
z7>!XakXFo2q_pXa2Rj#rs({s61=%aaUXcAl;(Yq*W}8R&Enrn<-?jPEY*lL8YoVeG
zLWfuBJSvqy=W&%l4Q?<FFpckJo@g23@d<c>vNsx(pDeZrW%bPdhEU?AXUbgk_&Ubk
zEW`20({#@NG!t^LfnWs^T>^Qsxx_V&^7gwB_&bEPryx6ck>cWx!8YQxypf9nwt=d4
zlHcWtt>qskjr@9)#qeuYN~_;(Zw`_HR+c(mvw~oJ*i*3G{r>aAz`)>%Z7K&_{Za*>
zTLKRhXSZ&Hma_9LC|0J>$3ZF;(#5%HxmDS_HCXrJ&L#HHGQBOqu8Uc|PF>Ly*-wA|
zyd7bLp`9unWDJTg;RIZH*Dh@-RJt^W=t<Polp~&-<v-<i@e6|;C$)LIKN|mepuDqA
zZL-*LbA2WV?cl%{k>rnXsEBJpyc~F^;js0ikz9IFgxTTl)&)*QRA-q;Ck`js!u<MP
z*{ppmT<>X8+uKlrQdnQvXqZAlPvtayq^@3+RuSxT=p(l)f$e2wCBG|3nGegWluwfo
zGvWz<)VNQ9yPmyv#>nw0vkXH!G0%}bH@Xb2hEjCklyh2#_{2lQVTg_K!L`n^3ONq>
zb0Tphw2`m09_RM6PljIq&>WB`$!)0Tk9x|>8_9t)gthM7Ayjy)@9dNOLlYC%m7@!j
zwm?PZPr4S0O}D}jvxwcCi=3oe*83f(ub?7_{DWAEga`!Q=;pT4(pgbM)acs2f}B~4
zhya?$zpsRwudTjw?X3K8STV9an^Lu<B+q#jbs%WEu)6l{NMhk`qx)=R8^b&?Ey4h)
zyWpuF=vliU@wjuf89q15%9sK%y<h{MuaDZDL4<9<n$-yTK4{g@s=a>0m~d-?+uzmD
z0GYhdintW+e)UhIexVkzw3IP&$LibDP5uwbd!Y)Ex1sTNEJw-$9=S^@?i)j*M22b6
z<R{Q_e$l0xTl3O>Tv`Z8{DoG!&q5X^q^la+7QT+<q89UIj}YPozf?HJ4ARtj1vF1m
z0tVd~$=;sxw)rR%vRy${TTXAq2(HZ(A(|j*IE9TY-1q&%^(&g7gPXu&L@<;`v6QYZ
z_%;cWi;#9wmed5%3j*obL=)1XL{Cv$0ji#X=ad3j8a~ZO3G4f6##s;R&JCY@`P*vb
zvL$CaT56TDCvC4k1fy_=ZJGA$%9|nKLu!4rT*M4bs&<@JXK$@fX>0L5%G5QX29eeD
z?<)Zoj$kOpZJ;t?LKYOm1_d7$UWiJg9RB~<e28(S0^G2H(N|h-O}|HsoPC#9e87-~
z?;EFrY9jAk)1SGbTF(2*R}@UH8KSP}sD?NfE8lj0+Rs;jq}$L};zBa?xIJu;ALWz=
zF}eirKok8LLr*O*tT1{k{U_=z9V;v8sWa8R)K5BW#QeIYIF?*}R)qDRY?A|$mg~)d
zQbQ(@H3ySu0HClzEg~QdUJBzB^Foz+9^V@v1;W@-SR`qg$QrI9KE<VjI=|BdDXIcB
z3SO6lofIZ|V*!A^ecH(BPNeCtl4~{;vO%>qkzeyBWsHBoP;fD6nba6ArOx;d=X*<K
z+X@Qp<RV7rC9?;{ZSoL)-#lHL)qABWY42o7Rkq$-gz`kTF_`&nrak@!Xy_5oSpU@i
zB;K^=MPoxm+4htYseQlF!Q1z0Z&|}ESss>}JjgaPj!w5y==qy1DeaJ*aa5|6kns(U
z&IQEk-g#)IXE$$5Cmnw?@<y$)ZBmAV=raUuAClb6fy1nAAZNXT<{77tQ#^Gkvh~i5
zsP_-WpH9{6r`PO5vce~=YL&N{@K?m#vz614U5?1EVKj%i6!jrBmO1%e-uu9NEm(l0
zd*yd$jJvPN)rYO|=U74Wh_SU-cE}Gj8AdlcEtxEHy$<{}{TUjyRi2v*)_coIpsdT0
zU`t93URYTZcH62gl8p_^uaAT3fgQF_b5ljj2kr^HjU|N3?J=Ar!%OIC1YdUDpOtYa
z)!p>$K2H1%mD+j+<~%@8qLp<-7g)p;owUIx-kwkOIcIw^zwxR^qz8maNn8~|z|zYr
zW`~R}Y(Ni6g*WfJ%6+*h`J>AcRI&BM{FMdL^*Eo!XFfr2yn`1k%}8X!I<El>$bI?-
z<REa3D1p-qmf}A?$hxMLuKYkkT`(y>p0fD<eVYi+d*=k}YI?^i!9m3myj$FPx36J*
zd@%FE+Q$W8?m%6PSnYX=tbpeLqjDWygj}6iWo3oHMhn7><EQ{Sme(ZDKUUR;Ua2^d
zTEklL?dSDdmY}QaG^Fct)5C2btcp1Qi@2vjP5H`UVyBNc&_Wa$oykHJG4Kd6-<uQw
z$@hq_iR;T^N<99B-S(*UxLHCJI->B%@-SrlY_VJhZC|&GHzp*_1n3<IroasIV+>3A
z9OA;9RbfIONg2s@p^OEjI1rFYAf{I{aH(ZL6ntghG}0`Fw+G|fFv&hS(O7wQF8lKi
zIdX+t5umoJshik~Fup7&+uS#o_-=kb_H54zIrUwfB=KYMW6eZoD^~8us+fJvZ%M|P
z=~+k6cyQ3lwqv)H=Whhi<wZV(SrQB*D3q!K=3I9l85a_q+Hf&=J@nNkD=|-;K6m1p
z4;y*md7YFP@H@ewTT;W4LjuSfJEh&PxjfDGP4OE0CpJtfXemdjvi20W0!NiLA<Gjj
zBR#W6ePvrikpa6>>uexhNUd^&+D`{Lw`DA^?|>v3pAg!wq#5C&=B&e`7u4>xVOU4v
zX;o*1yzxm~{_|sX0rBQBhGpG3*E^LsV8Dj?PnOK!-r?twq3$?@A?pqarJu*ul3p`m
z3Y4<OLcQ3t`=V35nm6@23RrUDGq58fN!s2hPPVN6NGZaQmRHXwANVwnzw-Lz+eX7L
zrCrJ-JL*On-o9xWLJ?MsA)e9P-$(wBDx6`)2LyazId<HS83$3snwJ`1;AfV)$Byf+
zh$er;U4Dqu+lK|j0>m2s7qDkM$})}KV|s$k|7hlYc)E!e;WR?=aL_;IUeJp#Nq8;7
zmnEKY?!!bt$i`F1p1^xd_p+f?U>+sLfk*YcsgtQIJ?%yQmcK$F4ofN+&Pr#duVJ=+
z5T<AavoG%$FM*fH608)%4QrC9?K>!9TF*6iBSJ8^AoNaB8Mine!t1{>5A&b!75p#=
z%Vp6|!VtVl(vh>SkGV>W7~oAK1jHZrx-x(AZC2<y5dGi?YW0m&^ol!FXy|+O`(@`N
z)!#W!Ofc7J(;@1)KwXZimtc$UAYl>F-;d5oVMG2~5=z&u$S`jW1)!goSdErvXWrfH
z=SHUYl7h{>JsFO*qKP*fX4)1B3TI^0QK)Bk)r3VC%F`kW<_DtSTMN3|VcnBC-vg)&
z<5F=Qb@jv{PgD75-bp{%^&Y5r0=Tw@4PhE-*CEAVZmu>Yj2R}SI-_dYjQMEGTCGqf
ztB+n;oJYUl9Mo0vf1<3`r_$h|1b7tr-<kU9j)Bi6kA7J)TFfA#K+)+Yg-kDkL;CdW
zmyl3x!{e$N<oZ`4<kJ|MwB(M=bjZTuV{$%DYT<A0w328cY^lHVx2^%hOfdeO$|$``
zwQRKlyO((15w=UXc0aG*kQ6@hoV-*Xu|vc=lz6Kty3wB2NIio!Bu{S|yby-PZUnWz
z`S|TH*f3N;)0ma<ZNxKb_M(iD!IBqIFSTG}1B#(6$4w$ZHqsCe>E<d~RoWElUoAQU
z%B$k7*Kdkhh@@RQ{HJ4@jKbec^HP)h%?0}`c;F|{rkk+C8}pMprOI4BcBoddX^g-!
zGJmT!0}4npOd4)+FIkES>14~KT|x$cAx;`<+)B_V)Y3yw?K!2+<;?u!4`l|f%-;{3
z9a5Ox>cYY$HQ#6@*>5YU1!}wzHojsMD0*hwt6;z)7LUJ2_Zk0Gcr#czDqlkIArk(;
zl|6`9aB@=6%BB$%JsVKF-`*M;x)Gk5$uT#R?3geQdP}CDcAwlX-e5_I*~7N{ZQOiK
znQ}sQ=+WzUUC#}<7_<-<gB+{+2HER)d2$rtJE|SgIzD0tP;TpZR)8{X#J<n>7M<g<
zF@wqI*kKfkVH*uVayn+ajU3FPsx8(YDH5^lTqQC8RALO4YdIR2$yNUDz(oC~$jXAh
zhc^<>?co(~?kXp3|I*{X>m#R5uJ*5<|0DHX7kNb^E779E|F?L<<k5bbG^jo%V)gf!
z2TUIa-I@JT)Ol*R6X!yTo6i;%_ZqkS$r~RF^yufg016ppJWRr@cSp+=n)!_%CR|@`
z8txQIb#@c23aFX?MR;csM&szn7gwtA5C>(+w;=j-=vWeU#1}*@E6<fZs&<6+I_0*`
za7!PK2BdQ}jxXA2St~#J3kJi*XZ+b{)(-DMX1f!MMX2K;i*O_J%dC{ndcjJpzx-LF
zHSx=pW-jlCW^w?K&h4_A%d~OmrQ|>8EeHkI)Zu88DC8yv#Cd~yn!O}ydK8{3d<zQp
z`oG6K8BnK5_*<;Oy?$t+35g><QYCb^2L+46FqYG(*GCZmUlyDue$lQhINJZutUh&`
z0(t^@Ei#(GCm3SuWRVO_58jJdRy5r>J6^sRsb1=Y38SbGiK0Tpit}a%6{1X3h+r6n
zo~RK07ffQu<uDkAiNnH|yOpI>u+dW0u%NhTm-lRGiIbcCota=92ox+O^lQO5Xl7EK
zR&d5A3Dz5)C2r(Gjh)Xcks19gggJqmd7<a{A(KPAyP9vQXVWzUBx%Ig<61RrPAbfB
z-L1M)&CM(77_mCU{?&(qP;PvHJI1XHe#sVH#S-dW`1~h>1AL{`McjAVFl-kx!YTS>
z;*MQ4j=+??XVK!1qw=@8Z{B{!G!oZ;oYWc_S-(0vAlGv>iOiW<{`^XmM;dUDplU^4
zjkw7L6`NSsnapKN;hykXc?*&>UKJVg#5j7Ya2t}j3c2`w9UECw&rvAplNC-qGSR3L
zYnLC4Xk0_zh>D??d|<Lf+oi?%=U$zxYYi~AZN3o$`Np?NKvu>Ueb>Mg7}m-#`<IHH
zH}wa-C5WZM`45MM8!|sNZ_$&(+B7^=N&h-gw)sA>_9G5YuL-He&B-N{Rj2XM0Ms7!
z2W+<ttB}z?%#K4LVFYs}+&*vL;Lrs0ofC)f?&{az`5!qz@}RzcM8r|*g*d3T_e>q!
