From 36f4224954460a7d05c83d255d8855bb69de2f8b Mon Sep 17 00:00:00 2001 From: Ramya Ravi <72739416+ramyaravi-opsmx@users.noreply.github.com> Date: Fri, 16 Jul 2021 12:18:24 +0530 Subject: [PATCH 01/43] added registercanary header (#28) --- .../gate/controllers/OpsmxAutopilotController.groovy | 5 +++-- .../gate/services/internal/OpsmxAutopilotService.groovy | 2 +- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxAutopilotController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxAutopilotController.groovy index 32689f0fbc..5d695f929b 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxAutopilotController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxAutopilotController.groovy @@ -142,9 +142,10 @@ class OpsmxAutopilotController { @ApiOperation(value = "Endpoint for autopilot rest services") @RequestMapping(value = "/api/{version}/registerCanary", method = RequestMethod.POST) - Object triggerRegisterCanary(@PathVariable("version") String version, @RequestBody(required = false) Object data) throws Exception { + Object triggerRegisterCanary(@PathVariable("version") String version, @RequestBody(required = false) Object data, + @RequestHeader(value = "x-spinnaker-user",required = false) String xSpinnakerUser) throws Exception { - Response response = opsmxAutopilotService.triggerRegisterCanary(version, data) + Response response = opsmxAutopilotService.triggerRegisterCanary(version, data,xSpinnakerUser) InputStream inputStream = null try { diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxAutopilotService.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxAutopilotService.groovy index ecfacb1669..4899b952ab 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxAutopilotService.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxAutopilotService.groovy @@ -37,7 +37,7 @@ interface OpsmxAutopilotService { @Query("testCaseId") Integer testCaseId) @POST("/autopilot/api/{version}/registerCanary") - Response triggerRegisterCanary(@Path('version') String version, @Body Object data) + Response triggerRegisterCanary(@Path('version') String version, @Body Object data,@Header('x-spinnaker-user') String xSpinnakerUser) @GET("/autopilot/{type}/{source}") Object getAutoResponse(@Path('type') String type, From 601e858c5d84c95adf8bbc93dcb8e55b61445ef3 Mon Sep 17 00:00:00 2001 From: Pranav-b-7 Date: Mon, 26 Jul 2021 21:52:08 +0530 Subject: [PATCH 02/43] v5 endpoint bypassed --- .../groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy index 9480cb1287..3604ff0760 100644 --- a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy +++ b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy @@ -112,6 +112,7 @@ class AuthConfig { .antMatchers(HttpMethod.POST,'/visibilityservice/v1/approvalGates/{id}/trigger').permitAll() .antMatchers(HttpMethod.POST,'/visibilityservice/v2/approvalGates/{id}/trigger').permitAll() .antMatchers(HttpMethod.POST,'/visibilityservice/v4/approvalGates/{id}/trigger').permitAll() + .antMatchers(HttpMethod.POST,'/visibilityservice/v5/approvalGates/{id}/trigger').permitAll() .antMatchers(HttpMethod.GET,'/visibilityservice/v2/approvalGateInstances/{id}/status').permitAll() .antMatchers(HttpMethod.GET,'/visibilityservice/v1/approvalGateInstances/{id}/status').permitAll() .antMatchers(HttpMethod.POST,'/oes/echo').permitAll() @@ -172,6 +173,7 @@ class AuthConfig { .antMatchers(HttpMethod.POST,'/visibilityservice/v1/approvalGates/{id}/trigger').permitAll() .antMatchers(HttpMethod.POST,'/visibilityservice/v2/approvalGates/{id}/trigger').permitAll() .antMatchers(HttpMethod.POST,'/visibilityservice/v4/approvalGates/{id}/trigger').permitAll() + .antMatchers(HttpMethod.POST,'/visibilityservice/v5/approvalGates/{id}/trigger').permitAll() .antMatchers(HttpMethod.GET,'/visibilityservice/v2/approvalGateInstances/{id}/status').permitAll() .antMatchers(HttpMethod.GET,'/visibilityservice/v1/approvalGateInstances/{id}/status').permitAll() .antMatchers(HttpMethod.POST,'/oes/echo').permitAll() From fc5db1309facb5a4e0b18cee2ebf2c7bbdfadcc9 Mon Sep 17 00:00:00 2001 From: Pranav-b-7 Date: Wed, 4 Aug 2021 14:04:28 +0530 Subject: [PATCH 03/43] enabled prometheus metrics --- build.gradle | 1 + .../com/netflix/spinnaker/gate/config/AuthConfig.groovy | 6 ++++++ 2 files changed, 7 insertions(+) diff --git a/build.gradle b/build.gradle index a6612a1efd..2cf9170557 100644 --- a/build.gradle +++ b/build.gradle @@ -34,6 +34,7 @@ allprojects { annotationProcessor "org.projectlombok:lombok" testAnnotationProcessor "org.projectlombok:lombok" compile("org.springframework.cloud:spring-cloud-starter-vault-config") + compile("io.micrometer:micrometer-registry-prometheus") implementation "org.codehaus.groovy:groovy-all" diff --git a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy index 3604ff0760..516c59ae98 100644 --- a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy +++ b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy @@ -122,6 +122,9 @@ class AuthConfig { .antMatchers(HttpMethod.POST, '/notifications/callbacks/**').permitAll() .antMatchers(HttpMethod.POST, '/managed/notifications/callbacks/**').permitAll() .antMatchers('/health').permitAll() + .antMatchers('/prometheus').permitAll() + .antMatchers('/info').permitAll() + .antMatchers('/metrics').permitAll() .antMatchers('/**').authenticated() if (fiatSessionFilterEnabled) { @@ -185,6 +188,9 @@ class AuthConfig { .antMatchers(HttpMethod.POST, '/webhooks/**').permitAll() .antMatchers(HttpMethod.POST, '/notifications/callbacks/**').permitAll() .antMatchers('/health').permitAll() + .antMatchers('/prometheus').permitAll() + .antMatchers('/info').permitAll() + .antMatchers('/metrics').permitAll() .anyRequest().authenticated() http.addFilterBefore(jwtRequestFilter, UsernamePasswordAuthenticationFilter.class); } From b157a21c394b8ef8fdf29856e221dd714fbeab9a Mon Sep 17 00:00:00 2001 From: Pranav-b-7 Date: Thu, 5 Aug 2021 13:18:04 +0530 Subject: [PATCH 04/43] enable prometheus metrics config added --- docker_build/gate.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/docker_build/gate.yml b/docker_build/gate.yml index 534641292c..ff7062e2db 100644 --- a/docker_build/gate.yml +++ b/docker_build/gate.yml @@ -80,3 +80,18 @@ server: protocolHeader: X-Forwarded-Proto remoteIpHeader: X-Forwarded-For internalProxies: .* + +management: + health: + elasticsearch: + enabled: false + ldap: + enabled: false + endpoints: + web: + exposure: + include: health,info,metrics,prometheus + endpoint: + health: + show-details: always + show-components: always From 7252c344109669b9b09db111354868c026f70685 Mon Sep 17 00:00:00 2001 From: Luthan95 <66585454+Luthan95@users.noreply.github.com> Date: Mon, 23 Aug 2021 19:55:00 +0530 Subject: [PATCH 05/43] Op 7241 v3.9 (#37) * custom plugin adding while creating image * custom plugin adding while creating image --- docker/custom-plugin.json | 58 ++++++++++++++++++++++++++++++ docker/ubi8/Gate-Dockerfile | 21 ++++++++++- docker/ubuntu/Gate-Dockerfile | 21 ++++++++++- docker_build/Dockerfile.rhel8-ubi8 | 21 ++++++++++- docker_build/custom-plugin.json | 58 ++++++++++++++++++++++++++++++ 5 files changed, 176 insertions(+), 3 deletions(-) create mode 100644 docker/custom-plugin.json create mode 100644 docker_build/custom-plugin.json diff --git a/docker/custom-plugin.json b/docker/custom-plugin.json new file mode 100644 index 0000000000..9b967ae9fe --- /dev/null +++ b/docker/custom-plugin.json @@ -0,0 +1,58 @@ +[ + { + "id": "Opsmx.VerificationGatePlugin", + "description": "An example of a PF4J-based plugin that provides a custom pipeline stage.", + "releases": [ + { + "version": "1.0.1", + "date": "2021-06-24T16:20:59.469168Z", + "requires": "orca>=0.0.0,deck>=0.0.0", + "sha512sum": "VERIFICATION_SHASUM", + "state": "", + "url": "file:///opt/spinnaker/plugins/VerificationPlugin-v1.0.1-SNAPSHOT.zip" + } + ] + }, + { + "id": "Opsmx.TestVerificationGatePlugin", + "description": "An example of a PF4J-based plugin that provides a custom pipeline stage.", + "releases": [ + { + "version": "1.0.1", + "date": "2021-07-25T16:20:59.469168Z", + "requires": "orca>=0.0.0,deck>=0.0.0", + "sha512sum": "TESTVERIFICATION_SHASUM", + "state": "", + "url": "file:///opt/spinnaker/plugins/TestVerificationPlugin-v1.0.1-SNAPSHOT.zip" + } + ] + }, + { + "id": "Opsmx.VisibilityApprovalPlugin", + "description": "An example of a PF4J-based plugin that provides a custom policy stage.", + "releases": [ + { + "version": "1.0.1", + "date": "2021-07-20T16:20:59.469168Z", + "requires": "orca>=0.0.0,deck>=0.0.0", + "sha512sum": "APPROVAL_SHASUM", + "state": "", + "url": "file:///opt/spinnaker/plugins/ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip" + } + ] + }, + { + "id": "Opsmx.PolicyGatePlugin", + "description": "An example of a PF4J-based plugin that provides a custom policy stage.", + "releases": [ + { + "version": "1.0.1", + "date": "2021-07-25T16:20:59.469168Z", + "requires": "orca>=0.0.0,deck>=0.0.0", + "sha512sum": "POLICY_SHASUM", + "state": "", + "url": "file:///opt/spinnaker/plugins/policyPlugin-v1.0.1-SNAPSHOT.zip" + } + ] + } +] diff --git a/docker/ubi8/Gate-Dockerfile b/docker/ubi8/Gate-Dockerfile index b3ebf58f29..c27187e137 100644 --- a/docker/ubi8/Gate-Dockerfile +++ b/docker/ubi8/Gate-Dockerfile @@ -4,6 +4,25 @@ COPY ./gate-web/build/install/gate /opt/gate RUN yum -y install java-11-openjdk-headless.x86_64 wget vim curl net-tools nettle RUN yum -y update RUN adduser spinnaker -RUN mkdir -p /opt/gate/plugins +RUN mkdir -p /opt/gate/plugins && mkdir -p /opt/spinnaker/plugins +####adding customplugin zip +ARG CUSTOMPLUGIN_RELEASEVERSION +ENV CUSTOMPLUGIN_RELEASEVERSION=$CUSTOMPLUGIN_RELEASEVERSION +COPY custom-plugin.json /opt/spinnaker/plugins/plugins.json +RUN wget -O VerificationPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/VerificationPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O TestVerificationPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/TestVerificationPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O policyPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/policyPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip +RUN mv VerificationPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ + && mv TestVerificationPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ + && mv policyPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ + && mv ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ + +RUN sed -i 's/"VERIFICATION_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/VerificationPlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json \ + && sed -i 's/"TESTVERIFICATION_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/TestVerificationPlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json \ + && sed -i 's/"POLICY_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/policyPlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json \ + && sed -i 's/"APPROVAL_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json +RUN chown -R spinnaker:spinnaker /opt/spinnaker +##### USER spinnaker CMD ["/opt/gate/bin/gate"] diff --git a/docker/ubuntu/Gate-Dockerfile b/docker/ubuntu/Gate-Dockerfile index 60e319796b..f09ed759d2 100644 --- a/docker/ubuntu/Gate-Dockerfile +++ b/docker/ubuntu/Gate-Dockerfile @@ -3,6 +3,25 @@ MAINTAINER sig-platform@spinnaker.io COPY ./gate-web/build/install/gate /opt/gate RUN apt-get update && apt-get -y install openjdk-8-jre-headless wget vim net-tools curl RUN adduser --disabled-login --system spinnaker -RUN mkdir -p /opt/gate/plugins && chown -R spinnaker:nogroup /opt/gate/plugins +RUN mkdir -p /opt/gate/plugins && chown -R spinnaker:nogroup /opt/gate/plugins && mkdir -p /opt/spinnaker/plugins +####adding customplugin zip +ARG CUSTOMPLUGIN_RELEASEVERSION +ENV CUSTOMPLUGIN_RELEASEVERSION=$CUSTOMPLUGIN_RELEASEVERSION +COPY custom-plugin.json /opt/spinnaker/plugins/plugins.json +RUN wget -O VerificationPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/VerificationPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O TestVerificationPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/TestVerificationPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O policyPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/policyPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip +RUN mv VerificationPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ + && mv TestVerificationPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ + && mv policyPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ + && mv ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ + +RUN sed -i 's/"VERIFICATION_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/VerificationPlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json \ + && sed -i 's/"TESTVERIFICATION_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/TestVerificationPlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json \ + && sed -i 's/"POLICY_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/policyPlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json \ + && sed -i 's/"APPROVAL_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json +RUN chown -R spinnaker:spinnaker /opt/spinnaker +##### USER spinnaker CMD ["/opt/gate/bin/gate"] diff --git a/docker_build/Dockerfile.rhel8-ubi8 b/docker_build/Dockerfile.rhel8-ubi8 index 3ee6778c92..d8ebe0a1c4 100644 --- a/docker_build/Dockerfile.rhel8-ubi8 +++ b/docker_build/Dockerfile.rhel8-ubi8 @@ -12,7 +12,8 @@ COPY /docker_build/nginx.repo /etc/yum.repos.d/nginx.repo RUN adduser opsmx \ && usermod -aG wheel opsmx \ && mkdir -p /opsmx/workdir/logs \ - && mkdir -p /opt/spinnaker/config + && mkdir -p /opt/spinnaker/config \ + && mkdir -p /opt/spinnaker/plugins # Install procps(ps) RUN yum install -y procps nginx net-tools @@ -32,6 +33,24 @@ COPY /docker_build/gate.yml /opt/spinnaker/config/ COPY /docker_build/startup.sh /opsmx/workdir/ RUN chmod +x /opsmx/workdir/startup.sh +# === CUSTOM PLUGINS +ARG CUSTOMPLUGIN_RELEASEVERSION +ENV CUSTOMPLUGIN_RELEASEVERSION=$CUSTOMPLUGIN_RELEASEVERSION +COPY /docker_build/custom-plugin.json /opt/spinnaker/plugins/plugins.json +RUN wget -O VerificationPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/VerificationPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O TestVerificationPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/TestVerificationPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O policyPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/policyPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip +RUN mv VerificationPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ + && mv TestVerificationPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ + && mv policyPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ + && mv ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ + +RUN sed -i 's/"VERIFICATION_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/VerificationPlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json \ + && sed -i 's/"TESTVERIFICATION_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/TestVerificationPlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json \ + && sed -i 's/"POLICY_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/policyPlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json \ + && sed -i 's/"APPROVAL_SHASUM"/'\""$(sha512sum /opt/spinnaker/plugins/ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip | awk '{print $1}')"\"'/g' /opt/spinnaker/plugins/plugins.json + # === Copy Gate Build Files === COPY /gate-web/build/install/gate /opsmx/workdir/gate RUN chown -R opsmx:root ${WORK_DIR}/* /opt/* && chmod 777 /opt/* ${WORK_DIR}/* diff --git a/docker_build/custom-plugin.json b/docker_build/custom-plugin.json new file mode 100644 index 0000000000..9b967ae9fe --- /dev/null +++ b/docker_build/custom-plugin.json @@ -0,0 +1,58 @@ +[ + { + "id": "Opsmx.VerificationGatePlugin", + "description": "An example of a PF4J-based plugin that provides a custom pipeline stage.", + "releases": [ + { + "version": "1.0.1", + "date": "2021-06-24T16:20:59.469168Z", + "requires": "orca>=0.0.0,deck>=0.0.0", + "sha512sum": "VERIFICATION_SHASUM", + "state": "", + "url": "file:///opt/spinnaker/plugins/VerificationPlugin-v1.0.1-SNAPSHOT.zip" + } + ] + }, + { + "id": "Opsmx.TestVerificationGatePlugin", + "description": "An example of a PF4J-based plugin that provides a custom pipeline stage.", + "releases": [ + { + "version": "1.0.1", + "date": "2021-07-25T16:20:59.469168Z", + "requires": "orca>=0.0.0,deck>=0.0.0", + "sha512sum": "TESTVERIFICATION_SHASUM", + "state": "", + "url": "file:///opt/spinnaker/plugins/TestVerificationPlugin-v1.0.1-SNAPSHOT.zip" + } + ] + }, + { + "id": "Opsmx.VisibilityApprovalPlugin", + "description": "An example of a PF4J-based plugin that provides a custom policy stage.", + "releases": [ + { + "version": "1.0.1", + "date": "2021-07-20T16:20:59.469168Z", + "requires": "orca>=0.0.0,deck>=0.0.0", + "sha512sum": "APPROVAL_SHASUM", + "state": "", + "url": "file:///opt/spinnaker/plugins/ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip" + } + ] + }, + { + "id": "Opsmx.PolicyGatePlugin", + "description": "An example of a PF4J-based plugin that provides a custom policy stage.", + "releases": [ + { + "version": "1.0.1", + "date": "2021-07-25T16:20:59.469168Z", + "requires": "orca>=0.0.0,deck>=0.0.0", + "sha512sum": "POLICY_SHASUM", + "state": "", + "url": "file:///opt/spinnaker/plugins/policyPlugin-v1.0.1-SNAPSHOT.zip" + } + ] + } +] From a9fd89c890214415d5ca2237e5bf05084d80dcca Mon Sep 17 00:00:00 2001 From: Luthan95 <66585454+Luthan95@users.noreply.github.com> Date: Mon, 23 Aug 2021 20:25:42 +0530 Subject: [PATCH 06/43] adding wget package --- docker_build/Dockerfile.rhel8-ubi8 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker_build/Dockerfile.rhel8-ubi8 b/docker_build/Dockerfile.rhel8-ubi8 index d8ebe0a1c4..d17e552f03 100644 --- a/docker_build/Dockerfile.rhel8-ubi8 +++ b/docker_build/Dockerfile.rhel8-ubi8 @@ -16,7 +16,7 @@ RUN adduser opsmx \ && mkdir -p /opt/spinnaker/plugins # Install procps(ps) -RUN yum install -y procps nginx net-tools +RUN yum install -y procps nginx net-tools wget # Install java 11 RUN yum -y install java-11-openjdk-headless.x86_64 # Install ping From 62643230047c4a23fa5502fde5f07eae90e958c5 Mon Sep 17 00:00:00 2001 From: Yugandharkumar Date: Thu, 9 Sep 2021 18:35:48 +0530 Subject: [PATCH 07/43] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 3e6c5d37e7..eb60f9b577 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -Spinnaker Gateway Service +Spinnaker Gateway Service ------------------------------------ [![Build Status](https://api.travis-ci.org/spinnaker/gate.svg?branch=master)](https://travis-ci.org/spinnaker/gate) From dbe11c58f2e646286ee1d7086d7362ffc37239a1 Mon Sep 17 00:00:00 2001 From: Yugandharkumar Date: Mon, 13 Sep 2021 17:04:44 +0530 Subject: [PATCH 08/43] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index eb60f9b577..532d1da149 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -Spinnaker Gateway Service +Spinnaker Gateway Service ------------------------------------ [![Build Status](https://api.travis-ci.org/spinnaker/gate.svg?branch=master)](https://travis-ci.org/spinnaker/gate) From deb7722513f626a4c03aa0e00bb6e5a63890d931 Mon Sep 17 00:00:00 2001 From: Rahul Chekuri <89373036+rahul-chekuri@users.noreply.github.com> Date: Mon, 4 Oct 2021 21:21:00 +0530 Subject: [PATCH 09/43] OP-7604: Added log to see status code --- .../netflix/spinnaker/gate/controllers/OpsmxOesController.groovy | 1 + 1 file changed, 1 insertion(+) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index 912cbb0705..23e2027ea6 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -327,6 +327,7 @@ class OpsmxOesController { .build() def response = okHttpClient.newCall(request).execute() + log.info("/oes/accountsConfig/spinnakerX509 response code: " + response.code() ) return response.body()?.string() ?: "Unknown reason: " + response.code() }.call() as Object } From 33a0098de189ac9a600f1d552bde7510bc6ca594 Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 11:40:03 +0530 Subject: [PATCH 10/43] OP-7604: returning response to avoid status code issue --- .../spinnaker/gate/controllers/OpsmxOesController.groovy | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index 23e2027ea6..d18da43120 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -327,8 +327,12 @@ class OpsmxOesController { .build() def response = okHttpClient.newCall(request).execute() - log.info("/oes/accountsConfig/spinnakerX509 response code: " + response.code() ) - return response.body()?.string() ?: "Unknown reason: " + response.code() + + if(response.body() == null || response.body().string() == null) { + reponse = "Unknown reason: " + response.code() + } + + return response }.call() as Object } From 21effb127d0135296d74c4f6e9ba49425c0803af Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 11:59:38 +0530 Subject: [PATCH 11/43] OP-7604: logs statements --- .../spinnaker/gate/controllers/OpsmxOesController.groovy | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index d18da43120..d5b4b3ff2f 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -328,6 +328,8 @@ class OpsmxOesController { def response = okHttpClient.newCall(request).execute() + logger.info("The response code: " + response.code()) + logger.info("The response body: " + response.body().string()) if(response.body() == null || response.body().string() == null) { reponse = "Unknown reason: " + response.code() } From 0d34bae8ddfafacdd21bfd75d02825c48c413654 Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 12:13:34 +0530 Subject: [PATCH 12/43] OP-7604: logs statements --- .../spinnaker/gate/controllers/OpsmxOesController.groovy | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index d5b4b3ff2f..58ae9e6cb7 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -355,7 +355,13 @@ class OpsmxOesController { .build() def response = okHttpClient.newCall(request).execute() - return response.body()?.string() ?: "Unknown reason: " + response.code() + logger.info("The response code: " + response.code()) + logger.info("The response body: " + response.body().string()) + if(response.body() == null || response.body().string() == null) { + reponse = "Unknown reason: " + response.code() + } + + return response }.call() as Object } From 6829e5de1fb95098a57bc4dd9d8e40671c0abffc Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 12:34:07 +0530 Subject: [PATCH 13/43] OP-7604: logs statements --- .../spinnaker/gate/controllers/OpsmxOesController.groovy | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index 58ae9e6cb7..05d2039783 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -355,8 +355,8 @@ class OpsmxOesController { .build() def response = okHttpClient.newCall(request).execute() - logger.info("The response code: " + response.code()) - logger.info("The response body: " + response.body().string()) +// logger.info("The response code: " + response.code()) +// logger.info("The response body: " + response.body().string()) if(response.body() == null || response.body().string() == null) { reponse = "Unknown reason: " + response.code() } From 86be87d6c267dc22b6b99909937c81fec8a1c8f7 Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 12:48:30 +0530 Subject: [PATCH 14/43] OP-7604: logs statements --- .../gate/controllers/OpsmxOesController.groovy | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index 05d2039783..a981359793 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -328,8 +328,6 @@ class OpsmxOesController { def response = okHttpClient.newCall(request).execute() - logger.info("The response code: " + response.code()) - logger.info("The response body: " + response.body().string()) if(response.body() == null || response.body().string() == null) { reponse = "Unknown reason: " + response.code() } @@ -355,11 +353,9 @@ class OpsmxOesController { .build() def response = okHttpClient.newCall(request).execute() -// logger.info("The response code: " + response.code()) -// logger.info("The response body: " + response.body().string()) - if(response.body() == null || response.body().string() == null) { - reponse = "Unknown reason: " + response.code() - } + if(response.body() == null || response.body().string() == null) { + reponse = "Unknown reason: " + response.code() + } return response }.call() as Object From e3060d7e5147d53b97c3c8b54f71751af49fecd3 Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 16:23:14 +0530 Subject: [PATCH 15/43] OP-7604: Handling exception cases --- .../controllers/OpsmxOesController.groovy | 29 +++++++++++-------- .../gate/exceptions/OesRequestException.java | 28 ++++++++++++++++++ 2 files changed, 45 insertions(+), 12 deletions(-) create mode 100644 gate-web/src/main/java/com/netflix/spinnaker/gate/exceptions/OesRequestException.java diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index a981359793..f71bdbaf26 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -28,6 +28,7 @@ import java.util.stream.Collectors import com.netflix.spinnaker.gate.config.ServiceConfiguration import com.netflix.spinnaker.gate.services.internal.OpsmxOesService import com.netflix.spinnaker.security.AuthenticatedRequest +import com.netflix.spinnaker.gate.exceptions.OesRequestException import groovy.util.logging.Slf4j import io.swagger.annotations.ApiOperation @@ -319,7 +320,7 @@ class OpsmxOesController { else headersMap.putAt(key,"") } - AuthenticatedRequest.propagate { + def obj = AuthenticatedRequest.propagate { def request = new Request.Builder() .url(serviceConfiguration.getServiceEndpoint("opsmx").url +"/oes/accountsConfig/spinnakerX509") .headers(Headers.of(headersMap)) @@ -327,13 +328,14 @@ class OpsmxOesController { .build() def response = okHttpClient.newCall(request).execute() - - if(response.body() == null || response.body().string() == null) { - reponse = "Unknown reason: " + response.code() - } - return response - }.call() as Object + }.call() as Response + + if (!obj.isSuccessful()) { + throw OesRequestException(response.body().string()) + } else{ + return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object + } } private Object createOrUpdateSpinnaker(MultipartFile files, String data, String version) { @@ -345,7 +347,7 @@ class OpsmxOesController { else headersMap.putAt(key,"") } - AuthenticatedRequest.propagate { + def obj = AuthenticatedRequest.propagate { def request = new Request.Builder() .url(serviceConfiguration.getServiceEndpoint("opsmx").url +"/oes/accountsConfig/version/spinnakerX509".replace("version", version)) .headers(Headers.of(headersMap)) @@ -353,12 +355,15 @@ class OpsmxOesController { .build() def response = okHttpClient.newCall(request).execute() - if(response.body() == null || response.body().string() == null) { - reponse = "Unknown reason: " + response.code() + return response + }.call() as Response + + if (!obj.isSuccessful()) { + throw OesRequestException(response.body().string()) + } else{ + return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } - return response - }.call() as Object } private String addOrUpdateCloudProverAccount(MultipartFile files, String data) { diff --git a/gate-web/src/main/java/com/netflix/spinnaker/gate/exceptions/OesRequestException.java b/gate-web/src/main/java/com/netflix/spinnaker/gate/exceptions/OesRequestException.java new file mode 100644 index 0000000000..090d30b77b --- /dev/null +++ b/gate-web/src/main/java/com/netflix/spinnaker/gate/exceptions/OesRequestException.java @@ -0,0 +1,28 @@ +/* + * Copyright 2021 Netflix, Inc. + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +package com.netflix.spinnaker.gate.exceptions; + +import org.springframework.http.HttpStatus; +import org.springframework.web.bind.annotation.ResponseStatus; + +@ResponseStatus(HttpStatus.UNPROCESSABLE_ENTITY) +public class OesRequestException extends RuntimeException { + + public OesRequestException(String message) { + super(message); + } +} From a6bd66e2bde1c4281b9598e25365d564effb1a28 Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 16:37:25 +0530 Subject: [PATCH 16/43] OP-7604: Handling exception cases --- .../spinnaker/gate/controllers/OpsmxOesController.groovy | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index f71bdbaf26..640ea046de 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -329,7 +329,7 @@ class OpsmxOesController { def response = okHttpClient.newCall(request).execute() return response - }.call() as Response + }.call() as okhttp3.Response if (!obj.isSuccessful()) { throw OesRequestException(response.body().string()) @@ -356,7 +356,7 @@ class OpsmxOesController { def response = okHttpClient.newCall(request).execute() return response - }.call() as Response + }.call() as okhttp3.Response if (!obj.isSuccessful()) { throw OesRequestException(response.body().string()) From 21abf312c814099cb5336f3ac32573d3a9c930e7 Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 16:54:57 +0530 Subject: [PATCH 17/43] OP-7604: Handling exception cases --- .../spinnaker/gate/controllers/OpsmxOesController.groovy | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index 640ea046de..cc286f7a5b 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -332,7 +332,7 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw OesRequestException(response.body().string()) + throw OesRequestException(obj.body().string()) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } @@ -359,7 +359,7 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw OesRequestException(response.body().string()) + throw OesRequestException(obj.body().string()) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } From af3757815686293220d8a0082e920b22c6f23b00 Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 17:10:16 +0530 Subject: [PATCH 18/43] OP-7604: Handling exception cases --- .../spinnaker/gate/controllers/OpsmxOesController.groovy | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index cc286f7a5b..48873bf2f5 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -332,7 +332,7 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw OesRequestException(obj.body().string()) + throw new OesRequestException(obj.body().string()) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } @@ -359,7 +359,7 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw OesRequestException(obj.body().string()) + throw new OesRequestException(obj.body().string()) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } From 5d77506b1983c4b317b344c21a7c2339fca37738 Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 17:28:13 +0530 Subject: [PATCH 19/43] OP-7604: Handling exception cases --- .../spinnaker/gate/controllers/OpsmxOesController.groovy | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index 48873bf2f5..9a0441c1b1 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -332,7 +332,7 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw new OesRequestException(obj.body().string()) + throw new OesRequestException(obj.message()) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } @@ -359,7 +359,7 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw new OesRequestException(obj.body().string()) + throw new OesRequestException(obj.message()) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } From ec2d17b6dd2864dbbd892be90d2e6f4e5034eee1 Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 18:03:41 +0530 Subject: [PATCH 20/43] OP-7604: Handling exception cases --- .../spinnaker/gate/controllers/OpsmxOesController.groovy | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index 9a0441c1b1..bbc8d08f3a 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -332,7 +332,7 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw new OesRequestException(obj.message()) + throw new OesRequestException(obj.body().string().replaceAll("\"message\"", "\"body\"")) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } @@ -359,7 +359,7 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw new OesRequestException(obj.message()) + throw new OesRequestException(obj.body().string().replaceAll("\"message\"", "\"body\"")) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } From 3ead41b43461e1a635e119a83d29b36f7f9badaa Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 18:25:10 +0530 Subject: [PATCH 21/43] OP-7604: Handling exception cases --- .../spinnaker/gate/controllers/OpsmxOesController.groovy | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index bbc8d08f3a..48873bf2f5 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -332,7 +332,7 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw new OesRequestException(obj.body().string().replaceAll("\"message\"", "\"body\"")) + throw new OesRequestException(obj.body().string()) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } @@ -359,7 +359,7 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw new OesRequestException(obj.body().string().replaceAll("\"message\"", "\"body\"")) + throw new OesRequestException(obj.body().string()) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } From 363291aa351616e229651cfa71e005f10d342dce Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 18:32:43 +0530 Subject: [PATCH 22/43] OP-7604: Removed copy right --- .../gate/exceptions/OesRequestException.java | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/gate-web/src/main/java/com/netflix/spinnaker/gate/exceptions/OesRequestException.java b/gate-web/src/main/java/com/netflix/spinnaker/gate/exceptions/OesRequestException.java index 090d30b77b..6edfa8f663 100644 --- a/gate-web/src/main/java/com/netflix/spinnaker/gate/exceptions/OesRequestException.java +++ b/gate-web/src/main/java/com/netflix/spinnaker/gate/exceptions/OesRequestException.java @@ -1,19 +1,3 @@ -/* - * Copyright 2021 Netflix, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - */ - package com.netflix.spinnaker.gate.exceptions; import org.springframework.http.HttpStatus; From 63d986220b075a2103c7052521a49c1081716838 Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Tue, 5 Oct 2021 18:53:34 +0530 Subject: [PATCH 23/43] OP-7604: Logging the errors --- .../spinnaker/gate/controllers/OpsmxOesController.groovy | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index 48873bf2f5..9d6b30dc93 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -332,7 +332,9 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw new OesRequestException(obj.body().string()) + def error = obj.body().string(); + log.error("Failed to setup the Spinnaker : {}", error) + throw new OesRequestException(error) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } @@ -359,7 +361,9 @@ class OpsmxOesController { }.call() as okhttp3.Response if (!obj.isSuccessful()) { - throw new OesRequestException(obj.body().string()) + def error = obj.body().string(); + log.error("Failed to setup the Spinnaker : {}", error) + throw new OesRequestException(error) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } From e59544ba83ff2016b96d4598a5daffda5f6aff41 Mon Sep 17 00:00:00 2001 From: harsha Date: Thu, 7 Oct 2021 12:08:14 +0530 Subject: [PATCH 24/43] OP-7668 : Added mapping URLs --- .../gate/controllers/OpsmxAutopilotController.groovy | 12 ++++++------ .../services/internal/OpsmxAutopilotService.groovy | 9 +++++---- 2 files changed, 11 insertions(+), 10 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxAutopilotController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxAutopilotController.groovy index 5d695f929b..bc0f49136d 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxAutopilotController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxAutopilotController.groovy @@ -272,12 +272,12 @@ class OpsmxAutopilotController { @ApiOperation(value = "Endpoint for autopilot rest services") @RequestMapping(value = "/{type}/{source}/{source1}/{source2}/{source3}", method = RequestMethod.GET) Object getAutoResponse6(@PathVariable("type") String type, - @PathVariable("source") String source, - @PathVariable("source1") String source1, - @PathVariable("source2") String source2, - @PathVariable("source3") String source3) { - - return opsmxAutopilotService.getAutoResponse6(type, source, source1, source2, source3) + @PathVariable("source") String source, + @PathVariable("source1") String source1, + @PathVariable("source2") String source2, + @PathVariable("source3") String source3, + @RequestParam(value = "verificationType", required = false) String verificationType) { + return opsmxAutopilotService.getAutoResponse6(type, source, source1, source2, source3, verificationType) } @ApiOperation(value = "Endpoint for autopilot rest services") diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxAutopilotService.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxAutopilotService.groovy index 4899b952ab..5147e9e6f8 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxAutopilotService.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxAutopilotService.groovy @@ -126,10 +126,11 @@ interface OpsmxAutopilotService { @GET("/autopilot/{type}/{source}/{source1}/{source2}/{source3}") Object getAutoResponse6(@Path('type') String type, - @Path('source') String source, - @Path('source1') String source1, - @Path('source2') String source2, - @Path('source3') String source3) + @Path('source') String source, + @Path('source1') String source1, + @Path('source2') String source2, + @Path('source3') String source3, + @Query("verificationType") String verificationType) @GET("/autopilot/{type}/{source}/{source1}/{source2}/{source3}/{source4}") Object getAutoResponse7(@Path('type') String type, From 5ee02101aba049dd3f32cdc6b58b9dab84498326 Mon Sep 17 00:00:00 2001 From: Pranav-b-7 Date: Thu, 7 Oct 2021 20:11:12 +0530 Subject: [PATCH 25/43] auth turned off for /oes/echo/ --- .../groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy index 516c59ae98..04189560ad 100644 --- a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy +++ b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy @@ -116,6 +116,7 @@ class AuthConfig { .antMatchers(HttpMethod.GET,'/visibilityservice/v2/approvalGateInstances/{id}/status').permitAll() .antMatchers(HttpMethod.GET,'/visibilityservice/v1/approvalGateInstances/{id}/status').permitAll() .antMatchers(HttpMethod.POST,'/oes/echo').permitAll() + .antMatchers(HttpMethod.POST,'/oes/echo/').permitAll() .antMatchers(HttpMethod.GET,'/autopilot/mgmt/**').permitAll() .antMatchers('/plugins/deck/**').permitAll() .antMatchers(HttpMethod.POST, '/webhooks/**').permitAll() @@ -180,6 +181,7 @@ class AuthConfig { .antMatchers(HttpMethod.GET,'/visibilityservice/v2/approvalGateInstances/{id}/status').permitAll() .antMatchers(HttpMethod.GET,'/visibilityservice/v1/approvalGateInstances/{id}/status').permitAll() .antMatchers(HttpMethod.POST,'/oes/echo').permitAll() + .antMatchers(HttpMethod.POST,'/oes/echo/').permitAll() .antMatchers(HttpMethod.GET,'/autopilot/mgmt/**').permitAll() .antMatchers('/**/favicon.ico').permitAll() .antMatchers(HttpMethod.OPTIONS, "/**").permitAll() From a9424080cfa250c12fa6b5ab4b3500366845ff1a Mon Sep 17 00:00:00 2001 From: sudhakaropsmx Date: Mon, 11 Oct 2021 19:27:09 +0530 Subject: [PATCH 26/43] OP-7390: Bug fix for cloud provider response failed status return --- .../gate/controllers/OpsmxOesController.groovy | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index 9d6b30dc93..c94ada6e51 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -299,16 +299,23 @@ class OpsmxOesController { else headersMap.putAt(key,"") } - AuthenticatedRequest.propagate { + def obj = AuthenticatedRequest.propagate { def request = new Request.Builder() .url(serviceConfiguration.getServiceEndpoint("opsmx").url +"/oes/accountsConfig/spinnaker/addOrUpdateCloudProviderAccount") .headers(Headers.of(headersMap)) .post(uploadFileOkHttp(data,files)) .build() - def response = okHttpClient.newCall(request).execute() - return response.body()?.string() ?: "Unknown reason: " + response.code() - }.call() as String + def response = okHttpClient.newCall(request).execute() + return response + }.call() as okhttp3.Response + if (!obj.isSuccessful()) { + def error = obj.body().string(); + throw new OesRequestException(error) + } else{ + return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object + } + } Object addOrUpdateSpinnaker(MultipartFile files, String data) { From 12742afdb4d25fba5a4e85879284897bf0061fda Mon Sep 17 00:00:00 2001 From: Pranav Bhaskaran <67958542+Pranav-b-7@users.noreply.github.com> Date: Tue, 19 Oct 2021 13:38:19 +0530 Subject: [PATCH 27/43] Op 7784 v3.9 (#72) --- docker_build/gate.yml | 8 +++++++ .../gate/config/RetrofitConfig.groovy | 21 ++++++++++++++++++- 2 files changed, 28 insertions(+), 1 deletion(-) diff --git a/docker_build/gate.yml b/docker_build/gate.yml index ff7062e2db..e92a873ccc 100644 --- a/docker_build/gate.yml +++ b/docker_build/gate.yml @@ -17,6 +17,14 @@ services: enabled: true oesui: externalUrl: http://150.238.22.102 + +retrofit: + connectTimeout: 30000 + readTimeout: 30000 + callTimeout: 30000 + writeTimeout: 30000 + retryOnConnectionFailure: true + security: basic: enabled: false diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/config/RetrofitConfig.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/config/RetrofitConfig.groovy index 5814ed8afe..5b49d147bd 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/config/RetrofitConfig.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/config/RetrofitConfig.groovy @@ -17,18 +17,37 @@ package com.netflix.spinnaker.gate.config import com.netflix.spinnaker.config.OkHttp3ClientConfiguration +import groovy.transform.Canonical import okhttp3.OkHttpClient import org.springframework.beans.factory.config.ConfigurableBeanFactory +import org.springframework.boot.context.properties.ConfigurationProperties import org.springframework.context.annotation.Bean import org.springframework.context.annotation.Configuration import org.springframework.context.annotation.Scope +import java.util.concurrent.TimeUnit + +@Canonical @Configuration +@ConfigurationProperties(prefix = "retrofit") class RetrofitConfig { + + Long connectTimeout + Long readTimeout + Long callTimeout + Long writeTimeout + Boolean retryOnConnectionFailure + @Bean @Scope(ConfigurableBeanFactory.SCOPE_PROTOTYPE) OkHttpClient okHttpClient(OkHttp3ClientConfiguration okHttpClientConfig) { - return okHttpClientConfig.create().build() + return okHttpClientConfig.create() + .connectTimeout(connectTimeout, TimeUnit.MILLISECONDS) + .readTimeout(readTimeout, TimeUnit.MILLISECONDS) + .callTimeout(callTimeout, TimeUnit.MILLISECONDS) + .writeTimeout(writeTimeout, TimeUnit.MILLISECONDS) + .retryOnConnectionFailure(retryOnConnectionFailure) + .build() } } From 282150fd40e012dd378537bc4a5676fdc5ff210b Mon Sep 17 00:00:00 2001 From: Pranav Bhaskaran <67958542+Pranav-b-7@users.noreply.github.com> Date: Tue, 16 Nov 2021 14:34:12 +0530 Subject: [PATCH 28/43] Apple automation (#80) --- .../spinnaker/gate/config/AuthConfig.groovy | 20 +++++++ .../OpsmxDashboardController.groovy | 15 +++++ .../controllers/OpsmxOesController.groovy | 60 +++++++++++++++++-- .../internal/OpsmxDashboardService.groovy | 11 ++++ .../services/internal/OpsmxOesService.groovy | 31 ++++++++++ 5 files changed, 133 insertions(+), 4 deletions(-) diff --git a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy index 04189560ad..adeface647 100644 --- a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy +++ b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy @@ -122,6 +122,16 @@ class AuthConfig { .antMatchers(HttpMethod.POST, '/webhooks/**').permitAll() .antMatchers(HttpMethod.POST, '/notifications/callbacks/**').permitAll() .antMatchers(HttpMethod.POST, '/managed/notifications/callbacks/**').permitAll() + .antMatchers(HttpMethod.GET, '/oes/accountsConfig/v2/agents/apple/automation').permitAll() + .antMatchers(HttpMethod.POST, '/oes/accountsConfig/v1/agents/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/oes/accountsConfig/v1/agents/{agentName}/manifest/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/oes/accountsConfig/v2/spinnaker/cloudProviderAccount/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/oes/accountsConfig/v2/spinnaker/cloudProviderAccount/{agentName}/{accountName}/apple/automation').permitAll() + .antMatchers(HttpMethod.POST, '/oes/accountsConfig/v2/spinnaker/cloudProviderAccount/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/oes/accountsConfig/v3/spinnaker/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/dashboardservice/v4/getAllDatasources/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/dashboardservice/v5/agents/{agentName}/accounts/{accountName}/accountType/{accountType}/apple/automation').permitAll() + .antMatchers(HttpMethod.POST, '/dashboardservice/v4/datasource/apple/automation').permitAll() .antMatchers('/health').permitAll() .antMatchers('/prometheus').permitAll() .antMatchers('/info').permitAll() @@ -189,6 +199,16 @@ class AuthConfig { .antMatchers('/plugins/deck/**').permitAll() .antMatchers(HttpMethod.POST, '/webhooks/**').permitAll() .antMatchers(HttpMethod.POST, '/notifications/callbacks/**').permitAll() + .antMatchers(HttpMethod.GET, '/oes/accountsConfig/v2/agents/apple/automation').permitAll() + .antMatchers(HttpMethod.POST, '/oes/accountsConfig/v1/agents/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/oes/accountsConfig/v1/agents/{agentName}/manifest/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/oes/accountsConfig/v2/spinnaker/cloudProviderAccount/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/oes/accountsConfig/v2/spinnaker/cloudProviderAccount/{agentName}/{accountName}/apple/automation').permitAll() + .antMatchers(HttpMethod.POST, '/oes/accountsConfig/v2/spinnaker/cloudProviderAccount/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/oes/accountsConfig/v3/spinnaker/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/dashboardservice/v4/getAllDatasources/apple/automation').permitAll() + .antMatchers(HttpMethod.GET, '/dashboardservice/v5/agents/{agentName}/accounts/{accountName}/accountType/{accountType}/apple/automation').permitAll() + .antMatchers(HttpMethod.POST, '/dashboardservice/v4/datasource/apple/automation').permitAll() .antMatchers('/health').permitAll() .antMatchers('/prometheus').permitAll() .antMatchers('/info').permitAll() diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxDashboardController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxDashboardController.groovy index 1206f6c2ac..1406e3a68e 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxDashboardController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxDashboardController.groovy @@ -139,6 +139,21 @@ class OpsmxDashboardController { return opsmxDashboardService.getDashboardResponse8(version, type, source, source1, source2, source3, source4, source5) } + @ApiOperation(value = "Endpoint for dashboard rest services") + @RequestMapping(value = "/{version}/{type}/{source}/{source1}/{source2}/{source3}/{source4}/{source5}/{source6}", method = RequestMethod.GET) + Object getDashboardResponse9(@PathVariable("version") String version, + @PathVariable("type") String type, + @PathVariable("source") String source, + @PathVariable("source1") String source1, + @PathVariable("source2") String source2, + @PathVariable("source3") String source3, + @PathVariable("source4") String source4, + @PathVariable("source5") String source5, + @PathVariable("source6") String source6) { + + return opsmxDashboardService.getDashboardResponse9(version, type, source, source1, source2, source3, source4, source5, source6) + } + @ApiOperation(value = "Endpoint for dashboard rest services") @RequestMapping(value = "/{version}/{type}", method = RequestMethod.DELETE) Object deleteDashboardResponse(@PathVariable("version") String version, diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy index c94ada6e51..f1635cedee 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxOesController.groovy @@ -131,6 +131,31 @@ class OpsmxOesController { return opsmxOesService.getOesResponse7(type, source, source1, source2, source3, source4, imageId, executionId, gateIds) } + @ApiOperation(value = "Endpoint for Oes rest services") + @RequestMapping(value = "/{type}/{source}/{source1}/{source2}/{source3}/{source4}/{source5}", method = RequestMethod.GET) + Object getOesResponse8(@PathVariable("type") String type, + @PathVariable("source") String source, + @PathVariable("source1") String source1, + @PathVariable("source2") String source2, + @PathVariable("source3") String source3, + @PathVariable("source4") String source4, + @PathVariable("source5") String source5) { + return opsmxOesService.getOesResponse8(type, source, source1, source2, source3, source4, source5) + } + + @ApiOperation(value = "Endpoint for Oes rest services") + @RequestMapping(value = "/{type}/{source}/{source1}/{source2}/{source3}/{source4}/{source5}/{source6}", method = RequestMethod.GET) + Object getOesResponse9(@PathVariable("type") String type, + @PathVariable("source") String source, + @PathVariable("source1") String source1, + @PathVariable("source2") String source2, + @PathVariable("source3") String source3, + @PathVariable("source4") String source4, + @PathVariable("source5") String source5, + @PathVariable("source6") String source6) { + return opsmxOesService.getOesResponse9(type, source, source1, source2, source3, source4, source5, source6) + } + @ApiOperation(value = "Endpoint for Oes rest services") @RequestMapping(value = "/{type}/{source}", method = RequestMethod.DELETE) Object deleteOesResponse(@PathVariable("type") String type, @@ -222,6 +247,19 @@ class OpsmxOesController { return opsmxOesService.postOesResponse6(type, source, source1, source2, source3, data) } + @ApiOperation(value = "Endpoint for Oes rest services") + @RequestMapping(value = "/{type}/{source}/{source1}/{source2}/{source3}/{source4}", method = RequestMethod.POST) + Object postOesResponse7(@PathVariable("type") String type, + @PathVariable("source") String source, + @PathVariable("source1") String source1, + @PathVariable("source2") String source2, + @PathVariable("source3") String source3, + @PathVariable("source4") String source4, + @RequestBody(required = false) Object data) { + + return opsmxOesService.postOesResponse7(type, source, source1, source2, source3, source4, data) + } + @ApiOperation(value = "Endpoint for Oes rest services") @RequestMapping(value = "/{type}/{source}", method = RequestMethod.PUT) Object updateOesResponse(@PathVariable("type") String type, @@ -306,16 +344,16 @@ class OpsmxOesController { .post(uploadFileOkHttp(data,files)) .build() - def response = okHttpClient.newCall(request).execute() - return response + def response = okHttpClient.newCall(request).execute() + return response }.call() as okhttp3.Response if (!obj.isSuccessful()) { - def error = obj.body().string(); + def error = obj.body().string(); throw new OesRequestException(error) } else{ return obj.body()?.string() ?: "Unknown reason: " + obj.code() as Object } - + } Object addOrUpdateSpinnaker(MultipartFile files, String data) { @@ -494,4 +532,18 @@ class OpsmxOesController { } } + @ApiOperation(value = "download the manifest file") + @GetMapping(value = "/accountsConfig/{version}/agents/{agentName}/manifest/apple/automation", produces = "application/octet-stream") + @ResponseBody Object downloadAgentManifestFile(@PathVariable("agentName") String agentName, + @PathVariable("version") String version){ + + Response response = opsmxOesService.agentManifestDownloadFile(agentName, version) + response.getBody().in().withCloseable {inputStream -> + byte [] manifestFile = IOUtils.toByteArray(inputStream) + HttpHeaders headers = new HttpHeaders() + headers.add("Content-Disposition", response.getHeaders().stream().filter({ header -> header.getName().trim().equalsIgnoreCase("Content-Disposition") }).collect(Collectors.toList()).get(0).value) + return ResponseEntity.ok().headers(headers).body(manifestFile) + } + } + } diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxDashboardService.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxDashboardService.groovy index eede6fd15e..64bc203591 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxDashboardService.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxDashboardService.groovy @@ -85,6 +85,17 @@ interface OpsmxDashboardService { @Path('source4') String source4, @Path('source5') String source5) + @GET("/dashboardservice/{version}/{type}/{source}/{source1}/{source2}/{source3}/{source4}/{source5}/{source6}") + Object getDashboardResponse9(@Path('version') String version, + @Path('type') String type, + @Path('source') String source, + @Path('source1') String source1, + @Path('source2') String source2, + @Path('source3') String source3, + @Path('source4') String source4, + @Path('source5') String source5, + @Path('source6') String source6) + @DELETE("/dashboardservice/{version}/{type}") Object deleteDashboardResponse(@Path('version') String version, @Path('type') String type) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxOesService.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxOesService.groovy index c48623c0d7..2d2c842d9a 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxOesService.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxOesService.groovy @@ -28,6 +28,9 @@ interface OpsmxOesService { @GET("/oes/accountsConfig/agents/{agentName}/manifest") Response agentManifestDownloadFile(@Path('agentName') String agentName) + @GET("/oes/accountsConfig/{version}/agents/{agentName}/manifest/apple/automation") + Response agentManifestDownloadFile(@Path('agentName') String agentName, @Path('version') String version) + @POST("/oes/{source}") Object postOesResponse(@Path('source') String source, @Body Object data) @@ -77,6 +80,25 @@ interface OpsmxOesService { @Query("executionId") String executionId, @Query("gateIds") String gateIds) + @GET("/oes/{type}/{source}/{source1}/{source2}/{source3}/{source4}/{source5}") + Object getOesResponse8(@Path('type') String type, + @Path('source') String source, + @Path('source1') String source1, + @Path('source2') String source2, + @Path('source3') String source3, + @Path('source4') String source4, + @Path('source5') String source5) + + @GET("/oes/{type}/{source}/{source1}/{source2}/{source3}/{source4}/{source5}/{source6}") + Object getOesResponse9(@Path('type') String type, + @Path('source') String source, + @Path('source1') String source1, + @Path('source2') String source2, + @Path('source3') String source3, + @Path('source4') String source4, + @Path('source5') String source5, + @Path('source6') String source6) + @DELETE("/oes/{type}/{source}") Object deleteOesResponse(@Path('type') String type, @Path('source') String source, @@ -129,6 +151,15 @@ interface OpsmxOesService { @Path('source3') String source3, @Body Object data) + @POST("/oes/{type}/{source}/{source1}/{source2}/{source3}/{source4}") + Object postOesResponse7(@Path('type') String type, + @Path('source') String source, + @Path('source1') String source1, + @Path('source2') String source2, + @Path('source3') String source3, + @Path('source4') String source4, + @Body Object data) + @PUT("/oes/{type}/{source}") Object updateOesResponse(@Path('type') String type, @Path('source') String source, From fbfe3338af2b41686eb89ef6749fb230bcef1606 Mon Sep 17 00:00:00 2001 From: Rahul Chekuri <89373036+rahul-chekuri@users.noreply.github.com> Date: Mon, 13 Dec 2021 12:32:42 +0530 Subject: [PATCH 29/43] OP-10214: Using RetryOnExceptionAuthManager to handle LDAP connection issues (#85) (#86) * OP-10214: Using RetryOnExceptionAuthManager to handle LDAP connection issues (#84) * OP-10214: Using RetryOnExceptionAuthManager to handle LDAP connection issues * OP-10214: Added tests * OP-10214: Moved code to appropriate packages * OP-10214: Moved the packages --- .../gate/security/ldap/LdapSsoConfig.groovy | 7 +- .../ldap/RetryOnExceptionAuthManager.java | 85 +++++++++++++++++++ .../ldap/RetryOnExceptionAuthManagerTest.java | 49 +++++++++++ 3 files changed, 140 insertions(+), 1 deletion(-) create mode 100644 gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java create mode 100644 gate-ldap/src/test/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManagerTest.java diff --git a/gate-ldap/src/main/groovy/com/netflix/spinnaker/gate/security/ldap/LdapSsoConfig.groovy b/gate-ldap/src/main/groovy/com/netflix/spinnaker/gate/security/ldap/LdapSsoConfig.groovy index 959c1d5ccc..596e41ef48 100644 --- a/gate-ldap/src/main/groovy/com/netflix/spinnaker/gate/security/ldap/LdapSsoConfig.groovy +++ b/gate-ldap/src/main/groovy/com/netflix/spinnaker/gate/security/ldap/LdapSsoConfig.groovy @@ -22,6 +22,7 @@ import com.netflix.spinnaker.gate.security.SpinnakerAuthConfig import com.netflix.spinnaker.gate.services.PermissionService import com.netflix.spinnaker.security.User import groovy.util.logging.Slf4j +import com.opsmx.spinnaker.gate.security.ldap.RetryOnExceptionAuthManager import org.apache.commons.lang3.StringUtils import org.springframework.beans.factory.annotation.Autowired import org.springframework.boot.autoconfigure.condition.ConditionalOnExpression @@ -76,7 +77,6 @@ class LdapSsoConfig extends WebSecurityConfigurerAdapter { @Autowired LoginProps loginProps - @Autowired public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception { auth.userDetailsService(userDataService).passwordEncoder(passwordEncoder()); @@ -137,6 +137,11 @@ class LdapSsoConfig extends WebSecurityConfigurerAdapter { } + @Override + protected AuthenticationManager authenticationManager() throws Exception { + return new RetryOnExceptionAuthManager(super.authenticationManager()); + } + @Override void configure(WebSecurity web) throws Exception { authConfig.configure(web) diff --git a/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java b/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java new file mode 100644 index 0000000000..1222dcfa98 --- /dev/null +++ b/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java @@ -0,0 +1,85 @@ +package com.opsmx.spinnaker.gate.security.ldap; + +import lombok.extern.slf4j.Slf4j; +import org.springframework.ldap.UncategorizedLdapException; +import org.springframework.security.authentication.AuthenticationManager; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.AuthenticationException; + +/** + * Retry authentication in cases of transient issues. + * + * @author Rahulgandhi Chekuri + */ +@Slf4j +public class RetryOnExceptionAuthManager implements AuthenticationManager { + + public static final int DEFAULT_RETRIES = 3; + public static final long DEFAULT_TIME_TO_WAIT_MS = 2000; + + private int numRetries; + private long timeToWaitMS; + private AuthenticationManager delegate; + + // CONSTRUCTORS + public RetryOnExceptionAuthManager( + int _numRetries, long _timeToWaitMS, AuthenticationManager delegate) { + this.numRetries = _numRetries; + this.timeToWaitMS = _timeToWaitMS; + this.delegate = delegate; + } + + public RetryOnExceptionAuthManager(AuthenticationManager delegate) { + this(DEFAULT_RETRIES, DEFAULT_TIME_TO_WAIT_MS, delegate); + } + + @Override + public Authentication authenticate(Authentication authentication) throws AuthenticationException { + while (true) { + try { + return delegate.authenticate(authentication); + } catch (UncategorizedLdapException ldapException) { + exceptionOccurred(ldapException); + continue; + } + } + } + + /* + * shouldRetry + * Returns true if a retry can be attempted. + * @return True if retries attempts remain; else false + */ + private boolean shouldRetry() { + return (numRetries >= 0); + } + + /* + * waitUntilNextTry + * Waits for timeToWaitMS. Ignores any interrupted exception + */ + private void waitUntilNextTry() { + try { + Thread.sleep(timeToWaitMS); + } catch (InterruptedException iex) { + } + } + + /* + * exceptionOccurred + * Call when an exception has occurred in the block. If the + * retry limit is exceeded, throws an exception. + * Else waits for the specified time. + * @throws Exception + * @param e + */ + private void exceptionOccurred(UncategorizedLdapException e) throws UncategorizedLdapException { + numRetries--; + if (!shouldRetry()) { + throw e; + } else { + log.debug("Ldap exception occurred so retrying the authentication, The exception is : {}", e); + } + waitUntilNextTry(); + } +} diff --git a/gate-ldap/src/test/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManagerTest.java b/gate-ldap/src/test/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManagerTest.java new file mode 100644 index 0000000000..ef3a31a3b1 --- /dev/null +++ b/gate-ldap/src/test/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManagerTest.java @@ -0,0 +1,49 @@ +package com.opsmx.spinnaker.gate.security.ldap; + +import static org.junit.jupiter.api.Assertions.fail; +import static org.mockito.Mockito.mock; + +import org.junit.Assert; +import org.junit.Test; +import org.junit.jupiter.api.DisplayName; +import org.mockito.Mockito; +import org.springframework.ldap.UncategorizedLdapException; +import org.springframework.security.authentication.AuthenticationManager; +import org.springframework.security.core.Authentication; + +public class RetryOnExceptionAuthManagerTest { + + private AuthenticationManager delegate = mock(AuthenticationManager.class); + + private Authentication authentication = mock(Authentication.class); + + private RetryOnExceptionAuthManager fixture = new RetryOnExceptionAuthManager(delegate); + + @Test + @DisplayName("test exception case") + public void test1() { + + Mockito.when(delegate.authenticate(authentication)) + .thenThrow(new UncategorizedLdapException("")); + + try { + fixture.authenticate(authentication); + fail("Should fail when try attempts are finished"); + } catch (UncategorizedLdapException e) { + + } catch (Exception e) { + fail("UncategorizedLdapException is expected"); + } + } + + @Test + @DisplayName("test when no exception") + public void test2() { + + Mockito.when(delegate.authenticate(authentication)).thenReturn(authentication); + + Authentication actual = fixture.authenticate(authentication); + + Assert.assertEquals(actual, authentication); + } +} From 3a1e435bae218e576e4e7cd1df05fb757b3f78d7 Mon Sep 17 00:00:00 2001 From: Pranav Bhaskaran <67958542+Pranav-b-7@users.noreply.github.com> Date: Wed, 15 Dec 2021 19:16:33 +0530 Subject: [PATCH 30/43] log4j version updated to 2.16.0 (#92) --- build.gradle | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/build.gradle b/build.gradle index 2cf9170557..f7c79f6d47 100644 --- a/build.gradle +++ b/build.gradle @@ -52,6 +52,11 @@ allprojects { configurations.all { exclude group: 'javax.servlet', module: 'servlet-api' exclude group: 'javax.servlet', module: 'javax.servlet-api' + resolutionStrategy.eachDependency { DependencyResolveDetails details -> + if (details.requested.group == 'org.apache.logging.log4j') { + details.useVersion '2.16.0' + } + } } tasks.withType(JavaExec) { From 8f434355b6aa6710bf38c6e8eef6473918bf311f Mon Sep 17 00:00:00 2001 From: Luthan95 <66585454+Luthan95@users.noreply.github.com> Date: Thu, 16 Dec 2021 13:17:49 +0530 Subject: [PATCH 31/43] Update Dockerfile.rhel8-ubi8 --- docker_build/Dockerfile.rhel8-ubi8 | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docker_build/Dockerfile.rhel8-ubi8 b/docker_build/Dockerfile.rhel8-ubi8 index d17e552f03..670e312263 100644 --- a/docker_build/Dockerfile.rhel8-ubi8 +++ b/docker_build/Dockerfile.rhel8-ubi8 @@ -37,10 +37,10 @@ RUN chmod +x /opsmx/workdir/startup.sh ARG CUSTOMPLUGIN_RELEASEVERSION ENV CUSTOMPLUGIN_RELEASEVERSION=$CUSTOMPLUGIN_RELEASEVERSION COPY /docker_build/custom-plugin.json /opt/spinnaker/plugins/plugins.json -RUN wget -O VerificationPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/VerificationPlugin-v1.0.1-SNAPSHOT.zip \ - && wget -O TestVerificationPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/TestVerificationPlugin-v1.0.1-SNAPSHOT.zip \ - && wget -O policyPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/policyPlugin-v1.0.1-SNAPSHOT.zip \ - && wget -O ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Pf4jCustomStagePlugin/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip +RUN wget -O VerificationPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Customplugins/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/VerificationPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O TestVerificationPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Customplugins/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/TestVerificationPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O policyPlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Customplugins/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/policyPlugin-v1.0.1-SNAPSHOT.zip \ + && wget -O ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip -c https://github.com/OpsMx/Customplugins/releases/download/${CUSTOMPLUGIN_RELEASEVERSION}/ApprovalStagePlugin-v1.0.1-SNAPSHOT.zip RUN mv VerificationPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ && mv TestVerificationPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ && mv policyPlugin-v1.0.1-SNAPSHOT.zip /opt/spinnaker/plugins/ \ From b29ca89c6e91c2b8d7f966ec4050d7930c14a4df Mon Sep 17 00:00:00 2001 From: Rahul Chekuri <89373036+rahul-chekuri@users.noreply.github.com> Date: Thu, 16 Dec 2021 13:07:23 +0530 Subject: [PATCH 32/43] OP-10610: CherryPick MAster --- .../ldap/LDAPConnectionClosedException.java | 28 +++++++++++++++++++ .../ldap/RetryOnExceptionAuthManager.java | 14 +++++++--- .../ldap/RetryOnExceptionAuthManagerTest.java | 2 +- .../resources/static/css/bootstrap.min.css | 1 - 4 files changed, 39 insertions(+), 6 deletions(-) create mode 100644 gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/LDAPConnectionClosedException.java diff --git a/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/LDAPConnectionClosedException.java b/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/LDAPConnectionClosedException.java new file mode 100644 index 0000000000..ecd01b6c70 --- /dev/null +++ b/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/LDAPConnectionClosedException.java @@ -0,0 +1,28 @@ +/* + * Copyright 2021 OpsMx, Inc. + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +package com.opsmx.spinnaker.gate.security.ldap; + +import org.springframework.http.HttpStatus; +import org.springframework.web.bind.annotation.ResponseStatus; + +@ResponseStatus(HttpStatus.UNPROCESSABLE_ENTITY) +public class LDAPConnectionClosedException extends RuntimeException { + + public LDAPConnectionClosedException(String message) { + super(message); + } +} diff --git a/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java b/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java index 1222dcfa98..68fd19477c 100644 --- a/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java +++ b/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java @@ -35,14 +35,19 @@ public RetryOnExceptionAuthManager(AuthenticationManager delegate) { @Override public Authentication authenticate(Authentication authentication) throws AuthenticationException { + Authentication auth = null; while (true) { try { - return delegate.authenticate(authentication); + auth = delegate.authenticate(authentication); + log.info("Authenticated without connection issue"); + break; } catch (UncategorizedLdapException ldapException) { exceptionOccurred(ldapException); continue; } } + + return auth; } /* @@ -73,12 +78,13 @@ private void waitUntilNextTry() { * @throws Exception * @param e */ - private void exceptionOccurred(UncategorizedLdapException e) throws UncategorizedLdapException { + private void exceptionOccurred(UncategorizedLdapException e) + throws LDAPConnectionClosedException { numRetries--; if (!shouldRetry()) { - throw e; + throw new LDAPConnectionClosedException(e.getMessage()); } else { - log.debug("Ldap exception occurred so retrying the authentication, The exception is : {}", e); + log.info("Ldap exception occurred so retrying the authentication, The exception is : {}", e); } waitUntilNextTry(); } diff --git a/gate-ldap/src/test/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManagerTest.java b/gate-ldap/src/test/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManagerTest.java index ef3a31a3b1..096c19172c 100644 --- a/gate-ldap/src/test/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManagerTest.java +++ b/gate-ldap/src/test/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManagerTest.java @@ -29,7 +29,7 @@ public void test1() { try { fixture.authenticate(authentication); fail("Should fail when try attempts are finished"); - } catch (UncategorizedLdapException e) { + } catch (LDAPConnectionClosedException e) { } catch (Exception e) { fail("UncategorizedLdapException is expected"); diff --git a/gate-web/src/main/resources/static/css/bootstrap.min.css b/gate-web/src/main/resources/static/css/bootstrap.min.css index 86b6845bc3..613d28aab8 100755 --- a/gate-web/src/main/resources/static/css/bootstrap.min.css +++ b/gate-web/src/main/resources/static/css/bootstrap.min.css @@ -4,4 +4,3 @@ * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus:not(:focus-visible){outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]){color:inherit;text-decoration:none}a:not([href]):hover{color:inherit;text-decoration:none}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;text-align:left;caption-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{padding:0;border-style:none}input[type=checkbox],input[type=radio]{box-sizing:border-box;padding:0}input[type=date],input[type=datetime-local],input[type=month],input[type=time]{-webkit-appearance:listbox}textarea{overflow:auto;resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{display:block;width:100%;max-width:100%;padding:0;margin-bottom:.5rem;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}summary{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:6rem;font-weight:300;line-height:1.2}.display-2{font-size:5.5rem;font-weight:300;line-height:1.2}.display-3{font-size:4.5rem;font-weight:300;line-height:1.2}.display-4{font-size:3.5rem;font-weight:300;line-height:1.2}hr{margin-top:1rem;margin-bottom:1rem;border:0;border-top:1px solid rgba(0,0,0,.1)}.small,small{font-size:80%;font-weight:400}.mark,mark{padding:.2em;background-color:#fcf8e3}.list-unstyled{padding-left:0;list-style:none}.list-inline{padding-left:0;list-style:none}.list-inline-item{display:inline-block}.list-inline-item:not(:last-child){margin-right:.5rem}.initialism{font-size:90%;text-transform:uppercase}.blockquote{margin-bottom:1rem;font-size:1.25rem}.blockquote-footer{display:block;font-size:80%;color:#6c757d}.blockquote-footer::before{content:"\2014\00A0"}.img-fluid{max-width:100%;height:auto}.img-thumbnail{padding:.25rem;background-color:#fff;border:1px solid #dee2e6;border-radius:.25rem;max-width:100%;height:auto}.figure{display:inline-block}.figure-img{margin-bottom:.5rem;line-height:1}.figure-caption{font-size:90%;color:#6c757d}code{font-size:87.5%;color:#e83e8c;word-wrap:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-size:inherit;color:inherit;word-break:normal}.pre-scrollable{max-height:340px;overflow-y:scroll}.container{width:100%;padding-right:15px;padding-left:15px;margin-right:auto;margin-left:auto}@media (min-width:576px){.container{max-width:540px}}@media (min-width:768px){.container{max-width:720px}}@media (min-width:992px){.container{max-width:960px}}@media (min-width:1200px){.container{max-width:1140px}}.container-fluid,.container-lg,.container-md,.container-sm,.container-xl{width:100%;padding-right:15px;padding-left:15px;margin-right:auto;margin-left:auto}@media (min-width:576px){.container,.container-sm{max-width:540px}}@media (min-width:768px){.container,.container-md,.container-sm{max-width:720px}}@media (min-width:992px){.container,.container-lg,.container-md,.container-sm{max-width:960px}}@media (min-width:1200px){.container,.container-lg,.container-md,.container-sm,.container-xl{max-width:1140px}}.row{display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;margin-right:-15px;margin-left:-15px}.no-gutters{margin-right:0;margin-left:0}.no-gutters>.col,.no-gutters>[class*=col-]{padding-right:0;padding-left:0}.col,.col-1,.col-10,.col-11,.col-12,.col-2,.col-3,.col-4,.col-5,.col-6,.col-7,.col-8,.col-9,.col-auto,.col-lg,.col-lg-1,.col-lg-10,.col-lg-11,.col-lg-12,.col-lg-2,.col-lg-3,.col-lg-4,.col-lg-5,.col-lg-6,.col-lg-7,.col-lg-8,.col-lg-9,.col-lg-auto,.col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.col-xl-10,.col-xl-11,.col-xl-12,.col-xl-2,.col-xl-3,.col-xl-4,.col-xl-5,.col-xl-6,.col-xl-7,.col-xl-8,.col-xl-9,.col-xl-auto{position:relative;width:100%;padding-right:15px;padding-left:15px}.col{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.row-cols-1>*{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-2>*{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-3>*{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-4>*{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.row-cols-5>*{-ms-flex:0 0 20%;flex:0 0 20%;max-width:20%}.row-cols-6>*{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-auto{-ms-flex:0 0 auto;flex:0 0 auto;width:auto;max-width:100%}.col-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-first{-ms-flex-order:-1;order:-1}.order-last{-ms-flex-order:13;order:13}.order-0{-ms-flex-order:0;order:0}.order-1{-ms-flex-order:1;order:1}.order-2{-ms-flex-order:2;order:2}.order-3{-ms-flex-order:3;order:3}.order-4{-ms-flex-order:4;order:4}.order-5{-ms-flex-order:5;order:5}.order-6{-ms-flex-order:6;order:6}.order-7{-ms-flex-order:7;order:7}.order-8{-ms-flex-order:8;order:8}.order-9{-ms-flex-order:9;order:9}.order-10{-ms-flex-order:10;order:10}.order-11{-ms-flex-order:11;order:11}.order-12{-ms-flex-order:12;order:12}.offset-1{margin-left:8.333333%}.offset-2{margin-left:16.666667%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-left:83.333333%}.offset-11{margin-left:91.666667%}@media (min-width:576px){.col-sm{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.row-cols-sm-1>*{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-sm-2>*{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-sm-3>*{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-sm-4>*{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.row-cols-sm-5>*{-ms-flex:0 0 20%;flex:0 0 20%;max-width:20%}.row-cols-sm-6>*{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-sm-auto{-ms-flex:0 0 auto;flex:0 0 auto;width:auto;max-width:100%}.col-sm-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-sm-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-sm-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-sm-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-sm-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-sm-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-sm-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-sm-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-sm-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-sm-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-sm-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-ms-flex-order:-1;order:-1}.order-sm-last{-ms-flex-order:13;order:13}.order-sm-0{-ms-flex-order:0;order:0}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order:3;order:3}.order-sm-4{-ms-flex-order:4;order:4}.order-sm-5{-ms-flex-order:5;order:5}.order-sm-6{-ms-flex-order:6;order:6}.order-sm-7{-ms-flex-order:7;order:7}.order-sm-8{-ms-flex-order:8;order:8}.order-sm-9{-ms-flex-order:9;order:9}.order-sm-10{-ms-flex-order:10;order:10}.order-sm-11{-ms-flex-order:11;order:11}.order-sm-12{-ms-flex-order:12;order:12}.offset-sm-0{margin-left:0}.offset-sm-1{margin-left:8.333333%}.offset-sm-2{margin-left:16.666667%}.offset-sm-3{margin-left:25%}.offset-sm-4{margin-left:33.333333%}.offset-sm-5{margin-left:41.666667%}.offset-sm-6{margin-left:50%}.offset-sm-7{margin-left:58.333333%}.offset-sm-8{margin-left:66.666667%}.offset-sm-9{margin-left:75%}.offset-sm-10{margin-left:83.333333%}.offset-sm-11{margin-left:91.666667%}}@media (min-width:768px){.col-md{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.row-cols-md-1>*{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-md-2>*{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-md-3>*{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-md-4>*{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.row-cols-md-5>*{-ms-flex:0 0 20%;flex:0 0 20%;max-width:20%}.row-cols-md-6>*{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-md-auto{-ms-flex:0 0 auto;flex:0 0 auto;width:auto;max-width:100%}.col-md-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-md-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-md-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-md-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-md-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-md-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-md-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-md-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-md-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-md-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-md-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-md-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-md-first{-ms-flex-order:-1;order:-1}.order-md-last{-ms-flex-order:13;order:13}.order-md-0{-ms-flex-order:0;order:0}.order-md-1{-ms-flex-order:1;order:1}.order-md-2{-ms-flex-order:2;order:2}.order-md-3{-ms-flex-order:3;order:3}.order-md-4{-ms-flex-order:4;order:4}.order-md-5{-ms-flex-order:5;order:5}.order-md-6{-ms-flex-order:6;order:6}.order-md-7{-ms-flex-order:7;order:7}.order-md-8{-ms-flex-order:8;order:8}.order-md-9{-ms-flex-order:9;order:9}.order-md-10{-ms-flex-order:10;order:10}.order-md-11{-ms-flex-order:11;order:11}.order-md-12{-ms-flex-order:12;order:12}.offset-md-0{margin-left:0}.offset-md-1{margin-left:8.333333%}.offset-md-2{margin-left:16.666667%}.offset-md-3{margin-left:25%}.offset-md-4{margin-left:33.333333%}.offset-md-5{margin-left:41.666667%}.offset-md-6{margin-left:50%}.offset-md-7{margin-left:58.333333%}.offset-md-8{margin-left:66.666667%}.offset-md-9{margin-left:75%}.offset-md-10{margin-left:83.333333%}.offset-md-11{margin-left:91.666667%}}@media (min-width:992px){.col-lg{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.row-cols-lg-1>*{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-lg-2>*{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-lg-3>*{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-lg-4>*{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.row-cols-lg-5>*{-ms-flex:0 0 20%;flex:0 0 20%;max-width:20%}.row-cols-lg-6>*{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-lg-auto{-ms-flex:0 0 auto;flex:0 0 auto;width:auto;max-width:100%}.col-lg-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-lg-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-lg-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-lg-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-lg-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-lg-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-lg-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-lg-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-lg-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-lg-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-lg-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-lg-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-lg-first{-ms-flex-order:-1;order:-1}.order-lg-last{-ms-flex-order:13;order:13}.order-lg-0{-ms-flex-order:0;order:0}.order-lg-1{-ms-flex-order:1;order:1}.order-lg-2{-ms-flex-order:2;order:2}.order-lg-3{-ms-flex-order:3;order:3}.order-lg-4{-ms-flex-order:4;order:4}.order-lg-5{-ms-flex-order:5;order:5}.order-lg-6{-ms-flex-order:6;order:6}.order-lg-7{-ms-flex-order:7;order:7}.order-lg-8{-ms-flex-order:8;order:8}.order-lg-9{-ms-flex-order:9;order:9}.order-lg-10{-ms-flex-order:10;order:10}.order-lg-11{-ms-flex-order:11;order:11}.order-lg-12{-ms-flex-order:12;order:12}.offset-lg-0{margin-left:0}.offset-lg-1{margin-left:8.333333%}.offset-lg-2{margin-left:16.666667%}.offset-lg-3{margin-left:25%}.offset-lg-4{margin-left:33.333333%}.offset-lg-5{margin-left:41.666667%}.offset-lg-6{margin-left:50%}.offset-lg-7{margin-left:58.333333%}.offset-lg-8{margin-left:66.666667%}.offset-lg-9{margin-left:75%}.offset-lg-10{margin-left:83.333333%}.offset-lg-11{margin-left:91.666667%}}@media (min-width:1200px){.col-xl{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.row-cols-xl-1>*{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-xl-2>*{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-xl-3>*{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-xl-4>*{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.row-cols-xl-5>*{-ms-flex:0 0 20%;flex:0 0 20%;max-width:20%}.row-cols-xl-6>*{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-xl-auto{-ms-flex:0 0 auto;flex:0 0 auto;width:auto;max-width:100%}.col-xl-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-xl-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-xl-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-xl-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-xl-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-xl-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-xl-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-xl-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-xl-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-xl-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-xl-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-xl-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-xl-first{-ms-flex-order:-1;order:-1}.order-xl-last{-ms-flex-order:13;order:13}.order-xl-0{-ms-flex-order:0;order:0}.order-xl-1{-ms-flex-order:1;order:1}.order-xl-2{-ms-flex-order:2;order:2}.order-xl-3{-ms-flex-order:3;order:3}.order-xl-4{-ms-flex-order:4;order:4}.order-xl-5{-ms-flex-order:5;order:5}.order-xl-6{-ms-flex-order:6;order:6}.order-xl-7{-ms-flex-order:7;order:7}.order-xl-8{-ms-flex-order:8;order:8}.order-xl-9{-ms-flex-order:9;order:9}.order-xl-10{-ms-flex-order:10;order:10}.order-xl-11{-ms-flex-order:11;order:11}.order-xl-12{-ms-flex-order:12;order:12}.offset-xl-0{margin-left:0}.offset-xl-1{margin-left:8.333333%}.offset-xl-2{margin-left:16.666667%}.offset-xl-3{margin-left:25%}.offset-xl-4{margin-left:33.333333%}.offset-xl-5{margin-left:41.666667%}.offset-xl-6{margin-left:50%}.offset-xl-7{margin-left:58.333333%}.offset-xl-8{margin-left:66.666667%}.offset-xl-9{margin-left:75%}.offset-xl-10{margin-left:83.333333%}.offset-xl-11{margin-left:91.666667%}}.table{width:100%;margin-bottom:1rem;color:#212529}.table td,.table th{padding:.75rem;vertical-align:top;border-top:1px solid #dee2e6}.table thead th{vertical-align:bottom;border-bottom:2px solid #dee2e6}.table tbody+tbody{border-top:2px solid #dee2e6}.table-sm td,.table-sm th{padding:.3rem}.table-bordered{border:1px solid #dee2e6}.table-bordered td,.table-bordered th{border:1px solid #dee2e6}.table-bordered thead td,.table-bordered thead th{border-bottom-width:2px}.table-borderless tbody+tbody,.table-borderless td,.table-borderless th,.table-borderless thead th{border:0}.table-striped tbody tr:nth-of-type(odd){background-color:rgba(0,0,0,.05)}.table-hover tbody tr:hover{color:#212529;background-color:rgba(0,0,0,.075)}.table-primary,.table-primary>td,.table-primary>th{background-color:#b8daff}.table-primary tbody+tbody,.table-primary td,.table-primary th,.table-primary thead th{border-color:#7abaff}.table-hover .table-primary:hover{background-color:#9fcdff}.table-hover .table-primary:hover>td,.table-hover .table-primary:hover>th{background-color:#9fcdff}.table-secondary,.table-secondary>td,.table-secondary>th{background-color:#d6d8db}.table-secondary tbody+tbody,.table-secondary td,.table-secondary th,.table-secondary thead th{border-color:#b3b7bb}.table-hover .table-secondary:hover{background-color:#c8cbcf}.table-hover .table-secondary:hover>td,.table-hover .table-secondary:hover>th{background-color:#c8cbcf}.table-success,.table-success>td,.table-success>th{background-color:#c3e6cb}.table-success tbody+tbody,.table-success td,.table-success th,.table-success thead th{border-color:#8fd19e}.table-hover .table-success:hover{background-color:#b1dfbb}.table-hover .table-success:hover>td,.table-hover .table-success:hover>th{background-color:#b1dfbb}.table-info,.table-info>td,.table-info>th{background-color:#bee5eb}.table-info tbody+tbody,.table-info td,.table-info th,.table-info thead th{border-color:#86cfda}.table-hover .table-info:hover{background-color:#abdde5}.table-hover .table-info:hover>td,.table-hover .table-info:hover>th{background-color:#abdde5}.table-warning,.table-warning>td,.table-warning>th{background-color:#ffeeba}.table-warning tbody+tbody,.table-warning td,.table-warning th,.table-warning thead th{border-color:#ffdf7e}.table-hover .table-warning:hover{background-color:#ffe8a1}.table-hover .table-warning:hover>td,.table-hover .table-warning:hover>th{background-color:#ffe8a1}.table-danger,.table-danger>td,.table-danger>th{background-color:#f5c6cb}.table-danger tbody+tbody,.table-danger td,.table-danger th,.table-danger thead th{border-color:#ed969e}.table-hover .table-danger:hover{background-color:#f1b0b7}.table-hover .table-danger:hover>td,.table-hover .table-danger:hover>th{background-color:#f1b0b7}.table-light,.table-light>td,.table-light>th{background-color:#fdfdfe}.table-light tbody+tbody,.table-light td,.table-light th,.table-light thead th{border-color:#fbfcfc}.table-hover .table-light:hover{background-color:#ececf6}.table-hover .table-light:hover>td,.table-hover .table-light:hover>th{background-color:#ececf6}.table-dark,.table-dark>td,.table-dark>th{background-color:#c6c8ca}.table-dark tbody+tbody,.table-dark td,.table-dark th,.table-dark thead th{border-color:#95999c}.table-hover .table-dark:hover{background-color:#b9bbbe}.table-hover .table-dark:hover>td,.table-hover .table-dark:hover>th{background-color:#b9bbbe}.table-active,.table-active>td,.table-active>th{background-color:rgba(0,0,0,.075)}.table-hover .table-active:hover{background-color:rgba(0,0,0,.075)}.table-hover .table-active:hover>td,.table-hover .table-active:hover>th{background-color:rgba(0,0,0,.075)}.table .thead-dark th{color:#fff;background-color:#343a40;border-color:#454d55}.table .thead-light th{color:#495057;background-color:#e9ecef;border-color:#dee2e6}.table-dark{color:#fff;background-color:#343a40}.table-dark td,.table-dark th,.table-dark thead th{border-color:#454d55}.table-dark.table-bordered{border:0}.table-dark.table-striped tbody tr:nth-of-type(odd){background-color:rgba(255,255,255,.05)}.table-dark.table-hover tbody tr:hover{color:#fff;background-color:rgba(255,255,255,.075)}@media (max-width:575.98px){.table-responsive-sm{display:block;width:100%;overflow-x:auto;-webkit-overflow-scrolling:touch}.table-responsive-sm>.table-bordered{border:0}}@media (max-width:767.98px){.table-responsive-md{display:block;width:100%;overflow-x:auto;-webkit-overflow-scrolling:touch}.table-responsive-md>.table-bordered{border:0}}@media (max-width:991.98px){.table-responsive-lg{display:block;width:100%;overflow-x:auto;-webkit-overflow-scrolling:touch}.table-responsive-lg>.table-bordered{border:0}}@media (max-width:1199.98px){.table-responsive-xl{display:block;width:100%;overflow-x:auto;-webkit-overflow-scrolling:touch}.table-responsive-xl>.table-bordered{border:0}}.table-responsive{display:block;width:100%;overflow-x:auto;-webkit-overflow-scrolling:touch}.table-responsive>.table-bordered{border:0}.form-control{display:block;width:100%;height:calc(1.5em + .75rem + 2px);padding:.375rem .75rem;font-size:1rem;font-weight:400;line-height:1.5;color:#495057;background-color:#fff;background-clip:padding-box;border:1px solid #ced4da;border-radius:.25rem;transition:border-color .15s ease-in-out,box-shadow .15s ease-in-out}@media (prefers-reduced-motion:reduce){.form-control{transition:none}}.form-control::-ms-expand{background-color:transparent;border:0}.form-control:-moz-focusring{color:transparent;text-shadow:0 0 0 #495057}.form-control:focus{color:#495057;background-color:#fff;border-color:#80bdff;outline:0;box-shadow:0 0 0 .2rem rgba(0,123,255,.25)}.form-control::-webkit-input-placeholder{color:#6c757d;opacity:1}.form-control::-moz-placeholder{color:#6c757d;opacity:1}.form-control:-ms-input-placeholder{color:#6c757d;opacity:1}.form-control::-ms-input-placeholder{color:#6c757d;opacity:1}.form-control::placeholder{color:#6c757d;opacity:1}.form-control:disabled,.form-control[readonly]{background-color:#e9ecef;opacity:1}select.form-control:focus::-ms-value{color:#495057;background-color:#fff}.form-control-file,.form-control-range{display:block;width:100%}.col-form-label{padding-top:calc(.375rem + 1px);padding-bottom:calc(.375rem + 1px);margin-bottom:0;font-size:inherit;line-height:1.5}.col-form-label-lg{padding-top:calc(.5rem + 1px);padding-bottom:calc(.5rem + 1px);font-size:1.25rem;line-height:1.5}.col-form-label-sm{padding-top:calc(.25rem + 1px);padding-bottom:calc(.25rem + 1px);font-size:.875rem;line-height:1.5}.form-control-plaintext{display:block;width:100%;padding:.375rem 0;margin-bottom:0;font-size:1rem;line-height:1.5;color:#212529;background-color:transparent;border:solid transparent;border-width:1px 0}.form-control-plaintext.form-control-lg,.form-control-plaintext.form-control-sm{padding-right:0;padding-left:0}.form-control-sm{height:calc(1.5em + .5rem + 2px);padding:.25rem .5rem;font-size:.875rem;line-height:1.5;border-radius:.2rem}.form-control-lg{height:calc(1.5em + 1rem + 2px);padding:.5rem 1rem;font-size:1.25rem;line-height:1.5;border-radius:.3rem}select.form-control[multiple],select.form-control[size]{height:auto}textarea.form-control{height:auto}.form-group{margin-bottom:1rem}.form-text{display:block;margin-top:.25rem}.form-row{display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;margin-right:-5px;margin-left:-5px}.form-row>.col,.form-row>[class*=col-]{padding-right:5px;padding-left:5px}.form-check{position:relative;display:block;padding-left:1.25rem}.form-check-input{position:absolute;margin-top:.3rem;margin-left:-1.25rem}.form-check-input:disabled~.form-check-label,.form-check-input[disabled]~.form-check-label{color:#6c757d}.form-check-label{margin-bottom:0}.form-check-inline{display:-ms-inline-flexbox;display:inline-flex;-ms-flex-align:center;align-items:center;padding-left:0;margin-right:.75rem}.form-check-inline .form-check-input{position:static;margin-top:0;margin-right:.3125rem;margin-left:0}.valid-feedback{display:none;width:100%;margin-top:.25rem;font-size:80%;color:#28a745}.valid-tooltip{position:absolute;top:100%;z-index:5;display:none;max-width:100%;padding:.25rem .5rem;margin-top:.1rem;font-size:.875rem;line-height:1.5;color:#fff;background-color:rgba(40,167,69,.9);border-radius:.25rem}.is-valid~.valid-feedback,.is-valid~.valid-tooltip,.was-validated :valid~.valid-feedback,.was-validated :valid~.valid-tooltip{display:block}.form-control.is-valid,.was-validated .form-control:valid{border-color:#28a745;padding-right:calc(1.5em + .75rem);background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='8' height='8' viewBox='0 0 8 8'%3e%3cpath fill='%2328a745' d='M2.3 6.73L.6 4.53c-.4-1.04.46-1.4 1.1-.8l1.1 1.4 3.4-3.8c.6-.63 1.6-.27 1.2.7l-4 4.6c-.43.5-.8.4-1.1.1z'/%3e%3c/svg%3e");background-repeat:no-repeat;background-position:right calc(.375em + .1875rem) center;background-size:calc(.75em + .375rem) calc(.75em + .375rem)}.form-control.is-valid:focus,.was-validated .form-control:valid:focus{border-color:#28a745;box-shadow:0 0 0 .2rem rgba(40,167,69,.25)}.was-validated textarea.form-control:valid,textarea.form-control.is-valid{padding-right:calc(1.5em + .75rem);background-position:top calc(.375em + .1875rem) right calc(.375em + .1875rem)}.custom-select.is-valid,.was-validated .custom-select:valid{border-color:#28a745;padding-right:calc(.75em + 2.3125rem);background:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='4' height='5' viewBox='0 0 4 5'%3e%3cpath fill='%23343a40' d='M2 0L0 2h4zm0 5L0 3h4z'/%3e%3c/svg%3e") no-repeat right .75rem center/8px 10px,url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='8' height='8' viewBox='0 0 8 8'%3e%3cpath fill='%2328a745' d='M2.3 6.73L.6 4.53c-.4-1.04.46-1.4 1.1-.8l1.1 1.4 3.4-3.8c.6-.63 1.6-.27 1.2.7l-4 4.6c-.43.5-.8.4-1.1.1z'/%3e%3c/svg%3e") #fff no-repeat center right 1.75rem/calc(.75em + .375rem) calc(.75em + .375rem)}.custom-select.is-valid:focus,.was-validated .custom-select:valid:focus{border-color:#28a745;box-shadow:0 0 0 .2rem rgba(40,167,69,.25)}.form-check-input.is-valid~.form-check-label,.was-validated .form-check-input:valid~.form-check-label{color:#28a745}.form-check-input.is-valid~.valid-feedback,.form-check-input.is-valid~.valid-tooltip,.was-validated .form-check-input:valid~.valid-feedback,.was-validated .form-check-input:valid~.valid-tooltip{display:block}.custom-control-input.is-valid~.custom-control-label,.was-validated .custom-control-input:valid~.custom-control-label{color:#28a745}.custom-control-input.is-valid~.custom-control-label::before,.was-validated .custom-control-input:valid~.custom-control-label::before{border-color:#28a745}.custom-control-input.is-valid:checked~.custom-control-label::before,.was-validated .custom-control-input:valid:checked~.custom-control-label::before{border-color:#34ce57;background-color:#34ce57}.custom-control-input.is-valid:focus~.custom-control-label::before,.was-validated .custom-control-input:valid:focus~.custom-control-label::before{box-shadow:0 0 0 .2rem rgba(40,167,69,.25)}.custom-control-input.is-valid:focus:not(:checked)~.custom-control-label::before,.was-validated .custom-control-input:valid:focus:not(:checked)~.custom-control-label::before{border-color:#28a745}.custom-file-input.is-valid~.custom-file-label,.was-validated .custom-file-input:valid~.custom-file-label{border-color:#28a745}.custom-file-input.is-valid:focus~.custom-file-label,.was-validated .custom-file-input:valid:focus~.custom-file-label{border-color:#28a745;box-shadow:0 0 0 .2rem rgba(40,167,69,.25)}.invalid-feedback{display:none;width:100%;margin-top:.25rem;font-size:80%;color:#dc3545}.invalid-tooltip{position:absolute;top:100%;z-index:5;display:none;max-width:100%;padding:.25rem .5rem;margin-top:.1rem;font-size:.875rem;line-height:1.5;color:#fff;background-color:rgba(220,53,69,.9);border-radius:.25rem}.is-invalid~.invalid-feedback,.is-invalid~.invalid-tooltip,.was-validated :invalid~.invalid-feedback,.was-validated :invalid~.invalid-tooltip{display:block}.form-control.is-invalid,.was-validated .form-control:invalid{border-color:#dc3545;padding-right:calc(1.5em + .75rem);background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' fill='none' stroke='%23dc3545' viewBox='0 0 12 12'%3e%3ccircle cx='6' cy='6' r='4.5'/%3e%3cpath stroke-linejoin='round' d='M5.8 3.6h.4L6 6.5z'/%3e%3ccircle cx='6' cy='8.2' r='.6' fill='%23dc3545' stroke='none'/%3e%3c/svg%3e");background-repeat:no-repeat;background-position:right calc(.375em + .1875rem) center;background-size:calc(.75em + .375rem) calc(.75em + .375rem)}.form-control.is-invalid:focus,.was-validated .form-control:invalid:focus{border-color:#dc3545;box-shadow:0 0 0 .2rem rgba(220,53,69,.25)}.was-validated textarea.form-control:invalid,textarea.form-control.is-invalid{padding-right:calc(1.5em + .75rem);background-position:top calc(.375em + .1875rem) right calc(.375em + .1875rem)}.custom-select.is-invalid,.was-validated .custom-select:invalid{border-color:#dc3545;padding-right:calc(.75em + 2.3125rem);background:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='4' height='5' viewBox='0 0 4 5'%3e%3cpath fill='%23343a40' d='M2 0L0 2h4zm0 5L0 3h4z'/%3e%3c/svg%3e") no-repeat right .75rem center/8px 10px,url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' fill='none' stroke='%23dc3545' viewBox='0 0 12 12'%3e%3ccircle cx='6' cy='6' r='4.5'/%3e%3cpath stroke-linejoin='round' d='M5.8 3.6h.4L6 6.5z'/%3e%3ccircle cx='6' cy='8.2' r='.6' fill='%23dc3545' stroke='none'/%3e%3c/svg%3e") #fff no-repeat center right 1.75rem/calc(.75em + .375rem) calc(.75em + .375rem)}.custom-select.is-invalid:focus,.was-validated .custom-select:invalid:focus{border-color:#dc3545;box-shadow:0 0 0 .2rem rgba(220,53,69,.25)}.form-check-input.is-invalid~.form-check-label,.was-validated .form-check-input:invalid~.form-check-label{color:#dc3545}.form-check-input.is-invalid~.invalid-feedback,.form-check-input.is-invalid~.invalid-tooltip,.was-validated .form-check-input:invalid~.invalid-feedback,.was-validated .form-check-input:invalid~.invalid-tooltip{display:block}.custom-control-input.is-invalid~.custom-control-label,.was-validated .custom-control-input:invalid~.custom-control-label{color:#dc3545}.custom-control-input.is-invalid~.custom-control-label::before,.was-validated .custom-control-input:invalid~.custom-control-label::before{border-color:#dc3545}.custom-control-input.is-invalid:checked~.custom-control-label::before,.was-validated .custom-control-input:invalid:checked~.custom-control-label::before{border-color:#e4606d;background-color:#e4606d}.custom-control-input.is-invalid:focus~.custom-control-label::before,.was-validated .custom-control-input:invalid:focus~.custom-control-label::before{box-shadow:0 0 0 .2rem rgba(220,53,69,.25)}.custom-control-input.is-invalid:focus:not(:checked)~.custom-control-label::before,.was-validated .custom-control-input:invalid:focus:not(:checked)~.custom-control-label::before{border-color:#dc3545}.custom-file-input.is-invalid~.custom-file-label,.was-validated .custom-file-input:invalid~.custom-file-label{border-color:#dc3545}.custom-file-input.is-invalid:focus~.custom-file-label,.was-validated .custom-file-input:invalid:focus~.custom-file-label{border-color:#dc3545;box-shadow:0 0 0 .2rem rgba(220,53,69,.25)}.form-inline{display:-ms-flexbox;display:flex;-ms-flex-flow:row wrap;flex-flow:row wrap;-ms-flex-align:center;align-items:center}.form-inline .form-check{width:100%}@media (min-width:576px){.form-inline label{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;-ms-flex-pack:center;justify-content:center;margin-bottom:0}.form-inline .form-group{display:-ms-flexbox;display:flex;-ms-flex:0 0 auto;flex:0 0 auto;-ms-flex-flow:row wrap;flex-flow:row wrap;-ms-flex-align:center;align-items:center;margin-bottom:0}.form-inline .form-control{display:inline-block;width:auto;vertical-align:middle}.form-inline .form-control-plaintext{display:inline-block}.form-inline .custom-select,.form-inline .input-group{width:auto}.form-inline .form-check{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;-ms-flex-pack:center;justify-content:center;width:auto;padding-left:0}.form-inline .form-check-input{position:relative;-ms-flex-negative:0;flex-shrink:0;margin-top:0;margin-right:.25rem;margin-left:0}.form-inline .custom-control{-ms-flex-align:center;align-items:center;-ms-flex-pack:center;justify-content:center}.form-inline .custom-control-label{margin-bottom:0}}.btn{display:inline-block;font-weight:400;color:#212529;text-align:center;vertical-align:middle;cursor:pointer;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;background-color:transparent;border:1px solid transparent;padding:.375rem .75rem;font-size:1rem;line-height:1.5;border-radius:.25rem;transition:color .