z(0IuwUpQy6Yke{Y71v4JZ8_AC*jl`&54(Q%fIh&QEiW&evEeP)UYfp9@Q$P=lslU7
zhh&6el~NTjo)!-N(<XI#4s%`lE&U;0J6I3xuM@AyiLOh3een0=-<}Q@ifqH)AAdIo
zjmG?RZ2Mrz|C@V|__@H31deeG)We(yeTO_lZ2I?gU)*`D7cY`LX~z%$l%s*-%u-YT
z6`1{i{nzNFH9Rt6mF6$y$N(v<dyrCFg)@RE#eH&T!Fkmfo#&kOlWq5HLZ{Y`na-?=
zKYyYkV)gMR^tEi^L7}@FR2HE169nSBMPmx&A*=g6M1j)lDdXZ@TdQNrZL6p%Bi7+m
z5WQ(fE`splihQFhf%MMu*cDWS+s#Ihli7`fm(T@>DxLmd64~k*FQl{9aJ$#Hi~DLU
z7oAQ`9H}dQ>F=fkx>9Pyw5at3YVb`lj`I&hPg>4Sy{laUsW!E3uVmWNXPwQ4*1GpZ
zER|E4jM}%XdcF%e!_5-~Fl(aTEyjb5P#DJh0E)s7Rjn5<WA!!~xMbx6^}X2$iEi$l
zPL_2E;J{>vVdSy$5xOzaK}6a}ft}I1p2fSo*ekCbd%J_oM)fWj*N*D4T|X0b)n#Uy
z@9-TxsWf_8xRjp-Qpl`NRmf{H#tVSqV(q#Wn*>T+vwO!39kaQ>qW3uTV_qj<KC6UQ
zy+A_VBKvWZs7Yc7d5;PfX@um4V)i5(&pkLW>BmPh*X;YT$z1>VX{=L5!&s&BCjnj@
zjqw(KD{w;h18cg05w7lP8TmjMA2n^PX#a4aV3Vik=zN0g{1C0IHe6pPbYql%Nhh(f
zZ0D$yyZ85TRhp{>)0Z0wbX@FV3Guj_<hGG)Uko>34)tUDM05?+OQ^m@@kR*vKq~N$
zPX1rZ)fk`p<mQ8`2SsB|rGFae7DKDp!nig@&)~X}hqW!gb=9nUIC`W;IdU?$LU52m
z0jo6ua20;&7<A11Awnt%QhDoL8+_q`o@|1+e8#cvP_?EkpVu57OW4o#^u2lq^B7b6
z&Da=qZO*a=a3BM^<~E}bcdIo|mf+1fx@8j`Y)(YI{W=y86-OBulL(6Tk?=aA_dvq)
zXqiV!5c`hrx>}(WBvZ95SJz}e^|m$!z_wk$iS6vh1r1<MIQhvKR73FFs){RMaDNO7
zWrIiA%yDipq;GUY4Np3<zZ}YAUu>Dq(2)umjFEoj-z>Ru<khA0@E#tNZr`#~5z9Z(
zHg*JD+v(wBEp(Ak%G?GBw9u)<W#WJ1FGDZ}y#*n7bM)afJC%U1e)E*N$Qc1wA$gI-
zG2oh#vkeBLFp(lH*T-`?cu?lCwYZyijV<=7U1Mva&vz+L=VjV4+5C^=W9q#cz)Krp
zkUm`Dz7!Gr3OEK46qzap@%Gk^Kq-<Tf)HdUw`deyvKk-;6H1gPdTW5Zx%D2}>VD=a
zuxfYNN+n9s%2!vHAqrZ?TYHc;2&M{K{QN#dnH#AOtm-FrAf%V_$%~t^u$e06c*sBZ
z@l9PloVuB7>oi;IRF}UuIsdG@k43aPX6jar{wAQYW8Ya{UjAN+y*c8?FCEa6#F-KV
zBV*ZHxPrW1F*G`&TpdX9#4t;_Bj4%NIxh!F&&YlSrM_$Y6mfg0gCu{k&X^CaI${TV
z1DiioN0Ad*?_6M7@c5OGYwUS#eUr#OIx~p#em3^!P<kzvr-n8eqEL%S&Kvzc8r~Lv
z`s7VZOXA~HE66vGl0<?hClYX;13wYUjW~~Q@faFn5kH(zUBm{@5&tqN>}vO4q@21K
zB_3_6wh&uzaybWpTll|q!HggJ2<Z9fR|tEy@#Sp<*{`Cg-{a+tVnxLRVz69i)0WZ3
zNT>KH0=`R9B)-QKj|~-Tc<e!&DKUU1ZzJ<p`lkO*`P#2##a>KA2tY;pZOR&C<Ll=j
zk>#0)J$CW#dKhdCq0T(Zm6Ly32(9{&NbuVbX+v$?Vm}u<78*Tf<AB#6-91)I_L793
zxPxX_#Y%qmuN<F%>)xXVR*rA&9HQ%x-0)K`xjS4R>sX19!!2nbg<&!(rW1SpTSk-`
z^rvd@w`r|0*6P|lir;)MLb1;7B{bm*dPUGG2QM)fi5#UhsJKXWCmWd1``|h1PhWr?
z1WVkW7QiSRPD!Z?O4KbuaHMBdhIn(bKcl1u-<Behhp7w!bd*0Zsw{k8qMy;j)Ph(k
zP;Z2H<ZsdhuM9M^-9=!XHV1HKS2azaiHv?=pnb0q9FR?Z9I_MQdnUd1l(~jE*+kyP
z`@hNzZpIq1e+94fFMiF3SyJMD$X&mW_Cbq#?C@as+`_$2QW^#Nrcp5P|LV`mgUbB|
zkanF77~T>Nmg=PcgU<b{AsnpS(L<<j_!PKi8D7R24L$zWtDB+#_nqHhAIe9FAGjym
zY9VQSng(mwt_a0VYz>nj;WU*soXQ=&|FxR=#VBw<i!v(z*cR=Ag_vY2MdB-#9|f=c
zDkiDjyASO`zxRGcmClp`2ru4W#xU`TEbqIK_)CAX!^>DEJP&>}LL$^mvx`Qa4txg^
zAID%9P?<;g<l^W!q<n)PN)vq@=d^?^h0to|8TPO=V!X<gt^KIxiu3<uAR`gMvEg%e
zNp}B{SwTDGctlPY^96ePt28VATji5LAJ<4Kqi2m7t8d|?oBf;15Vg&Ab18_h5q?Ja
z^Ji8uD`)Z=tKvJG{a@=fOBVQCMRwY95dM(k&0O-g&ak!cmEUIBJqS~MtpE(fo!L25
zqb?^kYLROAfHHMqNVi<Yo8NtyC5V-~%*HmoRSZT5yY$UJ+fi)Z-lL3Jur&O+S8kfc
z&%eyF=Fp=1l5a%No`(IHY72@G&^87qB@PR@K<!`7Nr?8kAY(mJ2vjTdh_qLQ`?IyM
z1;vMIPks-DyMSgUhTxdRfZ(5|f-IsjRqu<i9DPoZ1n6ByA|O~<KfQg86~VGQSl^T|
ziV&c}rCRHfaKId6!X(@rr!-oiPXIWp?9J=K`G_Yva>T3~C}x!puUFzkl1M;`bGr)2
zL`Q0VSZ0`H^fB^u%lTkG6)jz$7Y$it!f^$~f*z5M{)kQU^{yd}uzr`m0xx&S6>1)(
zZjL@l$Wro2B*WIJRk}yBcbH9YOGAj1Z3d@b{@_cuqr=*ogvPSW>BWV5Y2XPS|8mI*
z0%RNlNzvSt36~LS2?c&w=t9R82f1&lEk=Bh<g1)Qi-<+f$9f;b4=}->bEU`2H!1}2
z)o6dRX*%;Rw_WzL+6vsz!_d)}5n>*H#g0uRZF-l11480I=$e{Acg80_NC%%!<O%5q
zpH(&p>nDt0UwstTzsK=`HMTWtqwM-kDJ}>&i_c@HLy~wXrN~1^TWfFb)YDf&7(Xl{
z2E`+Cq<7kDAvlS4u{bx6PgpLIkAgnSb)QMjo0(x`(EP-p^)q{TYVs%hH|V269$>U}
z(adbBeDB2~)w<fzpWh*j5;pcP-{*X`1AAk&!Hut?PsIo3!Ixizl^ti#$wp*hirMZI
z8w}#@d$HQ-wy;|G0s>cLimFHepZp-zytQd1@EV@_XpJA-du#sW9q)1HLTi9&u_bTJ
zmPU4WgAG+CLnNufhsf9>s+Fjy1kGoI3!f>8moZcOY`^sm&m@p3Uwt)_PFmc)iwyjl
zgu7S&@JmT!ED^f1+sS?fEA|!QxW_0P$tu>UF|tRR76;fKUj{t<Ha2^?K%(5STKPw#
zqG2C0o0bHrI=H*v?UdAFhmG7vAHMI`b*{T;VymimoRQp4E3ci?Mlx@^e@rrAxe<qP
zT`^@xKW1fcx|I{dRu_uqoLz9ax|JsJ6p>Zth9yJCvL#p?twVz<BU2Dttk25%Ux1(g
z51vK?b7*gJlQbyfUJM2;<_nMJ*x;&?Vup=0BQ#v!IJ+zKLxnX;YYP!233uGUG2-A4
zDjf#UiUHlL6cg@J&;Lo6<T%4|c*R`NJ0q$hSw7lyB-X0i-xVaY=-I^k0^AHBGe-V~
z=E<O^cl~S;Q&Y}<v~aAABtT=UM`)zfDSf1N;7qk2P2Mp^)&y3?9QeKfr|`b0LkQb2
zGT=N%ei3`I2Bo;DaH?4=LWuSh4nw7wX#$Naf}-3*JG-*Pb-95WpZ+R^1#7Ex<S**$
zyzijp)55S*ww(QHSYB-(5qg}xusFIt=Wwg)p_|3{KgDHL?h~fhW<+@{WG?{zB>W?@
zpF=JnaPj^)!p{7S>Xsa^)_>TRRq4pPt{hEwopWD&+C_W;oC6q%<<f=SpLy<or4FX-
zOpze8z;`2G$L6<U?YG<2B64{p)e>NN9PZ#Xr6o9i2oWj1-n)<6{36D%1`YZ;$arI_
zoXwCs4&@OI)JHbR2?Hz&!|iW75O-dV#ZtWT8cUO-cx$O`^^ZAMAX}6(sZ1PH`MTZn
zXz4x#k2*4FtE<S=UQH5GTYSlQF3yxXgQtzu`4N~3wZ{!wxnajEyl+4VD#nzfIqmZr
z-EA!-TL7#rBj&-BLgBR>iO;`si2}OCcCq;t;zI=U6<ls1=h<?H^}?7fPbqQb!g<d3
zyuDVuFU*v)`>459mCd+sz1_;lINv<Dz#j*!OaZ2~@|-(U+TPOO#D~4gU7%#dESlaR
zZ?AcWCelz4yQ}om$1O>y6hrk7$Zsa``IK(?4vs`<I_>24N#_Y7Uu>gv|A6a$xwVw@
z@2EaQkKz*T-~z960;V4eW>f*^Jj-4=T}Y2D5}OvY{?0>Wxr~nkCeZ5{OkHA1lF^4D
z4F1nov@u!=eun{!U!@%f0)b<p|K`9;l@6ADH|5n@9G|)AUD>WipxZn;13F*ViD%V-
z96XsQYwiqfaXmJy;Zf~|CXyKNy@T$RkyEe#W$GeW@n8l~qH&-Cf6MUi=nO+2+_NFL
zpFg2ZQ=*0mMCl~Yu7DvYAS7=T<Tv1%dd=Mz!X(xZLdfsQ1|G7!7v^y^#ug~_)WHz1
zisT%HslcZ`_kL1>4`GoRA;}+ijAMTpD9<^X`RYqCyxmH=72Fd0`>6RueS}Cnd;u~=
zW!}ng5iBgX|E*vpH9CYY{Q2m#Sm_o0sKc}!<(*gTE6?i!ng3;+2iWn(C=-&p>}T-i
zOzr845K6-vJ%xy$J?6fR$~_-c*A-!OP5f?tX1-Y~$xv3laC{gv6<<0HSS94x&PHS}
zxtZn$H`lRE{C9eza-80nx!~0$RALRfRyC-79vH*~<e3&&kX12zrM`O`#Y9)!Hd=^q
z9NyS;Re|FRsx?eQrJ5K5nDbcOXbb;43-?8{>V*^!__u{Z+?%d9m9)(5|LXk12;u?P
zn?XYdlCMHcDyPiswUGk<eKkWRyZ<)^@z}CSnr3jqpMTdRrb5I^!xv!P6^0Ul%GVrF
zU#R)NDlw=9kONp%TFe10?ba2DLi}>P-d9!5?x&7RfDYLdA;gJxQo{d?S+Dl-`rcX+
z{wH2|%CXgIz%5fpd`N5DPW6Adr>A^B<KK!HE_HbQUaKH-5Y(_->1p^MPI3SrW~UAx
zKjdW`PQ{=WYl&D<Y6f5`Tp1p8VsQ#-UEl<34UO2{Ku+nayjg%6)`W_0;I=i|$a1}q
zB#FoWWIGhfTKfnU#J`K`Lth+Cc^#p=CAHKVIGB@V9|2Y6WbyX)y*zq^mAA|2HFp_A
zoKYBw_a^Iwf&Jt$&QmPkwM;38j|ND9S@&9FoYUn(54nnDl>MIh0JMr+g|>_1PjQaA
z`*&#krs4J6t7-(t?>;Eb$)i;-P%u*pgk)k;*aF_nsX`0q5ZT+s)#too&M$K7f_fUJ
zNI>=7$F=bP6AAUz!F2R1lWGL)bIQfQKT;^tWH;fc0TTZ)ZBO?<o%V5v?B;$FPsv1m
zhSJ+?8N}HPYclKB3J7Sjh7Z^>JIMSF1)6iDNW`F2M+uJ%Kq-))z`1n>YECdEP|BhB
z6V5-XC~rBNHx+4qzat{z6jkZCfU1l$nxz0A_$vJGQSXYO-~mFiiBlyo9D1z#o1E4F
zv?{K06gpIc@MRPADLp>vf}X7!g6K?AfSrnP<2xccPSN8m;AOY1Au<59u~wZtQG~lV
zRVNg;M_nGVO+$T$xIGM|IGby~D#xveLr^E#HN=TK*!(2~Q7&=KE`tFN+Mj_uIX92_
zgt?s$kowIB-ki+^2Fmw1jkwJSp&`}UL@PsNPo~Su5<b?j%Rn^);8<<Bx-%R!OfWS2
z=^byX$3hux6XII>BsN#2BauX!aU>ssCw4*dXHekjH{*rEW;IX1&e&0z)4NO4`VqSI
z)k76+%RE)(VN5*`lii{($WVx4kG1wod2rjal={1x2IE=6p~Z^#!L}33f+<i;e9kMT
zE?-%0aQ5bb!XS@woNVb3-JT&HlYL1dne?S&;ZcyQ(~}bYpkum&tiz~jUdm5nr{Rx&
zMYD90{=msIzYKc+We;;--J81FsRi715@!8rqcFax^*|ka{IYVHFH|GneVf0z;X8ug
zciIlipPcd~|L+RJ`uAVlM%V#+$dN@%+)kYJY?)J~%$6AVsj|Z|;uBujz!+lRN}ydP
zH;nO;MKS%b1=~$^X<)-6k{|oB3xNlL{uF@eGZHshU#fO+XT#){(^oR6YlNJ&e^j^o
z)tc~1z7!?P>CMk*6I>K-Mw9mp@6Y8g=zcT$xvBE39d4SIa`>cbZ|kH<zKAWHB{gyN
z@v1ffayU0LG17V6mZ2bG7{N6T%pHW<v~Nnl#Jkj%YX!@wNklDK_7acOTn7c-x!H5C
za>BOr;O!3LjKv<ous6Rj8|MW-Pv$BCYvk?D(NmR)d##d+c=Wws!U{JmzQJ$9*IGA~
zxHZ#0dbuI1RnJ<?RuO5|u--@&?Ce1qu>WU1w5jKm%>JQR2An&l>zM$4^4wcEi!jrr
zg?0U7&*CD(W??X+;f?N`+r>QMQK%s{Wf-Pb2nM!bmmxdlX9rSM^;dhKOgU{Cdgm`g
z<SPiZi4M4ubMA3AT#<8lJ#0C{#AS*@SoF2FwV@|8G}5L|I{yzbH|XVwaV~>%?vE1H
z;!e|Q!fbKnS|`%fTz3nkSi295DFL6w>8o}rko5Ms!=!aJ*qKsgLIp4Liz(~MTBU&E
zKFi#&Ut#MdV%CyzkJw;7LxLQ3;|e0dHJKYhJjLh7;0*D5D-miZZPlM=X6fDlw>|_7
zG*Iy#OO34}tc67l)wr4M*_^(5k25nBcKEUf(0pyk!_@v#ozW)qT(~)en}rVbLCRxm
zr58PfA-@B2-1J}UqRhwL+JWM!(z`}5(oBhQdt>Oc9g#-MANy#GYoC0PaAAiE)ucPE
z5UwCNr0;fH(oMcGG+IboSo%GYe<KVI6>vp9>9t`EmyUwCfw<okhM(zRzZK2fCy|vE
z7A=E+y0t?-3uVVdS6DB-H!VS1Hs@>paOU$o*LQ>jH1u(rH@h~({v#8H3BjY4zeC7c
zziFPn+>R?N42B7~f>>-~81W$X$m?r}&yN@dNlog6x$2DDKWQe`UtdVSTwbmGh==6*
z#=NrUrcdVN0dSkPquE|OxPVebp<86O!kxj_MetX`=SLj!TE^Xdk3SW4nmVS;s;M8&
zyi3!HqLR5Xu6yjC$;7YqqW#E<Q1+e_{xZ29mCZ5mP{Oq|Y8yeY1ur-+<+;0ii0TQN
zGp|bsD^sD!oji<xRd8tW-EGH$W_oOa-H%W+;qrZsKT@dpI6pm7%l`2U-*G12O~&LB
zE$-3YQ#KKmxRZTUBE?R$!HK}Of2UtTL^nN&eh^)TiHwd}!c&XN5cGa5**MVzMh{A+
z5>=+BYeA)l7^AL2QMfTb3^<rjaS>z7q9~?TZNoCT#E__fhlb$k5c3a;8DbQ*!ZY$S
zZqfhR{qXqC8fIKuX(>SI!&4^vK_$^f6<Zs<nn}Lagkc3iB+_aa`}nFFzE@od>*B1&
zE~Mifwr#?CWE8EHvh+``s|AK^o!G0?4J?UCBj<yr`WRdUZ)%LNvIffTFuB@DTHrkH
z)IR@>v9}Iuqiy<zky4-(Def9VDN>x`?(W4Y?h>rHw74g@OY!1XTnhv!?k=G?lmLaG
zAJ=u?@Ao{%``7zlj&nzTGqamLcXno$F&Fo%SV30Dnl+L2W4bf^Da#p-MH%4?-zeg5
z-<jgS^?*EWctA`yKitpV84o(cX{NjyO#JzM8vb46xzDn?0dy{D9ROWY|K$un^A=Tb
z`AgOYeYy^%5Pqk}g(&rA`2gElNw{to)HYyyj{M%GbvraDLpNar6S&aVARvl!woWM8
z@f0ew-t7}q%hI2>{m_22dL|4|gyDWR=J)OY<pmMTpDO}|LWw?$4gsI;MK2J)B1}0E
zdB2q&_$Sz>l<wt#c?Af--o}33dVs+4T*36f3G?(nFNxjPoCq-s{~SCb%NxCDjE&os
z-KPJFefH#Us59vx6wl}OTq?y)$*jEA#-Q;Bt!3#%Oqm7Px)Si6EWF&}$??{gt0Tsr
zp}K80U^GRCTV38fEjK(iKqPkUSZ(jyo_5xyTH-3|=nSKLd(YZzsiSqv*+yda8Y|>Z
zgas998JI2eM#h}%Fj=N|{1>5n(tUmYH}Z4;XnLW8&|?z*sm6pl%HLfu@1%Pp3wfBD
zf{5{=T3aA(<stfkW6fAogOrxSn5#`zASry@Q!s-t<`Hojcj~jwiJ{6#y?eCT>xZ#3
zw3eHqk$`fl#0Rc1sboTg#Ye5we6Ri_r*t~(Y>r+h8%$utrQT$(e$8wDlNYvNOGL7(
z2D$%+E8e(ZaK<p`RpzO&k2HCk3QJlaGN<HWz7$~n&A$D{RZ!6veSk;n^D7>mT+R3t
z;cu+NuZL+7HO};)D`coKw8%saGz#E%x1l)Xu@`c+K@WDtR;FdqTfG+yar&V9C0yO6
zyw*T4r|0dvzP%?|srIl2HHa{le~04G{#DB!#?{-+e*C5+e;or(=-$H!uxk$6oort~
z*Bhp~ty>{c_->RD+a@Hc%t<1Gn_Y9JP2|<v{Y!l?$*r^(sipKfX%bG+ceBO5i)sK#
zVocr40lVk{L&O!G(7x;0U3q*>gY|g`G;rGP;4EW7=;aghYYS>k%S#r^@fyB5UL8+P
zBC%0jB}*QVw95zcLEWedrCs^)x;wC`3WyQowACr6YANTPJt<nHk44)z9TL@9cN>Bz
z&tr;H#|94r-)f+TT4J^kiCn>YKq#z6_dd>(d#1ekV0fQh2?qMKpv-aa;^%hW>;~9d
z41mhQ=j^WlEu-OPIVcaTE9ZR`OFF#CA<2u&Kc%tZKWoG@QloPjp3AXpKH&e#=zOEk
z82qr}3Ca^^AB0~HenA=ZDIp_4i^JE*G}=$J&?e=EqBgrumik}_!@DKmlmbXAndE#-
zPh52lZ&kToE17L-feqi`f!m)|pV9h=)C%-Qvh<_|zUz@!nJY;Bt@PdPOYsJh7Ie9_
zb0W!T{3b*QBp;KpuVG;MxVB+?zFnku+7TJsqm-bb9F`ljd}imWz_6K&X7bTB6AL9-
z_(eNCV-`dE2l+3tVr#|gr!g%|j<{wOpnN_>9SgQ<6lM(~zkRX=5yVUNg+=3M>r?Dc
z0Nwej@=Yr>%FTO(1nCZKZ}yh#(>~5IVbTIxaEKW)ZRAB+Si`FDnTMB=->xU#lZI0g
z-wy^7z9{dx0Zf|Ui`oqxXyJV&m*2g1+cH7_R>WE%ZS-IaF5)L}T;m~DY^o)J^y@mQ
zxxFm1o48O_^5VfHxY&4hfD5e;`jKFkI8u(%;6u=qAL$o`U-JPrVKDa+4eY@^1(QRD
zmejV=Yw_$uR~qWIwxtwU82jR;W`ZK_YQFl+k1uH@{O)H>dbX!NgWSbj1QuELR^@Tl
z3kUoPI6{29hXd+GmfUO>`1NB*Gf95V@9%#Uy#xSTg4+iFy&|<7n0!#PA_e6@MW+hR
z<gggtp?5KK6Mik%OC5=VA3f)oHjJ4qJ{(#v6C9nd5miw^>y(<-{R;eMiS6YjA;LFw
zR8c56B-BI)GHAFyXi$RR{DR@DGI2lTUBBh6I*lS7c@-m#@p_rUDde4vY_jCQ?!U-L
zz63UBG6M4eaF*w01$)UW9_TJa_gm*{w*sYR^PBQJ_LU?faduf~|2799_-?rD6Q`B2
z6TmKKgr9}8l}B2%;-}onDBepypw`wXpxZU!C7%O|moXGk_8XG6H`md#s33#7I`DrC
zL}WdTeC3aaRn7hggOFn#zps_%k^?C$5$~1CpY}$b$waYEz=rq%YN#!3lI6+Y(ZP44
z+^tO4&0Z6*MJ%XAq=^hjK*)=ei4?rT8E2^sSxA5GhdDL(X6)X}SZ&1x@Sk$eZ&sjV
z{E*1$q!S1;ygVcWw_hu96W#)HMAUZ*BgXMPaof_dYgeZi-UPEY<T)P|=e38OGF#yo
zg=*6Lri0~m$$^}gWY~8ks(qvsSJBDm$e-t5q!th2{D@jha|D={&a1$6n^1C^X*TE(
zGQTzwu~U`I(!fa;I&lZq5vG0jBns3}<G^XTlH(o0R-_KRFJ$8uGzy|hslSx0uam0M
zv99Z*bFFIVTRHHcphDN~Dqnu2TH=K!O!v68wEK8Z5EesD6}9}h?$5kJV524SiP3a^
z_1j*##P><aX{GX_m60|a?i7Dxh&t#HCK0ZHYY~^4CI=kskND^l7dYYvKIOT0WD`LI
z!*F?zuZH|sU2^btcOLUp2A^@SxPi_>wABIUe{KOf4nRb`X@*E%$YT<0{%_H4L^8MI
zIx0eQTGP`7J!T*&oBqo!J(N2~HuAGd`>b7SM?3xten5g26`TCVkOukmxiR?cO0*~n
zkaOF`+Ar-(lT@iB2a599U}{Y#j{C&s*QZiD=O1tXA=kvBg|RymR<shu-jY7c0CnP0
zH2?am{M+6SL;js{oL9$6-*nZI{Lk(JkE!bz3!%%MQXoyFmbSu#Ub`oGklOq&RRfY<
z=3<XwOv2=XANxHb0m#skH32Tt*fMi99dWTB8^=X;Hdlgnwk7#4-Kq@OMW9s)x?>Hs
zLT;mo{dFdh?~dZ^$M>diA#f$;FA{~Wj`N({9;FJv*?9mw2glnnIeTM<^K%;PO(|C1
z^u4Y!xdKpLz!&5R`j+^F51v@5(3=A-v)W*Dh{a8G#jK^=gTR&K>HOIZT30yGN^bkp
zbe`^R*Lx?MpQgl9xh6~`IUbFdxA{t2XClyqb2uGKk4AW%;X1^B-h|}BhE?%+k!19W
zV{#WuKDUFeb=RyNKt2m%2NxqqHp!oj(ACqe<b|x3+s_rjz$e)=y50g8)}hO~6Gk}t
zcx!FDy{6j{W@%`Tzqnf`s7LY%8HC)5&(7{?QE3|@4@$6q^We#G3g`T4kXtg^i*FY{
zK7(}hn$6lyCCStwL)u=8o5snvHKUKI9IHUzGq!5Yb&{Z^Yn*xiJqad1(NpNMc%;v_
zU<RyjK#Ybd2F*X;zL3t0fAj;W8T*<jK+_MxME@K|<Z!Ge-Txs6U#OX!L&oltr;$}s
z3=;*^`(F1r9d}tWAl_XuCEf?nAsnsz1`%?`I4@jiaj^XJ&%j1k#KikypE<CHDcHr=
zfwYX;ptw$EA2Mj(!k(Ot0Pso&%rIvMv&-T1?UW)F?Fu8cRf~nphm<B5$en@jdukZ%
zGb=9bO6XS|On=A1vgTNz4IHoU7ZN*^kg!(VUaO<}sYuS-wtgW#B=^&*Px4P$maq0T
zD+`?6#XGwS*$@iyAy8T88psOzRiOat&tPZjKDsN>WRM&4;L`*>UxnX8U<}@Wj{pe_
z=B@ts&{rzjK>&d=4ab3O+(i2`W3Y`JHFbpGW=1r^0i2$;+d)+g*!!|*+A2a}{W&XZ
z$?|SBfr`Q+S1YfyV+RN1OU}aH`ky~}%^-Ft<bnxn0`c*ob~Hr2y1#$IVLR?o4$K5C
zJ>YBJI659D)4!J(@_Nb{ckV2T-&=ZujXMLL<SC$H^E9pk1LwGo+Y_{iXd#v-kwhBe
zAPF0OaL~6n7|qf9c1m6U?n<VnzvHrkyT#Yt`3=uZ(~5MpN%s|Vd~OVg79C=fttaf9
zHTlOR-B%%TFukhgC<^G4q2WJ53>-SO1G%5!?SZ$e9zY+@A0D^Qgp8+s{yF-@c&nul
z4}17*MGam&y|%dwf>7SnjBl$P%r7xDCi(xoU6Ie-Q88mcKyJ$cPZ6CBOP=)M1%J+8
zex!Ym-;2VWlr62n#r?dS#<M9jxW^<$3y&wczFnMQSrfb{_bkr6^n3s!&IVQBSVP4M
zxq6zH5n?*5(KcE$+BKqP*bSFyCgeL|3H@Pb*EA}8)nw)Hb54EajLZ_jrN<no{Xy=r
z3Y;YJ2rP_jn}M;~OQ^;DSC{t-bhf9+7dEr6m{r6SFQ0-H?Ao>Oc0(WqyBw153bW%F