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out}@media (prefers-reduced-motion:reduce){.btn{transition:none}}.btn:hover{color:#212529;text-decoration:none}.btn.focus,.btn:focus{outline:0;box-shadow:0 0 0 .2rem rgba(0,123,255,.25)}.btn.disabled,.btn:disabled{opacity:.65}a.btn.disabled,fieldset:disabled a.btn{pointer-events:none}.btn-primary{color:#fff;background-color:#007bff;border-color:#007bff}.btn-primary:hover{color:#fff;background-color:#0069d9;border-color:#0062cc}.btn-primary.focus,.btn-primary:focus{color:#fff;background-color:#0069d9;border-color:#0062cc;box-shadow:0 0 0 .2rem rgba(38,143,255,.5)}.btn-primary.disabled,.btn-primary:disabled{color:#fff;background-color:#007bff;border-color:#007bff}.btn-primary:not(:disabled):not(.disabled).active,.btn-primary:not(:disabled):not(.disabled):active,.show>.btn-primary.dropdown-toggle{color:#fff;background-color:#0062cc;border-color:#005cbf}.btn-primary:not(:disabled):not(.disabled).active:focus,.btn-primary:not(:disabled):not(.disabled):active:focus,.show>.btn-primary.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(38,143,255,.5)}.btn-secondary{color:#fff;background-color:#6c757d;border-color:#6c757d}.btn-secondary:hover{color:#fff;background-color:#5a6268;border-color:#545b62}.btn-secondary.focus,.btn-secondary:focus{color:#fff;background-color:#5a6268;border-color:#545b62;box-shadow:0 0 0 .2rem rgba(130,138,145,.5)}.btn-secondary.disabled,.btn-secondary:disabled{color:#fff;background-color:#6c757d;border-color:#6c757d}.btn-secondary:not(:disabled):not(.disabled).active,.btn-secondary:not(:disabled):not(.disabled):active,.show>.btn-secondary.dropdown-toggle{color:#fff;background-color:#545b62;border-color:#4e555b}.btn-secondary:not(:disabled):not(.disabled).active:focus,.btn-secondary:not(:disabled):not(.disabled):active:focus,.show>.btn-secondary.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(130,138,145,.5)}.btn-success{color:#fff;background-color:#28a745;border-color:#28a745}.btn-success:hover{color:#fff;background-color:#218838;border-color:#1e7e34}.btn-success.focus,.btn-success:focus{color:#fff;background-color:#218838;border-color:#1e7e34;box-shadow:0 0 0 .2rem rgba(72,180,97,.5)}.btn-success.disabled,.btn-success:disabled{color:#fff;background-color:#28a745;border-color:#28a745}.btn-success:not(:disabled):not(.disabled).active,.btn-success:not(:disabled):not(.disabled):active,.show>.btn-success.dropdown-toggle{color:#fff;background-color:#1e7e34;border-color:#1c7430}.btn-success:not(:disabled):not(.disabled).active:focus,.btn-success:not(:disabled):not(.disabled):active:focus,.show>.btn-success.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(72,180,97,.5)}.btn-info{color:#fff;background-color:#17a2b8;border-color:#17a2b8}.btn-info:hover{color:#fff;background-color:#138496;border-color:#117a8b}.btn-info.focus,.btn-info:focus{color:#fff;background-color:#138496;border-color:#117a8b;box-shadow:0 0 0 .2rem rgba(58,176,195,.5)}.btn-info.disabled,.btn-info:disabled{color:#fff;background-color:#17a2b8;border-color:#17a2b8}.btn-info:not(:disabled):not(.disabled).active,.btn-info:not(:disabled):not(.disabled):active,.show>.btn-info.dropdown-toggle{color:#fff;background-color:#117a8b;border-color:#10707f}.btn-info:not(:disabled):not(.disabled).active:focus,.btn-info:not(:disabled):not(.disabled):active:focus,.show>.btn-info.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(58,176,195,.5)}.btn-warning{color:#212529;background-color:#ffc107;border-color:#ffc107}.btn-warning:hover{color:#212529;background-color:#e0a800;border-color:#d39e00}.btn-warning.focus,.btn-warning:focus{color:#212529;background-color:#e0a800;border-color:#d39e00;box-shadow:0 0 0 .2rem rgba(222,170,12,.5)}.btn-warning.disabled,.btn-warning:disabled{color:#212529;background-color:#ffc107;border-color:#ffc107}.btn-warning:not(:disabled):not(.disabled).active,.btn-warning:not(:disabled):not(.disabled):active,.show>.btn-warning.dropdown-toggle{color:#212529;background-color:#d39e00;border-color:#c69500}.btn-warning:not(:disabled):not(.disabled).active:focus,.btn-warning:not(:disabled):not(.disabled):active:focus,.show>.btn-warning.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(222,170,12,.5)}.btn-danger{color:#fff;background-color:#dc3545;border-color:#dc3545}.btn-danger:hover{color:#fff;background-color:#c82333;border-color:#bd2130}.btn-danger.focus,.btn-danger:focus{color:#fff;background-color:#c82333;border-color:#bd2130;box-shadow:0 0 0 .2rem rgba(225,83,97,.5)}.btn-danger.disabled,.btn-danger:disabled{color:#fff;background-color:#dc3545;border-color:#dc3545}.btn-danger:not(:disabled):not(.disabled).active,.btn-danger:not(:disabled):not(.disabled):active,.show>.btn-danger.dropdown-toggle{color:#fff;background-color:#bd2130;border-color:#b21f2d}.btn-danger:not(:disabled):not(.disabled).active:focus,.btn-danger:not(:disabled):not(.disabled):active:focus,.show>.btn-danger.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(225,83,97,.5)}.btn-light{color:#212529;background-color:#f8f9fa;border-color:#f8f9fa}.btn-light:hover{color:#212529;background-color:#e2e6ea;border-color:#dae0e5}.btn-light.focus,.btn-light:focus{color:#212529;background-color:#e2e6ea;border-color:#dae0e5;box-shadow:0 0 0 .2rem rgba(216,217,219,.5)}.btn-light.disabled,.btn-light:disabled{color:#212529;background-color:#f8f9fa;border-color:#f8f9fa}.btn-light:not(:disabled):not(.disabled).active,.btn-light:not(:disabled):not(.disabled):active,.show>.btn-light.dropdown-toggle{color:#212529;background-color:#dae0e5;border-color:#d3d9df}.btn-light:not(:disabled):not(.disabled).active:focus,.btn-light:not(:disabled):not(.disabled):active:focus,.show>.btn-light.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(216,217,219,.5)}.btn-dark{color:#fff;background-color:#343a40;border-color:#343a40}.btn-dark:hover{color:#fff;background-color:#23272b;border-color:#1d2124}.btn-dark.focus,.btn-dark:focus{color:#fff;background-color:#23272b;border-color:#1d2124;box-shadow:0 0 0 .2rem rgba(82,88,93,.5)}.btn-dark.disabled,.btn-dark:disabled{color:#fff;background-color:#343a40;border-color:#343a40}.btn-dark:not(:disabled):not(.disabled).active,.btn-dark:not(:disabled):not(.disabled):active,.show>.btn-dark.dropdown-toggle{color:#fff;background-color:#1d2124;border-color:#171a1d}.btn-dark:not(:disabled):not(.disabled).active:focus,.btn-dark:not(:disabled):not(.disabled):active:focus,.show>.btn-dark.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(82,88,93,.5)}.btn-outline-primary{color:#007bff;border-color:#007bff}.btn-outline-primary:hover{color:#fff;background-color:#007bff;border-color:#007bff}.btn-outline-primary.focus,.btn-outline-primary:focus{box-shadow:0 0 0 .2rem rgba(0,123,255,.5)}.btn-outline-primary.disabled,.btn-outline-primary:disabled{color:#007bff;background-color:transparent}.btn-outline-primary:not(:disabled):not(.disabled).active,.btn-outline-primary:not(:disabled):not(.disabled):active,.show>.btn-outline-primary.dropdown-toggle{color:#fff;background-color:#007bff;border-color:#007bff}.btn-outline-primary:not(:disabled):not(.disabled).active:focus,.btn-outline-primary:not(:disabled):not(.disabled):active:focus,.show>.btn-outline-primary.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(0,123,255,.5)}.btn-outline-secondary{color:#6c757d;border-color:#6c757d}.btn-outline-secondary:hover{color:#fff;background-color:#6c757d;border-color:#6c757d}.btn-outline-secondary.focus,.btn-outline-secondary:focus{box-shadow:0 0 0 .2rem rgba(108,117,125,.5)}.btn-outline-secondary.disabled,.btn-outline-secondary:disabled{color:#6c757d;background-color:transparent}.btn-outline-secondary:not(:disabled):not(.disabled).active,.btn-outline-secondary:not(:disabled):not(.disabled):active,.show>.btn-outline-secondary.dropdown-toggle{color:#fff;background-color:#6c757d;border-color:#6c757d}.btn-outline-secondary:not(:disabled):not(.disabled).active:focus,.btn-outline-secondary:not(:disabled):not(.disabled):active:focus,.show>.btn-outline-secondary.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(108,117,125,.5)}.btn-outline-success{color:#28a745;border-color:#28a745}.btn-outline-success:hover{color:#fff;background-color:#28a745;border-color:#28a745}.btn-outline-success.focus,.btn-outline-success:focus{box-shadow:0 0 0 .2rem rgba(40,167,69,.5)}.btn-outline-success.disabled,.btn-outline-success:disabled{color:#28a745;background-color:transparent}.btn-outline-success:not(:disabled):not(.disabled).active,.btn-outline-success:not(:disabled):not(.disabled):active,.show>.btn-outline-success.dropdown-toggle{color:#fff;background-color:#28a745;border-color:#28a745}.btn-outline-success:not(:disabled):not(.disabled).active:focus,.btn-outline-success:not(:disabled):not(.disabled):active:focus,.show>.btn-outline-success.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(40,167,69,.5)}.btn-outline-info{color:#17a2b8;border-color:#17a2b8}.btn-outline-info:hover{color:#fff;background-color:#17a2b8;border-color:#17a2b8}.btn-outline-info.focus,.btn-outline-info:focus{box-shadow:0 0 0 .2rem rgba(23,162,184,.5)}.btn-outline-info.disabled,.btn-outline-info:disabled{color:#17a2b8;background-color:transparent}.btn-outline-info:not(:disabled):not(.disabled).active,.btn-outline-info:not(:disabled):not(.disabled):active,.show>.btn-outline-info.dropdown-toggle{color:#fff;background-color:#17a2b8;border-color:#17a2b8}.btn-outline-info:not(:disabled):not(.disabled).active:focus,.btn-outline-info:not(:disabled):not(.disabled):active:focus,.show>.btn-outline-info.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(23,162,184,.5)}.btn-outline-warning{color:#ffc107;border-color:#ffc107}.btn-outline-warning:hover{color:#212529;background-color:#ffc107;border-color:#ffc107}.btn-outline-warning.focus,.btn-outline-warning:focus{box-shadow:0 0 0 .2rem rgba(255,193,7,.5)}.btn-outline-warning.disabled,.btn-outline-warning:disabled{color:#ffc107;background-color:transparent}.btn-outline-warning:not(:disabled):not(.disabled).active,.btn-outline-warning:not(:disabled):not(.disabled):active,.show>.btn-outline-warning.dropdown-toggle{color:#212529;background-color:#ffc107;border-color:#ffc107}.btn-outline-warning:not(:disabled):not(.disabled).active:focus,.btn-outline-warning:not(:disabled):not(.disabled):active:focus,.show>.btn-outline-warning.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(255,193,7,.5)}.btn-outline-danger{color:#dc3545;border-color:#dc3545}.btn-outline-danger:hover{color:#fff;background-color:#dc3545;border-color:#dc3545}.btn-outline-danger.focus,.btn-outline-danger:focus{box-shadow:0 0 0 .2rem rgba(220,53,69,.5)}.btn-outline-danger.disabled,.btn-outline-danger:disabled{color:#dc3545;background-color:transparent}.btn-outline-danger:not(:disabled):not(.disabled).active,.btn-outline-danger:not(:disabled):not(.disabled):active,.show>.btn-outline-danger.dropdown-toggle{color:#fff;background-color:#dc3545;border-color:#dc3545}.btn-outline-danger:not(:disabled):not(.disabled).active:focus,.btn-outline-danger:not(:disabled):not(.disabled):active:focus,.show>.btn-outline-danger.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(220,53,69,.5)}.btn-outline-light{color:#f8f9fa;border-color:#f8f9fa}.btn-outline-light:hover{color:#212529;background-color:#f8f9fa;border-color:#f8f9fa}.btn-outline-light.focus,.btn-outline-light:focus{box-shadow:0 0 0 .2rem rgba(248,249,250,.5)}.btn-outline-light.disabled,.btn-outline-light:disabled{color:#f8f9fa;background-color:transparent}.btn-outline-light:not(:disabled):not(.disabled).active,.btn-outline-light:not(:disabled):not(.disabled):active,.show>.btn-outline-light.dropdown-toggle{color:#212529;background-color:#f8f9fa;border-color:#f8f9fa}.btn-outline-light:not(:disabled):not(.disabled).active:focus,.btn-outline-light:not(:disabled):not(.disabled):active:focus,.show>.btn-outline-light.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(248,249,250,.5)}.btn-outline-dark{color:#343a40;border-color:#343a40}.btn-outline-dark:hover{color:#fff;background-color:#343a40;border-color:#343a40}.btn-outline-dark.focus,.btn-outline-dark:focus{box-shadow:0 0 0 .2rem rgba(52,58,64,.5)}.btn-outline-dark.disabled,.btn-outline-dark:disabled{color:#343a40;background-color:transparent}.btn-outline-dark:not(:disabled):not(.disabled).active,.btn-outline-dark:not(:disabled):not(.disabled):active,.show>.btn-outline-dark.dropdown-toggle{color:#fff;background-color:#343a40;border-color:#343a40}.btn-outline-dark:not(:disabled):not(.disabled).active:focus,.btn-outline-dark:not(:disabled):not(.disabled):active:focus,.show>.btn-outline-dark.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(52,58,64,.5)}.btn-link{font-weight:400;color:#007bff;text-decoration:none}.btn-link:hover{color:#0056b3;text-decoration:underline}.btn-link.focus,.btn-link:focus{text-decoration:underline;box-shadow:none}.btn-link.disabled,.btn-link:disabled{color:#6c757d;pointer-events:none}.btn-group-lg>.btn,.btn-lg{padding:.5rem 1rem;font-size:1.25rem;line-height:1.5;border-radius:.3rem}.btn-group-sm>.btn,.btn-sm{padding:.25rem .5rem;font-size:.875rem;line-height:1.5;border-radius:.2rem}.btn-block{display:block;width:100%}.btn-block+.btn-block{margin-top:.5rem}input[type=button].btn-block,input[type=reset].btn-block,input[type=submit].btn-block{width:100%}.fade{transition:opacity .15s linear}@media (prefers-reduced-motion:reduce){.fade{transition:none}}.fade:not(.show){opacity:0}.collapse:not(.show){display:none}.collapsing{position:relative;height:0;overflow:hidden;transition:height .35s ease}@media (prefers-reduced-motion:reduce){.collapsing{transition:none}}.dropdown,.dropleft,.dropright,.dropup{position:relative}.dropdown-toggle{white-space:nowrap}.dropdown-toggle::after{display:inline-block;margin-left:.255em;vertical-align:.255em;content:"";border-top:.3em solid;border-right:.3em solid transparent;border-bottom:0;border-left:.3em solid transparent}.dropdown-toggle:empty::after{margin-left:0}.dropdown-menu{position:absolute;top:100%;left:0;z-index:1000;display:none;float:left;min-width:10rem;padding:.5rem 0;margin:.125rem 0 0;font-size:1rem;color:#212529;text-align:left;list-style:none;background-color:#fff;background-clip:padding-box;border:1px solid rgba(0,0,0,.15);border-radius:.25rem}.dropdown-menu-left{right:auto;left:0}.dropdown-menu-right{right:0;left:auto}@media (min-width:576px){.dropdown-menu-sm-left{right:auto;left:0}.dropdown-menu-sm-right{right:0;left:auto}}@media (min-width:768px){.dropdown-menu-md-left{right:auto;left:0}.dropdown-menu-md-right{right:0;left:auto}}@media (min-width:992px){.dropdown-menu-lg-left{right:auto;left:0}.dropdown-menu-lg-right{right:0;left:auto}}@media (min-width:1200px){.dropdown-menu-xl-left{right:auto;left:0}.dropdown-menu-xl-right{right:0;left:auto}}.dropup .dropdown-menu{top:auto;bottom:100%;margin-top:0;margin-bottom:.125rem}.dropup .dropdown-toggle::after{display:inline-block;margin-left:.255em;vertical-align:.255em;content:"";border-top:0;border-right:.3em solid transparent;border-bottom:.3em solid;border-left:.3em solid transparent}.dropup .dropdown-toggle:empty::after{margin-left:0}.dropright .dropdown-menu{top:0;right:auto;left:100%;margin-top:0;margin-left:.125rem}.dropright .dropdown-toggle::after{display:inline-block;margin-left:.255em;vertical-align:.255em;content:"";border-top:.3em solid transparent;border-right:0;border-bottom:.3em solid transparent;border-left:.3em solid}.dropright .dropdown-toggle:empty::after{margin-left:0}.dropright .dropdown-toggle::after{vertical-align:0}.dropleft .dropdown-menu{top:0;right:100%;left:auto;margin-top:0;margin-right:.125rem}.dropleft .dropdown-toggle::after{display:inline-block;margin-left:.255em;vertical-align:.255em;content:""}.dropleft .dropdown-toggle::after{display:none}.dropleft .dropdown-toggle::before{display:inline-block;margin-right:.255em;vertical-align:.255em;content:"";border-top:.3em solid transparent;border-right:.3em solid;border-bottom:.3em solid transparent}.dropleft .dropdown-toggle:empty::after{margin-left:0}.dropleft .dropdown-toggle::before{vertical-align:0}.dropdown-menu[x-placement^=bottom],.dropdown-menu[x-placement^=left],.dropdown-menu[x-placement^=right],.dropdown-menu[x-placement^=top]{right:auto;bottom:auto}.dropdown-divider{height:0;margin:.5rem 0;overflow:hidden;border-top:1px solid #e9ecef}.dropdown-item{display:block;width:100%;padding:.25rem 1.5rem;clear:both;font-weight:400;color:#212529;text-align:inherit;white-space:nowrap;background-color:transparent;border:0}.dropdown-item:focus,.dropdown-item:hover{color:#16181b;text-decoration:none;background-color:#f8f9fa}.dropdown-item.active,.dropdown-item:active{color:#fff;text-decoration:none;background-color:#007bff}.dropdown-item.disabled,.dropdown-item:disabled{color:#6c757d;pointer-events:none;background-color:transparent}.dropdown-menu.show{display:block}.dropdown-header{display:block;padding:.5rem 1.5rem;margin-bottom:0;font-size:.875rem;color:#6c757d;white-space:nowrap}.dropdown-item-text{display:block;padding:.25rem 1.5rem;color:#212529}.btn-group,.btn-group-vertical{position:relative;display:-ms-inline-flexbox;display:inline-flex;vertical-align:middle}.btn-group-vertical>.btn,.btn-group>.btn{position:relative;-ms-flex:1 1 auto;flex:1 1 auto}.btn-group-vertical>.btn:hover,.btn-group>.btn:hover{z-index:1}.btn-group-vertical>.btn.active,.btn-group-vertical>.btn:active,.btn-group-vertical>.btn:focus,.btn-group>.btn.active,.btn-group>.btn:active,.btn-group>.btn:focus{z-index:1}.btn-toolbar{display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;-ms-flex-pack:start;justify-content:flex-start}.btn-toolbar .input-group{width:auto}.btn-group>.btn-group:not(:first-child),.btn-group>.btn:not(:first-child){margin-left:-1px}.btn-group>.btn-group:not(:last-child)>.btn,.btn-group>.btn:not(:last-child):not(.dropdown-toggle){border-top-right-radius:0;border-bottom-right-radius:0}.btn-group>.btn-group:not(:first-child)>.btn,.btn-group>.btn:not(:first-child){border-top-left-radius:0;border-bottom-left-radius:0}.dropdown-toggle-split{padding-right:.5625rem;padding-left:.5625rem}.dropdown-toggle-split::after,.dropright .dropdown-toggle-split::after,.dropup .dropdown-toggle-split::after{margin-left:0}.dropleft .dropdown-toggle-split::before{margin-right:0}.btn-group-sm>.btn+.dropdown-toggle-split,.btn-sm+.dropdown-toggle-split{padding-right:.375rem;padding-left:.375rem}.btn-group-lg>.btn+.dropdown-toggle-split,.btn-lg+.dropdown-toggle-split{padding-right:.75rem;padding-left:.75rem}.btn-group-vertical{-ms-flex-direction:column;flex-direction:column;-ms-flex-align:start;align-items:flex-start;-ms-flex-pack:center;justify-content:center}.btn-group-vertical>.btn,.btn-group-vertical>.btn-group{width:100%}.btn-group-vertical>.btn-group:not(:first-child),.btn-group-vertical>.btn:not(:first-child){margin-top:-1px}.btn-group-vertical>.btn-group:not(:last-child)>.btn,.btn-group-vertical>.btn:not(:last-child):not(.dropdown-toggle){border-bottom-right-radius:0;border-bottom-left-radius:0}.btn-group-vertical>.btn-group:not(:first-child)>.btn,.btn-group-vertical>.btn:not(:first-child){border-top-left-radius:0;border-top-right-radius:0}.btn-group-toggle>.btn,.btn-group-toggle>.btn-group>.btn{margin-bottom:0}.btn-group-toggle>.btn input[type=checkbox],.btn-group-toggle>.btn input[type=radio],.btn-group-toggle>.btn-group>.btn input[type=checkbox],.btn-group-toggle>.btn-group>.btn input[type=radio]{position:absolute;clip:rect(0,0,0,0);pointer-events:none}.input-group{position:relative;display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;-ms-flex-align:stretch;align-items:stretch;width:100%}.input-group>.custom-file,.input-group>.custom-select,.input-group>.form-control,.input-group>.form-control-plaintext{position:relative;-ms-flex:1 1 0%;flex:1 1 0%;min-width:0;margin-bottom:0}.input-group>.custom-file+.custom-file,.input-group>.custom-file+.custom-select,.input-group>.custom-file+.form-control,.input-group>.custom-select+.custom-file,.input-group>.custom-select+.custom-select,.input-group>.custom-select+.form-control,.input-group>.form-control+.custom-file,.input-group>.form-control+.custom-select,.input-group>.form-control+.form-control,.input-group>.form-control-plaintext+.custom-file,.input-group>.form-control-plaintext+.custom-select,.input-group>.form-control-plaintext+.form-control{margin-left:-1px}.input-group>.custom-file .custom-file-input:focus~.custom-file-label,.input-group>.custom-select:focus,.input-group>.form-control:focus{z-index:3}.input-group>.custom-file .custom-file-input:focus{z-index:4}.input-group>.custom-select:not(:last-child),.input-group>.form-control:not(:last-child){border-top-right-radius:0;border-bottom-right-radius:0}.input-group>.custom-select:not(:first-child),.input-group>.form-control:not(:first-child){border-top-left-radius:0;border-bottom-left-radius:0}.input-group>.custom-file{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center}.input-group>.custom-file:not(:last-child) .custom-file-label,.input-group>.custom-file:not(:last-child) .custom-file-label::after{border-top-right-radius:0;border-bottom-right-radius:0}.input-group>.custom-file:not(:first-child) .custom-file-label{border-top-left-radius:0;border-bottom-left-radius:0}.input-group-append,.input-group-prepend{display:-ms-flexbox;display:flex}.input-group-append .btn,.input-group-prepend .btn{position:relative;z-index:2}.input-group-append .btn:focus,.input-group-prepend .btn:focus{z-index:3}.input-group-append .btn+.btn,.input-group-append .btn+.input-group-text,.input-group-append .input-group-text+.btn,.input-group-append .input-group-text+.input-group-text,.input-group-prepend .btn+.btn,.input-group-prepend .btn+.input-group-text,.input-group-prepend .input-group-text+.btn,.input-group-prepend .input-group-text+.input-group-text{margin-left:-1px}.input-group-prepend{margin-right:-1px}.input-group-append{margin-left:-1px}.input-group-text{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;padding:.375rem .75rem;margin-bottom:0;font-size:1rem;font-weight:400;line-height:1.5;color:#495057;text-align:center;white-space:nowrap;background-color:#e9ecef;border:1px solid #ced4da;border-radius:.25rem}.input-group-text input[type=checkbox],.input-group-text input[type=radio]{margin-top:0}.input-group-lg>.custom-select,.input-group-lg>.form-control:not(textarea){height:calc(1.5em + 1rem + 2px)}.input-group-lg>.custom-select,.input-group-lg>.form-control,.input-group-lg>.input-group-append>.btn,.input-group-lg>.input-group-append>.input-group-text,.input-group-lg>.input-group-prepend>.btn,.input-group-lg>.input-group-prepend>.input-group-text{padding:.5rem 1rem;font-size:1.25rem;line-height:1.5;border-radius:.3rem}.input-group-sm>.custom-select,.input-group-sm>.form-control:not(textarea){height:calc(1.5em + .5rem + 2px)}.input-group-sm>.custom-select,.input-group-sm>.form-control,.input-group-sm>.input-group-append>.btn,.input-group-sm>.input-group-append>.input-group-text,.input-group-sm>.input-group-prepend>.btn,.input-group-sm>.input-group-prepend>.input-group-text{padding:.25rem .5rem;font-size:.875rem;line-height:1.5;border-radius:.2rem}.input-group-lg>.custom-select,.input-group-sm>.custom-select{padding-right:1.75rem}.input-group>.input-group-append:last-child>.btn:not(:last-child):not(.dropdown-toggle),.input-group>.input-group-append:last-child>.input-group-text:not(:last-child),.input-group>.input-group-append:not(:last-child)>.btn,.input-group>.input-group-append:not(:last-child)>.input-group-text,.input-group>.input-group-prepend>.btn,.input-group>.input-group-prepend>.input-group-text{border-top-right-radius:0;border-bottom-right-radius:0}.input-group>.input-group-append>.btn,.input-group>.input-group-append>.input-group-text,.input-group>.input-group-prepend:first-child>.btn:not(:first-child),.input-group>.input-group-prepend:first-child>.input-group-text:not(:first-child),.input-group>.input-group-prepend:not(:first-child)>.btn,.input-group>.input-group-prepend:not(:first-child)>.input-group-text{border-top-left-radius:0;border-bottom-left-radius:0}.custom-control{position:relative;display:block;min-height:1.5rem;padding-left:1.5rem}.custom-control-inline{display:-ms-inline-flexbox;display:inline-flex;margin-right:1rem}.custom-control-input{position:absolute;left:0;z-index:-1;width:1rem;height:1.25rem;opacity:0}.custom-control-input:checked~.custom-control-label::before{color:#fff;border-color:#007bff;background-color:#007bff}.custom-control-input:focus~.custom-control-label::before{box-shadow:0 0 0 .2rem rgba(0,123,255,.25)}.custom-control-input:focus:not(:checked)~.custom-control-label::before{border-color:#80bdff}.custom-control-input:not(:disabled):active~.custom-control-label::before{color:#fff;background-color:#b3d7ff;border-color:#b3d7ff}.custom-control-input:disabled~.custom-control-label,.custom-control-input[disabled]~.custom-control-label{color:#6c757d}.custom-control-input:disabled~.custom-control-label::before,.custom-control-input[disabled]~.custom-control-label::before{background-color:#e9ecef}.custom-control-label{position:relative;margin-bottom:0;vertical-align:top}.custom-control-label::before{position:absolute;top:.25rem;left:-1.5rem;display:block;width:1rem;height:1rem;pointer-events:none;content:"";background-color:#fff;border:#adb5bd solid 1px}.custom-control-label::after{position:absolute;top:.25rem;left:-1.5rem;display:block;width:1rem;height:1rem;content:"";background:no-repeat 50%/50% 50%}.custom-checkbox .custom-control-label::before{border-radius:.25rem}.custom-checkbox .custom-control-input:checked~.custom-control-label::after{background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='8' height='8' viewBox='0 0 8 8'%3e%3cpath fill='%23fff' d='M6.564.75l-3.59 3.612-1.538-1.55L0 4.26l2.974 2.99L8 2.193z'/%3e%3c/svg%3e")}.custom-checkbox .custom-control-input:indeterminate~.custom-control-label::before{border-color:#007bff;background-color:#007bff}.custom-checkbox .custom-control-input:indeterminate~.custom-control-label::after{background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='4' height='4' viewBox='0 0 4 4'%3e%3cpath stroke='%23fff' d='M0 2h4'/%3e%3c/svg%3e")}.custom-checkbox .custom-control-input:disabled:checked~.custom-control-label::before{background-color:rgba(0,123,255,.5)}.custom-checkbox .custom-control-input:disabled:indeterminate~.custom-control-label::before{background-color:rgba(0,123,255,.5)}.custom-radio .custom-control-label::before{border-radius:50%}.custom-radio .custom-control-input:checked~.custom-control-label::after{background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='-4 -4 8 8'%3e%3ccircle r='3' fill='%23fff'/%3e%3c/svg%3e")}.custom-radio .custom-control-input:disabled:checked~.custom-control-label::before{background-color:rgba(0,123,255,.5)}.custom-switch{padding-left:2.25rem}.custom-switch .custom-control-label::before{left:-2.25rem;width:1.75rem;pointer-events:all;border-radius:.5rem}.custom-switch .custom-control-label::after{top:calc(.25rem + 2px);left:calc(-2.25rem + 2px);width:calc(1rem - 4px);height:calc(1rem - 4px);background-color:#adb5bd;border-radius:.5rem;transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out,-webkit-transform .15s ease-in-out;transition:transform .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;transition:transform .