zaz)ZGN8(jg6C8id#rt&;nVsjA@KRN(SC0G~P<#`l_BUb+0Yn7hr7^Zj$zvDb0bDg(
zDpfWk$t^39AmwylGfD64Jb1I_&O(t<P55m6r*{6Jho^5n5<&?=9fFx&{+JOhSyXK~
z(S9Rd^73mNr(lYJKAr%jC?*#+k(7L3#DHJD*sF*v*pq}&DhwluUWxv#g>)gYnqMWA
zqx}m&Ce_QFn!bdxL7NKv_>ja)l<Riyr8&uDs)cVUaRiL)Mcj9mZC!$U+=y3RKIMC0
zBRpo^r6}}@D5>n9u}MzB<!=UGFj%U1nFT8A{xYmP{?VeB&f2PNq?hM(YDHKm^vaVu
zXNhS=W$i>1Oz@*|Rs}vfsH0%gWAoCoFt$G^D!hX^S!8h*L%pOwF}v(@H|wT(&sL2e
zWuQ$Y&TG#^Jl&Y^F%0_GV%=04L85J#Arz9@H5>J_S_;%t<FOjrxuVttBV-)BDA8PN
ziADiqf}h{@)^!eA+8I24?j;2?Eu)g#_Xz$m<1!Af%_l&2H9Z6(tad5@YOXdf@yJ?O
z_$e?-WNi%^02^Qau4*d;tDAmOI}K)o$i*a6ygK<n&-f9Xb;|j?C$_rKRAX#KG5k^h
ze;y}hi=<`PwUP>3$!1mCMH3H*5)qj6&#q?9YNMvtu>J@ZYa^4CX0^}0R_BKXk<+XP
zR_Q+1^;ZDie;9wQUfZw`NzvB)$^HmH0k+A<KfyKpy$xgh3!4e-ESkK(#{D$_UiDz9
zI0u;=mIEeg0sNxYCUVrsT19`bp$vnbc3^)MT@$l<_XznAxpj4V+23qX6@Jv+a~@pJ
zGpJ3+(>C;4L&emQb>_q+8Ti!0+4c^~%+smRVkN_3DUpbz_55I+3bP*-PS$D~gN-}|
zb+dpKdQ1xo*hf{BKr_FBXPrbG%lA&9hLbV@nGNp}943Joj&a>|KA{7<9^vlw*pE-o
zb8qN;F@mCy#Mp$27+Vj(s0OBgT}#^(sy7J5cAlSyfrvZrn<F=Uu-*?$S~Gcx!m?2f
z%qV|UN2f9wP>r0g)LTyEg4a4pv#6(Nq9lg0rQfI0;<}zCX`Z5d{Xo+^>#nfA^*cVe
zX{Bp;e^R#jsJUnMHPq9EgY%3T?S+{3P<0T)(-Xw_Ocm83*&W$V!MRO(1v!6$$)&<i
zt*gU(jtVw|tMG{1N!Tq4jS=trGHt>*BL3zDHV3a1{KXc6kARLAvrk=P^5dq-rpS%2
ziizs4$mlj1P&ohEo7Uc65o}jRU>oY9q_Fg9ychC3e^?p#d8I(OpQ!3gX2?k2@nK*c
zVkxICx5f!tajp<$<PkY6NTYCZQXj5Ef~?Puy=KEh-unBpAIrxlNx?oy2M>f!!Y>{t
z7CtKzrZ!Jj8HBNmk}PrOngJYxC|*VqK#N{i%^LJg57ydCG9Uk~=m56rQW-G%@r6(N
z<|p_Qw4pir56~KxHOq^n(0QB-&#`CfdV=GEjw1#}6NR1CQ@wQZjQbuO0}-cl$F)Ke
z)hjScfe~3fP~B3VPEcjUzDM9jca^DGClesgEn4Zi@xiM{V?A_1lZ1rdy5+(`GE~?x
z_K^{4WjW!-iqn7v7L9duq*?)hEy$PjDM$6iIKA*Yr-y+67i7enIZk3)KmN2J=em;@
zMphfJ-IY<pyem>Gum!D8emI{;bQ*S33Re6=`z_`|+&Og8Bl^2}19yn^63yavVbA0X
zubw`2W)L#RCEp~&-}U_D;nz_l^av^yF)C_1bMQjX<6E)sf+!J)cf_hKi`lAK*oT$J
zLO7lxkg5g#E8j@CvD2BYCKxN8{{r!9kJLrAfd~&vw_!)LjkCS~&M?5p$$X}Oy3okD
zR~#PwQvJ>LGFnevEHjF(9s`tN_-B3$6RZ9}S%a+t_Gs`oMWdn$kK7W};p#q3vkeWY
z;;)KP3+2_TbC)w)NkB%Q8e^kHiluJvnI|f*<)D9@b++$GES}#bjd+B4^9Vp^a$b+8
zwNo6o1QULD{aE9g6JUtEIKXe&Nmi%~k95!>l#${?%7`@9C*L|($ypV&=ah$Qb54ts
zQLQG{hFgJv%?y)L>|<=kf*-w@KS|t@R6sWVQ65rac(&r3H6}=|L4`1hi9uYY6G2k1
zNq2LAr*@Lyv%^oZVyj9x(~WV6gryU=v@yJ07djv~W>vE~QA^3k?RPjV#EC1|DTV7B
z`0bq8fbZPskcn|o2%52@>ukQq{8W)8Cm<GJazHTAo*5`8JnJ6dNTu-Tmw8{^>|-fb
zD&`+&ngNTOH~3B?Z*m_B`&K@H6jJhbnMR>{NeQ*f%`yTk8+DJi$Y|*CU47CRKLb`&
zl81wP>3Adpxfe)LcqDt66Kow$_gLycqC)aBG@ep=$yxSIxBfl}rU$nyCQIZ&T6v+A
zQvC$sg3A39`~9VPKOn;W9ps+-_732(k9@RW@DX{J4a%@<$eBAXyK}6j(6!&;p{E;8
zT$X8t(#%858WPR9m1PA)r2MPf<LCkRS+j(XWj85Qsh;^Y(ImL45V2(#Iqyn0$VoVO
zDR;*W_OnQB%a2*hYVN%KK$JQ7k*<w-yTKA{YIl3^N8G2=1{`#r^neeDa2a-{Q}<5V
zZ2^$r=}obsl=~|j<|R>D<ylX1&Lo!fVmJ<w7Jqec_uMs@QHwwy`N!~>gySG3IK`5^
zEBW>A$wPc2Rr~#%`vbbxuF#$J#Ih{j*R7=x#!Y&>b_K|b6}#;|lzt*6OdJ{%v^S$S
z0}_)&s_GU9y)up;kwU!evmc9R6~ms4Eum5Kr3w0Wz25D)r5YEZF-rl1zG_22y{)@(
zptpa0b^0ptA`FKTJ?5-^5ij=`SPQ)nHN#3!^a6^l3N5e2e(9{yrTXV6$CkTqJ&&B9
zus&aF%nuj%buIQ?1o3|kZ6Y;q&Ad@dRXL>|&$>ry-pNY;(kcgwSl~v8I{xgEAz9mo
z)<ZEJMc(OW_>(l+{*=Ir_5G7~?FjG4qHO%L9f;>)o^CNE)AG6A5rkrxp!gEF@YJ3o
zJuZ)eYkf~_s3lauof16>AoNOl4;gYoj7?fV9G+{@@b**!u>o$z;|hWty9tY#)+ysg
zMi?Ugmti_ED6FbZa0$u!PYW9gUu#$`lrHuCK~`pm#y9TLQpp57w!2bcIpFm&9L<}<
zDnX@-`d=c$DCIX<86DxDWv$*tW?m_NO{$Hi%(z!A*?$Y%2<PA#FH<P>=E=$qR_VfD
zhULKNuensV$uc^k<mXvPB7Lu-6KwT6!EsQzU72N22(|JJV>4rPEVupi0o5-clNqEY
zl+WjV(u*rQD{6|2dvtpJnr!;RITpG?t1Cqy@cIzE8JI~*p0O%-dBtrxee%pyY6fu`
z@T}l79@;@N`}5Yy%p63M^j+^i=>Aa_1w~chco~e&ydn$4eIxboI>W<Ht^vxt2pcU>
zSx<YB#<8V2QXd7ClCC#FgqG>m-1zt%@-pcG(+E+KNR>rJ2q1EiNrB<YZJk9+FhWN-
z(d3C@o~_=<1dt{xU04!ul=8CBq!WLez^0F$i_@p3`V)K#M(|qsbmxVsm=vRv--|xr
z1h>lwZ1UZN$zv;IlniB+yqQH*RX{(joX&opWs2t`5phx!v^Oi3hpbtb{U`!?Rn^gy
zkJBfTK=R>rO5@2Jj4a`a4mJp?hxL26zuSvPtPUeIDtVv7BP~6rm2D!M)Cq}`=4$Ys
z?P}isf$r2g>`@;;0MRS2QnZ=<wj-3OqS^ywntT%R5&K-oI@8$O1A9ZSpTiRw+eZAo
zQV;&e4{q{jK)po400?}qX_)dH#-aa)k#ZSkQsCzvIK%e&fCQPOx;+FMAYCt5u0iI>
z_EE3K@)Nx8divb0{11T%{xG2k2M2<zN#`Io(<9(NPF5;VK27m@)PT=-!N|UZ{NrXp
zJN#$nMZKDiF6c(Us?YBayKuK#BDMb?@X>z&o8o+epU#bESF(T0P5s5((lhWssE;f4
zOjckt<KBeM!s?j#R`r~u86EOYI)X(&<Bh4HC7~c4rqH)Id99I22h(MiSQ}<dOOjeq
zp)vU}q3xBa;kC9&)<P7R<_!4kK4^wSL^8FyFPtusUu+Cy#1SxYw+jG^+?f2jfUT}S
zem;V_GDIL^mY~;M0?|%zYSUtyF`bQ7zBVfA_QrM?y`WK@!?9Iw_xVV?3N?{`7=EnI
z?O{!S0y>f^usig7g?yZT>$L+<2IUv!_)l3K6Dqg7V)Cv#@qe#(oK~o)a#khnFSnv2
zc2cOagtuNwakQRqhEOI7W!~f0SJ3lX@2=NO{i{3N2_Cwj1)CiB51Y}D!>p^!M(16h
zvx?{*_E>Mv9BeO9hp3#B<vK79`1}?V%D+>+3|32U%d+YJMEVz*_B}*cwILQ=pD!n_
zg%=@U)OCzhqcO7Jeb!ZL2uahaA8M81q)b&{g<wO3X&CkSGA#8MrBvcKoQ&PdHBzXl
zLlU7Y%1p|ld-oqOxJ;C$gxJ3RxibEfrEt5pJGY~5v9+{NeY^-`B7vOOaxQ)9MVCX3
z18j`I7XAw>=oywpBJ_<TBqGKuBBCRyCZu;t?RA*)<Aw@*A!@I~`tYW)*&jrr)A)18
zGpWfJy<3!wj$a;qu)a;L6OXaqPE8IJUmHGz3adgCXg?zk&4eE7q1elhmF7bHKCh9^
zZ!MW-8u^KJid^w9PE9Q-+!aBt>LS^mWpyl_2x2xapR9wgP^-MOnyePsmx>jeT7V*I
zZ<L-T+<N&F{Od)zJf8!;PZOOQ{YS0}T{}fDDoYUVGlzRuYD)-hoH%|=>70N*{k3yi
z2KPyJMq|lF2I_E+a+EN%U|X+V<DF4psB+g!uGWZW#Off3ML**;4EqK{oV!)J;vUUC
zT=`K=W&QmR39lMa{f|JQLdyjy;B}&Ny0Gt{o)2*^xO}xG#0s>zT^@LRpw#a(cQzKX
ztae5mz^y+DOB}IK`~8Yh3Fz`>jiVKjaVkmR16UUPLJpDpLVME_xbq(d<g&MV5RuMI
zN0bui+`~Mb`&Td{q$M&wowD##FVWADG`hdidI@Zh%Jx55j#2Ni_jJ0s(am}fApQy&
z6j0ezXv$6=m)u)@E}xkFXecr~LV=DqS9nZ<>2)aPY^HE&psAFDGR~w@#eu%&-(Qvj
zAAx$1hJ>*<imA%$^lcU(g>MgIU*~6Md?Ed2R@sOD1vPnaeFVm)P|ke}<5v5Z^zS-s
z0$GCR<~5)kFncGWPnLW)?P_u*<eonOiPNb^5n1|3lkDei*ZE8xF9F>6+P|moV;z6#
zSCNZx8JIUcUiAwoMqLQ~8*6#>rtOyh(a50Y+0uVcdK9_z7ZUT6X9Srg%}cP2KbBHL
z`n-})eT3`(Lj*(MI-3P)(*WvVQ%OFQy`h{rpPQFqB)R!e9PRp0203b(WsC;`t<V33
zAP(G!#v(r3cu$>Ik>wgg)_L?}4)_GIbm!1GQ*0alU!tGjN{{Luya_$l_mEEa1-F03
zSY~J~62}++kgso*4@8YldV9>C$|$EnPiRQr%PWFgOZ7hZGyV%UBDA#7RB$*`$d0Z0
zcH)Z@Uu&;1|Fx1u{fV<DA&6y4hhvAbv;0=<p%8<m@oKB(*3|hZti-WO18M*<?ak~s
zF?_s8e#AZh%A|dLc8nzT%0_!bKW^D_tNelTr31YBlgjwIf9ABIg-Y|x?{@QW!tt`M
z2J#H3Xc(|2i>BRtWS%_bJ1>IhJJhgyH?76PYo(VCOE9TBpdW|xo2%?q&YZl8S9`FO
zSB+!+JZ!B$(}*ze_6Dl4qIUEjSd~fH$6gCJI7x%(6Iu05vWyNYfoKjO%$9pN+tuCf
z-=&zJke^3GE6nFr%%Feak<p!R=LTiruar&@x98j)&yD&@^GiGb50c_lxT#C&&}yKK
z%4_CqjR2dkvoUv%cFUXY?$ZCG0v=<TT~ic<a(=Uy&=NuYL{Dwvo?Az*^^XUZ#0cES
zD}@;Ec5M}d2yykYFVX`WI1L@NpKZ{q1&X29L<_9P;64iVJq2U`mPt`)Qh~HDS^GqA
zdL<=a93!XuXE=}C0q?$m9}c>QURM4R47`Dk=&xsXNO}B(2@i>Va0(3tOt5=7QB|qq
zSY|P{E9>sMCrfEc8x=v*rYO+@N@Z@}zMZ)-ucxqsre-y&>dwG<2ERkwC76_{^*omz
zpkvqt0g?+@H&;^~(G&N`cFZe$jeiB|g_DE_Yd;=w`WVn|t;QNB2CuY}MR8WKEk#;Z
zJNS@W%)_Yiv4Azh77zLuT$r7ryrLrSr>9gVu=4{}&)50VFR-kxsV1nz@4lWoPLuR$
zIDt&2Q?QK_M?PzwIs0?!+tMh`OBBkJ6*wb)lQsbPsV`JaT8vGWvf@mwR3N`^vY;Q3
zGGZe<chsy#_IL(6kcR=s8oLnrDrg#--FK2;qk(kQX>Mq!_G*C|lf`&?>h4d{qwmls
zn#B#ypU?MdLAtU};&Nq|FieRJED6EhSVw}Kk@ykzJY-CpaiUD&;v7#2?2w4a${%%I
zg_d@z^I8T&aPwGwNEXhWP<Xnq+;M^gl?aWSyQ}lNH&a;R*xWRAu@p`;<zQp^(iWo(
zD1-C{s^{17so#SvDbO~_62Vjwi|;YO77hkwYLZA*q<5II=z@l+hq-td89*|EZ;_9$
zXC=Cz7QDcTH*$1ue@e0b{5=>AL7R|^C7r47Abs{Iu?o<X4o8Bs7nU&6@S+Y~@gQmB
z3hFE$ruPYMbRJ2ZC6sUtO^u{}%Sb5q0(&%u(^|!O${a4=Ivh4WeJfpU0Q-8xU>&<i
z8=pKHuU*{(OG&j<*p&$Y<T}XnxytYQK0_SKTrKQ{k!`>5;8@O!QMyFW&kpGpBX%G7
zgj7+`=VF<a4fYgAUk{Wg8BuvRX!)~|P3^xt?w6>O68kf~9z~_69MuWVZlM8GdTMR@
zEeqG^sjMH;S@om$LvSbuV(kob2h(|5Wm=(H(j=!LdwrfpXR*oxIZ+Z={IF@FZ6pu8
zSdJ*eqdO@jzDrI6;C?VM3eBGK#=j?KP@OklXVR=VDf{{tW6dQNA(o&<t4$=y?VW+7
z6?y=mkusRV=JcM6{a*5|+VvphfSOnyCDf<sP{Dg)F@EEw++MA)^PpAX(RUA>`uh+E
z?GV#+8}ArWFzmxnE{m-h4PH{S1af0(@L9L)p9BnYnwoxV-QFXYVAUY4q=TBb$YP>w
zP*W;_BQ&>kO}mdjAq{ghLM%Rjo^RK1PaAHNPTZ)=G}!8?@R`a(ATIF@{QI38<xt&k
z9xn!j%7ik!2C1cco#d-<YQ<;cJql<{Q*%C5&2{t}6C&NyTVHRa$@iMWoVM{=!;|L0
zlfpSMZXHFK1tOd!$7r#tsK-(G727~Zqb`cX-^~&&9xvLN7!iBHYu@t`mtk*IH%KPN
zfA3&A7jD@vhVI_NfSXvbR&`$Av3@7N!w)D91QphMixG+{v_NCL73!3qH6|)+V#^<9
zClWnL9hQYae`VoWxf!rChRH`?m++J=$ALF8Jnm03C#aE*;cg6kAdEGaBSpPdIp$Ye
z`+gY5QJ+*?{Stcdx>3okKIFYMTqoy&;bmLFS^xrQ_piDnK?E=RLj)HalR6AnLOkMN
z^MYUe$vtF+-cfc3D1w8$_Z^}7E^ZpsOfPbChzg4fs>XFOPq8_v@MV%^wd*p*YbB)q
zrl(Qk&obB!{q=|macc8O?IQ{WCfOTfJhCY`7p&2Mg&*hK%JM|SnMw@}H{+)l)A+#~
zmmPp7YM-D^xgQv%fQh(BR5gG%2JBPn>(V;x)<O*f2Vi+)PalL?`x9w6X|ENl-;s!E
zXo(I2but~3$3+t(C-I=7lvvh@$PhD%wAq${Q^^h2Vehjt{Hx5NtuBc-9|iQ}0~dn&
z8?c^KYD9PF!)^$YUmM=5lZwrwQUJo?Pget`QeWYCvvP9G*3y!s+Xn~U=CTG)_xU2N
zG?`g?ds}<KepV;+ve)TYq4lv#4IGEQc*--yao^q*_{CjSW5^Y<#q}rjt%6zJ=0sK`
zsS>j*{cW7bg7mFEFvR!2K9l%%mQdEn^5x70(0!n<5ZJM<FWgjkBtoZI=EK-ZY7wj&
zBROdqr?Z(Qo@G$rDE|^B#aN-9jvqFf`>ysl#9D<eql`M(y7fhzOesWg%>1<sr)uKI
zG0iPz`SHz*k*Y~fsCz!E;M>w768@xB2ONtn#uxRZ2S8elDjPp;{|YE0l_&g`S>X}w
zwyQzlH6cNkjIaW~umB5|=OhQ#@m!9kEd-^*XECz+QIo(NP?(cT*+cRITmOkUn3s;h
zLNO~;p7BF!MIF^39iH7tu9$07;#Tn+y&mFTfe$04zMt?X*2LC7#FEJ^YN?p)PcBhF
zU3^WzsLny15j~EHk=S9miDQazw<Y{tA}_O;g3sNN7H0NK^fIsY!#CC*EqhFYWh0}>
z@_W&2H;1t&XO$*B9EX)t%gg~;iwq2!p-S>FsUkn09!kinQgM=I58Dh%cTxu_0iJLQ
z@)uhP5j@7rgS85?VWeOITAv{jH3d-5so+s@S(ru+QA-a+;EtmNWya@pG%wQ3QW;7j
zugI)}Sc#j?2kh&_d@OuUVg1kgZz<L>>|@{XL?7B<lRH$HB)G(GpRgR+NicOz&J3>=
zXl!m>e-rh7db^V@U%e)&BXTmb74wgos$iNLZ}f|Hz>)7+acW%u?e<SR&*$t~;qu0=
zoz9DXO<bKwK!RZ`&#Rk=TeKU7$pP-kZ)7}J;mz?x?Uf@)cxp|=MiGj(_&q}a@8L0X
z`6%Elc@<z`l*3{9+?Ciee*{-PzPi6LX7dj}Yi=TJgHm86qQNX@a}`u{P{5?fpt-@L
z5<<|nESH6!Y~KWv4CD=f*=}{ZjEe$nQQc*kutwqroE~FGg%yK)Rd~H^3v@nZ8X`HC
z?lD;4haYQPCveASz>>^5f4%j99mm1=MczYAPsF~|v@_}pQ$*wOL$WDvH?5Pa>xz^1
z6a&BbV3Ja->en4bIap$cudEm^snM0a%CwIcw@}UBl7L)Xb=BH@te`~?QUkSr|Co7s
z#0w_j93+&cO7>t4EJQz&_?)e;PUIwz1M!#W$gBEt_4o@i4;!s+__SGymb3Xn|2HOZ
zP!j8VW^o-DYSZP-CqL<?RQ$`slkY_RqErbiM`$r-CpOX-mB(H6rdzej*3nk5C@EZb
zf_XPt9U3aKDh=u@H~Db*$T`RfF>=8CC?X^1@%Kp*j%(88k654jmG)fk=jw6xGbUz+
zgob8d9NPr<gA0t);^_n+w#byQ*)(Q_M|Kkh^G%k=Mx(>IQN-A+LkcHV(dz_TV&W%8
zeUkn2ocI~Ih+kL(v$EK(lGzFp*I(yjX83oas}RL^6@11Nefcp#mCTt@pg?mh9*B&H
zggJzrX*3nFO1e|YGkzY)EWW(`Y}B%(sd(+jtvYi1Ldz_#9jNzEd-h#K!nL<gc1qcX
zKv_nZjF3>x%p4QN`^=G=;H8MMYDq&`!z1YBdxi0S2YwJuSfU-!b~?2f%&%hM>FgKZ
zD9KZx@5E&V$eSwTIRm%=Tx5^JeDFqBA9ms_k_m_&q(SJ2?z!jM7Nz$SHLFvTHY>aO
zXKy<1wmf`^r7p+&wS3)D>Al2NFHf(KbNS)Kb!y-Cm=N9^LbMI34CQSN%9d-lHux(_
zmhIHGltyYZ8+HRTyniiJ4x+4_b~Mpy(evG2Wr8p=f1r|^qM;~gzmY`Olo8L5gT>O?
zc-pr$tL6TzX<|voKNNtn9WpC%E+rklhN(1LkV=$kaOWb~%H`buY3yzXU*}w{=*17S
zOOLCL1LN(@405ja#!Ke(HCvq(oQ(fwSEW7Yt7PAyalGjte_{MyKC#x;ak|w>+K{1I
z97zrfP%B{yKyqV57`*Q|Vanx7D0(b+Bjr4L>i&u(zFN@mqyX-|CYxe}inX=3`$=3L
zSlu&ucvB1J94Foz(aczV@m{{uc?eQ?WWYPf(?pqk0@xnY*=movz;aYvvc&PiH*%!n
zUVL}dRo#B8^fQ9BR$%vc?s5f~kwu`fbNB2zA(?E^V{N{|m&0&MFB;0#AM4cDF!}-h
zC!N2?H_7~}Hp%XVS=wbt)nnhucHuk8WHW$a<7WR5t20Cz4BVxv_lCgTDHGxge<k*=
zWj(2SFFb6dkmMSMG6UPblme0(fM=B57WWKHgHF?Lx40YMm@Xa7V>;t6{m8Ix`dFv+
zZcnnqs&n&bP%UW7NBI8XLcVaAitQ>}$;PYXsogvg!Fsi2P<U|CRADc16VGoQ(+LfF
z%^Uj>`;5?IG%)G)&+HhTjPTB!kuCAKheS~u!;HImI<6VS0$P9$j)g!4sOy3ru|*|=
zQB1M@eh8z)55d8bJe|I70)a8T`fN>ra1}_O{$P8XE;<2*c~-F}84;BcX0kPoG@yv5
zvDA(&sb3(AYjL-+VDBeYN`g2Ikz`If^ylVLR0Lj9?h$sfm^G|6ykj`ODI>-oaLblj
zR(3;~LAssuRt4w{xdy?Rr;=>r#0}mA<okWql=Nr=Lg$iFF^UauWs_->=?l9Ro^bP)
zf}&xa>`B5T`2AkR_EV%qbyN#5=MUBOhJ@`e&9q7M&!*lbG5Cb_!Gs7~k^N#`*=iBL
zWeoLUOSgIGns4|`Y)s?&S`%s<D$h`<<ltUx76U2`x*3m#F%=4Zof4S}>855#r1!lR
zHFL64FrC#=2rM)^bCSHgmu|r*W~4$b=`Jo^3OpM@1M5)<mbeXWvi&&xRJC|t5U%+u
zOw*@Q2`%}-4W}g@_HylG5VC9x*&*Yi;)@nsUNxHKhE$O4e1dn4gtY!3ZgzaaHsQFp
z?z8FYjN#~oEvvP*A+!cV9@<+KLT{#aJQb?r3+9WDe%LIzmmO;|ilHgJpILm81|_ki
zb7(gm%=OeZh|Q962x7R-fs!h#3HL`75vi}MVzKgIU*`H6tho}7J7`s#I5VtSzT-a%
zZTLJ_^Q3GOl`Ld_J^*3N;PeJa+$fcq!!r#>jWS>n94G0pDiP)@LSTFTB`IsCvc<&-
z&p8E{-@toGwfs$&Uo1ZOP71r3OETxeMc$bwxLT9}k;_lsqy`c>C8)gnrLWBW@=epe
zRT4HP%<VFV1lq~~3hqXDjsdXe3&(g*5ct1yX^r8P-R#g}8GGTYN`l0h220#Yx;fsz
zSg9r@bx+YS=OK&@DsqOArQg_L{Y{1tQ(B)I`;Gi_)?K8am{lepPVGsNqxGr=W4sf8
zvXv7u=(W2M#N9pP;QbB2Ywg4|)ML6MNj9@zr1vF(l3<UR>ZIWlr+CZJWmEeDcbM4$
zy>)W9;<FoL?>;|fz+URA3qD8Ab&>CQ=7c>dyJ#2tkS3MVfO<<$Z*W<8M<2TxJcGup
z9^(Rp$n8L~1NQWoXx`tTE0;&UfEDgs>KXZ}of6+@AuU!}6eifCfJZCal{gECl?u~b
zZHO_a+K0ps)_C}Wz*%EP^sVm_cXc8p9Us*%Tx0kqc*oGdEsNY=ovNc3dg6X*&pq5n
z+34-E8Em|2*Rw)i+k1OQ+l<@y?$c3)%+rk`XirE8Jc<_7-XjgJd^lp-^+<*h*zcOU
z<cTU{w@ZtQqCtywRoz0%lh+fUmQ5m4A-PMJ&%^CPrrYftn*j?ZXu|FCaD#q>MFYpj
zNu)%&+D>g_D8)zYc#}RiFTH#-P+n5UQlI2Pm!}J|2jw?c3F%bszs~avh)p3eaOKSN
zbf)hdVY=7Sm%FaI>lyWZU|H!)1f|y~cFFW@T#q$9xU%2-?|4414=qOjk^lfTiqSMw
zR_66b%t(G0C>uRSFJ(o`;}Z>>lR^>QK3dXy#&J)8%<ESc#~61g=>}3y%T5F4ud-XS
z?s|XO^%3N41gZN1EbH4&N&rx8iMt*wZD->B(|V=qT&ih-qWPzDCI3asJ_$5DFuv7q
zso0mF%IlkqcZo`0*ST^`auxp3x5XMURY|?Yy7lhkmUk-nRN|bDXWX&9FvTWbPk$Jh
zHNI6(TTWO+Qch}&d2q$UyY_OMFG21|KeCe<Ap}gB)12fqGc)=aNIvBs&|^}t{mG|x
zk<R^N1svfUs2TpN>D;aFE)<{k&PTGROIX&9bpn};Y$&3C(_@RZ<+%Sq7Ps!&AyI03
zDAG(-9xvs&Ati0^g`#ke{NVedLu|pva58wo2?Ta0q_3tzqju0DC-dmc|3GNB$IyT6
zb`58;B&zITH8gLnjr%Yyg^lWLW|))zGKYVNds7KyQr&wMIVLyo_C|tU`qF~-ume$2
zZ(CcBe0z(sEb;6)0?0Kju*C*c2z^hKUewmbzhSu`KJd8u)rkv<ZMqA~wkH2PO?L1j