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out,-webkit-transform .15s ease-in-out}@media (prefers-reduced-motion:reduce){.custom-switch .custom-control-label::after{transition:none}}.custom-switch .custom-control-input:checked~.custom-control-label::after{background-color:#fff;-webkit-transform:translateX(.75rem);transform:translateX(.75rem)}.custom-switch .custom-control-input:disabled:checked~.custom-control-label::before{background-color:rgba(0,123,255,.5)}.custom-select{display:inline-block;width:100%;height:calc(1.5em + .75rem + 2px);padding:.375rem 1.75rem .375rem .75rem;font-size:1rem;font-weight:400;line-height:1.5;color:#495057;vertical-align:middle;background:#fff url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='4' height='5' viewBox='0 0 4 5'%3e%3cpath fill='%23343a40' d='M2 0L0 2h4zm0 5L0 3h4z'/%3e%3c/svg%3e") no-repeat right .75rem center/8px 10px;border:1px solid #ced4da;border-radius:.25rem;-webkit-appearance:none;-moz-appearance:none;appearance:none}.custom-select:focus{border-color:#80bdff;outline:0;box-shadow:0 0 0 .2rem rgba(0,123,255,.25)}.custom-select:focus::-ms-value{color:#495057;background-color:#fff}.custom-select[multiple],.custom-select[size]:not([size="1"]){height:auto;padding-right:.75rem;background-image:none}.custom-select:disabled{color:#6c757d;background-color:#e9ecef}.custom-select::-ms-expand{display:none}.custom-select:-moz-focusring{color:transparent;text-shadow:0 0 0 #495057}.custom-select-sm{height:calc(1.5em + .5rem + 2px);padding-top:.25rem;padding-bottom:.25rem;padding-left:.5rem;font-size:.875rem}.custom-select-lg{height:calc(1.5em + 1rem + 2px);padding-top:.5rem;padding-bottom:.5rem;padding-left:1rem;font-size:1.25rem}.custom-file{position:relative;display:inline-block;width:100%;height:calc(1.5em + .75rem + 2px);margin-bottom:0}.custom-file-input{position:relative;z-index:2;width:100%;height:calc(1.5em + .75rem + 2px);margin:0;opacity:0}.custom-file-input:focus~.custom-file-label{border-color:#80bdff;box-shadow:0 0 0 .2rem rgba(0,123,255,.25)}.custom-file-input:disabled~.custom-file-label,.custom-file-input[disabled]~.custom-file-label{background-color:#e9ecef}.custom-file-input:lang(en)~.custom-file-label::after{content:"Browse"}.custom-file-input~.custom-file-label[data-browse]::after{content:attr(data-browse)}.custom-file-label{position:absolute;top:0;right:0;left:0;z-index:1;height:calc(1.5em + .75rem + 2px);padding:.375rem .75rem;font-weight:400;line-height:1.5;color:#495057;background-color:#fff;border:1px solid #ced4da;border-radius:.25rem}.custom-file-label::after{position:absolute;top:0;right:0;bottom:0;z-index:3;display:block;height:calc(1.5em + .75rem);padding:.375rem .75rem;line-height:1.5;color:#495057;content:"Browse";background-color:#e9ecef;border-left:inherit;border-radius:0 .25rem .25rem 0}.custom-range{width:100%;height:1.4rem;padding:0;background-color:transparent;-webkit-appearance:none;-moz-appearance:none;appearance:none}.custom-range:focus{outline:0}.custom-range:focus::-webkit-slider-thumb{box-shadow:0 0 0 1px #fff,0 0 0 .2rem rgba(0,123,255,.25)}.custom-range:focus::-moz-range-thumb{box-shadow:0 0 0 1px #fff,0 0 0 .2rem rgba(0,123,255,.25)}.custom-range:focus::-ms-thumb{box-shadow:0 0 0 1px #fff,0 0 0 .2rem rgba(0,123,255,.25)}.custom-range::-moz-focus-outer{border:0}.custom-range::-webkit-slider-thumb{width:1rem;height:1rem;margin-top:-.25rem;background-color:#007bff;border:0;border-radius:1rem;-webkit-transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;-webkit-appearance:none;appearance:none}@media (prefers-reduced-motion:reduce){.custom-range::-webkit-slider-thumb{-webkit-transition:none;transition:none}}.custom-range::-webkit-slider-thumb:active{background-color:#b3d7ff}.custom-range::-webkit-slider-runnable-track{width:100%;height:.5rem;color:transparent;cursor:pointer;background-color:#dee2e6;border-color:transparent;border-radius:1rem}.custom-range::-moz-range-thumb{width:1rem;height:1rem;background-color:#007bff;border:0;border-radius:1rem;-moz-transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;-moz-appearance:none;appearance:none}@media (prefers-reduced-motion:reduce){.custom-range::-moz-range-thumb{-moz-transition:none;transition:none}}.custom-range::-moz-range-thumb:active{background-color:#b3d7ff}.custom-range::-moz-range-track{width:100%;height:.5rem;color:transparent;cursor:pointer;background-color:#dee2e6;border-color:transparent;border-radius:1rem}.custom-range::-ms-thumb{width:1rem;height:1rem;margin-top:0;margin-right:.2rem;margin-left:.2rem;background-color:#007bff;border:0;border-radius:1rem;-ms-transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;appearance:none}@media (prefers-reduced-motion:reduce){.custom-range::-ms-thumb{-ms-transition:none;transition:none}}.custom-range::-ms-thumb:active{background-color:#b3d7ff}.custom-range::-ms-track{width:100%;height:.5rem;color:transparent;cursor:pointer;background-color:transparent;border-color:transparent;border-width:.5rem}.custom-range::-ms-fill-lower{background-color:#dee2e6;border-radius:1rem}.custom-range::-ms-fill-upper{margin-right:15px;background-color:#dee2e6;border-radius:1rem}.custom-range:disabled::-webkit-slider-thumb{background-color:#adb5bd}.custom-range:disabled::-webkit-slider-runnable-track{cursor:default}.custom-range:disabled::-moz-range-thumb{background-color:#adb5bd}.custom-range:disabled::-moz-range-track{cursor:default}.custom-range:disabled::-ms-thumb{background-color:#adb5bd}.custom-control-label::before,.custom-file-label,.custom-select{transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out}@media (prefers-reduced-motion:reduce){.custom-control-label::before,.custom-file-label,.custom-select{transition:none}}.nav{display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;padding-left:0;margin-bottom:0;list-style:none}.nav-link{display:block;padding:.5rem 1rem}.nav-link:focus,.nav-link:hover{text-decoration:none}.nav-link.disabled{color:#6c757d;pointer-events:none;cursor:default}.nav-tabs{border-bottom:1px solid #dee2e6}.nav-tabs .nav-item{margin-bottom:-1px}.nav-tabs .nav-link{border:1px solid transparent;border-top-left-radius:.25rem;border-top-right-radius:.25rem}.nav-tabs .nav-link:focus,.nav-tabs .nav-link:hover{border-color:#e9ecef #e9ecef #dee2e6}.nav-tabs .nav-link.disabled{color:#6c757d;background-color:transparent;border-color:transparent}.nav-tabs .nav-item.show .nav-link,.nav-tabs .nav-link.active{color:#495057;background-color:#fff;border-color:#dee2e6 #dee2e6 #fff}.nav-tabs .dropdown-menu{margin-top:-1px;border-top-left-radius:0;border-top-right-radius:0}.nav-pills .nav-link{border-radius:.25rem}.nav-pills .nav-link.active,.nav-pills .show>.nav-link{color:#fff;background-color:#007bff}.nav-fill .nav-item{-ms-flex:1 1 auto;flex:1 1 auto;text-align:center}.nav-justified .nav-item{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;text-align:center}.tab-content>.tab-pane{display:none}.tab-content>.active{display:block}.navbar{position:relative;display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;-ms-flex-align:center;align-items:center;-ms-flex-pack:justify;justify-content:space-between;padding:.5rem 1rem}.navbar .container,.navbar .container-fluid,.navbar .container-lg,.navbar .container-md,.navbar .container-sm,.navbar .container-xl{display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;-ms-flex-align:center;align-items:center;-ms-flex-pack:justify;justify-content:space-between}.navbar-brand{display:inline-block;padding-top:.3125rem;padding-bottom:.3125rem;margin-right:1rem;font-size:1.25rem;line-height:inherit;white-space:nowrap}.navbar-brand:focus,.navbar-brand:hover{text-decoration:none}.navbar-nav{display:-ms-flexbox;display:flex;-ms-flex-direction:column;flex-direction:column;padding-left:0;margin-bottom:0;list-style:none}.navbar-nav .nav-link{padding-right:0;padding-left:0}.navbar-nav .dropdown-menu{position:static;float:none}.navbar-text{display:inline-block;padding-top:.5rem;padding-bottom:.5rem}.navbar-collapse{-ms-flex-preferred-size:100%;flex-basis:100%;-ms-flex-positive:1;flex-grow:1;-ms-flex-align:center;align-items:center}.navbar-toggler{padding:.25rem .75rem;font-size:1.25rem;line-height:1;background-color:transparent;border:1px solid transparent;border-radius:.25rem}.navbar-toggler:focus,.navbar-toggler:hover{text-decoration:none}.navbar-toggler-icon{display:inline-block;width:1.5em;height:1.5em;vertical-align:middle;content:"";background:no-repeat center center;background-size:100% 100%}@media (max-width:575.98px){.navbar-expand-sm>.container,.navbar-expand-sm>.container-fluid,.navbar-expand-sm>.container-lg,.navbar-expand-sm>.container-md,.navbar-expand-sm>.container-sm,.navbar-expand-sm>.container-xl{padding-right:0;padding-left:0}}@media (min-width:576px){.navbar-expand-sm{-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-pack:start;justify-content:flex-start}.navbar-expand-sm .navbar-nav{-ms-flex-direction:row;flex-direction:row}.navbar-expand-sm .navbar-nav .dropdown-menu{position:absolute}.navbar-expand-sm .navbar-nav .nav-link{padding-right:.5rem;padding-left:.5rem}.navbar-expand-sm>.container,.navbar-expand-sm>.container-fluid,.navbar-expand-sm>.container-lg,.navbar-expand-sm>.container-md,.navbar-expand-sm>.container-sm,.navbar-expand-sm>.container-xl{-ms-flex-wrap:nowrap;flex-wrap:nowrap}.navbar-expand-sm .navbar-collapse{display:-ms-flexbox!important;display:flex!important;-ms-flex-preferred-size:auto;flex-basis:auto}.navbar-expand-sm .navbar-toggler{display:none}}@media (max-width:767.98px){.navbar-expand-md>.container,.navbar-expand-md>.container-fluid,.navbar-expand-md>.container-lg,.navbar-expand-md>.container-md,.navbar-expand-md>.container-sm,.navbar-expand-md>.container-xl{padding-right:0;padding-left:0}}@media (min-width:768px){.navbar-expand-md{-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-pack:start;justify-content:flex-start}.navbar-expand-md .navbar-nav{-ms-flex-direction:row;flex-direction:row}.navbar-expand-md .navbar-nav .dropdown-menu{position:absolute}.navbar-expand-md .navbar-nav .nav-link{padding-right:.5rem;padding-left:.5rem}.navbar-expand-md>.container,.navbar-expand-md>.container-fluid,.navbar-expand-md>.container-lg,.navbar-expand-md>.container-md,.navbar-expand-md>.container-sm,.navbar-expand-md>.container-xl{-ms-flex-wrap:nowrap;flex-wrap:nowrap}.navbar-expand-md .navbar-collapse{display:-ms-flexbox!important;display:flex!important;-ms-flex-preferred-size:auto;flex-basis:auto}.navbar-expand-md .navbar-toggler{display:none}}@media (max-width:991.98px){.navbar-expand-lg>.container,.navbar-expand-lg>.container-fluid,.navbar-expand-lg>.container-lg,.navbar-expand-lg>.container-md,.navbar-expand-lg>.container-sm,.navbar-expand-lg>.container-xl{padding-right:0;padding-left:0}}@media (min-width:992px){.navbar-expand-lg{-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-pack:start;justify-content:flex-start}.navbar-expand-lg .navbar-nav{-ms-flex-direction:row;flex-direction:row}.navbar-expand-lg .navbar-nav .dropdown-menu{position:absolute}.navbar-expand-lg .navbar-nav .nav-link{padding-right:.5rem;padding-left:.5rem}.navbar-expand-lg>.container,.navbar-expand-lg>.container-fluid,.navbar-expand-lg>.container-lg,.navbar-expand-lg>.container-md,.navbar-expand-lg>.container-sm,.navbar-expand-lg>.container-xl{-ms-flex-wrap:nowrap;flex-wrap:nowrap}.navbar-expand-lg .navbar-collapse{display:-ms-flexbox!important;display:flex!important;-ms-flex-preferred-size:auto;flex-basis:auto}.navbar-expand-lg .navbar-toggler{display:none}}@media (max-width:1199.98px){.navbar-expand-xl>.container,.navbar-expand-xl>.container-fluid,.navbar-expand-xl>.container-lg,.navbar-expand-xl>.container-md,.navbar-expand-xl>.container-sm,.navbar-expand-xl>.container-xl{padding-right:0;padding-left:0}}@media (min-width:1200px){.navbar-expand-xl{-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-pack:start;justify-content:flex-start}.navbar-expand-xl .navbar-nav{-ms-flex-direction:row;flex-direction:row}.navbar-expand-xl .navbar-nav .dropdown-menu{position:absolute}.navbar-expand-xl .navbar-nav .nav-link{padding-right:.5rem;padding-left:.5rem}.navbar-expand-xl>.container,.navbar-expand-xl>.container-fluid,.navbar-expand-xl>.container-lg,.navbar-expand-xl>.container-md,.navbar-expand-xl>.container-sm,.navbar-expand-xl>.container-xl{-ms-flex-wrap:nowrap;flex-wrap:nowrap}.navbar-expand-xl .navbar-collapse{display:-ms-flexbox!important;display:flex!important;-ms-flex-preferred-size:auto;flex-basis:auto}.navbar-expand-xl .navbar-toggler{display:none}}.navbar-expand{-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-pack:start;justify-content:flex-start}.navbar-expand>.container,.navbar-expand>.container-fluid,.navbar-expand>.container-lg,.navbar-expand>.container-md,.navbar-expand>.container-sm,.navbar-expand>.container-xl{padding-right:0;padding-left:0}.navbar-expand .navbar-nav{-ms-flex-direction:row;flex-direction:row}.navbar-expand .navbar-nav .dropdown-menu{position:absolute}.navbar-expand .navbar-nav .nav-link{padding-right:.5rem;padding-left:.5rem}.navbar-expand>.container,.navbar-expand>.container-fluid,.navbar-expand>.container-lg,.navbar-expand>.container-md,.navbar-expand>.container-sm,.navbar-expand>.container-xl{-ms-flex-wrap:nowrap;flex-wrap:nowrap}.navbar-expand .navbar-collapse{display:-ms-flexbox!important;display:flex!important;-ms-flex-preferred-size:auto;flex-basis:auto}.navbar-expand .navbar-toggler{display:none}.navbar-light .navbar-brand{color:rgba(0,0,0,.9)}.navbar-light .navbar-brand:focus,.navbar-light .navbar-brand:hover{color:rgba(0,0,0,.9)}.navbar-light .navbar-nav .nav-link{color:rgba(0,0,0,.5)}.navbar-light .navbar-nav .nav-link:focus,.navbar-light .navbar-nav .nav-link:hover{color:rgba(0,0,0,.7)}.navbar-light .navbar-nav .nav-link.disabled{color:rgba(0,0,0,.3)}.navbar-light .navbar-nav .active>.nav-link,.navbar-light .navbar-nav .nav-link.active,.navbar-light .navbar-nav .nav-link.show,.navbar-light .navbar-nav .show>.nav-link{color:rgba(0,0,0,.9)}.navbar-light .navbar-toggler{color:rgba(0,0,0,.5);border-color:rgba(0,0,0,.1)}.navbar-light .navbar-toggler-icon{background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='30' height='30' viewBox='0 0 30 30'%3e%3cpath stroke='rgba(0, 0, 0, 0.5)' stroke-linecap='round' stroke-miterlimit='10' stroke-width='2' d='M4 7h22M4 15h22M4 23h22'/%3e%3c/svg%3e")}.navbar-light .navbar-text{color:rgba(0,0,0,.5)}.navbar-light .navbar-text a{color:rgba(0,0,0,.9)}.navbar-light .navbar-text a:focus,.navbar-light .navbar-text a:hover{color:rgba(0,0,0,.9)}.navbar-dark .navbar-brand{color:#fff}.navbar-dark .navbar-brand:focus,.navbar-dark .navbar-brand:hover{color:#fff}.navbar-dark .navbar-nav .nav-link{color:rgba(255,255,255,.5)}.navbar-dark .navbar-nav .nav-link:focus,.navbar-dark .navbar-nav .nav-link:hover{color:rgba(255,255,255,.75)}.navbar-dark .navbar-nav .nav-link.disabled{color:rgba(255,255,255,.25)}.navbar-dark .navbar-nav .active>.nav-link,.navbar-dark .navbar-nav .nav-link.active,.navbar-dark .navbar-nav .nav-link.show,.navbar-dark .navbar-nav .show>.nav-link{color:#fff}.navbar-dark .navbar-toggler{color:rgba(255,255,255,.5);border-color:rgba(255,255,255,.1)}.navbar-dark .navbar-toggler-icon{background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='30' height='30' viewBox='0 0 30 30'%3e%3cpath stroke='rgba(255, 255, 255, 0.5)' stroke-linecap='round' stroke-miterlimit='10' stroke-width='2' d='M4 7h22M4 15h22M4 23h22'/%3e%3c/svg%3e")}.navbar-dark .navbar-text{color:rgba(255,255,255,.5)}.navbar-dark .navbar-text a{color:#fff}.navbar-dark .navbar-text a:focus,.navbar-dark .navbar-text a:hover{color:#fff}.card{position:relative;display:-ms-flexbox;display:flex;-ms-flex-direction:column;flex-direction:column;min-width:0;word-wrap:break-word;background-color:#fff;background-clip:border-box;border:1px solid rgba(0,0,0,.125);border-radius:.25rem}.card>hr{margin-right:0;margin-left:0}.card>.list-group:first-child .list-group-item:first-child{border-top-left-radius:.25rem;border-top-right-radius:.25rem}.card>.list-group:last-child .list-group-item:last-child{border-bottom-right-radius:.25rem;border-bottom-left-radius:.25rem}.card-body{-ms-flex:1 1 auto;flex:1 1 auto;min-height:1px;padding:1.25rem}.card-title{margin-bottom:.75rem}.card-subtitle{margin-top:-.375rem;margin-bottom:0}.card-text:last-child{margin-bottom:0}.card-link:hover{text-decoration:none}.card-link+.card-link{margin-left:1.25rem}.card-header{padding:.75rem 1.25rem;margin-bottom:0;background-color:rgba(0,0,0,.03);border-bottom:1px solid rgba(0,0,0,.125)}.card-header:first-child{border-radius:calc(.25rem - 1px) calc(.25rem - 1px) 0 0}.card-header+.list-group .list-group-item:first-child{border-top:0}.card-footer{padding:.75rem 1.25rem;background-color:rgba(0,0,0,.03);border-top:1px solid rgba(0,0,0,.125)}.card-footer:last-child{border-radius:0 0 calc(.25rem - 1px) calc(.25rem - 1px)}.card-header-tabs{margin-right:-.625rem;margin-bottom:-.75rem;margin-left:-.625rem;border-bottom:0}.card-header-pills{margin-right:-.625rem;margin-left:-.625rem}.card-img-overlay{position:absolute;top:0;right:0;bottom:0;left:0;padding:1.25rem}.card-img,.card-img-bottom,.card-img-top{-ms-flex-negative:0;flex-shrink:0;width:100%}.card-img,.card-img-top{border-top-left-radius:calc(.25rem - 1px);border-top-right-radius:calc(.25rem - 1px)}.card-img,.card-img-bottom{border-bottom-right-radius:calc(.25rem - 1px);border-bottom-left-radius:calc(.25rem - 1px)}.card-deck .card{margin-bottom:15px}@media (min-width:576px){.card-deck{display:-ms-flexbox;display:flex;-ms-flex-flow:row wrap;flex-flow:row wrap;margin-right:-15px;margin-left:-15px}.card-deck .card{-ms-flex:1 0 0%;flex:1 0 0%;margin-right:15px;margin-bottom:0;margin-left:15px}}.card-group>.card{margin-bottom:15px}@media (min-width:576px){.card-group{display:-ms-flexbox;display:flex;-ms-flex-flow:row wrap;flex-flow:row wrap}.card-group>.card{-ms-flex:1 0 0%;flex:1 0 0%;margin-bottom:0}.card-group>.card+.card{margin-left:0;border-left:0}.card-group>.card:not(:last-child){border-top-right-radius:0;border-bottom-right-radius:0}.card-group>.card:not(:last-child) .card-header,.card-group>.card:not(:last-child) .card-img-top{border-top-right-radius:0}.card-group>.card:not(:last-child) .card-footer,.card-group>.card:not(:last-child) .card-img-bottom{border-bottom-right-radius:0}.card-group>.card:not(:first-child){border-top-left-radius:0;border-bottom-left-radius:0}.card-group>.card:not(:first-child) .card-header,.card-group>.card:not(:first-child) .card-img-top{border-top-left-radius:0}.card-group>.card:not(:first-child) .card-footer,.card-group>.card:not(:first-child) .card-img-bottom{border-bottom-left-radius:0}}.card-columns .card{margin-bottom:.75rem}@media (min-width:576px){.card-columns{-webkit-column-count:3;-moz-column-count:3;column-count:3;-webkit-column-gap:1.25rem;-moz-column-gap:1.25rem;column-gap:1.25rem;orphans:1;widows:1}.card-columns .card{display:inline-block;width:100%}}.accordion>.card{overflow:hidden}.accordion>.card:not(:last-of-type){border-bottom:0;border-bottom-right-radius:0;border-bottom-left-radius:0}.accordion>.card:not(:first-of-type){border-top-left-radius:0;border-top-right-radius:0}.accordion>.card>.card-header{border-radius:0;margin-bottom:-1px}.breadcrumb{display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;padding:.75rem 1rem;margin-bottom:1rem;list-style:none;background-color:#e9ecef;border-radius:.25rem}.breadcrumb-item+.breadcrumb-item{padding-left:.5rem}.breadcrumb-item+.breadcrumb-item::before{display:inline-block;padding-right:.5rem;color:#6c757d;content:"/"}.breadcrumb-item+.breadcrumb-item:hover::before{text-decoration:underline}.breadcrumb-item+.breadcrumb-item:hover::before{text-decoration:none}.breadcrumb-item.active{color:#6c757d}.pagination{display:-ms-flexbox;display:flex;padding-left:0;list-style:none;border-radius:.25rem}.page-link{position:relative;display:block;padding:.5rem .75rem;margin-left:-1px;line-height:1.25;color:#007bff;background-color:#fff;border:1px solid #dee2e6}.page-link:hover{z-index:2;color:#0056b3;text-decoration:none;background-color:#e9ecef;border-color:#dee2e6}.page-link:focus{z-index:3;outline:0;box-shadow:0 0 0 .2rem rgba(0,123,255,.25)}.page-item:first-child .page-link{margin-left:0;border-top-left-radius:.25rem;border-bottom-left-radius:.25rem}.page-item:last-child .page-link{border-top-right-radius:.25rem;border-bottom-right-radius:.25rem}.page-item.active .page-link{z-index:3;color:#fff;background-color:#007bff;border-color:#007bff}.page-item.disabled .page-link{color:#6c757d;pointer-events:none;cursor:auto;background-color:#fff;border-color:#dee2e6}.pagination-lg .page-link{padding:.75rem 1.5rem;font-size:1.25rem;line-height:1.5}.pagination-lg .page-item:first-child .page-link{border-top-left-radius:.3rem;border-bottom-left-radius:.3rem}.pagination-lg .page-item:last-child .page-link{border-top-right-radius:.3rem;border-bottom-right-radius:.3rem}.pagination-sm .page-link{padding:.25rem .5rem;font-size:.875rem;line-height:1.5}.pagination-sm .page-item:first-child .page-link{border-top-left-radius:.2rem;border-bottom-left-radius:.2rem}.pagination-sm .page-item:last-child .page-link{border-top-right-radius:.2rem;border-bottom-right-radius:.2rem}.badge{display:inline-block;padding:.25em .4em;font-size:75%;font-weight:700;line-height:1;text-align:center;white-space:nowrap;vertical-align:baseline;border-radius:.25rem;transition:color .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out}@media (prefers-reduced-motion:reduce){.badge{transition:none}}a.badge:focus,a.badge:hover{text-decoration:none}.badge:empty{display:none}.btn .badge{position:relative;top:-1px}.badge-pill{padding-right:.6em;padding-left:.6em;border-radius:10rem}.badge-primary{color:#fff;background-color:#007bff}a.badge-primary:focus,a.badge-primary:hover{color:#fff;background-color:#0062cc}a.badge-primary.focus,a.badge-primary:focus{outline:0;box-shadow:0 0 0 .2rem rgba(0,123,255,.5)}.badge-secondary{color:#fff;background-color:#6c757d}a.badge-secondary:focus,a.badge-secondary:hover{color:#fff;background-color:#545b62}a.badge-secondary.focus,a.badge-secondary:focus{outline:0;box-shadow:0 0 0 .2rem rgba(108,117,125,.5)}.badge-success{color:#fff;background-color:#28a745}a.badge-success:focus,a.badge-success:hover{color:#fff;background-color:#1e7e34}a.badge-success.focus,a.badge-success:focus{outline:0;box-shadow:0 0 0 .2rem rgba(40,167,69,.5)}.badge-info{color:#fff;background-color:#17a2b8}a.badge-info:focus,a.badge-info:hover{color:#fff;background-color:#117a8b}a.badge-info.focus,a.badge-info:focus{outline:0;box-shadow:0 0 0 .2rem rgba(23,162,184,.5)}.badge-warning{color:#212529;background-color:#ffc107}a.badge-warning:focus,a.badge-warning:hover{color:#212529;background-color:#d39e00}a.badge-warning.focus,a.badge-warning:focus{outline:0;box-shadow:0 0 0 .2rem rgba(255,193,7,.5)}.badge-danger{color:#fff;background-color:#dc3545}a.badge-danger:focus,a.badge-danger:hover{color:#fff;background-color:#bd2130}a.badge-danger.focus,a.badge-danger:focus{outline:0;box-shadow:0 0 0 .2rem rgba(220,53,69,.5)}.badge-light{color:#212529;background-color:#f8f9fa}a.badge-light:focus,a.badge-light:hover{color:#212529;background-color:#dae0e5}a.badge-light.focus,a.badge-light:focus{outline:0;box-shadow:0 0 0 .2rem rgba(248,249,250,.5)}.badge-dark{color:#fff;background-color:#343a40}a.badge-dark:focus,a.badge-dark:hover{color:#fff;background-color:#1d2124}a.badge-dark.focus,a.badge-dark:focus{outline:0;box-shadow:0 0 0 .2rem rgba(52,58,64,.5)}.jumbotron{padding:2rem 1rem;margin-bottom:2rem;background-color:#e9ecef;border-radius:.3rem}@media (min-width:576px){.jumbotron{padding:4rem 2rem}}.jumbotron-fluid{padding-right:0;padding-left:0;border-radius:0}.alert{position:relative;padding:.75rem 1.25rem;margin-bottom:1rem;border:1px solid transparent;border-radius:.25rem}.alert-heading{color:inherit}.alert-link{font-weight:700}.alert-dismissible{padding-right:4rem}.alert-dismissible .close{position:absolute;top:0;right:0;padding:.75rem 1.25rem;color:inherit}.alert-primary{color:#004085;background-color:#cce5ff;border-color:#b8daff}.alert-primary hr{border-top-color:#9fcdff}.alert-primary .alert-link{color:#002752}.alert-secondary{color:#383d41;background-color:#e2e3e5;border-color:#d6d8db}.alert-secondary hr{border-top-color:#c8cbcf}.alert-secondary .alert-link{color:#202326}.alert-success{color:#155724;background-color:#d4edda;border-color:#c3e6cb}.alert-success hr{border-top-color:#b1dfbb}.alert-success .alert-link{color:#0b2e13}.alert-info{color:#0c5460;background-color:#d1ecf1;border-color:#bee5eb}.alert-info hr{border-top-color:#abdde5}.alert-info .alert-link{color:#062c33}.alert-warning{color:#856404;background-color:#fff3cd;border-color:#ffeeba}.alert-warning hr{border-top-color:#ffe8a1}.alert-warning .alert-link{color:#533f03}.alert-danger{color:#721c24;background-color:#f8d7da;border-color:#f5c6cb}.alert-danger hr{border-top-color:#f1b0b7}.alert-danger .alert-link{color:#491217}.alert-light{color:#818182;background-color:#fefefe;border-color:#fdfdfe}.alert-light hr{border-top-color:#ececf6}.alert-light .alert-link{color:#686868}.alert-dark{color:#1b1e21;background-color:#d6d8d9;border-color:#c6c8ca}.alert-dark hr{border-top-color:#b9bbbe}.alert-dark .alert-link{color:#040505}@-webkit-keyframes progress-bar-stripes{from{background-position:1rem 0}to{background-position:0 0}}@keyframes progress-bar-stripes{from{background-position:1rem 0}to{background-position:0 0}}.progress{display:-ms-flexbox;display:flex;height:1rem;overflow:hidden;font-size:.75rem;background-color:#e9ecef;border-radius:.25rem}.progress-bar{display:-ms-flexbox;display:flex;-ms-flex-direction:column;flex-direction:column;-ms-flex-pack:center;justify-content:center;overflow:hidden;color:#fff;text-align:center;white-space:nowrap;background-color:#007bff;transition:width .6s ease}@media (prefers-reduced-motion:reduce){.progress-bar{transition:none}}.progress-bar-striped{background-image:linear-gradient(45deg,rgba(255,255,255,.15) 25%,transparent 25%,transparent 50%,rgba(255,255,255,.15) 50%,rgba(255,255,255,.15) 75%,transparent 75%,transparent);background-size:1rem 1rem}.progress-bar-animated{-webkit-animation:progress-bar-stripes 1s linear infinite;animation:progress-bar-stripes 1s linear infinite}@media (prefers-reduced-motion:reduce){.progress-bar-animated{-webkit-animation:none;animation:none}}.media{display:-ms-flexbox;display:flex;-ms-flex-align:start;align-items:flex-start}.media-body{-ms-flex:1;flex:1}.list-group{display:-ms-flexbox;display:flex;-ms-flex-direction:column;flex-direction:column;padding-left:0;margin-bottom:0}.list-group-item-action{width:100%;color:#495057;text-align:inherit}.list-group-item-action:focus,.list-group-item-action:hover{z-index:1;color:#495057;text-decoration:none;background-color:#f8f9fa}.list-group-item-action:active{color:#212529;background-color:#e9ecef}.list-group-item{position:relative;display:block;padding:.75rem 1.25rem;background-color:#fff;border:1px solid rgba(0,0,0,.125)}.list-group-item:first-child{border-top-left-radius:.25rem;border-top-right-radius:.25rem}.list-group-item:last-child{border-bottom-right-radius:.25rem;border-bottom-left-radius:.25rem}.list-group-item.disabled,.list-group-item:disabled{color:#6c757d;pointer-events:none;background-color:#fff}.list-group-item.active{z-index:2;color:#fff;background-color:#007bff;border-color:#007bff}.list-group-item+.list-group-item{border-top-width:0}.list-group-item+.list-group-item.active{margin-top:-1px;border-top-width:1px}.list-group-horizontal{-ms-flex-direction:row;flex-direction:row}.list-group-horizontal .list-group-item:first-child{border-bottom-left-radius:.25rem;border-top-right-radius:0}.list-group-horizontal .list-group-item:last-child{border-top-right-radius:.25rem;border-bottom-left-radius:0}.list-group-horizontal .list-group-item.active{margin-top:0}.list-group-horizontal .list-group-item+.list-group-item{border-top-width:1px;border-left-width:0}.list-group-horizontal .list-group-item+.list-group-item.active{margin-left:-1px;border-left-width:1px}@media (min-width:576px){.list-group-horizontal-sm{-ms-flex-direction:row;flex-direction:row}.list-group-horizontal-sm .list-group-item:first-child{border-bottom-left-radius:.25rem;border-top-right-radius:0}.list-group-horizontal-sm .list-group-item:last-child{border-top-right-radius:.25rem;border-bottom-left-radius:0}.list-group-horizontal-sm .list-group-item.active{margin-top:0}.list-group-horizontal-sm .list-group-item+.list-group-item{border-top-width:1px;border-left-width:0}.list-group-horizontal-sm .list-group-item+.list-group-item.active{margin-left:-1px;border-left-width:1px}}@media (min-width:768px){.list-group-horizontal-md{-ms-flex-direction:row;flex-direction:row}.list-group-horizontal-md .list-group-item:first-child{border-bottom-left-radius:.25rem;border-top-right-radius:0}.list-group-horizontal-md .list-group-item:last-child{border-top-right-radius:.25rem;border-bottom-left-radius:0}.list-group-horizontal-md .list-group-item.active{margin-top:0}.list-group-horizontal-md .list-group-item+.list-group-item{border-top-width:1px;border-left-width:0}.list-group-horizontal-md .list-group-item+.list-group-item.active{margin-left:-1px;border-left-width:1px}}@media (min-width:992px){.list-group-horizontal-lg{-ms-flex-direction:row;flex-direction:row}.list-group-horizontal-lg .list-group-item:first-child{border-bottom-left-radius:.25rem;border-top-right-radius:0}.list-group-horizontal-lg .list-group-item:last-child{border-top-right-radius:.25rem;border-bottom-left-radius:0}.list-group-horizontal-lg .list-group-item.active{margin-top:0}.list-group-horizontal-lg .list-group-item+.list-group-item{border-top-width:1px;border-left-width:0}.list-group-horizontal-lg .list-group-item+.list-group-item.active{margin-left:-1px;border-left-width:1px}}@media (min-width:1200px){.list-group-horizontal-xl{-ms-flex-direction:row;flex-direction:row}.list-group-horizontal-xl .list-group-item:first-child{border-bottom-left-radius:.25rem;border-top-right-radius:0}.list-group-horizontal-xl .list-group-item:last-child{border-top-right-radius:.25rem;border-bottom-left-radius:0}.list-group-horizontal-xl .list-group-item.active{margin-top:0}.list-group-horizontal-xl .list-group-item+.list-group-item{border-top-width:1px;border-left-width:0}.list-group-horizontal-xl .list-group-item+.list-group-item.active{margin-left:-1px;border-left-width:1px}}.list-group-flush .list-group-item{border-right-width:0;border-left-width:0;border-radius:0}.list-group-flush .list-group-item:first-child{border-top-width:0}.list-group-flush:last-child .list-group-item:last-child{border-bottom-width:0}.list-group-item-primary{color:#004085;background-color:#b8daff}.list-group-item-primary.list-group-item-action:focus,.list-group-item-primary.list-group-item-action:hover{color:#004085;background-color:#9fcdff}.list-group-item-primary.list-group-item-action.active{color:#fff;background-color:#004085;border-color:#004085}.list-group-item-secondary{color:#383d41;background-color:#d6d8db}.list-group-item-secondary.list-group-item-action:focus,.list-group-item-secondary.list-group-item-action:hover{color:#383d41;background-color:#c8cbcf}.list-group-item-secondary.list-group-item-action.active{color:#fff;background-color:#383d41;border-color:#383d41}.list-group-item-success{color:#155724;background-color:#c3e6cb}.list-group-item-success.list-group-item-action:focus,.list-group-item-success.list-group-item-action:hover{color:#155724;background-color:#b1dfbb}.list-group-item-success.list-group-item-action.active{color:#fff;background-color:#155724;border-color:#155724}.list-group-item-info{color:#0c5460;background-color:#bee5eb}.list-group-item-info.list-group-item-action:focus,.list-group-item-info.list-group-item-action:hover{color:#0c5460;background-color:#abdde5}.list-group-item-info.list-group-item-action.active{color:#fff;background-color:#0c5460;border-color:#0c5460}.list-group-item-warning{color:#856404;background-color:#ffeeba}.list-group-item-warning.list-group-item-action:focus,.list-group-item-warning.list-group-item-action:hover{color:#856404;background-color:#ffe8a1}.list-group-item-warning.list-group-item-action.active{color:#fff;background-color:#856404;border-color:#856404}.list-group-item-danger{color:#721c24;background-color:#f5c6cb}.list-group-item-danger.list-group-item-action:focus,.list-group-item-danger.list-group-item-action:hover{color:#721c24;background-color:#f1b0b7}.list-group-item-danger.list-group-item-action.active{color:#fff;background-color:#721c24;border-color:#721c24}.list-group-item-light{color:#818182;background-color:#fdfdfe}.list-group-item-light.list-group-item-action:focus,.list-group-item-light.list-group-item-action:hover{color:#818182;background-color:#ececf6}.list-group-item-light.list-group-item-action.active{color:#fff;background-color:#818182;border-color:#818182}.list-group-item-dark{color:#1b1e21;background-color:#c6c8ca}.list-group-item-dark.list-group-item-action:focus,.list-group-item-dark.list-group-item-action:hover{color:#1b1e21;background-color:#b9bbbe}.list-group-item-dark.list-group-item-action.active{color:#fff;background-color:#1b1e21;border-color:#1b1e21}.close{float:right;font-size:1.5rem;font-weight:700;line-height:1;color:#000;text-shadow:0 