z#=wa@b&C_IP&n6tWB8;hApajRdo#4pc1A(jBqk&&`CqEw@c9U@6x-4+r0;u|ANNd&
zTPQ2DM?(GFn8}mV?+MZhC8D5VrWT+HVx$D?cEXd4Bk%I>l_^9Jq3Cq~jwy3cywY>>
zV^3k`F|0fIf3KW({9h|i$2pww$Fz9TmG8xo+!#XM^rheBowcJs<*d&+b`2UMACiw~
z|3y)<=&JmoraLO{4Cr=gN-}aNwr4<i`}o%z$buLU0hMtu0~Q^zaM;gwH%F8`Wy2~7
zl|oTjroz?D3n72~S92#a=2Hpz?BL;_XEhOf%ss**#(4%y0Ve0aT9fX(=43%tDHVB=
zaFickeVXdzQ0sGjQJB7|3iY3y{b{7@<#lBeB*i4kXZ9J^u;E|`Q-F*1hn3L@gqQAG
z{vSMtrHQMUwUw;FD{n3KnS12~EkTo?>K10FB5$&r&w&C4>9}$Uf(oJlRym>{+|!!h
z=KeQp_ABE&VPrvQMahw5^I)hmRc`8<0|}#eNxppUPreL+sM1I}_7J{5Yfq^zfFQeP
z>s#j)=Mv};8aX=(pgJ7;R|MUtGTAsWY-Zl?=*En+0b*(Kf(gvqLg23m4<g&ZqO1R{
zt|O$grW@>^W+z8n+Ha1!*r{Ee4MZ$djS@+8$hGzDjU(00fVjXLEzd=kO`2Cy@+QHm
z9`}-P4E|DD)d(gig^E*+(G(z0EY}|L++?qazPJu~E;>~GH!_D2iNdrp^h`(SU@a-Y
z`N}~dPRtr@`;-lRYMd10UfW_R70>lk;6+Y-8aKLN74U!J_Z5~j1=@Cx%X_XIk5DU<
z7W$jtXKsgn_l5K8C^POoEh0Wyq)65DsXaJVO15zKGNDswP=YkPfWy(07ImGa35v4)
zxK{)!v&2L18Gm|7OFu>NF6a>H9eA%w7M`v+7b9QIR9&Bt75M-*N&rsBD|CJR)phBz
zd%*vD?{>Wq_UKJ7c6{W}(3Ka`z0l4m2OpS|r`9U>C4%ZyRoX22W9Qvh1-Zl@lyGM`
zT?}~gQ1jib3R4pWwS~f>DwBjuG_M4~1b`<<L8ZW%(NcvTF*N2S^g@@xN4eM@z$8E3
z!Qk`v|NTezB6rrBv^gzC%i*RowAqs8o*!;;taYm8vWkj{_mT7)Ep4?Fn3{-BRb!)9
z8Qgt44}obxU=3#wSWVXz05J<d9Nz&Dl`bL*qPz;CcY(S=Oi)vsqbjH>SWN}oeLA0Y
z`)C8c_iSFzJboreRXEKMnD!BX>;p4yEsNXTj)un`r!!s~YnrQ0sKIaYERW)#B^m#a
zDkWwYyo&Eq>M@m)rRgRQjYo?UMQbScV5I@=W&N#6?}{qBs_^sMKzrA(mzFyBRzoBI
z%dh)czy{5!QT=a@B{X}tw}LPIdt>>5N?abf;V1&T)+D9#7pJDl&*HNV3jqA|;E>%{
z(3Qio$wI%6ZCNmslwXg6SuEO!2>D!@0i=iJ>BBMN=D4ne0+cPNLYESsDV>ig6&43v
z9>YTnT369{<fw`)#b->9c(3RMzE`<Y2Rm4FgqiaSs=Yhw0I#|)i+nUCW4$F=FpLob
zms0a5c5pXfm0hY3%k3b&88T513Wt3!6`!g*K@d=BAZfrpA0LaaxKARVv?{Rs5`UzE
z6a~~vKil#nbku-H#GDG^;3fz13Pgos1-(VhRh>&%%4U_kuId}a0zAn)yS%%cS`B^$
zA0X=aEe-qG=Y{N$rpLB9b!$)3BovL0WGN<ZGH7~k4Zc9O&>R;8r!j(&-(Uqbci%Mq
zEjlZIzjSciUWT5Z&N$sRPJdqAr6mp!QzaOD#fch*O~}MFj?-|~j{9B$#N`URlW!j6
zUD_Pes7KQf!x$!aFZ#&F0hA?sPZ-1v{ne|J?Oo!R<8yGtr1I6P-c`tf5ne^EP^t6n
z?rN>Q_)XQ3_VxUK@q#+9y=uW+C`mnnBuJt+<CR76G)^IW16s0Mx`SFhide%d^40wH
z%smD#fFNSzR?4}te8@W-ZPcId9s-a#l!HG8WDTGd^pyDBo`y&yZ+@IGQ_oyHA0zYL
z)JAUax<k2xwXnburm1fdC8jKzXDnH6YnceV(2Wx1>T^B=j!-Napj4@KtSE_59msuR
zUgJ(fcBB~nGf#cZupjk?yJg=rS9F>t*FnFu{=Dd*nTWJGo(9xLB857C0(9)0m!DX6
z;WT>(KqzGucv#nrR(j{f-!l}=-bV}V(#_})j}-b^PCPOpzKqZ?wQ~3HGL+-N%SpZk
zru5M6i=%l=cY3cvO@!*5+*D6LWpnRK7fpTwLks~t8{pA*#M=Eos5MZv^FzOAAB)Vw
zKkv!3AN@|c@+ta=dXY=dtN2p#S4ZnL!NjqC&;unAC6wJD-B-7Wp@NO<>o+M(w1Dpg
zmMRa@swRKXzd0m-|JkPsf>W>EpxtyxYz#^i#AhPEvbNu}`K8f#fd2P52rO21k7#EB
zZK8hgX~a_O{NO9QP4*%hCHB}Sb>AbIoDNspRp~DjdrzNn#)zX(W1?SK@(d`khwU4Y
z$=i>0bZ=!o$4j2J;c7Ms>wFoO*!V}XgT*%9yEs`!Z=D|s`K<B+prlkA+Ei{+#TXII
z<9i+$qbPU&qpjb3O4O$^Sln1t{Xl^(2S}c2lHMAHv*d&A?O8&LnvzR+nDp@2ll!0s
zM^6z`1l1&S1*q2ioVHR?+3A#EA?v6qmr@X^w+)?GBUv*JDWJ3#Hk}`=aiR9;)Tjst
z>!rUKw!*9|Tnx*gKzFt=@L5o)C)D?&TSsPc(RQ2*fEWoI{&=4U!i6-pR=(R0h1v@(
zaq|yvcX_-gSvO{`aY){m&dU3w3o)>J=VoHUd^K(rVGy-Jv)J&22j$Nq$!d-`doA?c
zr05<I0D6;f6!_yoSG8J$tXbQ2o`6W*VBk${EDQ`u^BM2Zy8Fe^uv1h@uAA{H`W25m
z__|Kzo6%#CYm)1O;*<f;^~vXj+7|v-KiYw<WK3&IC{J<O9l>^Zk%C9+Si|);o`<Jf
z#B0WG0+{0qIz+2_fU_Y#H#T*>L8%Kxcd+4Xbg_@w#5xHSH|^7p?9%2^en0v)%A&TF
z#}U|j(LuG1fIhoU-#B=h{JOZ39f;68-1;ab<%dIhx4?+jkmjGw)MH4@kM{!Rcvab5
zT{t?{DnyF;n|09^?y8`NpO=tx)pbQOwldRI6*ji9w9mM;*Ex`^slEMgtYyDVoPX;_
zwEaC$qKxyGvza*j%460mih$YS4`~;A&ahHq*qu~wHm*Q-295UsdXu<kOYQWCknowX
z{gZ(YlfDi5Gp?I|O*3-#e_HVmrM-M$LU4gw)InTC>1lM@!6jzVZ*U#cJ_M&uf3n*D
zAQ;U4q2Y2sOFAlUp^?wZW=78jD=jd!N?r2&U6UvNE<YH3%4p-!ql4epNRV2aLv>-M
zNbf+OkD7P)vv*b7^;$}n4VIVsr>dftIvDn+OXOuQY7V~66nYm+${7f+<QuBO?=7#&
zw!2N{Ie75Hs+GkmFZ0B(8)y6e+&+Jg!X&EX?oUr{CkyzD8UN~pFegG=WG1l5R|@LY
z5#r5XIZ-iWeCkD+<S%-P?PQv(EdSVe`^jgSJq<xwlMbs!5%yOjBrNopgjlv9-BMnM
z>Y+L8Zqsz^hWIi=Wv*rD^accPn)@!JNoBq``O+nzR`eOhyu+<Ol?7ESS{4Lm!iqbx
z1j!9>^Q&!I;vpUfw)}d14s<?cNLU;Ab~HpsHn}HBIJ5zZvMc1owedX9f_KfqN;Qgl
z;`#WtuW%K7=l1!(<ll~5M80gU+Wa&sJRA#x_mtpF;vO&g(IYgPzj^b-#*r)!Pn<Y6
z0nNX6b>bO+a4Eg=8TMRWefe5?0^M%i$@T-)PI6Yr`th^{D>g-jjSBdHK#3=J@w5Ek
zVq58hZzse~wQ=Knpt$9%+OX?*zbO;+3)#iOm2np423eI#x~21YI&DZ`Q&`EnMe}I0
zuU(@G?A>uNzckw~il0XE*A*?B1b+M5eZ3N`K#P+<{Y?F~B@%Z3((dbX?lYzuH>}ml
z`FmX>9j{U`?)3vnW8)Nom|m;FTY}%Y*n=PJ+LuQZg(;kKjaA|5`r#am-b;a?y!%YH
zn{eYZWS()Z7M6m;NSHQUxcRf?#5w^K(orz;;!HZ?yQs*_Upr5FL8q6p{BH>OrhVNL
z+vLAq(($?DbZwZ9PY^P<#(y`$<p<+lcIfAryHRh$Ru*l9c)N_Lb`o1$_WL>`W_)N=
z#ONn3wYZL-8-f`TF3B|U*ZFIJLmn$Xin7^NQJms>r-t9lnr&`L+ErQ^LTy4f76CEa
zIn*aL%ZCboPhX`q=|W~gjCq~sWq9HOhURGPC+Sj_&J#|SgcuNi>q{PH7W-h-?0XEA
z4%^8&@kXK-LIM4MD02s+?yab@CQy9CZ?uj-f7_#C$o(ee{PE;kh`MFZu0?OBN0!<>
zv2`MAE&9h5TaK<6{iOx`wEym!Ml}947T?E5B&b+t=;ypq2DS$mh(CKm<7KxL9Q#d<
z4d&s>3~iboKD1@bRX3xq@6Q$A2=|eG{0g^AG6%fX$f=chlmeO%do*#J-R-=>ffo@(
z*$AR-&_t36O(d*2Asp}tb<FG_+@Edv1O7F<N~a`<cCd^S&<<v5tKTk6)#6Xo5A0Xy
zn9196-4G`;kxv+W4@ui1Cjr0uuDvpmuP#dJ$`__UZdx6k`)kM%zJz0(d66rWWp7jZ
zXJGv`gJJwnlVx4rfq59aCFSxXf%TPSxF$mnSqig><N$Z5sy~;xF9cG7M&DJ9#HP$z
zJM)}?fA=!=Ox)kB^fz<Xy`yQ4N|%yi&0~=ADKpVn;JjptC1@ok5P6BB6)jDAX#=~P
zZ*CaIc9NW42SqdLaIpmO3x5ZZpTd9}gbboqkO`0d>Fn#(C2b)grsolQ2aHY;*=|^}
zwja3!v;<k7cf^dB`(zkGYtEJ+R8^wd+(3mSQe~64Fejq1D3vaDlUgV+Z*Q_#;H<Tw
z+{;V#xx@E$owf2SG6=8H2aNr)RkVtHBPtzZ`^K*CtMjlCu5zhwTryP#);Ei=;!w-t
z;1%9hWX6=3Zq6DV1PSmduxZGmZb&f8KUK;bcoCRT^kX7NrLn=COP~^|D&$?H;Xt+q
z(q42u8;?!ZE0S`)%nnnnj6aOndpq$^G<B&sWmSqTBUBJatK7}E(E6>Wj&i!iBbCRd
z4+DF6|6g@q6%|*|t$BbXNN@>(;O?%$J-EBOYjF2Ka2j_>a0woQ25;Qm0*!kI*Xi8*
zzubA5r<t{;9;#Q@-ruf$s`jaKdiAdQYU;t({O;BqXZU<yV^)_W1q2vD4f7Yj*nc0i
zn_+zh3l&+A4EoT`2c*7puk&P%S)_UV9OK~4q|T)zaAZTQ7LRVJxe#|ri`F8%6bouD
zulot(ZQ6Rpc3#cbz0K*elduG7Ao|6%CzLHXH?H(2%aSHEMAJ3c+B*<e>PA^1FmB;*
z-cyL+S=Y9~?tkf6f%0)t-CLF*dxGw^<9<9o6}hk!E&4@E0?*$9f>r3pH5Q-=*Zpye
zb!Qh`-qwa_PfwHuFD6d3Snox5_uFZYwUd>=i}n$k7x4O0gB+Tq>8%iI**7G<&seG)
zi5NYnyG3z~p=9sgwX6&$Fn2^PM&nl>OTJ}(JZ7qD#C`iasGy@MXdnl4y#CXPiv7cy
z;V!+n8%Or43*Q6{s8t}_&(0dku;PCB;s_;n<3eaMcxoxe^vVJA-po24K9zIcy~$n9
z^jGgDw@xr>_r7!pdqLHc04bM~XrD3fcdfG);NcrswQx1WDFkK`jfsNeIE}!N+n_t=
zr;%KR)Ablf`wjt+v%OU=SQ{n$!o0TU=^{T+%$`{B8A?32ec18(X`xM=F=ga9&8j&G
z%sQzDaIGWf6RNDtL)a-VvJ8Kn>h$zIL?mpBJXSa=({#C%%l8;MAC}BMG**L4SsGR{
zmuOb~<?Y3C!RFT$#urWkpoiZ6sQr(BZYf|sZRl?Xo+#jSWImpZvCzDTUj6iSR(iSW
zoSBCR{5Lp9U0o0HP@x8Y+YHK*@oR#Y{Vwn311at32d2q<aOt4|K8RFBsAfHTCa9y!
z$sW4!Uob10jl!UCf`jliqW<EjTPJ;)w2V*sJU-MVl=bx`5|AUkznxQwBCtbGECv!)
zxDvkfTXh!6NHN7ztb;(`b~3BRB^T=Ys-rog2dCI#Fch7*NaYDN#p2tK{oQ*WayuIE
zSx?FLjx%`|+jv^@IDK5(5J6||oUMLuHd1^yob90j=}RZ04xAw4lAut<k?38l`_-<x
zm>jVl_4&_41#+muGNyfboi@VKbw(M2&IAA@L$@emaQ-NUX{#oZ@pAkd|J~WN&#%#}
zpCHJC63=fTCI_n!<TojteP=XX+dhMU;C0&Pm)oW2o1N1GiBlz~s%1!eTjr`zn6q3*
zSH~BvRlg&Sw%kldD=5M}?J-51IvEAoD7IWua_ZfQ1gax0yhbz}0_Q`3>z1MsnC_Z9
zi`LbV=vCS)GOoK$L;knAMwpw{$SqA`1=SZ=s<EQ#xIbz}yaj<Ow4_921c5U{dKz>z
z({hyH?bd1$%DrFO2!8${r0RO~h_KL^oqLd;eZcV`sphNA`#I`lX_cL6Fuftd@ig%%
zdr9)9^{Z5x70-b(wX|ECBbJr|OD;XZbSBub#*G0k8H##tDL}>_?qKcU{WU2$EpyA=
z)~#2cXQqz(@c?&f6@qmpcWa;ttZq8tLUPXS_^6@RGz-^GtHQn~Ne;sP%8ZccLknp3
z@LH>*G%O^X|AmA;EDU4uO1pxvJ*xnnb)x+oOsjAW&tmLsWhzy6euC;R2)7Q_=wEuV
zQd7nde^B1`lcUti>!UH-o3_47rCAs%qniGRR=7vgA~s~ld--;V|G<a#=G<p%?mTxa
zzz*ZH6PWp)LGxL!+_k0lbgyQew{RU}Is38O(vy*M1*!kW=84j)JJd$IxNnqpu(mHP
za~07)$O-EG9xy#{i*|XdE)?F^w^%&=_ag>rJncqq=0_5;^QQ{1rDss{9qT9}`TE7P
zyG-ECyYQn@Wn)CP&StaJE=`m*h0e3X0EEM*Ry$|6t3FH5IF`0Z+6r1w<=(7_>rP(#
ztZm5e8Yb0fW_BMn1tRUN99d7S=V^c7Ab_5a%ZKZwV#tEo+;CzW8wtB;tpbemjS}|W
zF~qOWi=uk#O@)7lrlBytYL#kSh<9P&!PDwSvk~kYR5454xb<C4+0bfXzy65x0lRW9
zM2&Qxlnn_g1+jjW(m~%&JVDzjL*3j5(F;FIr%|pKUyBT{&-YhR8gQ0z?T2UyXOhw7
zzqK;gHv87TldYizkIJ|W?lr+@e?rM9UWdnLw;pYQwA9(Stq%7Z8&BEY7R-jluh||p
zRo-y_I^I#xv<Dfh$tl7-*sE`|YQCb(^p$xkW@jtLth?3CaZreYdstL<2Q<v^Kxg6~
zjG{w^h9G18`lDPlI7I89FREJ&i4xyr1K)L-xe-F*iZQcR&_K9VM?OU4QlhwMx07FJ
zCK4Zl;Fun0Cph^aQclPEw`-7$s+ypk+{1gD5`zwB@s6{XTyXxc(V7WM);(Kin)KmQ
z;*sXaJYBtyzkc^3#bJ=4sYGikkRZ^dqQ5%+<0i<DqYC#(2dHK9DkBgm8*#VF!i8rt
zN7hJ8D3E*>e4n&qlfn8V0n#^-d|R-&FY7#>TU>TdN7@)_Nh9;T{P#n3Xt`cASmdX#
zasG%AEG3bDp>tc|<mYJ3n5Ea4!_heR9nBf(2dOj*K2xz2YO42+bnJ5(?0+rI6k3aX
zEGV2^L44Dc@}alOR_w^0o>9ZoR;i!eM&DgzVCbU9e_N!|^1KM~z8t2YBQSp4N2X<s
z|E=L4;Ft;SzsN5WfCj8Lflk^hZ?0-@4pzFj??Oh7mkqAf(C<0!sQZs+Xb|$XVk1kW
zRQ?=KMMTpK^Je?WE3!PX)RqZ6d~KbbgETp}8g}p&zWC;o&{@T5#m1<4W*VlC)Uf_x
z*P7sLx??bI0)HX*nq+b#<<@XVvpOUE``rw>Qh7kPq21FEZ@hNJ;B~d0d3wb{fj^mC
zp8}hDNPSSf*Ud*e1Tms+#FC%;Up4gCKKX>w&AoPPo&Nrlc5@5L6h56h{)!hjO{r)T
zMVwAdeBm7BfK^TS+c&xFbY!G=G5zn~C4_}M2?0UX*4B^YBUR3(Lt;^1M27!R-<)*>
zYU*A58M`Wx4MbGe%!;PH^GlOG-Bv)-UENYhN!+|&BMIs{5;Iyl@qCLgq1lW%qEyW!
zlJg-}PAN-d@1PS?RmdlKA!=yky$InZk%e3I=k4aB8w#eC*}+y49lK2f2!npOWi~~Q
zy(kGo8Q2r7duBI7M_Z(PF_VgqL28fL6?x07@2y{?72@C`Mt%A4(im{fE>(KdhNR*L
zFRxq%uBkkJPVcB<j2m`4GIcnv8JY3#l)Fmbhr>3+d>Y0UBs8xY^gJ90vBS67PG1lx
z*-r_)DFV#Nbx_!O;@h{F>e|;~_Ov`5G}1OGSuSMyZ*d9{E<sV_WMbSS=5EfA?PQs>
zmej_A4Q9)dn;+cxjy!%<$n#m!jQCD*h}dJfj*Tuj&?!lY$%B|=^D%p@wK>y%0<0!a
zUu4xw0XRE@6*9>gooLS_p63Ip7@MX^v>)?2jyq-gDcmF~T;`tXh4pDWyt2ku5iSYi
z%<Ys#F)b!#8%svXEfM>S#zh0|Xs7JaDROa=H<MYX1;rh@g@_ptj-#ihcSG@C!}&UT
z+a?^yDdv*kXnex`!+(b49MUmkj}va-8`JW3syypg;n7!9mb!#t*8BFjhvb|)9vZU5
z_!DV1>MfQ`-k{Rj&U9<?q#u8>?aX=aqB-CBhz_#O`dQxFbH%SHNQuzw$R_Eu!{G#$
za;`)a*e9=~6mIt$Jry%@n)(A(Q0JY~Bi{U_B}BU`7T=P%rfuO-@s#I$`2&;opjZf|
zNFwgUu<vp=MIrH)Kr{IFIq8F^OA$HhYdG)C)H=ua2?x~FucqWbBE4$&lVyA{a<HFZ
z^qY<b@9x-}n3#}+{z3uGci_i0|LjLm@4C_&ZKksZh3xo_^wKMQ2>jr8#<{#rvK>*j
z;>&2|7uLny>ToiyjATq6K0$Brjz~7D@wCI@GCaEo(?j36|2V4X9l>+RYpQH~l4?KJ
z_a}NjM|0L4cn!oX1N7Q9aB;HY#U5vI<7>!@rLe9%yXW|J4w*!YOAYqc^>f>B(u9wy
zGfvJ!`Ggsrvl0q8v_8Sit6aAKDWpf1Nq`}gaMn$=2?(3?CW#wVY}Wje_UA&#K9{T-
z!}?f=U3f2$H<Ash7DJwC!GuXe_EXU46qKMkUjLv=o0_hqgYE2r33R(d6A7*J9Sy}D
zLZXdA*>3;j*AI~>=q<7N!XMaKPepA(x!OLWN9#e0t)WDNj%1%^#i&HF$uOv-LMAds
zU7wSAUoFu>Fv&zuTOrIox~qy!QhtI0=7ZUa0}LkC)UBn%y=v*Ua@SAax>Bc%pC1oO
z%I``)te=%VttbZts%~Hz=NTF0<=;g7JqypzhY@?_J@<2Nekmn2e)jFGJ|S(|I3rV(
zetC|I3%tMDDcwsL8xvkT4^%$c+sii!3{ZO^@b~fc^)(g5SfoAi`u#Twf57x-*OB}!
z=@;7bz19umgj<=D8w~l+CU47rBX^O!(R<3i{X=%UeR>T0E#NoTD?;+-9<j-M@CBn=
zhSBTb1)s#-oAmdxfau#IGmYY%LW@fsFYUQmy!)5sZ}QyGl=gX}lb;LGXA?{}O@^j-
z)zi<j(B<g}LRAI)6tv6YmWQ?=^Vv|3u2wqpBLkwtE#mLR*Am&%dyn6<sB(j%{gt6X
z=t!s@ldr@Jr#wS=j{JHLE)^?qURaLB%9G<AYwZ*9C=u?NPl&biZ|`TJ@I6}zX{9$&
zS)F2f326e;$X6a{sLl$DpvSbXDN#{B&J|m0xuu8)-%8GO&Lsm@=JDH}Cq12^u9`a6
zlSd(N7n({lvR?fU-InN_^Ld^%hx0SkQf^+FR(Fp^u}Z?KAjeJL(aux|o891*Y@pL!
zyB-OafgRl$rccHPkO7l2lC0(jqXobf=5{i~F&kuE@bjZSpRY-|hnOGi&p#(cH)JRQ
z%>co!2U-cNH~N93Cbpd1w`p_7s6wcvJgVPYNnJJ7Q71A`UyF~7SI&Gb(^p5$RWuVA
zE6XxDu<0GO7R6D6Lm^@$7iFBz(3Q9wu>9!dsA&!Q)$F7yB)F~!{SCEQIAvjD=&idu
z9CgbDq57>x8hQx~puFZPGEvUb5ia}X)JjgChND)FoDoUo^;s>J&tBGzx8=6%<T-?D
zL4pC1q~jHpv#lB~dz`Ej-Jk5UO15^6EtLI&T272d9XO4dv2$tvh2q1|Rmwh6ITK#B
z@=TSM_GrlwmjT8CQqFOail!SyH?$$&??hSb<6ty}Q|D>3pzU35KqdV*yi=9RGJHmn
zTAaQ0?t2YT#A!ulL{1_JUYy~rM?Yajjua&pdnj)u&r2Hl3BlrmevKUT>kqv=+-*TH
z+A2I*L%!$xYt&E@#uSi8)@ihPykcsYL1=jRWs-*7=qp-TVg35MA0Id`toJD|!kQm6
zWre|ge8lO)><O~y`Ut^tZ5<Ib00_E<!>#453#WMO_i2>9%u1os?%N^RH+{v!TtyFG
zIDR?C$`G3n1a?x!1F`B3=VV@{L)7`aX71e#_@XS+GGRu=4@tgtMX`9uzo}yi1e<DE
zCQCm<EfykU`+x1jKT0#m=3zw(&XgyA>NVXu5EyK>!3hvGJNacy*uelstN$1w!`HCt
zO}zPl>zih}uoiDwRR%Qnf15s(70d-`e^iL#`3W(ZgP9>Q4N!Lbve{lo79p#ib);m#
zyk-9Hs+?T&zMi;yyrvtULEf|-H5WUsEg(?rf9+AG@>Ud`k6XRtw>uB*1f3BF)%RE*
z%2Yz9r956Z{sDzHxCSpczB25KSW9K7J{;WAj**YC^2*1mx8#{PWUha~-_Jw2G~QGE
z9iST|y5i!%Ja(noMF__H=S<$@E&uy{O-iynn-O*Q3|+rLZf!w&j-wUR;Jl(E@gew|
zVYe7QjZw+WSY07oHrk31@y=fTU_awe1f!$B*+ZTWt`2Z*=9BT>g<WTyJYO*8Nq^T~
z+w48SQ+D~%a}7@X`iR2N!lcP05dlBxY=1<AJ=vq>()i8eE>6R)Y=WD%^;CH*(nC!(
zdX>X9I7q?%40ttDI7{K#o>wQUKOuN7Eme>)o1KuZ5~s^_sZ#fe!UBTu5PL97q^||#
zE6fPRj?e&l_Y~_oLZrfmOWsNO{q`@I$k6c{lu0&V>PmzV?2ba4Jv-l|y<^p7!FwIt
zUT3Wgjb`YXf(G~FDj0o2?jb7RSM63jF~Mzct4~i|6trp!A_F&=p0D70glaf^ly{pb
zR47?Fe!RF3=dohRi2O=5J`i|{yWdcmsRPb#;@9UQU$Yxpucx`2MvH4w9u`H3h(fqD
z*Yn$$!wZu_JCAW6{h`G2G$3zCeVuE8RRR{rz{6>;T3{bf7W6h|W6b>JN`iEd20^1Y
z+of8NLDR%9`fK<>#<yW(*zM|YIM(0HCq$sdKz^^yb+K}hT|@Mq7@ujuqV?pm!Qf)`
z6G6RG15K;oQfHH>b6>*JsdjY@Ad6PkOy!XVadTbD26T!oJYLUeu%Y4U<;?B#$wNz4
zebdQ}^{(cfzNz)TBOK0t(?B?^Uu8a7M|+oB<9)wAsVlE-tmMX0A@xp?vo<A%#^;?f
z&HhLQj6Ax}+CY5ilYsZ32rree7=B94)CfE(81>RGc_R^mrsbGcYLfda17g-HwQXvA
z(k+|JI(_!~px&;&3`&w!Y9;=Ws&$yH{a23^x-Q<3j|CR#omLZLt@rrK8u@UYaXKg`
z5p~mtHuTuWJb8vaD#p3Y3L8@y|7V;=at@9#)H21EyD{B9IO?Vi^DGVG|0L$h%G|g;
zn=M<zSn8}o$mz3XgW*wDW&@dT96vS>sIGux#^Hi(q4jhz30J!>$Cm7MUN-oBS$--T
zD4+Zgyqgf9%>SU3Jn{qIhcPAUfC@|u?2Od2%uqkgKS44*mPJ3(w6-A0?A-CulT{<f
z4`2S*`g4luO{+_V3>}dr$vrz5sm&t{xf#y5ir`tBRTI(Jwx2_ux$yN7UHwE2UUI8J
zF?i*DXMj8_cf1v*=QpAJ#`YAJZj7>&H;*{oPsQqz=S5i+&spX4yQidD9FAseNW-)U
zj$!9MV!~TG1(wLV`l*G=D;TtrQ^oV`LSF1D@D$&}eO6Kg!9y8ZDMBzSVq)LG^BTvI
zH4BrK#^;BoV{e{nQQf<KXIT<B$%;uNNVJY{XW;0MyynUZI9JNG<QzrBoi-2G=BN}|
zO+?X|w3s{7jZotYaKWdkubXzeUY#TN!Cfg3Jasj8omvj76MBUD*U&`Bn@Nj|;fzKW
zx|E~S9&15Ph1fU$Rv}%xTn*aHvUU@>f#h+?LHOZ3NDI7-3gc_cv`@?n?1l<Zo1OVH
zg=j@TYPgx7$->nw-)0ZCo*=IR<<po|Ex8jpGKPB?b!kg!2keTQ-4vX!`R@inL}4vW
z3A;VLOQtL}HB>`Cl!HwLIF{-(U0#8TD``(21KoOh(l}F9KO7`Nm_$R2hFldHYtr(_
zxrkTJXkSoJfB5WMV~Ptnm_>B{{KYX+D+#O-rNeb--o~Z0adQl2K#uInt-`*Nd>W)u
z_MeubsB18mpwO=xG<kx}5#m1OeGO*-<w3lA6$rKnz06kQ`zp58P~WF=X_Zm&7D=ji
zxVR%#?+)8ln6Z@ylgi0<77f-CCb8DgPQCN3SQgpzS>v^#Cb(1|+0NX7r96AqQ`Qrk
zzn<Lskmi>wx#ny<OY=<)=X;3=jYH>L7&;D(I_Y&-u(p4g)^XcFKh8+UtW+J1?Q*Tg