1px 0 #fff;opacity:.5}.close:hover{color:#000;text-decoration:none}.close:not(:disabled):not(.disabled):focus,.close:not(:disabled):not(.disabled):hover{opacity:.75}button.close{padding:0;background-color:transparent;border:0;-webkit-appearance:none;-moz-appearance:none;appearance:none}a.close.disabled{pointer-events:none}.toast{max-width:350px;overflow:hidden;font-size:.875rem;background-color:rgba(255,255,255,.85);background-clip:padding-box;border:1px solid rgba(0,0,0,.1);box-shadow:0 .25rem .75rem rgba(0,0,0,.1);-webkit-backdrop-filter:blur(10px);backdrop-filter:blur(10px);opacity:0;border-radius:.25rem}.toast:not(:last-child){margin-bottom:.75rem}.toast.showing{opacity:1}.toast.show{display:block;opacity:1}.toast.hide{display:none}.toast-header{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;padding:.25rem .75rem;color:#6c757d;background-color:rgba(255,255,255,.85);background-clip:padding-box;border-bottom:1px solid rgba(0,0,0,.05)}.toast-body{padding:.75rem}.modal-open{overflow:hidden}.modal-open .modal{overflow-x:hidden;overflow-y:auto}.modal{position:fixed;top:0;left:0;z-index:1050;display:none;width:100%;height:100%;overflow:hidden;outline:0}.modal-dialog{position:relative;width:auto;margin:.5rem;pointer-events:none}.modal.fade .modal-dialog{transition:-webkit-transform .3s ease-out;transition:transform .3s ease-out;transition:transform .3s ease-out,-webkit-transform .3s ease-out;-webkit-transform:translate(0,-50px);transform:translate(0,-50px)}@media (prefers-reduced-motion:reduce){.modal.fade .modal-dialog{transition:none}}.modal.show .modal-dialog{-webkit-transform:none;transform:none}.modal.modal-static .modal-dialog{-webkit-transform:scale(1.02);transform:scale(1.02)}.modal-dialog-scrollable{display:-ms-flexbox;display:flex;max-height:calc(100% - 1rem)}.modal-dialog-scrollable .modal-content{max-height:calc(100vh - 1rem);overflow:hidden}.modal-dialog-scrollable .modal-footer,.modal-dialog-scrollable .modal-header{-ms-flex-negative:0;flex-shrink:0}.modal-dialog-scrollable .modal-body{overflow-y:auto}.modal-dialog-centered{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;min-height:calc(100% - 1rem)}.modal-dialog-centered::before{display:block;height:calc(100vh - 1rem);content:""}.modal-dialog-centered.modal-dialog-scrollable{-ms-flex-direction:column;flex-direction:column;-ms-flex-pack:center;justify-content:center;height:100%}.modal-dialog-centered.modal-dialog-scrollable .modal-content{max-height:none}.modal-dialog-centered.modal-dialog-scrollable::before{content:none}.modal-content{position:relative;display:-ms-flexbox;display:flex;-ms-flex-direction:column;flex-direction:column;width:100%;pointer-events:auto;background-color:#fff;background-clip:padding-box;border:1px solid rgba(0,0,0,.2);border-radius:.3rem;outline:0}.modal-backdrop{position:fixed;top:0;left:0;z-index:1040;width:100vw;height:100vh;background-color:#000}.modal-backdrop.fade{opacity:0}.modal-backdrop.show{opacity:.5}.modal-header{display:-ms-flexbox;display:flex;-ms-flex-align:start;align-items:flex-start;-ms-flex-pack:justify;justify-content:space-between;padding:1rem 1rem;border-bottom:1px solid #dee2e6;border-top-left-radius:calc(.3rem - 1px);border-top-right-radius:calc(.3rem - 1px)}.modal-header .close{padding:1rem 1rem;margin:-1rem -1rem -1rem auto}.modal-title{margin-bottom:0;line-height:1.5}.modal-body{position:relative;-ms-flex:1 1 auto;flex:1 1 auto;padding:1rem}.modal-footer{display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;-ms-flex-align:center;align-items:center;-ms-flex-pack:end;justify-content:flex-end;padding:.75rem;border-top:1px solid #dee2e6;border-bottom-right-radius:calc(.3rem - 1px);border-bottom-left-radius:calc(.3rem - 1px)}.modal-footer>*{margin:.25rem}.modal-scrollbar-measure{position:absolute;top:-9999px;width:50px;height:50px;overflow:scroll}@media (min-width:576px){.modal-dialog{max-width:500px;margin:1.75rem auto}.modal-dialog-scrollable{max-height:calc(100% - 3.5rem)}.modal-dialog-scrollable .modal-content{max-height:calc(100vh - 3.5rem)}.modal-dialog-centered{min-height:calc(100% - 3.5rem)}.modal-dialog-centered::before{height:calc(100vh - 3.5rem)}.modal-sm{max-width:300px}}@media (min-width:992px){.modal-lg,.modal-xl{max-width:800px}}@media (min-width:1200px){.modal-xl{max-width:1140px}}.tooltip{position:absolute;z-index:1070;display:block;margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-style:normal;font-weight:400;line-height:1.5;text-align:left;text-align:start;text-decoration:none;text-shadow:none;text-transform:none;letter-spacing:normal;word-break:normal;word-spacing:normal;white-space:normal;line-break:auto;font-size:.875rem;word-wrap:break-word;opacity:0}.tooltip.show{opacity:.9}.tooltip .arrow{position:absolute;display:block;width:.8rem;height:.4rem}.tooltip .arrow::before{position:absolute;content:"";border-color:transparent;border-style:solid}.bs-tooltip-auto[x-placement^=top],.bs-tooltip-top{padding:.4rem 0}.bs-tooltip-auto[x-placement^=top] .arrow,.bs-tooltip-top .arrow{bottom:0}.bs-tooltip-auto[x-placement^=top] .arrow::before,.bs-tooltip-top .arrow::before{top:0;border-width:.4rem .4rem 0;border-top-color:#000}.bs-tooltip-auto[x-placement^=right],.bs-tooltip-right{padding:0 .4rem}.bs-tooltip-auto[x-placement^=right] .arrow,.bs-tooltip-right .arrow{left:0;width:.4rem;height:.8rem}.bs-tooltip-auto[x-placement^=right] .arrow::before,.bs-tooltip-right .arrow::before{right:0;border-width:.4rem .4rem .4rem 0;border-right-color:#000}.bs-tooltip-auto[x-placement^=bottom],.bs-tooltip-bottom{padding:.4rem 0}.bs-tooltip-auto[x-placement^=bottom] .arrow,.bs-tooltip-bottom .arrow{top:0}.bs-tooltip-auto[x-placement^=bottom] .arrow::before,.bs-tooltip-bottom .arrow::before{bottom:0;border-width:0 .4rem .4rem;border-bottom-color:#000}.bs-tooltip-auto[x-placement^=left],.bs-tooltip-left{padding:0 .4rem}.bs-tooltip-auto[x-placement^=left] .arrow,.bs-tooltip-left .arrow{right:0;width:.4rem;height:.8rem}.bs-tooltip-auto[x-placement^=left] .arrow::before,.bs-tooltip-left .arrow::before{left:0;border-width:.4rem 0 .4rem .4rem;border-left-color:#000}.tooltip-inner{max-width:200px;padding:.25rem .5rem;color:#fff;text-align:center;background-color:#000;border-radius:.25rem}.popover{position:absolute;top:0;left:0;z-index:1060;display:block;max-width:276px;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-style:normal;font-weight:400;line-height:1.5;text-align:left;text-align:start;text-decoration:none;text-shadow:none;text-transform:none;letter-spacing:normal;word-break:normal;word-spacing:normal;white-space:normal;line-break:auto;font-size:.875rem;word-wrap:break-word;background-color:#fff;background-clip:padding-box;border:1px solid rgba(0,0,0,.2);border-radius:.3rem}.popover .arrow{position:absolute;display:block;width:1rem;height:.5rem;margin:0 .3rem}.popover .arrow::after,.popover .arrow::before{position:absolute;display:block;content:"";border-color:transparent;border-style:solid}.bs-popover-auto[x-placement^=top],.bs-popover-top{margin-bottom:.5rem}.bs-popover-auto[x-placement^=top]>.arrow,.bs-popover-top>.arrow{bottom:calc(-.5rem - 1px)}.bs-popover-auto[x-placement^=top]>.arrow::before,.bs-popover-top>.arrow::before{bottom:0;border-width:.5rem .5rem 0;border-top-color:rgba(0,0,0,.25)}.bs-popover-auto[x-placement^=top]>.arrow::after,.bs-popover-top>.arrow::after{bottom:1px;border-width:.5rem .5rem 0;border-top-color:#fff}.bs-popover-auto[x-placement^=right],.bs-popover-right{margin-left:.5rem}.bs-popover-auto[x-placement^=right]>.arrow,.bs-popover-right>.arrow{left:calc(-.5rem - 1px);width:.5rem;height:1rem;margin:.3rem 0}.bs-popover-auto[x-placement^=right]>.arrow::before,.bs-popover-right>.arrow::before{left:0;border-width:.5rem .5rem .5rem 0;border-right-color:rgba(0,0,0,.25)}.bs-popover-auto[x-placement^=right]>.arrow::after,.bs-popover-right>.arrow::after{left:1px;border-width:.5rem .5rem .5rem 0;border-right-color:#fff}.bs-popover-auto[x-placement^=bottom],.bs-popover-bottom{margin-top:.5rem}.bs-popover-auto[x-placement^=bottom]>.arrow,.bs-popover-bottom>.arrow{top:calc(-.5rem - 1px)}.bs-popover-auto[x-placement^=bottom]>.arrow::before,.bs-popover-bottom>.arrow::before{top:0;border-width:0 .5rem .5rem .5rem;border-bottom-color:rgba(0,0,0,.25)}.bs-popover-auto[x-placement^=bottom]>.arrow::after,.bs-popover-bottom>.arrow::after{top:1px;border-width:0 .5rem .5rem .5rem;border-bottom-color:#fff}.bs-popover-auto[x-placement^=bottom] .popover-header::before,.bs-popover-bottom .popover-header::before{position:absolute;top:0;left:50%;display:block;width:1rem;margin-left:-.5rem;content:"";border-bottom:1px solid #f7f7f7}.bs-popover-auto[x-placement^=left],.bs-popover-left{margin-right:.5rem}.bs-popover-auto[x-placement^=left]>.arrow,.bs-popover-left>.arrow{right:calc(-.5rem - 1px);width:.5rem;height:1rem;margin:.3rem 0}.bs-popover-auto[x-placement^=left]>.arrow::before,.bs-popover-left>.arrow::before{right:0;border-width:.5rem 0 .5rem .5rem;border-left-color:rgba(0,0,0,.25)}.bs-popover-auto[x-placement^=left]>.arrow::after,.bs-popover-left>.arrow::after{right:1px;border-width:.5rem 0 .5rem .5rem;border-left-color:#fff}.popover-header{padding:.5rem .75rem;margin-bottom:0;font-size:1rem;background-color:#f7f7f7;border-bottom:1px solid #ebebeb;border-top-left-radius:calc(.3rem - 1px);border-top-right-radius:calc(.3rem - 1px)}.popover-header:empty{display:none}.popover-body{padding:.5rem .75rem;color:#212529}.carousel{position:relative}.carousel.pointer-event{-ms-touch-action:pan-y;touch-action:pan-y}.carousel-inner{position:relative;width:100%;overflow:hidden}.carousel-inner::after{display:block;clear:both;content:""}.carousel-item{position:relative;display:none;float:left;width:100%;margin-right:-100%;-webkit-backface-visibility:hidden;backface-visibility:hidden;transition:-webkit-transform .6s ease-in-out;transition:transform .6s ease-in-out;transition:transform .6s ease-in-out,-webkit-transform .6s ease-in-out}@media (prefers-reduced-motion:reduce){.carousel-item{transition:none}}.carousel-item-next,.carousel-item-prev,.carousel-item.active{display:block}.active.carousel-item-right,.carousel-item-next:not(.carousel-item-left){-webkit-transform:translateX(100%);transform:translateX(100%)}.active.carousel-item-left,.carousel-item-prev:not(.carousel-item-right){-webkit-transform:translateX(-100%);transform:translateX(-100%)}.carousel-fade .carousel-item{opacity:0;transition-property:opacity;-webkit-transform:none;transform:none}.carousel-fade .carousel-item-next.carousel-item-left,.carousel-fade .carousel-item-prev.carousel-item-right,.carousel-fade .carousel-item.active{z-index:1;opacity:1}.carousel-fade .active.carousel-item-left,.carousel-fade .active.carousel-item-right{z-index:0;opacity:0;transition:opacity 0s .6s}@media (prefers-reduced-motion:reduce){.carousel-fade .active.carousel-item-left,.carousel-fade .active.carousel-item-right{transition:none}}.carousel-control-next,.carousel-control-prev{position:absolute;top:0;bottom:0;z-index:1;display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;-ms-flex-pack:center;justify-content:center;width:15%;color:#fff;text-align:center;opacity:.5;transition:opacity .15s ease}@media (prefers-reduced-motion:reduce){.carousel-control-next,.carousel-control-prev{transition:none}}.carousel-control-next:focus,.carousel-control-next:hover,.carousel-control-prev:focus,.carousel-control-prev:hover{color:#fff;text-decoration:none;outline:0;opacity:.9}.carousel-control-prev{left:0}.carousel-control-next{right:0}.carousel-control-next-icon,.carousel-control-prev-icon{display:inline-block;width:20px;height:20px;background:no-repeat 50%/100% 100%}.carousel-control-prev-icon{background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' width='8' height='8' viewBox='0 0 8 8'%3e%3cpath d='M5.25 0l-4 4 4 4 1.5-1.5L4.25 4l2.5-2.5L5.25 0z'/%3e%3c/svg%3e")}.carousel-control-next-icon{background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' width='8' height='8' viewBox='0 0 8 8'%3e%3cpath d='M2.75 0l-1.5 1.5L3.75 4l-2.5 2.5L2.75 8l4-4-4-4z'/%3e%3c/svg%3e")}.carousel-indicators{position:absolute;right:0;bottom:0;left:0;z-index:15;display:-ms-flexbox;display:flex;-ms-flex-pack:center;justify-content:center;padding-left:0;margin-right:15%;margin-left:15%;list-style:none}.carousel-indicators li{box-sizing:content-box;-ms-flex:0 1 auto;flex:0 1 auto;width:30px;height:3px;margin-right:3px;margin-left:3px;text-indent:-999px;cursor:pointer;background-color:#fff;background-clip:padding-box;border-top:10px solid transparent;border-bottom:10px solid transparent;opacity:.5;transition:opacity .6s ease}@media (prefers-reduced-motion:reduce){.carousel-indicators li{transition:none}}.carousel-indicators .active{opacity:1}.carousel-caption{position:absolute;right:15%;bottom:20px;left:15%;z-index:10;padding-top:20px;padding-bottom:20px;color:#fff;text-align:center}@-webkit-keyframes spinner-border{to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes spinner-border{to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}.spinner-border{display:inline-block;width:2rem;height:2rem;vertical-align:text-bottom;border:.25em solid currentColor;border-right-color:transparent;border-radius:50%;-webkit-animation:spinner-border .75s linear infinite;animation:spinner-border .75s linear infinite}.spinner-border-sm{width:1rem;height:1rem;border-width:.2em}@-webkit-keyframes spinner-grow{0%{-webkit-transform:scale(0);transform:scale(0)}50%{opacity:1}}@keyframes spinner-grow{0%{-webkit-transform:scale(0);transform:scale(0)}50%{opacity:1}}.spinner-grow{display:inline-block;width:2rem;height:2rem;vertical-align:text-bottom;background-color:currentColor;border-radius:50%;opacity:0;-webkit-animation:spinner-grow .75s linear infinite;animation:spinner-grow .75s linear infinite}.spinner-grow-sm{width:1rem;height:1rem}.align-baseline{vertical-align:baseline!important}.align-top{vertical-align:top!important}.align-middle{vertical-align:middle!important}.align-bottom{vertical-align:bottom!important}.align-text-bottom{vertical-align:text-bottom!important}.align-text-top{vertical-align:text-top!important}.bg-primary{background-color:#007bff!important}a.bg-primary:focus,a.bg-primary:hover,button.bg-primary:focus,button.bg-primary:hover{background-color:#0062cc!important}.bg-secondary{background-color:#6c757d!important}a.bg-secondary:focus,a.bg-secondary:hover,button.bg-secondary:focus,button.bg-secondary:hover{background-color:#545b62!important}.bg-success{background-color:#28a745!important}a.bg-success:focus,a.bg-success:hover,button.bg-success:focus,button.bg-success:hover{background-color:#1e7e34!important}.bg-info{background-color:#17a2b8!important}a.bg-info:focus,a.bg-info:hover,button.bg-info:focus,button.bg-info:hover{background-color:#117a8b!important}.bg-warning{background-color:#ffc107!important}a.bg-warning:focus,a.bg-warning:hover,button.bg-warning:focus,button.bg-warning:hover{background-color:#d39e00!important}.bg-danger{background-color:#dc3545!important}a.bg-danger:focus,a.bg-danger:hover,button.bg-danger:focus,button.bg-danger:hover{background-color:#bd2130!important}.bg-light{background-color:#f8f9fa!important}a.bg-light:focus,a.bg-light:hover,button.bg-light:focus,button.bg-light:hover{background-color:#dae0e5!important}.bg-dark{background-color:#343a40!important}a.bg-dark:focus,a.bg-dark:hover,button.bg-dark:focus,button.bg-dark:hover{background-color:#1d2124!important}.bg-white{background-color:#fff!important}.bg-transparent{background-color:transparent!important}.border{border:1px solid #dee2e6!important}.border-top{border-top:1px solid #dee2e6!important}.border-right{border-right:1px solid #dee2e6!important}.border-bottom{border-bottom:1px solid #dee2e6!important}.border-left{border-left:1px solid #dee2e6!important}.border-0{border:0!important}.border-top-0{border-top:0!important}.border-right-0{border-right:0!important}.border-bottom-0{border-bottom:0!important}.border-left-0{border-left:0!important}.border-primary{border-color:#007bff!important}.border-secondary{border-color:#6c757d!important}.border-success{border-color:#28a745!important}.border-info{border-color:#17a2b8!important}.border-warning{border-color:#ffc107!important}.border-danger{border-color:#dc3545!important}.border-light{border-color:#f8f9fa!important}.border-dark{border-color:#343a40!important}.border-white{border-color:#fff!important}.rounded-sm{border-radius:.2rem!important}.rounded{border-radius:.25rem!important}.rounded-top{border-top-left-radius:.25rem!important;border-top-right-radius:.25rem!important}.rounded-right{border-top-right-radius:.25rem!important;border-bottom-right-radius:.25rem!important}.rounded-bottom{border-bottom-right-radius:.25rem!important;border-bottom-left-radius:.25rem!important}.rounded-left{border-top-left-radius:.25rem!important;border-bottom-left-radius:.25rem!important}.rounded-lg{border-radius:.3rem!important}.rounded-circle{border-radius:50%!important}.rounded-pill{border-radius:50rem!important}.rounded-0{border-radius:0!important}.clearfix::after{display:block;clear:both;content:""}.d-none{display:none!important}.d-inline{display:inline!important}.d-inline-block{display:inline-block!important}.d-block{display:block!important}.d-table{display:table!important}.d-table-row{display:table-row!important}.d-table-cell{display:table-cell!important}.d-flex{display:-ms-flexbox!important;display:flex!important}.d-inline-flex{display:-ms-inline-flexbox!important;display:inline-flex!important}@media (min-width:576px){.d-sm-none{display:none!important}.d-sm-inline{display:inline!important}.d-sm-inline-block{display:inline-block!important}.d-sm-block{display:block!important}.d-sm-table{display:table!important}.d-sm-table-row{display:table-row!important}.d-sm-table-cell{display:table-cell!important}.d-sm-flex{display:-ms-flexbox!important;display:flex!important}.d-sm-inline-flex{display:-ms-inline-flexbox!important;display:inline-flex!important}}@media (min-width:768px){.d-md-none{display:none!important}.d-md-inline{display:inline!important}.d-md-inline-block{display:inline-block!important}.d-md-block{display:block!important}.d-md-table{display:table!important}.d-md-table-row{display:table-row!important}.d-md-table-cell{display:table-cell!important}.d-md-flex{display:-ms-flexbox!important;display:flex!important}.d-md-inline-flex{display:-ms-inline-flexbox!important;display:inline-flex!important}}@media (min-width:992px){.d-lg-none{display:none!important}.d-lg-inline{display:inline!important}.d-lg-inline-block{display:inline-block!important}.d-lg-block{display:block!important}.d-lg-table{display:table!important}.d-lg-table-row{display:table-row!important}.d-lg-table-cell{display:table-cell!important}.d-lg-flex{display:-ms-flexbox!important;display:flex!important}.d-lg-inline-flex{display:-ms-inline-flexbox!important;display:inline-flex!important}}@media (min-width:1200px){.d-xl-none{display:none!important}.d-xl-inline{display:inline!important}.d-xl-inline-block{display:inline-block!important}.d-xl-block{display:block!important}.d-xl-table{display:table!important}.d-xl-table-row{display:table-row!important}.d-xl-table-cell{display:table-cell!important}.d-xl-flex{display:-ms-flexbox!important;display:flex!important}.d-xl-inline-flex{display:-ms-inline-flexbox!important;display:inline-flex!important}}@media print{.d-print-none{display:none!important}.d-print-inline{display:inline!important}.d-print-inline-block{display:inline-block!important}.d-print-block{display:block!important}.d-print-table{display:table!important}.d-print-table-row{display:table-row!important}.d-print-table-cell{display:table-cell!important}.d-print-flex{display:-ms-flexbox!important;display:flex!important}.d-print-inline-flex{display:-ms-inline-flexbox!important;display:inline-flex!important}}.embed-responsive{position:relative;display:block;width:100%;padding:0;overflow:hidden}.embed-responsive::before{display:block;content:""}.embed-responsive .embed-responsive-item,.embed-responsive embed,.embed-responsive iframe,.embed-responsive object,.embed-responsive video{position:absolute;top:0;bottom:0;left:0;width:100%;height:100%;border:0}.embed-responsive-21by9::before{padding-top:42.857143%}.embed-responsive-16by9::before{padding-top:56.25%}.embed-responsive-4by3::before{padding-top:75%}.embed-responsive-1by1::before{padding-top:100%}.flex-row{-ms-flex-direction:row!important;flex-direction:row!important}.flex-column{-ms-flex-direction:column!important;flex-direction:column!important}.flex-row-reverse{-ms-flex-direction:row-reverse!important;flex-direction:row-reverse!important}.flex-column-reverse{-ms-flex-direction:column-reverse!important;flex-direction:column-reverse!important}.flex-wrap{-ms-flex-wrap:wrap!important;flex-wrap:wrap!important}.flex-nowrap{-ms-flex-wrap:nowrap!important;flex-wrap:nowrap!important}.flex-wrap-reverse{-ms-flex-wrap:wrap-reverse!important;flex-wrap:wrap-reverse!important}.flex-fill{-ms-flex:1 1 auto!important;flex:1 1 auto!important}.flex-grow-0{-ms-flex-positive:0!important;flex-grow:0!important}.flex-grow-1{-ms-flex-positive:1!important;flex-grow:1!important}.flex-shrink-0{-ms-flex-negative:0!important;flex-shrink:0!important}.flex-shrink-1{-ms-flex-negative:1!important;flex-shrink:1!important}.justify-content-start{-ms-flex-pack:start!important;justify-content:flex-start!important}.justify-content-end{-ms-flex-pack:end!important;justify-content:flex-end!important}.justify-content-center{-ms-flex-pack:center!important;justify-content:center!important}.justify-content-between{-ms-flex-pack:justify!important;justify-content:space-between!important}.justify-content-around{-ms-flex-pack:distribute!important;justify-content:space-around!important}.align-items-start{-ms-flex-align:start!important;align-items:flex-start!important}.align-items-end{-ms-flex-align:end!important;align-items:flex-end!important}.align-items-center{-ms-flex-align:center!important;align-items:center!important}.align-items-baseline{-ms-flex-align:baseline!important;align-items:baseline!important}.align-items-stretch{-ms-flex-align:stretch!important;align-items:stretch!important}.align-content-start{-ms-flex-line-pack:start!important;align-content:flex-start!important}.align-content-end{-ms-flex-line-pack:end!important;align-content:flex-end!important}.align-content-center{-ms-flex-line-pack:center!important;align-content:center!important}.align-content-between{-ms-flex-line-pack:justify!important;align-content:space-between!important}.align-content-around{-ms-flex-line-pack:distribute!important;align-content:space-around!important}.align-content-stretch{-ms-flex-line-pack:stretch!important;align-content:stretch!important}.align-self-auto{-ms-flex-item-align:auto!important;align-self:auto!important}.align-self-start{-ms-flex-item-align:start!important;align-self:flex-start!important}.align-self-end{-ms-flex-item-align:end!important;align-self:flex-end!important}.align-self-center{-ms-flex-item-align:center!important;align-self:center!important}.align-self-baseline{-ms-flex-item-align:baseline!important;align-self:baseline!important}.align-self-stretch{-ms-flex-item-align:stretch!important;align-self:stretch!important}@media (min-width:576px){.flex-sm-row{-ms-flex-direction:row!important;flex-direction:row!important}.flex-sm-column{-ms-flex-direction:column!important;flex-direction:column!important}.flex-sm-row-reverse{-ms-flex-direction:row-reverse!important;flex-direction:row-reverse!important}.flex-sm-column-reverse{-ms-flex-direction:column-reverse!important;flex-direction:column-reverse!important}.flex-sm-wrap{-ms-flex-wrap:wrap!important;flex-wrap:wrap!important}.flex-sm-nowrap{-ms-flex-wrap:nowrap!important;flex-wrap:nowrap!important}.flex-sm-wrap-reverse{-ms-flex-wrap:wrap-reverse!important;flex-wrap:wrap-reverse!important}.flex-sm-fill{-ms-flex:1 1 auto!important;flex:1 1 auto!important}.flex-sm-grow-0{-ms-flex-positive:0!important;flex-grow:0!important}.flex-sm-grow-1{-ms-flex-positive:1!important;flex-grow:1!important}.flex-sm-shrink-0{-ms-flex-negative:0!important;flex-shrink:0!important}.flex-sm-shrink-1{-ms-flex-negative:1!important;flex-shrink:1!important}.justify-content-sm-start{-ms-flex-pack:start!important;justify-content:flex-start!important}.justify-content-sm-end{-ms-flex-pack:end!important;justify-content:flex-end!important}.justify-content-sm-center{-ms-flex-pack:center!important;justify-content:center!important}.justify-content-sm-between{-ms-flex-pack:justify!important;justify-content:space-between!important}.justify-content-sm-around{-ms-flex-pack:distribute!important;justify-content:space-around!important}.align-items-sm-start{-ms-flex-align:start!important;align-items:flex-start!important}.align-items-sm-end{-ms-flex-align:end!important;align-items:flex-end!important}.align-items-sm-center{-ms-flex-align:center!important;align-items:center!important}.align-items-sm-baseline{-ms-flex-align:baseline!important;align-items:baseline!important}.align-items-sm-stretch{-ms-flex-align:stretch!important;align-items:stretch!important}.align-content-sm-start{-ms-flex-line-pack:start!important;align-content:flex-start!important}.align-content-sm-end{-ms-flex-line-pack:end!important;align-content:flex-end!important}.align-content-sm-center{-ms-flex-line-pack:center!important;align-content:center!important}.align-content-sm-between{-ms-flex-line-pack:justify!important;align-content:space-between!important}.align-content-sm-around{-ms-flex-line-pack:distribute!important;align-content:space-around!important}.align-content-sm-stretch{-ms-flex-line-pack:stretch!important;align-content:stretch!important}.align-self-sm-auto{-ms-flex-item-align:auto!important;align-self:auto!important}.align-self-sm-start{-ms-flex-item-align:start!important;align-self:flex-start!important}.align-self-sm-end{-ms-flex-item-align:end!important;align-self:flex-end!important}.align-self-sm-center{-ms-flex-item-align:center!important;align-self:center!important}.align-self-sm-baseline{-ms-flex-item-align:baseline!important;align-self:baseline!important}.align-self-sm-stretch{-ms-flex-item-align:stretch!important;align-self:stretch!important}}@media (min-width:768px){.flex-md-row{-ms-flex-direction:row!important;flex-direction:row!important}.flex-md-column{-ms-flex-direction:column!important;flex-direction:column!important}.flex-md-row-reverse{-ms-flex-direction:row-reverse!important;flex-direction:row-reverse!important}.flex-md-column-reverse{-ms-flex-direction:column-reverse!important;flex-direction:column-reverse!important}.flex-md-wrap{-ms-flex-wrap:wrap!important;flex-wrap:wrap!important}.flex-md-nowrap{-ms-flex-wrap:nowrap!important;flex-wrap:nowrap!important}.flex-md-wrap-reverse{-ms-flex-wrap:wrap-reverse!important;flex-wrap:wrap-reverse!important}.flex-md-fill{-ms-flex:1 1 auto!important;flex:1 1 auto!important}.flex-md-grow-0{-ms-flex-positive:0!important;flex-grow:0!important}.flex-md-grow-1{-ms-flex-positive:1!important;flex-grow:1!important}.flex-md-shrink-0{-ms-flex-negative:0!important;flex-shrink:0!important}.flex-md-shrink-1{-ms-flex-negative:1!important;flex-shrink:1!important}.justify-content-md-start{-ms-flex-pack:start!important;justify-content:flex-start!important}.justify-content-md-end{-ms-flex-pack:end!important;justify-content:flex-end!important}.justify-content-md-center{-ms-flex-pack:center!important;justify-content:center!important}.justify-content-md-between{-ms-flex-pack:justify!important;justify-content:space-between!important}.justify-content-md-around{-ms-flex-pack:distribute!important;justify-content:space-around!important}.align-items-md-start{-ms-flex-align:start!important;align-items:flex-start!important}.align-items-md-end{-ms-flex-align:end!important;align-items:flex-end!important}.align-items-md-center{-ms-flex-align:center!important;align-items:center!important}.align-items-md-baseline{-ms-flex-align:baseline!important;align-items:baseline!important}.align-items-md-stretch{-ms-flex-align:stretch!important;align-items:stretch!important}.align-content-md-start{-ms-flex-line-pack:start!important;align-content:flex-start!important}.align-content-md-end{-ms-flex-line-pack:end!important;align-content:flex-end!important}.align-content-md-center{-ms-flex-line-pack:center!important;align-content:center!important}.align-content-md-between{-ms-flex-line-pack:justify!important;align-content:space-between!important}.align-content-md-around{-ms-flex-line-pack:distribute!important;align-content:space-around!important}.align-content-md-stretch{-ms-flex-line-pack:stretch!important;align-content:stretch!important}.align-self-md-auto{-ms-flex-item-align:auto!important;align-self:auto!important}.align-self-md-start{-ms-flex-item-align:start!important;align-self:flex-start!important}.align-self-md-end{-ms-flex-item-align:end!important;align-self:flex-end!important}.align-self-md-center{-ms-flex-item-align:center!important;align-self:center!important}.align-self-md-baseline{-ms-flex-item-align:baseline!important;align-self:baseline!important}.align-self-md-stretch{-ms-flex-item-align:stretch!important;align-self:stretch!important}}@media (min-width:992px){.flex-lg-row{-ms-flex-direction:row!important;flex-direction:row!important}.flex-lg-column{-ms-flex-direction:column!important;flex-direction:column!important}.flex-lg-row-reverse{-ms-flex-direction:row-reverse!important;flex-direction:row-reverse!important}.flex-lg-column-reverse{-ms-flex-direction:column-reverse!important;flex-direction:column-reverse!important}.flex-lg-wrap{-ms-flex-wrap:wrap!important;flex-wrap:wrap!important}.flex-lg-nowrap{-ms-flex-wrap:nowrap!important;flex-wrap:nowrap!important}.flex-lg-wrap-reverse{-ms-flex-wrap:wrap-reverse!important;flex-wrap:wrap-reverse!important}.flex-lg-fill{-ms-flex:1 1 auto!important;flex:1 1 