zkl!!AL18q!V1M>^SHE14vhh9cmwwrcGjQ8I!gHVHV83uPx^D&K`VYpxbVt8rOgsPK
ze2RN$Sw3C7@bE9ed13#)(PMr8;f89XZu{s~f%e&4t}9~VlJ``$bKCj))TYVxeH8q@
z3#oKyov7~*CW4n2-s3$-s@6((iO>Ue>WRXXa!R+l_a%uuN%syV16|ga0-S5bN^akU
zv&%2e2%g3jZpuIg<r7wRkABi!oHIg)RN99PnS?KSQ)i>@2_M0!|A8eeT9*0E%GS(U
zb8<fyOc5x&um>0B>lFjo!~sC(*mZnP^{ggLlrbe{G-&sV;wcefQ7_WMccRK`X}z!^
z^_N}A04ZmdF>Pz_?w|c!%>CRzQTZNEQ`ewj-4@smuJ1Kj<riOKg<XP;YlS+?hTxA+
z_3IE$KwIy7+OLcDt(`M#`>(8j^pkpj6d7odW&yBML*aCX-7qGOX_nXP{?h^b$4|tS
z8$NssC8zMR@T9(`<epeM6d~Nm`m9FA=E{r1TVY60I^L?QEmca&KDh^np)rzB1vocI
zctG9>v7ml=C2SzDiV2QJs3sN<1f#D7DW3PGgfM2rI>&LE{}_v*Ap{y5(06$4-M#G=
zYb0yhz@g?a`Fzq~^1Vv0E;oUcN1>r3%$m_-P9aXjq%q=qx@;#Uj-_PLm46vNx&sMM
z6$DG0!EUOR=ymrgU1Pt8J7o@MK)(?sC${FBDM6$mWQPn}KbZ-w!-`D8p!R*9f}<7|
z;2O@Qv0LrJAP3bFj_UQHR0|2byo~XqN6n=ia;vl+k%n$g6gpfxT7$#c`I4L=xB7Mh
zeg|b*=1Fzo_?Ekh^tY|n%|JT|C6W(UTe^`y5gr!I3Jet>5oP)8#(&L%hN*q~bep|y
z|9cJwW2|zRJV=%Vna(A9t_mpr*0Sx`?Fo+Fn60U|!Jh7e0vRY5jAjq)CeB}WnM{1^
zQ7%28#>xLZ`(;y`JZdj~BYSUVl)h}_qwFO`S4n;x#xu)k*r!~ZmVgK0WHkRIH5}2I
z7*bRa_(H-48LoJx?$)o^)PeAyVYB19eO$5b*D2G(q<_nUQQ{nN(=9$8h7;yDRRv_g
zfhFbjbM&SCCR>K?H)*0IwYuST>5=#xe|&a4>;BKx6ONUSIvSO^jLtUN*}kaW8vICT
z?VRt~q`ch1MGyQDzr4k~lZ;iqY_AaGe(f*U;-Js5Lq8MwH0kx`Deb?9;s1PZ1TB>#
zU<1JWS0+#TBEQiJ^x?21mC<!)&UuSP6p4lSEfjk<VxPG@E+L8BXhEF!GqY15iFvNa
zv3+HAng2f&2Lp+-0n}aq6LmdkAGiF3;~csMFHT0{&U0{nM%2M+D?|OILH0|~-hQsE
z00aM{!*3>xRclz)Jvf08oQx1#1OYtc&{bdz%m1%GSpB>lve^JB)yuytxP=sNCoKSJ
zQ797bWF3;>fLIL^JCdenw52YcSr~0DXCJfC-~UT&(4ki%rSN1E&BlRmgGFxwTk(Mq
zr2)KP_Z6c6Tp-D_V;K)fiZnudEm|VOO7dE?EZ6ll+3IABJzS#Q@sbYEm*vZY2h`R4
zgB1T0%|2-Y;e0tk@egBWL64mQ^T$h1OaL~KQ~Frj$lazbJXs&9pI22S9j=tAcP)N!
zpA~~_4nO%<Zg4x$aYChneROb!>)9E8_7VRKnGfCQ>dkrLqp^p0)Xp&2%=#g%!uUSU
z?KNOUmf$`!vElp%Kr%SEj5e10i~zhkuAUaUS_fbRQT#%iCP1)gs;`0_5KNYet%?qO
z){>Lt2S#<vttDZg(e(rRIyfLSS=%?>yoLzqahq-6fwh0C+RH@+FyrMWDo>aawxO7V
zDa^pR+V{>Pt`$;7pZ*Xw#NdVUD?AU~gXEYYH^4gy^k!?Z<~2}TH>E<9F9x@X=eE`(
z`4$-M6+>`)ti%KaDQ4Zit6nVO05qj-IxtPK7;d(EJm4qeChVlA_kf8SY!@COU?LZ>
zK9z#d9gBy3g#wJ~6&B9D0e(_K$ot+<?f~bR{8X)nihUf+K*qrHK3DQrtarfsjn2so
zA_*pdtwwNqk>Mk(Mb)UBv|$He!*~+QThcAzv_GC*eDYG7{q$~XdR=NovO^64@CL08
z@xCzqGW00#Y#L~edAJ&MwcM>Hf{l?n!|Vv+-}@p$T?0w~ih&{_E6)S16iy>_fRe9b
z0po9S<<ND2*X&w-OL8*JZF-Dh8jHv}L<<Ito^!T0Dv_T5-V(5{ws!Z;nEE7JK8+H-
z+rsYZ!QAS|LqA0ze`3vYtqCvI|C=)lis#zqd+ArfAyU77uYb4IPHDM0KZe$<Kle?G
zBn4&sAjSepk_4_Ud^(;^CGIL@`1L=zow&ysQr{`H<e&yEwVAJ#6w<|R@A=v=eCO_C
zn4~Z(mmN~<(W5A-fbB)ZMy(FdSYc3*#FL;Fg(sIzWO&DuSH#*q@OSfwXo-BM1eG`P
z&&!8oKBakO?ZJ&EII@D$0dt*KUbQIuoe&P<w&O!JLB<LDZ}{~F!*Nb<1tb%3U(mZN
zgO#Y#N5}i5vX0WH=cv-*l*18%mpj-<42gpWEk&(ir%Y1JNS3n5>Z)gYV5tAa&qD^t
zGI$5JlXjb>Jz3@)yrT0gKH5baR!!jbugKatUCRMLp&%!TI&pBqrJ?p(nC^g=+8QPo
z9dF>Zq@n<C<efbn@Cv$k8#OaWKk|d2c9bQ;N~-E6$iCcNQp0a?hkXoC0qGAEFPFAf
zhC!i+C2ubqz2g+UI{DW>KU`{l5#tADx96wPw;G8WzU>qVa3;^_@Ggm)T53ezQ8vT^
z0K88}V^~HC<AtiOk<Tn%k`De!$M}_>CAFjLvY-noV29-=5T(SUE$mK}{u3$xkX0H?
zs<p9JZgcyvh7E|m-*_VKlj9d7h~fd`6xW@Kx83Xo-Hc&lyaq4_Fq{!x#VR)Bj*UJp
zTSTwLSo6#%#ce3V0pS<t&b6Q7hm-DV;teD3`Hj3sON(#Tper~qiy{HUeNw$kLk8co
z=Eo;NkhTHm7%IeIm1}=uNm_NsDKQ`I*~h%`B>KM3`ArU|Ub4vuqI7<H&*)pTWr6&R
z<%FzrVhgy~Px6_!(H8<G5lBE``{V8znP+T;QwMg8Mu^aDHE&+?$jhbKO~8aVu^!AH
zGuC$EzD7Y$a-rFB`KHxV`-)1*oHeDa)t`fZ{h5GZ6(w{*V#&CDjs`@+3#CB~#Awxn
z%Ux!f!@sEjAkN=FDoETnE}lwVJ<OQt%JF0%C#fO8E>E;b39}8I&dajrpyf`5^3AB{
z<zK}xi(Npomji#`uz16Zik_W>ATx0D@-<n*14w&A%b(Rt&F#C80I~wt0M#0?PF5f|
zu~Xsjs~Z~h2BvXT*>rtUSl-)@V}BwKiw#e!YN00+t+Q!8c?2v#<D9Mq@rzXxOD7ft
z_`zZAxuYBC>VWJ9=oA)5d&IM9<LrLfYakN&<J1fj8?Ucq(&jfeqf12I&d>iY&uukx
zrUj~|pZmsrup@InLzMu4@yh$9uVx$>#|<d!oto>b>4C%&AqFoW2M{IDl1umtu3NKW
z0*?rOrY_Mqz_UQLw7GhX{>nQHp|?QU%u^YCE8TJqakc!ZlDj_ScL$wUEqP24_r+ub
z5KPzv{jp9*;V<Jhwx0(fk@Wh@Id+wsdqTHN4u;zdY9<k)EApb8a7vP%jpgB9I2%vf
zJ9RIg${0C}6G&chz;(V~CIiD2IE|H5NinzZbQwbKed}H&P^9m!6wNk&Xl}I9U0ZhA
zMf{LG?IP1~Mrg0vI8On-h%poxs3U$AN~c#*AO=r`1cbG}csyqg+;8LYRe%J4P02e4
zGg0IZ6Ak4ZgWrtm@dbCIxkFjJ*_X2v#wrbM$+dUAz&Kv-HDFZF!j`CX^l(4Di(O2#
zL>?lminmqyLh2nut}okMy5u?^aW!Gg(5$(<slQR(oh+;*c@%iMI^rytT|y8L(UKN?
zvVBqoIpB5vQ3a>7XmM6Hs_*=c>^9&Fk;#a4NxCqEeh`Tjnmk{Jv2sg7<f9YbphoJ!
zxv(1D)^g&BJUZGA(H^Cqq_oYra8|(Br%6YMo<I29ZC0<_vH_J!k9HOze<f>)MI|l@
z6K!%PTE6D$pZ!zIHc+kxSuYJ{)8~#%g*XxM@tE7Dj)8<{CVub-gM(FUftfgif1aPY
zYY}A=u+`sQH?~o8P)~o1cTxzHLFlod_ClZl6WVm=escQfnE*Kpkx<RX#Wnc=&=P65
z_lUH82$%^=IP6Vm`+HKyw>{=a{wvRQh=}k2tcX6>#uZfjkJ3Xzg!E4Y+;#DU{twCj
p{$=_<nn=(V5(vtFVg6@z4S%|!7d`jKHuqn<tdx>ujkrnZ{{lxEA6EbX

literal 0
HcmV?d00001

diff --git a/charts/kubezero-kiam/templates/certificates.yaml b/charts/kubezero-kiam/templates/certificates.yaml
new file mode 100644
index 0000000..ca9bc01
--- /dev/null
+++ b/charts/kubezero-kiam/templates/certificates.yaml
@@ -0,0 +1,28 @@
+apiVersion: cert-manager.io/v1alpha2
+kind: Certificate
+metadata:
+  name: kiam-agent
+spec:
+  secretName: kiam-agent-tls
+  issuerRef:
+    name: kubezero-local-ca-issuer
+  usages:
+  - "any"
+  dnsNames:
+  - "kiam-agent"
+---
+apiVersion: cert-manager.io/v1alpha2
+kind: Certificate
+metadata:
+  name: kiam-server
+spec:
+  secretName: kiam-server-tls
+  issuerRef:
+    name: kubezero-local-ca-issuer
+  usages:
+  - "any"
+  dnsNames:
+  - "localhost"
+  - "kiam-server"
+  ipAddresses:
+  - "127.0.0.1"
diff --git a/charts/kubezero-kiam/templates/namespace.yaml b/charts/kubezero-kiam/templates/namespace.yaml
new file mode 100644
index 0000000..f0690ca
--- /dev/null
+++ b/charts/kubezero-kiam/templates/namespace.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: kube-system
+  annotations:
+    iam.amazonaws.com/permitted: ".*"
diff --git a/charts/kubezero-kiam/values.yaml b/charts/kubezero-kiam/values.yaml
index f397fe7..3eea878 100644
--- a/charts/kubezero-kiam/values.yaml
+++ b/charts/kubezero-kiam/values.yaml
@@ -1,6 +1,7 @@
 kiam:
   server:
-    # assumeRoleArn: <INSERT_CLOUDFORMATION_OUTPUT_KiamServerRoleArn> 
+    # kiam.server.assumeRoleArn --  kiam server IAM role to assume, required as we run the agents next to the servers normally
+    assumeRoleArn: arn:aws:iam::123456789012:role/kiam-server-role
     useHostNetwork: true
     sslCertHostPath: /etc/ssl/certs
     tlsSecret: kiam-server-tls
@@ -9,7 +10,7 @@ kiam:
       targetPort: 6444
     deployment:
       enabled: true
-      replicas: 2
+      replicas: 1
     tolerations:
     - key: node-role.kubernetes.io/master
       effect: NoSchedule
@@ -18,9 +19,9 @@ kiam:
     prometheus:
       servicemonitor:
         enabled: false
-  #  log:
-  #    level: warn
-  
+    log:
+      level: warn
+
   agent:
     host:
       iptables: true
@@ -33,8 +34,8 @@ kiam:
     prometheus:
       servicemonitor:
         enabled: false
-  #  log:
-  #    level: warn
+    log:
+      level: warn
   #  extraEnv:
   #  - name: GRPC_GO_LOG_SEVERITY_LEVEL
   #    value: "info"