auto!important}.flex-lg-grow-0{-ms-flex-positive:0!important;flex-grow:0!important}.flex-lg-grow-1{-ms-flex-positive:1!important;flex-grow:1!important}.flex-lg-shrink-0{-ms-flex-negative:0!important;flex-shrink:0!important}.flex-lg-shrink-1{-ms-flex-negative:1!important;flex-shrink:1!important}.justify-content-lg-start{-ms-flex-pack:start!important;justify-content:flex-start!important}.justify-content-lg-end{-ms-flex-pack:end!important;justify-content:flex-end!important}.justify-content-lg-center{-ms-flex-pack:center!important;justify-content:center!important}.justify-content-lg-between{-ms-flex-pack:justify!important;justify-content:space-between!important}.justify-content-lg-around{-ms-flex-pack:distribute!important;justify-content:space-around!important}.align-items-lg-start{-ms-flex-align:start!important;align-items:flex-start!important}.align-items-lg-end{-ms-flex-align:end!important;align-items:flex-end!important}.align-items-lg-center{-ms-flex-align:center!important;align-items:center!important}.align-items-lg-baseline{-ms-flex-align:baseline!important;align-items:baseline!important}.align-items-lg-stretch{-ms-flex-align:stretch!important;align-items:stretch!important}.align-content-lg-start{-ms-flex-line-pack:start!important;align-content:flex-start!important}.align-content-lg-end{-ms-flex-line-pack:end!important;align-content:flex-end!important}.align-content-lg-center{-ms-flex-line-pack:center!important;align-content:center!important}.align-content-lg-between{-ms-flex-line-pack:justify!important;align-content:space-between!important}.align-content-lg-around{-ms-flex-line-pack:distribute!important;align-content:space-around!important}.align-content-lg-stretch{-ms-flex-line-pack:stretch!important;align-content:stretch!important}.align-self-lg-auto{-ms-flex-item-align:auto!important;align-self:auto!important}.align-self-lg-start{-ms-flex-item-align:start!important;align-self:flex-start!important}.align-self-lg-end{-ms-flex-item-align:end!important;align-self:flex-end!important}.align-self-lg-center{-ms-flex-item-align:center!important;align-self:center!important}.align-self-lg-baseline{-ms-flex-item-align:baseline!important;align-self:baseline!important}.align-self-lg-stretch{-ms-flex-item-align:stretch!important;align-self:stretch!important}}@media (min-width:1200px){.flex-xl-row{-ms-flex-direction:row!important;flex-direction:row!important}.flex-xl-column{-ms-flex-direction:column!important;flex-direction:column!important}.flex-xl-row-reverse{-ms-flex-direction:row-reverse!important;flex-direction:row-reverse!important}.flex-xl-column-reverse{-ms-flex-direction:column-reverse!important;flex-direction:column-reverse!important}.flex-xl-wrap{-ms-flex-wrap:wrap!important;flex-wrap:wrap!important}.flex-xl-nowrap{-ms-flex-wrap:nowrap!important;flex-wrap:nowrap!important}.flex-xl-wrap-reverse{-ms-flex-wrap:wrap-reverse!important;flex-wrap:wrap-reverse!important}.flex-xl-fill{-ms-flex:1 1 auto!important;flex:1 1 auto!important}.flex-xl-grow-0{-ms-flex-positive:0!important;flex-grow:0!important}.flex-xl-grow-1{-ms-flex-positive:1!important;flex-grow:1!important}.flex-xl-shrink-0{-ms-flex-negative:0!important;flex-shrink:0!important}.flex-xl-shrink-1{-ms-flex-negative:1!important;flex-shrink:1!important}.justify-content-xl-start{-ms-flex-pack:start!important;justify-content:flex-start!important}.justify-content-xl-end{-ms-flex-pack:end!important;justify-content:flex-end!important}.justify-content-xl-center{-ms-flex-pack:center!important;justify-content:center!important}.justify-content-xl-between{-ms-flex-pack:justify!important;justify-content:space-between!important}.justify-content-xl-around{-ms-flex-pack:distribute!important;justify-content:space-around!important}.align-items-xl-start{-ms-flex-align:start!important;align-items:flex-start!important}.align-items-xl-end{-ms-flex-align:end!important;align-items:flex-end!important}.align-items-xl-center{-ms-flex-align:center!important;align-items:center!important}.align-items-xl-baseline{-ms-flex-align:baseline!important;align-items:baseline!important}.align-items-xl-stretch{-ms-flex-align:stretch!important;align-items:stretch!important}.align-content-xl-start{-ms-flex-line-pack:start!important;align-content:flex-start!important}.align-content-xl-end{-ms-flex-line-pack:end!important;align-content:flex-end!important}.align-content-xl-center{-ms-flex-line-pack:center!important;align-content:center!important}.align-content-xl-between{-ms-flex-line-pack:justify!important;align-content:space-between!important}.align-content-xl-around{-ms-flex-line-pack:distribute!important;align-content:space-around!important}.align-content-xl-stretch{-ms-flex-line-pack:stretch!important;align-content:stretch!important}.align-self-xl-auto{-ms-flex-item-align:auto!important;align-self:auto!important}.align-self-xl-start{-ms-flex-item-align:start!important;align-self:flex-start!important}.align-self-xl-end{-ms-flex-item-align:end!important;align-self:flex-end!important}.align-self-xl-center{-ms-flex-item-align:center!important;align-self:center!important}.align-self-xl-baseline{-ms-flex-item-align:baseline!important;align-self:baseline!important}.align-self-xl-stretch{-ms-flex-item-align:stretch!important;align-self:stretch!important}}.float-left{float:left!important}.float-right{float:right!important}.float-none{float:none!important}@media (min-width:576px){.float-sm-left{float:left!important}.float-sm-right{float:right!important}.float-sm-none{float:none!important}}@media (min-width:768px){.float-md-left{float:left!important}.float-md-right{float:right!important}.float-md-none{float:none!important}}@media (min-width:992px){.float-lg-left{float:left!important}.float-lg-right{float:right!important}.float-lg-none{float:none!important}}@media (min-width:1200px){.float-xl-left{float:left!important}.float-xl-right{float:right!important}.float-xl-none{float:none!important}}.overflow-auto{overflow:auto!important}.overflow-hidden{overflow:hidden!important}.position-static{position:static!important}.position-relative{position:relative!important}.position-absolute{position:absolute!important}.position-fixed{position:fixed!important}.position-sticky{position:-webkit-sticky!important;position:sticky!important}.fixed-top{position:fixed;top:0;right:0;left:0;z-index:1030}.fixed-bottom{position:fixed;right:0;bottom:0;left:0;z-index:1030}@supports ((position:-webkit-sticky) or (position:sticky)){.sticky-top{position:-webkit-sticky;position:sticky;top:0;z-index:1020}}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}.sr-only-focusable:active,.sr-only-focusable:focus{position:static;width:auto;height:auto;overflow:visible;clip:auto;white-space:normal}.shadow-sm{box-shadow:0 .125rem .25rem rgba(0,0,0,.075)!important}.shadow{box-shadow:0 .5rem 1rem rgba(0,0,0,.15)!important}.shadow-lg{box-shadow:0 1rem 3rem rgba(0,0,0,.175)!important}.shadow-none{box-shadow:none!important}.w-25{width:25%!important}.w-50{width:50%!important}.w-75{width:75%!important}.w-100{width:100%!important}.w-auto{width:auto!important}.h-25{height:25%!important}.h-50{height:50%!important}.h-75{height:75%!important}.h-100{height:100%!important}.h-auto{height:auto!important}.mw-100{max-width:100%!important}.mh-100{max-height:100%!important}.min-vw-100{min-width:100vw!important}.min-vh-100{min-height:100vh!important}.vw-100{width:100vw!important}.vh-100{height:100vh!important}.stretched-link::after{position:absolute;top:0;right:0;bottom:0;left:0;z-index:1;pointer-events:auto;content:"";background-color:rgba(0,0,0,0)}.m-0{margin:0!important}.mt-0,.my-0{margin-top:0!important}.mr-0,.mx-0{margin-right:0!important}.mb-0,.my-0{margin-bottom:0!important}.ml-0,.mx-0{margin-left:0!important}.m-1{margin:.25rem!important}.mt-1,.my-1{margin-top:.25rem!important}.mr-1,.mx-1{margin-right:.25rem!important}.mb-1,.my-1{margin-bottom:.25rem!important}.ml-1,.mx-1{margin-left:.25rem!important}.m-2{margin:.5rem!important}.mt-2,.my-2{margin-top:.5rem!important}.mr-2,.mx-2{margin-right:.5rem!important}.mb-2,.my-2{margin-bottom:.5rem!important}.ml-2,.mx-2{margin-left:.5rem!important}.m-3{margin:1rem!important}.mt-3,.my-3{margin-top:1rem!important}.mr-3,.mx-3{margin-right:1rem!important}.mb-3,.my-3{margin-bottom:1rem!important}.ml-3,.mx-3{margin-left:1rem!important}.m-4{margin:1.5rem!important}.mt-4,.my-4{margin-top:1.5rem!important}.mr-4,.mx-4{margin-right:1.5rem!important}.mb-4,.my-4{margin-bottom:1.5rem!important}.ml-4,.mx-4{margin-left:1.5rem!important}.m-5{margin:3rem!important}.mt-5,.my-5{margin-top:3rem!important}.mr-5,.mx-5{margin-right:3rem!important}.mb-5,.my-5{margin-bottom:3rem!important}.ml-5,.mx-5{margin-left:3rem!important}.p-0{padding:0!important}.pt-0,.py-0{padding-top:0!important}.pr-0,.px-0{padding-right:0!important}.pb-0,.py-0{padding-bottom:0!important}.pl-0,.px-0{padding-left:0!important}.p-1{padding:.25rem!important}.pt-1,.py-1{padding-top:.25rem!important}.pr-1,.px-1{padding-right:.25rem!important}.pb-1,.py-1{padding-bottom:.25rem!important}.pl-1,.px-1{padding-left:.25rem!important}.p-2{padding:.5rem!important}.pt-2,.py-2{padding-top:.5rem!important}.pr-2,.px-2{padding-right:.5rem!important}.pb-2,.py-2{padding-bottom:.5rem!important}.pl-2,.px-2{padding-left:.5rem!important}.p-3{padding:1rem!important}.pt-3,.py-3{padding-top:1rem!important}.pr-3,.px-3{padding-right:1rem!important}.pb-3,.py-3{padding-bottom:1rem!important}.pl-3,.px-3{padding-left:1rem!important}.p-4{padding:1.5rem!important}.pt-4,.py-4{padding-top:1.5rem!important}.pr-4,.px-4{padding-right:1.5rem!important}.pb-4,.py-4{padding-bottom:1.5rem!important}.pl-4,.px-4{padding-left:1.5rem!important}.p-5{padding:3rem!important}.pt-5,.py-5{padding-top:3rem!important}.pr-5,.px-5{padding-right:3rem!important}.pb-5,.py-5{padding-bottom:3rem!important}.pl-5,.px-5{padding-left:3rem!important}.m-n1{margin:-.25rem!important}.mt-n1,.my-n1{margin-top:-.25rem!important}.mr-n1,.mx-n1{margin-right:-.25rem!important}.mb-n1,.my-n1{margin-bottom:-.25rem!important}.ml-n1,.mx-n1{margin-left:-.25rem!important}.m-n2{margin:-.5rem!important}.mt-n2,.my-n2{margin-top:-.5rem!important}.mr-n2,.mx-n2{margin-right:-.5rem!important}.mb-n2,.my-n2{margin-bottom:-.5rem!important}.ml-n2,.mx-n2{margin-left:-.5rem!important}.m-n3{margin:-1rem!important}.mt-n3,.my-n3{margin-top:-1rem!important}.mr-n3,.mx-n3{margin-right:-1rem!important}.mb-n3,.my-n3{margin-bottom:-1rem!important}.ml-n3,.mx-n3{margin-left:-1rem!important}.m-n4{margin:-1.5rem!important}.mt-n4,.my-n4{margin-top:-1.5rem!important}.mr-n4,.mx-n4{margin-right:-1.5rem!important}.mb-n4,.my-n4{margin-bottom:-1.5rem!important}.ml-n4,.mx-n4{margin-left:-1.5rem!important}.m-n5{margin:-3rem!important}.mt-n5,.my-n5{margin-top:-3rem!important}.mr-n5,.mx-n5{margin-right:-3rem!important}.mb-n5,.my-n5{margin-bottom:-3rem!important}.ml-n5,.mx-n5{margin-left:-3rem!important}.m-auto{margin:auto!important}.mt-auto,.my-auto{margin-top:auto!important}.mr-auto,.mx-auto{margin-right:auto!important}.mb-auto,.my-auto{margin-bottom:auto!important}.ml-auto,.mx-auto{margin-left:auto!important}@media (min-width:576px){.m-sm-0{margin:0!important}.mt-sm-0,.my-sm-0{margin-top:0!important}.mr-sm-0,.mx-sm-0{margin-right:0!important}.mb-sm-0,.my-sm-0{margin-bottom:0!important}.ml-sm-0,.mx-sm-0{margin-left:0!important}.m-sm-1{margin:.25rem!important}.mt-sm-1,.my-sm-1{margin-top:.25rem!important}.mr-sm-1,.mx-sm-1{margin-right:.25rem!important}.mb-sm-1,.my-sm-1{margin-bottom:.25rem!important}.ml-sm-1,.mx-sm-1{margin-left:.25rem!important}.m-sm-2{margin:.5rem!important}.mt-sm-2,.my-sm-2{margin-top:.5rem!important}.mr-sm-2,.mx-sm-2{margin-right:.5rem!important}.mb-sm-2,.my-sm-2{margin-bottom:.5rem!important}.ml-sm-2,.mx-sm-2{margin-left:.5rem!important}.m-sm-3{margin:1rem!important}.mt-sm-3,.my-sm-3{margin-top:1rem!important}.mr-sm-3,.mx-sm-3{margin-right:1rem!important}.mb-sm-3,.my-sm-3{margin-bottom:1rem!important}.ml-sm-3,.mx-sm-3{margin-left:1rem!important}.m-sm-4{margin:1.5rem!important}.mt-sm-4,.my-sm-4{margin-top:1.5rem!important}.mr-sm-4,.mx-sm-4{margin-right:1.5rem!important}.mb-sm-4,.my-sm-4{margin-bottom:1.5rem!important}.ml-sm-4,.mx-sm-4{margin-left:1.5rem!important}.m-sm-5{margin:3rem!important}.mt-sm-5,.my-sm-5{margin-top:3rem!important}.mr-sm-5,.mx-sm-5{margin-right:3rem!important}.mb-sm-5,.my-sm-5{margin-bottom:3rem!important}.ml-sm-5,.mx-sm-5{margin-left:3rem!important}.p-sm-0{padding:0!important}.pt-sm-0,.py-sm-0{padding-top:0!important}.pr-sm-0,.px-sm-0{padding-right:0!important}.pb-sm-0,.py-sm-0{padding-bottom:0!important}.pl-sm-0,.px-sm-0{padding-left:0!important}.p-sm-1{padding:.25rem!important}.pt-sm-1,.py-sm-1{padding-top:.25rem!important}.pr-sm-1,.px-sm-1{padding-right:.25rem!important}.pb-sm-1,.py-sm-1{padding-bottom:.25rem!important}.pl-sm-1,.px-sm-1{padding-left:.25rem!important}.p-sm-2{padding:.5rem!important}.pt-sm-2,.py-sm-2{padding-top:.5rem!important}.pr-sm-2,.px-sm-2{padding-right:.5rem!important}.pb-sm-2,.py-sm-2{padding-bottom:.5rem!important}.pl-sm-2,.px-sm-2{padding-left:.5rem!important}.p-sm-3{padding:1rem!important}.pt-sm-3,.py-sm-3{padding-top:1rem!important}.pr-sm-3,.px-sm-3{padding-right:1rem!important}.pb-sm-3,.py-sm-3{padding-bottom:1rem!important}.pl-sm-3,.px-sm-3{padding-left:1rem!important}.p-sm-4{padding:1.5rem!important}.pt-sm-4,.py-sm-4{padding-top:1.5rem!important}.pr-sm-4,.px-sm-4{padding-right:1.5rem!important}.pb-sm-4,.py-sm-4{padding-bottom:1.5rem!important}.pl-sm-4,.px-sm-4{padding-left:1.5rem!important}.p-sm-5{padding:3rem!important}.pt-sm-5,.py-sm-5{padding-top:3rem!important}.pr-sm-5,.px-sm-5{padding-right:3rem!important}.pb-sm-5,.py-sm-5{padding-bottom:3rem!important}.pl-sm-5,.px-sm-5{padding-left:3rem!important}.m-sm-n1{margin:-.25rem!important}.mt-sm-n1,.my-sm-n1{margin-top:-.25rem!important}.mr-sm-n1,.mx-sm-n1{margin-right:-.25rem!important}.mb-sm-n1,.my-sm-n1{margin-bottom:-.25rem!important}.ml-sm-n1,.mx-sm-n1{margin-left:-.25rem!important}.m-sm-n2{margin:-.5rem!important}.mt-sm-n2,.my-sm-n2{margin-top:-.5rem!important}.mr-sm-n2,.mx-sm-n2{margin-right:-.5rem!important}.mb-sm-n2,.my-sm-n2{margin-bottom:-.5rem!important}.ml-sm-n2,.mx-sm-n2{margin-left:-.5rem!important}.m-sm-n3{margin:-1rem!important}.mt-sm-n3,.my-sm-n3{margin-top:-1rem!important}.mr-sm-n3,.mx-sm-n3{margin-right:-1rem!important}.mb-sm-n3,.my-sm-n3{margin-bottom:-1rem!important}.ml-sm-n3,.mx-sm-n3{margin-left:-1rem!important}.m-sm-n4{margin:-1.5rem!important}.mt-sm-n4,.my-sm-n4{margin-top:-1.5rem!important}.mr-sm-n4,.mx-sm-n4{margin-right:-1.5rem!important}.mb-sm-n4,.my-sm-n4{margin-bottom:-1.5rem!important}.ml-sm-n4,.mx-sm-n4{margin-left:-1.5rem!important}.m-sm-n5{margin:-3rem!important}.mt-sm-n5,.my-sm-n5{margin-top:-3rem!important}.mr-sm-n5,.mx-sm-n5{margin-right:-3rem!important}.mb-sm-n5,.my-sm-n5{margin-bottom:-3rem!important}.ml-sm-n5,.mx-sm-n5{margin-left:-3rem!important}.m-sm-auto{margin:auto!important}.mt-sm-auto,.my-sm-auto{margin-top:auto!important}.mr-sm-auto,.mx-sm-auto{margin-right:auto!important}.mb-sm-auto,.my-sm-auto{margin-bottom:auto!important}.ml-sm-auto,.mx-sm-auto{margin-left:auto!important}}@media (min-width:768px){.m-md-0{margin:0!important}.mt-md-0,.my-md-0{margin-top:0!important}.mr-md-0,.mx-md-0{margin-right:0!important}.mb-md-0,.my-md-0{margin-bottom:0!important}.ml-md-0,.mx-md-0{margin-left:0!important}.m-md-1{margin:.25rem!important}.mt-md-1,.my-md-1{margin-top:.25rem!important}.mr-md-1,.mx-md-1{margin-right:.25rem!important}.mb-md-1,.my-md-1{margin-bottom:.25rem!important}.ml-md-1,.mx-md-1{margin-left:.25rem!important}.m-md-2{margin:.5rem!important}.mt-md-2,.my-md-2{margin-top:.5rem!important}.mr-md-2,.mx-md-2{margin-right:.5rem!important}.mb-md-2,.my-md-2{margin-bottom:.5rem!important}.ml-md-2,.mx-md-2{margin-left:.5rem!important}.m-md-3{margin:1rem!important}.mt-md-3,.my-md-3{margin-top:1rem!important}.mr-md-3,.mx-md-3{margin-right:1rem!important}.mb-md-3,.my-md-3{margin-bottom:1rem!important}.ml-md-3,.mx-md-3{margin-left:1rem!important}.m-md-4{margin:1.5rem!important}.mt-md-4,.my-md-4{margin-top:1.5rem!important}.mr-md-4,.mx-md-4{margin-right:1.5rem!important}.mb-md-4,.my-md-4{margin-bottom:1.5rem!important}.ml-md-4,.mx-md-4{margin-left:1.5rem!important}.m-md-5{margin:3rem!important}.mt-md-5,.my-md-5{margin-top:3rem!important}.mr-md-5,.mx-md-5{margin-right:3rem!important}.mb-md-5,.my-md-5{margin-bottom:3rem!important}.ml-md-5,.mx-md-5{margin-left:3rem!important}.p-md-0{padding:0!important}.pt-md-0,.py-md-0{padding-top:0!important}.pr-md-0,.px-md-0{padding-right:0!important}.pb-md-0,.py-md-0{padding-bottom:0!important}.pl-md-0,.px-md-0{padding-left:0!important}.p-md-1{padding:.25rem!important}.pt-md-1,.py-md-1{padding-top:.25rem!important}.pr-md-1,.px-md-1{padding-right:.25rem!important}.pb-md-1,.py-md-1{padding-bottom:.25rem!important}.pl-md-1,.px-md-1{padding-left:.25rem!important}.p-md-2{padding:.5rem!important}.pt-md-2,.py-md-2{padding-top:.5rem!important}.pr-md-2,.px-md-2{padding-right:.5rem!important}.pb-md-2,.py-md-2{padding-bottom:.5rem!important}.pl-md-2,.px-md-2{padding-left:.5rem!important}.p-md-3{padding:1rem!important}.pt-md-3,.py-md-3{padding-top:1rem!important}.pr-md-3,.px-md-3{padding-right:1rem!important}.pb-md-3,.py-md-3{padding-bottom:1rem!important}.pl-md-3,.px-md-3{padding-left:1rem!important}.p-md-4{padding:1.5rem!important}.pt-md-4,.py-md-4{padding-top:1.5rem!important}.pr-md-4,.px-md-4{padding-right:1.5rem!important}.pb-md-4,.py-md-4{padding-bottom:1.5rem!important}.pl-md-4,.px-md-4{padding-left:1.5rem!important}.p-md-5{padding:3rem!important}.pt-md-5,.py-md-5{padding-top:3rem!important}.pr-md-5,.px-md-5{padding-right:3rem!important}.pb-md-5,.py-md-5{padding-bottom:3rem!important}.pl-md-5,.px-md-5{padding-left:3rem!important}.m-md-n1{margin:-.25rem!important}.mt-md-n1,.my-md-n1{margin-top:-.25rem!important}.mr-md-n1,.mx-md-n1{margin-right:-.25rem!important}.mb-md-n1,.my-md-n1{margin-bottom:-.25rem!important}.ml-md-n1,.mx-md-n1{margin-left:-.25rem!important}.m-md-n2{margin:-.5rem!important}.mt-md-n2,.my-md-n2{margin-top:-.5rem!important}.mr-md-n2,.mx-md-n2{margin-right:-.5rem!important}.mb-md-n2,.my-md-n2{margin-bottom:-.5rem!important}.ml-md-n2,.mx-md-n2{margin-left:-.5rem!important}.m-md-n3{margin:-1rem!important}.mt-md-n3,.my-md-n3{margin-top:-1rem!important}.mr-md-n3,.mx-md-n3{margin-right:-1rem!important}.mb-md-n3,.my-md-n3{margin-bottom:-1rem!important}.ml-md-n3,.mx-md-n3{margin-left:-1rem!important}.m-md-n4{margin:-1.5rem!important}.mt-md-n4,.my-md-n4{margin-top:-1.5rem!important}.mr-md-n4,.mx-md-n4{margin-right:-1.5rem!important}.mb-md-n4,.my-md-n4{margin-bottom:-1.5rem!important}.ml-md-n4,.mx-md-n4{margin-left:-1.5rem!important}.m-md-n5{margin:-3rem!important}.mt-md-n5,.my-md-n5{margin-top:-3rem!important}.mr-md-n5,.mx-md-n5{margin-right:-3rem!important}.mb-md-n5,.my-md-n5{margin-bottom:-3rem!important}.ml-md-n5,.mx-md-n5{margin-left:-3rem!important}.m-md-auto{margin:auto!important}.mt-md-auto,.my-md-auto{margin-top:auto!important}.mr-md-auto,.mx-md-auto{margin-right:auto!important}.mb-md-auto,.my-md-auto{margin-bottom:auto!important}.ml-md-auto,.mx-md-auto{margin-left:auto!important}}@media (min-width:992px){.m-lg-0{margin:0!important}.mt-lg-0,.my-lg-0{margin-top:0!important}.mr-lg-0,.mx-lg-0{margin-right:0!important}.mb-lg-0,.my-lg-0{margin-bottom:0!important}.ml-lg-0,.mx-lg-0{margin-left:0!important}.m-lg-1{margin:.25rem!important}.mt-lg-1,.my-lg-1{margin-top:.25rem!important}.mr-lg-1,.mx-lg-1{margin-right:.25rem!important}.mb-lg-1,.my-lg-1{margin-bottom:.25rem!important}.ml-lg-1,.mx-lg-1{margin-left:.25rem!important}.m-lg-2{margin:.5rem!important}.mt-lg-2,.my-lg-2{margin-top:.5rem!important}.mr-lg-2,.mx-lg-2{margin-right:.5rem!important}.mb-lg-2,.my-lg-2{margin-bottom:.5rem!important}.ml-lg-2,.mx-lg-2{margin-left:.5rem!important}.m-lg-3{margin:1rem!important}.mt-lg-3,.my-lg-3{margin-top:1rem!important}.mr-lg-3,.mx-lg-3{margin-right:1rem!important}.mb-lg-3,.my-lg-3{margin-bottom:1rem!important}.ml-lg-3,.mx-lg-3{margin-left:1rem!important}.m-lg-4{margin:1.5rem!important}.mt-lg-4,.my-lg-4{margin-top:1.5rem!important}.mr-lg-4,.mx-lg-4{margin-right:1.5rem!important}.mb-lg-4,.my-lg-4{margin-bottom:1.5rem!important}.ml-lg-4,.mx-lg-4{margin-left:1.5rem!important}.m-lg-5{margin:3rem!important}.mt-lg-5,.my-lg-5{margin-top:3rem!important}.mr-lg-5,.mx-lg-5{margin-right:3rem!important}.mb-lg-5,.my-lg-5{margin-bottom:3rem!important}.ml-lg-5,.mx-lg-5{margin-left:3rem!important}.p-lg-0{padding:0!important}.pt-lg-0,.py-lg-0{padding-top:0!important}.pr-lg-0,.px-lg-0{padding-right:0!important}.pb-lg-0,.py-lg-0{padding-bottom:0!important}.pl-lg-0,.px-lg-0{padding-left:0!important}.p-lg-1{padding:.25rem!important}.pt-lg-1,.py-lg-1{padding-top:.25rem!important}.pr-lg-1,.px-lg-1{padding-right:.25rem!important}.pb-lg-1,.py-lg-1{padding-bottom:.25rem!important}.pl-lg-1,.px-lg-1{padding-left:.25rem!important}.p-lg-2{padding:.5rem!important}.pt-lg-2,.py-lg-2{padding-top:.5rem!important}.pr-lg-2,.px-lg-2{padding-right:.5rem!important}.pb-lg-2,.py-lg-2{padding-bottom:.5rem!important}.pl-lg-2,.px-lg-2{padding-left:.5rem!important}.p-lg-3{padding:1rem!important}.pt-lg-3,.py-lg-3{padding-top:1rem!important}.pr-lg-3,.px-lg-3{padding-right:1rem!important}.pb-lg-3,.py-lg-3{padding-bottom:1rem!important}.pl-lg-3,.px-lg-3{padding-left:1rem!important}.p-lg-4{padding:1.5rem!important}.pt-lg-4,.py-lg-4{padding-top:1.5rem!important}.pr-lg-4,.px-lg-4{padding-right:1.5rem!important}.pb-lg-4,.py-lg-4{padding-bottom:1.5rem!important}.pl-lg-4,.px-lg-4{padding-left:1.5rem!important}.p-lg-5{padding:3rem!important}.pt-lg-5,.py-lg-5{padding-top:3rem!important}.pr-lg-5,.px-lg-5{padding-right:3rem!important}.pb-lg-5,.py-lg-5{padding-bottom:3rem!important}.pl-lg-5,.px-lg-5{padding-left:3rem!important}.m-lg-n1{margin:-.25rem!important}.mt-lg-n1,.my-lg-n1{margin-top:-.25rem!important}.mr-lg-n1,.mx-lg-n1{margin-right:-.25rem!important}.mb-lg-n1,.my-lg-n1{margin-bottom:-.25rem!important}.ml-lg-n1,.mx-lg-n1{margin-left:-.25rem!important}.m-lg-n2{margin:-.5rem!important}.mt-lg-n2,.my-lg-n2{margin-top:-.5rem!important}.mr-lg-n2,.mx-lg-n2{margin-right:-.5rem!important}.mb-lg-n2,.my-lg-n2{margin-bottom:-.5rem!important}.ml-lg-n2,.mx-lg-n2{margin-left:-.5rem!important}.m-lg-n3{margin:-1rem!important}.mt-lg-n3,.my-lg-n3{margin-top:-1rem!important}.mr-lg-n3,.mx-lg-n3{margin-right:-1rem!important}.mb-lg-n3,.my-lg-n3{margin-bottom:-1rem!important}.ml-lg-n3,.mx-lg-n3{margin-left:-1rem!important}.m-lg-n4{margin:-1.5rem!important}.mt-lg-n4,.my-lg-n4{margin-top:-1.5rem!important}.mr-lg-n4,.mx-lg-n4{margin-right:-1.5rem!important}.mb-lg-n4,.my-lg-n4{margin-bottom:-1.5rem!important}.ml-lg-n4,.mx-lg-n4{margin-left:-1.5rem!important}.m-lg-n5{margin:-3rem!important}.mt-lg-n5,.my-lg-n5{margin-top:-3rem!important}.mr-lg-n5,.mx-lg-n5{margin-right:-3rem!important}.mb-lg-n5,.my-lg-n5{margin-bottom:-3rem!important}.ml-lg-n5,.mx-lg-n5{margin-left:-3rem!important}.m-lg-auto{margin:auto!important}.mt-lg-auto,.my-lg-auto{margin-top:auto!important}.mr-lg-auto,.mx-lg-auto{margin-right:auto!important}.mb-lg-auto,.my-lg-auto{margin-bottom:auto!important}.ml-lg-auto,.mx-lg-auto{margin-left:auto!important}}@media (min-width:1200px){.m-xl-0{margin:0!important}.mt-xl-0,.my-xl-0{margin-top:0!important}.mr-xl-0,.mx-xl-0{margin-right:0!important}.mb-xl-0,.my-xl-0{margin-bottom:0!important}.ml-xl-0,.mx-xl-0{margin-left:0!important}.m-xl-1{margin:.25rem!important}.mt-xl-1,.my-xl-1{margin-top:.25rem!important}.mr-xl-1,.mx-xl-1{margin-right:.25rem!important}.mb-xl-1,.my-xl-1{margin-bottom:.25rem!important}.ml-xl-1,.mx-xl-1{margin-left:.25rem!important}.m-xl-2{margin:.5rem!important}.mt-xl-2,.my-xl-2{margin-top:.5rem!important}.mr-xl-2,.mx-xl-2{margin-right:.5rem!important}.mb-xl-2,.my-xl-2{margin-bottom:.5rem!important}.ml-xl-2,.mx-xl-2{margin-left:.5rem!important}.m-xl-3{margin:1rem!important}.mt-xl-3,.my-xl-3{margin-top:1rem!important}.mr-xl-3,.mx-xl-3{margin-right:1rem!important}.mb-xl-3,.my-xl-3{margin-bottom:1rem!important}.ml-xl-3,.mx-xl-3{margin-left:1rem!important}.m-xl-4{margin:1.5rem!important}.mt-xl-4,.my-xl-4{margin-top:1.5rem!important}.mr-xl-4,.mx-xl-4{margin-right:1.5rem!important}.mb-xl-4,.my-xl-4{margin-bottom:1.5rem!important}.ml-xl-4,.mx-xl-4{margin-left:1.5rem!important}.m-xl-5{margin:3rem!important}.mt-xl-5,.my-xl-5{margin-top:3rem!important}.mr-xl-5,.mx-xl-5{margin-right:3rem!important}.mb-xl-5,.my-xl-5{margin-bottom:3rem!important}.ml-xl-5,.mx-xl-5{margin-left:3rem!important}.p-xl-0{padding:0!important}.pt-xl-0,.py-xl-0{padding-top:0!important}.pr-xl-0,.px-xl-0{padding-right:0!important}.pb-xl-0,.py-xl-0{padding-bottom:0!important}.pl-xl-0,.px-xl-0{padding-left:0!important}.p-xl-1{padding:.25rem!important}.pt-xl-1,.py-xl-1{padding-top:.25rem!important}.pr-xl-1,.px-xl-1{padding-right:.25rem!important}.pb-xl-1,.py-xl-1{padding-bottom:.25rem!important}.pl-xl-1,.px-xl-1{padding-left:.25rem!important}.p-xl-2{padding:.5rem!important}.pt-xl-2,.py-xl-2{padding-top:.5rem!important}.pr-xl-2,.px-xl-2{padding-right:.5rem!important}.pb-xl-2,.py-xl-2{padding-bottom:.5rem!important}.pl-xl-2,.px-xl-2{padding-left:.5rem!important}.p-xl-3{padding:1rem!important}.pt-xl-3,.py-xl-3{padding-top:1rem!important}.pr-xl-3,.px-xl-3{padding-right:1rem!important}.pb-xl-3,.py-xl-3{padding-bottom:1rem!important}.pl-xl-3,.px-xl-3{padding-left:1rem!important}.p-xl-4{padding:1.5rem!important}.pt-xl-4,.py-xl-4{padding-top:1.5rem!important}.pr-xl-4,.px-xl-4{padding-right:1.5rem!important}.pb-xl-4,.py-xl-4{padding-bottom:1.5rem!important}.pl-xl-4,.px-xl-4{padding-left:1.5rem!important}.p-xl-5{padding:3rem!important}.pt-xl-5,.py-xl-5{padding-top:3rem!important}.pr-xl-5,.px-xl-5{padding-right:3rem!important}.pb-xl-5,.py-xl-5{padding-bottom:3rem!important}.pl-xl-5,.px-xl-5{padding-left:3rem!important}.m-xl-n1{margin:-.25rem!important}.mt-xl-n1,.my-xl-n1{margin-top:-.25rem!important}.mr-xl-n1,.mx-xl-n1{margin-right:-.25rem!important}.mb-xl-n1,.my-xl-n1{margin-bottom:-.25rem!important}.ml-xl-n1,.mx-xl-n1{margin-left:-.25rem!important}.m-xl-n2{margin:-.5rem!important}.mt-xl-n2,.my-xl-n2{margin-top:-.5rem!important}.mr-xl-n2,.mx-xl-n2{margin-right:-.5rem!important}.mb-xl-n2,.my-xl-n2{margin-bottom:-.5rem!important}.ml-xl-n2,.mx-xl-n2{margin-left:-.5rem!important}.m-xl-n3{margin:-1rem!important}.mt-xl-n3,.my-xl-n3{margin-top:-1rem!important}.mr-xl-n3,.mx-xl-n3{margin-right:-1rem!important}.mb-xl-n3,.my-xl-n3{margin-bottom:-1rem!important}.ml-xl-n3,.mx-xl-n3{margin-left:-1rem!important}.m-xl-n4{margin:-1.5rem!important}.mt-xl-n4,.my-xl-n4{margin-top:-1.5rem!important}.mr-xl-n4,.mx-xl-n4{margin-right:-1.5rem!important}.mb-xl-n4,.my-xl-n4{margin-bottom:-1.5rem!important}.ml-xl-n4,.mx-xl-n4{margin-left:-1.5rem!important}.m-xl-n5{margin:-3rem!important}.mt-xl-n5,.my-xl-n5{margin-top:-3rem!important}.mr-xl-n5,.mx-xl-n5{margin-right:-3rem!important}.mb-xl-n5,.my-xl-n5{margin-bottom:-3rem!important}.ml-xl-n5,.mx-xl-n5{margin-left:-3rem!important}.m-xl-auto{margin:auto!important}.mt-xl-auto,.my-xl-auto{margin-top:auto!important}.mr-xl-auto,.mx-xl-auto{margin-right:auto!important}.mb-xl-auto,.my-xl-auto{margin-bottom:auto!important}.ml-xl-auto,.mx-xl-auto{margin-left:auto!important}}.text-monospace{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace!important}.text-justify{text-align:justify!important}.text-wrap{white-space:normal!important}.text-nowrap{white-space:nowrap!important}.text-truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.text-left{text-align:left!important}.text-right{text-align:right!important}.text-center{text-align:center!important}@media (min-width:576px){.text-sm-left{text-align:left!important}.text-sm-right{text-align:right!important}.text-sm-center{text-align:center!important}}@media (min-width:768px){.text-md-left{text-align:left!important}.text-md-right{text-align:right!important}.text-md-center{text-align:center!important}}@media (min-width:992px){.text-lg-left{text-align:left!important}.text-lg-right{text-align:right!important}.text-lg-center{text-align:center!important}}@media (min-width:1200px){.text-xl-left{text-align:left!important}.text-xl-right{text-align:right!important}.text-xl-center{text-align:center!important}}.text-lowercase{text-transform:lowercase!important}.text-uppercase{text-transform:uppercase!important}.text-capitalize{text-transform:capitalize!important}.font-weight-light{font-weight:300!important}.font-weight-lighter{font-weight:lighter!important}.font-weight-normal{font-weight:400!important}.font-weight-bold{font-weight:700!important}.font-weight-bolder{font-weight:bolder!important}.font-italic{font-style:italic!important}.text-white{color:#fff!important}.text-primary{color:#007bff!important}a.text-primary:focus,a.text-primary:hover{color:#0056b3!important}.text-secondary{color:#6c757d!important}a.text-secondary:focus,a.text-secondary:hover{color:#494f54!important}.text-success{color:#28a745!important}a.text-success:focus,a.text-success:hover{color:#19692c!important}.text-info{color:#17a2b8!important}a.text-info:focus,a.text-info:hover{color:#0f6674!important}.text-warning{color:#ffc107!important}a.text-warning:focus,a.text-warning:hover{color:#ba8b00!important}.text-danger{color:#dc3545!important}a.text-danger:focus,a.text-danger:hover{color:#a71d2a!important}.text-light{color:#f8f9fa!important}a.text-light:focus,a.text-light:hover{color:#cbd3da!important}.text-dark{color:#343a40!important}a.text-dark:focus,a.text-dark:hover{color:#121416!important}.text-body{color:#212529!important}.text-muted{color:#6c757d!important}.text-black-50{color:rgba(0,0,0,.5)!important}.text-white-50{color:rgba(255,255,255,.5)!important}.text-hide{font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0}.text-decoration-none{text-decoration:none!important}.text-break{word-break:break-word!important;overflow-wrap:break-word!important}.text-reset{color:inherit!important}.visible{visibility:visible!important}.invisible{visibility:hidden!important}@media print{*,::after,::before{text-shadow:none!important;box-shadow:none!important}a:not(.btn){text-decoration:underline}abbr[title]::after{content:" (" attr(title) ")"}pre{white-space:pre-wrap!important}blockquote,pre{border:1px solid #adb5bd;page-break-inside:avoid}thead{display:table-header-group}img,tr{page-break-inside:avoid}h2,h3,p{orphans:3;widows:3}h2,h3{page-break-after:avoid}@page{size:a3}body{min-width:992px!important}.container{min-width:992px!important}.navbar{display:none}.badge{border:1px solid #000}.table{border-collapse:collapse!important}.table td,.table th{background-color:#fff!important}.table-bordered td,.table-bordered th{border:1px solid #dee2e6!important}.table-dark{color:inherit}.table-dark tbody+tbody,.table-dark td,.table-dark th,.table-dark thead th{border-color:#dee2e6}.table .thead-dark th{color:inherit;border-color:#dee2e6}} -/*# sourceMappingURL=bootstrap.min.css.map */ \ No newline at end of file From 057518db0d195a4cc224c5d3d928a2b463a046e2 Mon Sep 17 00:00:00 2001 From: Pranav Bhaskaran <67958542+Pranav-b-7@users.noreply.github.com> Date: Thu, 16 Dec 2021 20:47:40 +0530 Subject: [PATCH 33/43] upgraded the fiat version, kork version and spinnaker gradle version (#97) --- gradle.properties | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gradle.properties b/gradle.properties index f5d55a39a6..333922ecb1 100644 --- a/gradle.properties +++ b/gradle.properties @@ -1,10 +1,10 @@ enablePublishing=false -fiatVersion=1.27.0 +fiatVersion=1.27.1 includeProviders=basic,iap,ldap,oauth2,saml,x509 -korkVersion=7.109.0 +korkVersion=7.109.1 kotlinVersion=1.4.0 org.gradle.parallel=true -spinnakerGradleVersion=8.11.0 +spinnakerGradleVersion=8.15.0 targetJava11=true # To enable a composite reference to a project, set the From d608b9e3c7eae5c7c9a7dc6d09350f70562035ec Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Wed, 22 Dec 2021 15:27:08 +0530 Subject: [PATCH 34/43] OP-7927: Corrected defective logic --- .../gate/security/ldap/RetryOnExceptionAuthManager.java | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java b/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java index 68fd19477c..3fce70cdfd 100644 --- a/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java +++ b/gate-ldap/src/main/java/com/opsmx/spinnaker/gate/security/ldap/RetryOnExceptionAuthManager.java @@ -20,6 +20,7 @@ public class RetryOnExceptionAuthManager implements AuthenticationManager { private int numRetries; private long timeToWaitMS; private AuthenticationManager delegate; + private int originalNumRetries; // CONSTRUCTORS public RetryOnExceptionAuthManager( @@ -27,6 +28,7 @@ public RetryOnExceptionAuthManager( this.numRetries = _numRetries; this.timeToWaitMS = _timeToWaitMS; this.delegate = delegate; + this.originalNumRetries = _numRetries; } public RetryOnExceptionAuthManager(AuthenticationManager delegate) { @@ -40,10 +42,10 @@ public Authentication authenticate(Authentication authentication) throws Authent try { auth = delegate.authenticate(authentication); log.info("Authenticated without connection issue"); + numRetries = originalNumRetries; break; } catch (UncategorizedLdapException ldapException) { exceptionOccurred(ldapException); - continue; } } From f7eeea951a537068cf7659b5d1f81b06081736fe Mon Sep 17 00:00:00 2001 From: Rahul Chekuri <89373036+rahul-chekuri@users.noreply.github.com> Date: Tue, 8 Feb 2022 12:16:16 +0530 Subject: [PATCH 35/43] OP-12364: Cherry picked auth bug fix (#127) * OP-12364: Cherry picked auth bug fix * OP-12364: Cherry picked auth bug fix * OP-12364: Added installation properties. --- docker_build/gate.yml | 4 ++ .../OpsmxDashboardController.groovy | 41 +++++++++++++------ .../internal/OpsmxDashboardService.groovy | 7 +++- .../gate/enums/GateInstallationModes.java | 32 +++++++++++++++ gate-web/src/test/resources/gate-test.yml | 4 ++ 5 files changed, 74 insertions(+), 14 deletions(-) create mode 100644 gate-web/src/main/java/com/opsmx/spinnaker/gate/enums/GateInstallationModes.java diff --git a/docker_build/gate.yml b/docker_build/gate.yml index e92a873ccc..ea2c12f6b0 100644 --- a/docker_build/gate.yml +++ b/docker_build/gate.yml @@ -103,3 +103,7 @@ management: health: show-details: always show-components: always + +gate: + installation: + mode: common diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxDashboardController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxDashboardController.groovy index 1406e3a68e..a235b45e33 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxDashboardController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxDashboardController.groovy @@ -16,15 +16,17 @@ package com.netflix.spinnaker.gate.controllers - import com.netflix.spinnaker.gate.services.internal.OpsmxDashboardService +import com.opsmx.spinnaker.gate.enums.GateInstallationModes import groovy.util.logging.Slf4j import io.swagger.annotations.ApiOperation -import okhttp3.OkHttpClient import org.springframework.beans.factory.annotation.Autowired +import org.springframework.beans.factory.annotation.Value import org.springframework.boot.autoconfigure.condition.ConditionalOnExpression import org.springframework.web.bind.annotation.* +import javax.servlet.http.HttpServletRequest + @RequestMapping("/dashboardservice") @RestController @Slf4j @@ -49,6 +51,9 @@ class OpsmxDashboardController { @Autowired OpsmxDashboardService opsmxDashboardService + @Value('${gate.installation.mode}') + GateInstallationModes gateInstallationMode + @ApiOperation(value = "Endpoint for dashboard rest services") @RequestMapping(value = "/{version}/{type}", method = RequestMethod.GET) Object getDashboardResponse1(@PathVariable("version") String version, @@ -212,9 +217,13 @@ class OpsmxDashboardController { @PathVariable("source1") String source1, @PathVariable("source2") String source2, @PathVariable("source3") String source3, - @PathVariable("source4") String source4) { - - return opsmxDashboardService.deleteDashboardResponse7(version, type, source, source1, source2, source3, source4) + @PathVariable("source4") String source4, + HttpServletRequest request) { + String cookie = "no-cookie" + if(gateInstallationMode.equals(GateInstallationModes.common)){ + cookie = request.getHeader("Cookie") + } + return opsmxDashboardService.deleteDashboardResponse7(version, type, source, source1, source2, source3, source4, cookie) } @ApiOperation(value = "Endpoint for dashboard rest services") @@ -227,7 +236,6 @@ class OpsmxDashboardController { @PathVariable("source3") String source3, @PathVariable("source4") String source4, @PathVariable("source5") String source5) { - return opsmxDashboardService.deleteDashboardResponse8(version, type, source, source1, source2, source3, source4, source5) } @@ -256,9 +264,13 @@ class OpsmxDashboardController { @PathVariable("type") String type, @PathVariable("source") String source, @PathVariable("source1") String source1, - @RequestBody(required = false) Object data) { - - return opsmxDashboardService.postDashboardResponse4(version, type, source, source1, data) + @RequestBody(required = false) Object data, + HttpServletRequest request) { + String cookie = "no-cookie" + if(gateInstallationMode.equals(GateInstallationModes.common)){ + cookie = request.getHeader("Cookie") + } + return opsmxDashboardService.postDashboardResponse4(version, type, source, source1, cookie, data) } @ApiOperation(value = "Endpoint for dashboard rest services") @@ -352,9 +364,14 @@ class OpsmxDashboardController { @PathVariable("source") String source, @PathVariable("source1") String source1, @PathVariable("source2") String source2, - @RequestBody(required = false) Object data) { - - return opsmxDashboardService.updateDashboardResponse3(version, type, source, source1, source2, data) + @RequestBody(required = false) Object data, + HttpServletRequest request) { + String cookie = "no-cookie" + if(gateInstallationMode != null && gateInstallationMode.equals(GateInstallationModes.common)){ + cookie = request.getHeader("Cookie") + } + + return opsmxDashboardService.updateDashboardResponse3(version, type, source, source1, source2, data, cookie) } @ApiOperation(value = "Endpoint for dashboard rest services") diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxDashboardService.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxDashboardService.groovy index 64bc203591..5ab12ccbb3 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxDashboardService.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxDashboardService.groovy @@ -133,7 +133,8 @@ interface OpsmxDashboardService { @Path('source1') String source1, @Path('source2') String source2, @Path('source3') String source3, - @Path('source4') String source4) + @Path('source4') String source4, + @Header('x-user-cookie') String cookie) @DELETE("/dashboardservice/{version}/{type}/{source}/{source1}/{source2}/{source3}/{source4}/{source5}") Object deleteDashboardResponse8(@Path('version') String version, @@ -161,6 +162,7 @@ interface OpsmxDashboardService { @Path('type') String type, @Path('source') String source, @Path('source1') String source1, + @Header('x-user-cookie') String cookie, @Body Object data) @POST("/dashboardservice/{version}/{type}/{source}/{source1}/{source2}") @@ -225,7 +227,8 @@ interface OpsmxDashboardService { @Path('source') String source, @Path('source1') String source1, @Path('source2') String source2, - @Body Object data) + @Body Object data, + @Header('x-user-cookie') String cookie) @PUT("/dashboardservice/{version}/{type}/{source}/{source1}/{source2}/{source3}") Object updateDashboardResponse4(@Path('version') String version, diff --git a/gate-web/src/main/java/com/opsmx/spinnaker/gate/enums/GateInstallationModes.java b/gate-web/src/main/java/com/opsmx/spinnaker/gate/enums/GateInstallationModes.java new file mode 100644 index 0000000000..c0b9a6e8b8 --- /dev/null +++ b/gate-web/src/main/java/com/opsmx/spinnaker/gate/enums/GateInstallationModes.java @@ -0,0 +1,32 @@ +/* + * Copyright 2022 Netflix, Inc. + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +package com.opsmx.spinnaker.gate.enums; + +public enum GateInstallationModes { + oes("oes"), + common("common"); + + public String description; + + public String getDescription() { + return this.description; + } + + GateInstallationModes(String description) { + this.description = description; + } +} diff --git a/gate-web/src/test/resources/gate-test.yml b/gate-web/src/test/resources/gate-test.yml index 289c06be46..970e0f8d3b 100644 --- a/gate-web/src/test/resources/gate-test.yml +++ b/gate-web/src/test/resources/gate-test.yml @@ -58,3 +58,7 @@ spring: spinnaker: extensions: applicationName: spinnakerpluginstest + +gate: + installation: + mode: common From 24ba7df1221f4263947cffe89e4a083b52c51109 Mon Sep 17 00:00:00 2001 From: Pranav-b-7 Date: Tue, 4 Jan 2022 15:35:20 +0530 Subject: [PATCH 36/43] added deploymentId and history params --- .../gate/controllers/OpsmxVisibilityController.groovy | 6 ++++-- .../gate/services/internal/OpsmxVisibilityService.groovy | 4 +++- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxVisibilityController.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxVisibilityController.groovy index 85a65dd588..8815479ec0 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxVisibilityController.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/controllers/OpsmxVisibilityController.groovy @@ -105,8 +105,10 @@ class OpsmxVisibilityController { @RequestParam(value = "noOfDays", required = false) String noOfDays, @RequestParam(value = "pageNo", required = false) Integer pageNo, @RequestParam(value = "pageLimit", required = false) Integer pageLimit, - @RequestParam(value = "search", required = false) String search){ - return opsmxVisibilityService.getVisibilityResponse(version, type, source, source1, approvalgateinstances, approvalGateInstanceIds, noOfDays, pageNo, pageLimit, search) + @RequestParam(value = "search", required = false) String search, + @RequestParam(value = "deploymentId", required = false) Integer deploymentId, + @RequestParam(value = "history", required = false) Boolean history){ + return opsmxVisibilityService.getVisibilityResponse(version, type, source, source1, approvalgateinstances, approvalGateInstanceIds, noOfDays, pageNo, pageLimit, search, deploymentId, history) } @ApiOperation(value = "Endpoint for visibility rest services") diff --git a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxVisibilityService.groovy b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxVisibilityService.groovy index 8ef5081594..ab55cbd1d2 100644 --- a/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxVisibilityService.groovy +++ b/gate-web/src/main/groovy/com/netflix/spinnaker/gate/services/internal/OpsmxVisibilityService.groovy @@ -44,7 +44,9 @@ interface OpsmxVisibilityService { @Query("noOfDays") String noOfDays, @Query("pageNo") Integer pageNo, @Query("pageLimit") Integer pageLimit, - @Query("search") String search) + @Query("search") String search, + @Query("deploymentId") Integer deploymentId, + @Query("history") Boolean history) @GET("/visibilityservice/{version}/{type}/{source}/{source1}") Object getVisibilityResponse4(@Path('version') String version, From db42bd11b029d45227d840a07d8878d1f1f01b1a Mon Sep 17 00:00:00 2001 From: Pranav-b-7 Date: Tue, 8 Feb 2022 17:04:33 +0530 Subject: [PATCH 37/43] Added retrofit error handler --- .../gate/exception/ErrorResponseModel.groovy | 27 +++++++ .../exception/RetrofitErrorHandler.groovy | 73 +++++++++++++++++++ 2 files changed, 100 insertions(+) create mode 100644 gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/ErrorResponseModel.groovy create mode 100644 gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/RetrofitErrorHandler.groovy diff --git a/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/ErrorResponseModel.groovy b/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/ErrorResponseModel.groovy new file mode 100644 index 0000000000..49a4c3310c --- /dev/null +++ b/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/ErrorResponseModel.groovy @@ -0,0 +1,27 @@ +/* + * Copyright 2022 OpsMx, Inc. + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +package com.opsmx.spinnaker.gate.exception + +import groovy.transform.Canonical + +@Canonical +class ErrorResponseModel { + Long timeStampMillis + String errorType + String errorMsg + String url +} diff --git a/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/RetrofitErrorHandler.groovy b/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/RetrofitErrorHandler.groovy new file mode 100644 index 0000000000..c1250217c5 --- /dev/null +++ b/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/RetrofitErrorHandler.groovy @@ -0,0 +1,73 @@ +/* + * Copyright 2022 OpsMx, Inc. + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +package com.opsmx.spinnaker.gate.exception + +import com.netflix.spinnaker.gate.controllers.OpsmxAutopilotController +import com.netflix.spinnaker.gate.controllers.OpsmxDashboardController +import com.netflix.spinnaker.gate.controllers.OpsmxOesController +import com.netflix.spinnaker.gate.controllers.OpsmxPlatformController +import com.netflix.spinnaker.gate.controllers.OpsmxVisibilityController +import groovy.util.logging.Slf4j +import org.springframework.http.HttpStatus +import org.springframework.http.ResponseEntity +import org.springframework.web.bind.annotation.ControllerAdvice +import org.springframework.web.bind.annotation.ExceptionHandler +import org.springframework.web.bind.annotation.ResponseBody +import retrofit.RetrofitError + +@Slf4j +@ControllerAdvice(basePackageClasses = [OpsmxAutopilotController.class, + OpsmxDashboardController.class, OpsmxPlatformController.class, + OpsmxOesController.class, OpsmxVisibilityController.class]) +class RetrofitErrorHandler { + + @ExceptionHandler([RetrofitError.class]) + @ResponseBody ResponseEntity handleRetrofitError(RetrofitError retrofitError){ + if (retrofitError!=null){ + log.warn("Exception occurred in OES downstream services : {}", retrofitError.getMessage()) + if (retrofitError.getKind() == RetrofitError.Kind.NETWORK){ + ErrorResponseModel networkErrorResponse = populateNetworkErrorResponse(retrofitError) + return new ResponseEntity(networkErrorResponse, HttpStatus.INTERNAL_SERVER_ERROR) + } + if (retrofitError.getResponse()!=null && retrofitError.getResponse().getStatus() > 0){ + return new ResponseEntity(retrofitError.getBody(), HttpStatus.valueOf(retrofitError.getResponse().getStatus())) + } + return new ResponseEntity(retrofitError.getBody(), HttpStatus.INTERNAL_SERVER_ERROR) + } + ErrorResponseModel defaultErrorResponse = populateDefaultErrorResponseModel() + return new ResponseEntity(defaultErrorResponse, HttpStatus.INTERNAL_SERVER_ERROR) + } + + + private ErrorResponseModel populateDefaultErrorResponseModel() { + ErrorResponseModel defaultErrorResponse = new ErrorResponseModel() + defaultErrorResponse.setErrorType("Unknown Error") + defaultErrorResponse.setErrorMsg("Something went wrong") + defaultErrorResponse.setTimeStampMillis(System.currentTimeMillis()) + return defaultErrorResponse + } + + + private ErrorResponseModel populateNetworkErrorResponse(RetrofitError retrofitError) { + ErrorResponseModel errorResponseModel = new ErrorResponseModel() + errorResponseModel.setErrorType("Network Error") + errorResponseModel.setErrorMsg(retrofitError.getMessage()) + errorResponseModel.setTimeStampMillis(System.currentTimeMillis()) + errorResponseModel.setUrl(retrofitError.getUrl()) + return errorResponseModel + } +} From c42029776d0cfa3910a17a841c930ff06486147a Mon Sep 17 00:00:00 2001 From: Pranav-b-7 Date: Wed, 9 Feb 2022 19:02:00 +0530 Subject: [PATCH 38/43] reverted the retrofit error handling --- .../gate/exception/ErrorResponseModel.groovy | 27 ------- .../exception/RetrofitErrorHandler.groovy | 73 ------------------- 2 files changed, 100 deletions(-) delete mode 100644 gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/ErrorResponseModel.groovy delete mode 100644 gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/RetrofitErrorHandler.groovy diff --git a/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/ErrorResponseModel.groovy b/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/ErrorResponseModel.groovy deleted file mode 100644 index 49a4c3310c..0000000000 --- a/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/ErrorResponseModel.groovy +++ /dev/null @@ -1,27 +0,0 @@ -/* - * Copyright 2022 OpsMx, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - */ - -package com.opsmx.spinnaker.gate.exception - -import groovy.transform.Canonical - -@Canonical -class ErrorResponseModel { - Long timeStampMillis - String errorType - String errorMsg - String url -} diff --git a/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/RetrofitErrorHandler.groovy b/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/RetrofitErrorHandler.groovy deleted file mode 100644 index c1250217c5..0000000000 --- a/gate-web/src/main/groovy/com/opsmx/spinnaker/gate/exception/RetrofitErrorHandler.groovy +++ /dev/null @@ -1,73 +0,0 @@ -/* - * Copyright 2022 OpsMx, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - */ - -package com.opsmx.spinnaker.gate.exception - -import com.netflix.spinnaker.gate.controllers.OpsmxAutopilotController -import com.netflix.spinnaker.gate.controllers.OpsmxDashboardController -import com.netflix.spinnaker.gate.controllers.OpsmxOesController -import com.netflix.spinnaker.gate.controllers.OpsmxPlatformController -import com.netflix.spinnaker.gate.controllers.OpsmxVisibilityController -import groovy.util.logging.Slf4j -import org.springframework.http.HttpStatus -import org.springframework.http.ResponseEntity -import org.springframework.web.bind.annotation.ControllerAdvice -import org.springframework.web.bind.annotation.ExceptionHandler -import org.springframework.web.bind.annotation.ResponseBody -import retrofit.RetrofitError - -@Slf4j -@ControllerAdvice(basePackageClasses = [OpsmxAutopilotController.class, - OpsmxDashboardController.class, OpsmxPlatformController.class, - OpsmxOesController.class, OpsmxVisibilityController.class]) -class RetrofitErrorHandler { - - @ExceptionHandler([RetrofitError.class]) - @ResponseBody ResponseEntity handleRetrofitError(RetrofitError retrofitError){ - if (retrofitError!=null){ - log.warn("Exception occurred in OES downstream services : {}", retrofitError.getMessage()) - if (retrofitError.getKind() == RetrofitError.Kind.NETWORK){ - ErrorResponseModel networkErrorResponse = populateNetworkErrorResponse(retrofitError) - return new ResponseEntity(networkErrorResponse, HttpStatus.INTERNAL_SERVER_ERROR) - } - if (retrofitError.getResponse()!=null && retrofitError.getResponse().getStatus() > 0){ - return new ResponseEntity(retrofitError.getBody(), HttpStatus.valueOf(retrofitError.getResponse().getStatus())) - } - return new ResponseEntity(retrofitError.getBody(), HttpStatus.INTERNAL_SERVER_ERROR) - } - ErrorResponseModel defaultErrorResponse = populateDefaultErrorResponseModel() - return new ResponseEntity(defaultErrorResponse, HttpStatus.INTERNAL_SERVER_ERROR) - } - - - private ErrorResponseModel populateDefaultErrorResponseModel() { - ErrorResponseModel defaultErrorResponse = new ErrorResponseModel() - defaultErrorResponse.setErrorType("Unknown Error") - defaultErrorResponse.setErrorMsg("Something went wrong") - defaultErrorResponse.setTimeStampMillis(System.currentTimeMillis()) - return defaultErrorResponse - } - - - private ErrorResponseModel populateNetworkErrorResponse(RetrofitError retrofitError) { - ErrorResponseModel errorResponseModel = new ErrorResponseModel() - errorResponseModel.setErrorType("Network Error") - errorResponseModel.setErrorMsg(retrofitError.getMessage()) - errorResponseModel.setTimeStampMillis(System.currentTimeMillis()) - errorResponseModel.setUrl(retrofitError.getUrl()) - return errorResponseModel - } -} From b35311a8ed8ff2cfaa90298df502e9ffe48b7d4f Mon Sep 17 00:00:00 2001 From: Rahul Chekuri <89373036+rahul-chekuri@users.noreply.github.com> Date: Mon, 21 Mar 2022 20:11:03 +0530 Subject: [PATCH 39/43] OP-11995: Added favicon.ico to the login page. (#167) --- gate-web/src/main/resources/static/favicon.ico | Bin 0 -> 19344 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 gate-web/src/main/resources/static/favicon.ico diff --git a/gate-web/src/main/resources/static/favicon.ico b/gate-web/src/main/resources/static/favicon.ico new file mode 100644 index 0000000000000000000000000000000000000000..0accb87d0907588b65b472accc2277c0bf496d92 GIT binary patch literal 19344 zcma%hWmFtZv@Py#gS%^ROK^7$5MT)I&fpT<9fG^t;BLX)WpIKA4<7vS-TUMHy|b!U zb?w?`pHpk9&+4wKNHrB%bQEF~C@3g&c{wQ!C@5INkIMlG_5)c{Om_IF;4HUpdWvrpg^CXpiaI+K?$WpK>?hyJJdgabX2J+ zX-U7ozY|2Q{@+VL>+=7-2&W8uN*t$+o15;oo9J>F?Q(pdQ2oD`kElL;4RyNwXY&63 zCEkYZBWxZw4HZo&u^+z@)Ufhr>pp#_{QcJnOYKMgukW)?lwyAq>VAJxN|^j8ADp_` zPgsc*LE(vyTm_x zLt{;ET`a$~+Vz|`*LA<1>f2{!^|oKaLRpi(RWen9T3X}UE)k#vNy!lxmJPmVZFs=_ zK=Y>vSz1mpavFwOSy}ml%mJ>g#ZBjc!Z5Y69jAK8f&Mk=!0Idx%s(fUUL|1vb%@oJ z+40E6pn|mq#YUgGz-yWJ{08-##wphpeLq#)Hqx%+dzV-=vd&vEY%aixWo{_6{IeBH z*40vI4V4v>@YND%(k~wBFIIuK2f7rxILj&x7J!svR)zW}A^680{I@ZT(2n1pfnOzd z-21LzYC;CjgFaB?$o0Fs<^jJvsM$u?`7ym#^NdTq5xCyT1xafrcffb}@EB)IOS|d&+VCsD2 zs#f#qev|DR=p)b&yPvA}RH8$|Cw&s9AKGT5V8}oFg*A?E&dvfr*>L@JO?M2=l_F(Q z=2J^m#v@g%PQ(2;$d<7)^-Ler{Ob94M@5nvn(P~4x*x4 zddg*NFJ`MwQ~n5Mm4%8K>A9SI^OBpBMX(|DNjWns~u%Urt;*Dxa!>IOz=sg{%ovLKWv zlYqlxiyHihOV9S`)99{iv=GbM+*E-`7LI;B+o7ze*ShY(yD5>|RIWI2PZzJm*fw_D zRqE#`)SZFiD>RGQvFM@msB_Q9=u_04ShFiki-i9{&ODcJAb@@nd6&f%k!-2;=D%%* z&SbS6yH7#Ssib#gU>L;ueQ6=v8o4g>4KV}F2bMKZ;NP>bRqvrBz;Sgm^;~wg%gF316Cv*@!E$TybG<+X2P=4Y@-e9 zTG;^0#X*3S`Z4DPPW|>MX;Ldn_3ehvq_y2nn>@XBU+|P7w_;BoTT`C#eQAgSUQTekpJ35zPOS4Bc~fKKL!k_@H@2tDKYJ7J9s3=nmZm z^PrxDbCOI8m|e>9Z=)G$SHew_)W?|y9=aR4$LS?IpM^iFt!Fjx5l2dCfR{$Mnr+$J z?NH!%f2;>LLxD$KK6@fMBu4GpBxaZcsdXy$spKF04PDTmFk2ZcucfmT0#62#xv5W+ zX;6%4I_1({gWYUs?hGV&J_hL=4pwN8nBnbt$(EB%6e{K?MpC(S4xl>{#B9Lgz;Jhf zUYUnOjv;EA(sLB4hGanum?c~-xPPZ_o!L<0eLd<|FHS~NPFGtrKt^=&^#FLERjuF8 zpz6kmUM{vhw!>08wP2*-%eJ&>=V-soZCsq!Yz0gB13In}5!1`w0okSLmh|k*TiAHe zCv3DxKM>{T(COEcgop-z2b=dt{APS1t*A7RS5saBh1q>)?bCzrOC5NC95vq8)@ zfd1+428>dK;_gj9y?SxcmR8dH@2m&(NcOY+yv~|=d!L1rZG_9)+g~LckxeTPf=;DT z_Wl5t{)KP%<9t&V5Lg16H*_>I2R_gLAlfpyd7Xb+-&CDj;BxLN;+f6z&BK~(EC^ZG zBE6(gNtTvv(ENrjuv&{!{b==u@av{9#OJCx&@u2;z}P3et20zCSS1kWA{9b_ao^gr zdc<+qznp+|k%k^2&W}R1!9ju*%y|>y)N3b(wkVC{F^Po*3&QRfH9$^)`Ka}(pb39; zAnoK@qeeu!Gqb5djZ_(a|Ajz@gWw3m)t?s&hj!-D>nJwHadEfIE)eeoxBu(BkS-V~ z{Tpo@&3fmH1x7;981Wz_{Wf*Nc_IA_SUMlZmA716sfU-6Ty>i2K^RdB?hAmt?H9ir zI#%$qy!XHLIcRi3kn#-1gCZi&_e?5SrJ{Xk-m(prnpCG=kQgiquYg#v3(GH7NrKt@ z4U|veY4C&l`q0D-ULP>3SOEgA@P;G#AYyE?QoeXQe7TuHA8@hB)M82^ zifw85=^tT}iWh`o&E{uQMU0?A6V;-L?-gUszU5IcE+)V%rczjCr~Fry$EU$`yx+ju zk7mq4xwq-SAYm@j!7YwjB28zfK+_W+B8{V&LoKAz zq?ce^(b1mF!JECjdunQ+rsmv0xQWv^IQ?u8RM!paSoOud^|{eE zU)AFtjZW&$9=z**Uq|~wc%yIjEU3pd8Xad)nHLvee?Ckq@a*GZE1dj|U^F_4bP#lH zYnyyHdfq)%bB>mDkpMs+i$49%P&uUG?ADh2q#4}BD5r0*u5WjBP=USI^GYuUypq>7 zK=d7dGUhfWLGT))*LEhmyqs^-!-#kC5S>#)+`k)mP|S9eiVMg=V6l+bG+5su7o+sg zqi>fF={h7mPutZR5f+z8pk)Lnze+O6R9&-T29y94Lb`fZ*VR8~7=_2um{*X2TpBoh zz;hS=HZZ|me0-qir{EkJf4^_|#0*moKO+|5mc6}*p25UtDH=FwZdKZ}Y=Q78ki+BU zYGm=lWy9F+imUveX?Y24{v|XuL&AzyGh~OWZz60P*L~K^FzX<1sgbSid$U0hB~Og8 z#U)Q_g!+xUg0#x68AD{+A!pYOq(U~GCXw$wne2qR%;{xI-ZXqg3E11Zn3tH0cTeK) zg?IExmUwqfW%Ecxi5mT@K2Ua;bx`DCq1EN&z1*OmlqrJ6ys>$g5gyiE!;+-cmJQ~a z&eucNwfwp7=c8@Pk2VYqetpq1vT=?Sp}&jbOkoAGZFiNIL|G_TFX+^~&rHQF8>@H} z61NFys)h#`56S#3eb=98L|X13&AoXGy(u6F$e*?m9||Oq zM~bS@>+Ftf{X9c2^aFTk6(wEkUQD1Ra|-I=(~?KdxR6`!IWQ%h|HwEnk2fyI?&L@F z>^~X1$J@zDuC2B2BZ;IWRZ!ui_`|m!$BD)(VPt)(qB{lD*W`ou>1K$!=_Y;%L)j!j z@ki&h3T-KsTZT9b>YR`as8PE(GK$)fCoNmqMw$8fy$a>@MolfKZRW!m*;ip8I;OUi zo<+qu!X5s2wyvdlydg-h-U|^j8^IiC7<#R%YP-wX|0Pe-%zM!Er4!d!GVFfsdSA80 zEG$J1=<+Ki+ODOY0z`BSk6*CjSldz>!I6zTWPM|aAE$g#CO*(oM+Q5Rh29mVnk~4MgcxL{<07;sd*MxiU+At3~|bg zUN2;tQ*KOa%1qqdX;# za3%Fe)}pHwd_KyVO{$5gQ5Q5k_t4mXIeVD`hn`8o8y;lPgD4~oX{PznRLps%_Mf>% zr&f3TBX^9;Q)gyEzli$;AaRkRh`lXMaU`Opv0xE}9adpVul3`xXOL7aBF!cC zQqzuw#6Hs?$a;BUx(&0iEQEeHroBcXOCqYRRsuNJHEWyU3l(z#1vA+3M2Bb@yvSxh zH)JaTsIQ#IDik9vYRt?!D8Vacw@mcMQe#J61$Jpae1D>jwF;0dfP#1c@Q?ec$T2#6 z+td-!5x&>sSFt+mrKr2qG$dZqGhPQK9hB@64T(Bu**f(9!E^vGX+B^EDFogbJ2|>* zm$>$G(j^u^Fk_Sjd^K)jisa0h5ZPryT+2FKEpEWNPgR>9&bR+b1$Nhj8q-TUyDm{& z?c<&%cnKHOrH(*1g9V@vq*bK(DOpm>t~KPE6x_Azmz(_1Ny!f6N`P25g(r7>gy1l* znm&ALvAx&RZ1Ft|L3C__#Y95z*p6$EE^twmGNK$zcHv_SHMfHOo&HYT4twb?>v`)W zxFBCb?uF+$eTjH%?GE>ZJN-voQ#7B+^dCiDn+P0q@#2mM3#nLP2AeLd=rpNu>)LXk z{36;Z?=C#b@&Sy8pmOE?J~gIg6KVpESToG#ct1I7Zws;=31?c8w0Lq-MP(oZR@!GA zbW)tNAe>}Ce<+STmy=u)L|y@i1Q@3sN}jM@){wZCkdkCRmgXy8*5JC902SyaMcd7i zDd$FXsX@`D4^oq)FxZt*adZ@|1&Uf%7r-~M%b>&~j8IQlg!=@xNuKvkqyaW%h!$yx zAkiWM^oBq=nrMd92JN`fo6<8&*fK>C>y(;nPr||?5vL9f%1}-|19;@1gHR$1ON5x zo$ctYyZj4Px9|X#jm0-M>JYx72&^;#FEWM>4$^Eu=v?gsNl`C~cf(yXgY7FT7B#!| zwSudWr;mE#pnWVw`&-pc>40AVJ?&3BQaS82RgKdYdhIiV`HwWS}>@hI(bV*UImo?GIS3j4*lDw<0@8X(z~>l__1uJ z&DfR~j_uHD*wsdOK=-M*0Eyp#@pP$HIV$}U{!2{?!WfbH#V;9{U6bUrUu=yX{<~d` zZ$>r)#DL8pV#k>deso^?PCzIKN*`y}Bq?o>8GXv%v0Qg|yr+1d4yP0)4HnY`CwYlFcj2I5k=Gzh0fWXgfXjHA$-_#08)~# zzH4&meahQdL18I1h3Q(N6Qu3!yD?NzHbBb|4~%7?SztCwgV^gaJLtEmKr{^-UfIFr zzTbAKXV6e$h99OT4C(3YJp39c9y<-`qH)gK23rF#Mi{&~v$1c7-}S{Dk`y0@BT z+iSX`Dv=&E>-(`%RaFc~WQ%8Hzk||2bBMMUU2f`2L8uoaCgDBt8u>cL!HfN5R=1?Ywwa9eku41!{`jdl%mF4u8K%WNQ!*+P6pw6sed{ zKQ0?rU`oE4PWudCKbSfPE>|Rcm`Pgwrpt6MgQuu=>L(DFw=!)Lx9dvcF(e@|n~^O% zcDV_4ka)Fyjo}L$9A=r?X>dD9vg$C{0RPaJl-;9izv@LQxl&*!77ahSir_JflP~|? zGFW3qgT5eb)1}gOsr?TZ$GQWY^VO$qJd!0XK$+X=-2Icl={+K>xH+lYu;TZ`cvLMx zkHpdm-bpM6ap9Cnmaxz*cgH9lp)-)VT+Fnmywah7SnB16%=DSM#gDQsp*JyXyTGF>mx4T2_)h2nx&Q}x`A1PJYVsnq{ zpf?2Ni#3auR0a!=j-Tm=f~`H}F*=zig(nNxy2gJ#dkFn8@Q996T<=#5_YHi0#8S^^ zmXYJG6nD$~K3~f6=Lh|ss8%MG(P-E2~gN)*6 zMZc~YO@jcvBZ~Q$aD_U&sPcBjLTwMSdAxhPy}TbUvB#FLLqkj)h2C(9mOg|9V_)T7 z&TjPvo2zX}Gdx_H>0=rmfl`U}x8KyPVmf{)Q6{$$1mZ1)Ji&-S$M%;r(EYUTnWNrB z#g(cM^V<2h^h9Qe2^O;KxbxkqH*tL4Ja}XPbl+U$7yVN`d~YndS+R82IyPy~rJv(c zs2Pa17rkUDZjm5=5U8h^h1sYsOH6|jLfa(}pERx%zGGOd{ z5}j~}?Fu0n*c;4r71W(Vn9Vfxn0$p zKDZ=Z|DQQ^db7-WoT+-6yJ?%d)N-BXyOFcBW?ka_bb^I#deENq6{XcPJ)1t?rp1}v zCSk_mFh8bs`dj3O{fGO$t3pC&(XCn7rS`00}9w;XX$d;?&n}Z z+F!A1EQH}6eT0R5*VxWqeqEoMQdeZf(J+V5b zBwj&3vZUOAxbu2hZx+9t5tPmeTP@Wpki4Du9?H)Hveih9wiC)3Qme9i2tQJ(S*Z|cea+gtZ9Djnn68HvTG>xrty*c5A(DuxlBzeHBmCt z$NH9Ao20AUbvXl(Wkl#LZ5$-U?^@`J zF3Wd36X%2Y%9qFc2ETWW3E4FNs&meHH{f9TNYXNEI%pzAJYoyx2;+px(l^V)B;&-z zc?vbn=GPn?6RKt?j#w;Nef*|pZ970t8VOjTbm=0nbDX2=y@zA8RhabQ@qFcv6WwVV zIemVacr)Pd?m_8Ru$W0&aP`xAOHc}9cDX*~>FK|Bw+_BQFqszl1pW+>fCJ=I9~A_D zy(0dS*K=8m4#`$g+-2QePB6vKeG!T|3MCs;UrtF6{XT4%b2{gQQKeJwipn$T6z64o zm~nSv=w)QzmH%0KuQO`z6$xce&QdSp*p3)I!quzoi&MVttN1XGwLV=h&*U+YE8CP4 zcty&Qv_Q;5dU+P67{Xc7Xg7$K8um!7zZbxqgTR*5YVdtzb&TX^Arbs!eU|4(I&a6J z$BvF3Ti^(~IiCexm zyUMJ#-Lnggiz2u2HW`(DVGWqOBn;@Y%A={Y4flb5Q=`!hpxs~3r?XHSXgS;f#1_y> z(0~(MZH4Ypd3=CHwpH=g8^khN083rd9Nb#9UGVQOJK5>t=%-5J4_oVT4wohPI&B(~ zRqM^hF$xB5IsN>lQ|5yTl4~~Tfb8JA1`#yoU4qf|w;hxP}K5Cz806ouQ=0KqfR zjDcglV_Q&qa#5R3K2Dlip|7*FNJ)QYh07G9s=61wWU?NTd6xmJ?Bh1^z4xX=uaNX$ zkg+RKvsQXLfE~MYmHc1f zDxAdB2<63Z;y~kAF2wOquRxgR{y!sWf-M)oTkoaR5>CP)cjjTT)_{lzSA5;r4>b72Ei*@n)6#F=^+xXL**i#SkaK;Ba*{l1Y8Gbc0 zvj+@z$D2c6r6Wcyq_A7h*Lq#Mj%Gh)pJW2Ikp1}#Av1y1Nla_^WX8H4fMu}FlDtCj zka-F2bTb}^zBtJDap1AfMCzk%+98lbZQyOv9qW5x5Bdx?DT2h7d>ADKhoQz*6%4?+ z7#h)X-)dhIy8}*_+{hc)GwbSP9ZIQ{WL8sDff&RXS~YHpGj#xjdTv;F6JH62c`l(3HUcq|h%~8TqefQuyf0JWB2K`bd1&;b$kvuiZ$`QBb zTOD&mv((Zcv33(eFCIkskCdQw=uA%#AD<0r7~o5~nQu{KM$MBIK0Dh@4Ch<9)(Xc4 z)S^6axls#($OiS$fP~&sT3^ll>ULsX6uK{t^0#S2WI!?uu3$LQqiN<5pmpt72F zNCEE0>Y@af9!0d~5KoGx}o$Sd#ymdqphU_qs*N+L*pUo*rA2prysjoadK)`{vIosBmUs4x5snRKIMF(zhtiL z1$rvE9!wlaAqg!#Z$}bMQiJ&00F)Ay$ZtC#H(_+__o!Uf2bFpi%E&^3| zg*r~HGZNWln^+8DQKF6@``CaIbrkG<9&!4d)ikXVx%$j)pRLw+W^ifL$}FQL_%_dDG>Z zX-gNCrjM4n?|#ZjjLVFb(a+zqBTB%5mUm~P!1oh2FkuD5^OjZ-dw7-3`5oE{3NLLAdhoVS(Pc(FRAPb;PJE&#?Ad?t zFMnfPni6Pr`ikMzR>`fS}D891i(h93)kWqCERR~Yz1&Ah{@ao|qKy{f`& zxeQLKbQLH5xmH@h?~Rs$3KlSy>=F~Fo~5?2Y5LwH9$d|yvV>vPTKLz>s%5I*hyNsB zt@8r2c>HG(nNsFv)XJo^oQ1n5@yl607c3p%lRX!h{*!*E9E;M0&1@QZt*Dk?5WN4^ zPyP=D6v|N7VUwF^=QNWQ!SWZf>8&l=*MoBx4z2G1-t(9u$Or$0`>NBsB{7FMbGq73 zVGvb-5bWTw_ORqFh zIX&xGvGF=r&(O68E|Y*~vcR*0yqQrGUA$Uu`56{O z;LWo;W}X03-P7hE;)5B9G9$KVas&!p%#VnxJ5H*MvF?vPhFc??NtPAf!v~%&%~F{7 zR3UWo?V&;;xj5{I9B?dWa`J@vG5dBzgL?{|sF1W7g@3f&I`jIGynU*Z)RZ-}nc%^{ znR2W9x`LX0W3-_-7n<7f_WX|XJ0Pg1prh>ZMZ3f}nASL)c+dO=BLp1;QPXMCEem`< z07kLDJj@(yy(<2A&UY-2#9+R55jvTJKCn(`xsK1@`{^qz|9+hf!*}?>+;}x`cwSs$ zZPbji%H#bMY>v0i=wq)f=k+MNFQ^1q#19Nl;3&7=y0usp^dzYBwDPOyz+*>9N$c$} z(RLyta^;W);Albw_E9U-_}N_M$To7@DX@+QGXV!p+NiC9Hv!Dp2t%v?!^>y4)`B64 z!v%%)q0DyYDHI1%5)6L~48B~Ev_z}fRaCLA4|+>IR*nXhHKskS5LGShGm3o*?1Q0Y zd391NCJ`Ui@9}gWrVc0&vKdoKoa&SjBknHQ>wd(Dq#-9#CD=;2O_^xg#)NE|h69_i z?YCcZeaHOdXP1u{bN$&{{Z4E)#ul^4VqDhIf1Z7N{W$w{{vHxJ{w#_|4s!mV*`F2C zK`z-t`HW{pGmr<4j*IwWk-n1CD<0m_RL%a7@vQN=mLDpXz_r4@hl1}&JDyTs^8F`& z`GooZKF}`J#X)UCC3z>Vil?<+X6xq%*HSmpTOgy_0b({swX}){Vg~yM&y1Z7eH3o!r^j^MJ?}PFP5CSy*++ba>7J zN8@O*>Eu)lImEZsH}7g~a;rI(xB#%hv@c8Mm0OqE{Gev~93fId;V2N*{2Bniky_qZrAvd_OwQ~ zxrQ(L`CXos6(;YEWI-4AucnR;r|@(5vxxyx71;Y;hI_j1KBNL>Xe#G{aiRIt;bwccF6oYE4|9%QT52E@*5B(-+4j6vet@KZO zmzNy~!oR+L8Kogn(?Nr&s*1as|2e_8O`OZy(H8Z-Cpz5et5hXzbnv<-JqxRn&rU8; z#j?NS8QU7By?Ouo*0qb_9WEVa+n33$yi&%WSNL^96vH~FmX^TQ6IG=4Q0@EaCV4)%_F6?m7jU(CNErf$Fd&yOU&+l^BylQ_{-#$462g2ic6d z)i?1e3&|Qs!EObH@sq!`la;4}hBX)7QeRz1yD@S;{y1aB0*im`z~Mz}n!S>!&PT@H zY{Gj!Lv-&fRE4-toIvD{mkyYdwZCZO>6*gIpKGfudikpZR5AE1O25C$zV;osk*t1+ zCX)8u1%|0~0l@!)pG~qoD_>=9v%P%(Oo4rBT+@#jQN=#rdmQvWq+MfeE?+;XbWs2({a@#5(i0#`&M~fNXipCgzvv%bVR~A0qGCC7#7Q z;B#!cQ})>LC+_aUEvNF9$cq!9sz(n+;`kJetW`N)4Qo$MX;4Xh8hVZjaJNIaNqWd; zIm7mAL8AgQ7500C@lBxp2_hjw)W6|wv>eZmt;>fY0nW(l7QSr6Y(1TV0MNG4t2iR~ zq|)8hrMwDo?4kXU0t#@C4PE}aU8C^(>B-J4C#1C?Evp;aqQ|^NwjMIi7WWi|U?j`Y zr!A#Q&Hh!5NxK_Zoyz2q`B(!6)z)n{cHnGX&+DXj;@egW+moKmuS_uJ0v?#F>$Qy9 zI7T7~IjTnUeHsn20Q{SIYk4ZYM_s_r2PJ?seHC5KeaVCllb8%u(~_?(dYBuKJ&Bl* zG?HNRjjeAO{-?NWpI$PP<+Kj4KV)CBI2Ti8Jbki%OUuf8wqN05HZ4C3$o_lBKo{pt z^V^Zj(AZT=8=f9kg9txRyY1GvEHR~wji8Km{-xpYX+J4hzxZ2P^d8w0+`?m7@Q(x&O)H>7;CY^+gYE68P2W(k=5kmkSAKDJddB(N_ z3UF;jCKp&9==359lRWZuG5nV~-&8e-Dr>oEAAyVzoCx$0q-2 zoV#ODOrW!T&YkJI!xP!k(n;$tKnqKaBo6*H?p?DeYW%3LXLsc6pPC>}B~jgbJPd<- z&rp${r*Q)Ty>YD_%kMDQC@M>{M%_FV4lBPAk zWpb?@7I5=4vE+ol^S_r2XS@JXXFBz}zt$arGm$I5KReFOwmAd~5QUQee9~n0UD8Gu zN$(VsUAVaeBm8X439k>ci!jV&siyyZU|5bEeKStV>G6sncYzlp6D(EjSTA#scP&C{ z;pQ)>>$Lji^3MCnP`|%WWCL|}dhl2zSA=|@iS>*Kn44bYJTUx9P=%XL(meHCS>?N# zyGsmAo^JnXRLAe!n^6|e`LOi!(XIFXuP&FovLgA{lF%t%0##6|q)+ZHm$vJWn0MJ? z)umfh=QHO6Z|(1Do~EzMd@kK6vb(%!NS>8dZcDES0g8ctZC0FXx|fc!5|jvSbqAL9 zO~`Cb^9jpr|MWdpR4uNb3G&9hov~9*s7)373*GC5^y}IdP=j0ijrI6zSRXWXD$vFq zjR=eS24Nna7OpL?x0(|E9OQh_ogrLyVl=3IUf9GEZ5W(*OHocsYb#tdNlzqN^z?m3 zYi7*|zKbzN58u7BU?7k5dpN7`7YtMx!9U-HjXF+n-?Qtm#n{uN0T96~+Ydg$y=_YPT?86J}kYOK8DRJu1~D5xgD%4g>i9oEZRl} z%NQi*mO%)Wb`Xk;wYB_J;zmKBAK*1T&Fc7phwhlaRBQeh^%Z^SDfuH9ff$Ug-eTKN zLAiLPq_#PsV`Ie)95~iGQQ59@Jx%df)lc>>$nf(qXDhQx+P_l+_-)f_AMJ1Z)-h<@cRK+os9%25J2h9Iq8dPWJ3}dY$Dj$ewwnD_cy- zGUTb|HD6G|*?Eg>vRd78R@B4!nRpe?1H{RrGEYj~uY%2aAa#Wf3&n`{I2~F%MSgWr+0kqPtRp)l5VVQ$a zUr#^c`Iw1xl|9Pea5>PQU5(IbI-|gHyn931yxaOd?4%{O>bL;u^vDf_5Znk}@c$cb z5$IwGa+X448qZHhtPmDUyf*oQa-e|yO<%M|%6_jYlrRh@stVlsE3;yv-G>WufxE4q zhh|2WoTtv_f60Who;qB0F+6pZep7nlLiTOIxPx)`s!KMjgEQ`(FnuOJdw4it`8m`g zp@UgUt+VcBe2&7llzk+i_;In4SZ%P70qx-cRk}S43fG^PP3@9o8V^W8WzIphIPa|g zxLhHq6Be9cSVrWMGLk&`4VPkJCEr=Jq>Qe#8nrO8bC;f@$hoV-z$>Qv^euA?l+MT> zYMPIrT!8QpHwqus_l4;!0RlH?r?=Jd4~PJ&VOVAdE54a*D;uz?0LBV;m2TT4uQKHO zB6RkbZnG{mP8c-tAYEn(Yk?2a-4;oYZLvTp0K5VeQ0xTQh}lB$LAreqg;tDu_yQB#!=4}KWkzS`+?<<8goA29$VmlV6=%u8CN?B``z*R*L&ZIkSmmt!bYHB`h!0mrEjtyIT5{1MT z7=YB#@|9WoB)P9UW0%xODw8%`{Td+6pLM_;a@qfysAp+aX>%xTz9S5+4F6fvlH2i> zY1aiMdJz*^#%=dE0c|F7@0%{Gp%? zmha-%k5#gK%%rh^hOKO4x^SiK*e09Q~6|`q*m2p}A11WzV zHc}1TIOAB12M{ym zI4#3B71T*WIq!rDmboLz z;OHwG_jE5>t0=!D<>Q13)ZvMcfl=Pb(&%y|<{^n#BAzK&P5O;iW}@f73F>b4%%@Gq zHpeDuS`*@s9M-8Vm4!m5|f79*hTB^K9>QO zg1zRsn?j}E@L4?tUug+!>dz$BHVia+5B!MwJkH%`zr#iJo^WS=p3c@^7G?TfyYa=}S3& z=l#Qh;u}tO5&g|nsoiP*REgeZl|4{|!w5k#1KZ0a?Mrj$jgn4jJ?#x@O9a6?f#;m}5z5^1ceJaEwZ7j0f5 zt=0mDm!(|-V78>u?cY%7uQ0%P56ATAFzV5kY)cnh1WU>9N~jcjrfl9DE!X_{Ncb)XbW#TLbX)D}D$%>HUAe0g#EQk^(NqIqXnc}sq*HARG;7vG zCXRV*UJGEd-GPPp*IF(=)qI%9Z42>TiTMe#1J*2VaFsFh8~D?XKa*_)PMX#Ydjd&l zTbKcW=DU%AY5(h2W+Yrd5)f>_yf_5~TbS`^Cvtwzsu z9wfJ)8pFmBC8X zIFX1FqUWCDnBE|7O4`IxA1lq@dIW`Fbkvhd$)PB|n08 zln=~JTO7i7hO1dAs351Tnv~Df{w;m6`z6~=vVw(@LqubW8t`$@dH?(gZ!|g@Z4h76 zP|yxt9d}3?WA_QrNK19@bON&|Ri6;rMm>z?>Lrl?fc0X{X;Wro(y6ch(KR|IX^_Y* zl<}E%G&)^rS@{eXaPtY60AOp6U~w<8!Ab5V`_Y9oCT%d+D0n<|J@=QG(-m65j0P+^ zN1=@{6o#7cwUmm)8M`{&E(WkKEh(}a<=ElE^`QXWE^s0>K}WNP?-4?5SjJ7IEPQD82GP%zFRX;jCn-1=Zf%J0HOAk?>L-T5vXWv%G01)bjcIjB0 z)ic18F@U}?r5f6uf_!GAP8jYAK7$_(u}EDF`wb;8DvyV~O^C9+t!x zx1+(z^BUqVO$hKB+3+AGALNrr(CM%k4tb#}_4$#%!_@z1qwsY|6;)tbdy6trJyjyvcHMC0?msL0ujeq6c2|*oqUUXLqUKRH{aHvZ(->Qe+ zOZ)syOs7YmzBA>TH001W(U{U7Vcll5hTI0(J^XFIouwEY$ed)P;00|Go@++LlHIqG z%X8TCpxZ^=cs3wg+9|O$hQ+bLPl1_oCzNc8;03M9<1e49{zw#nwc$hqaT>Ywl*PZGYhjqrDZ{TlA==RihNRg%C^$__=U&J@NqF7IN6fX@2EqPCW4aXot>%$p$ z#k3nKxP|jUxmK%^%3EDq@& ztcKA9J5!Gcd?)I@WZ(Ga`S6$y(>%Dc{~de%WF>a%wAYPKp}|QND_FC_>dWo$U@hfg zdI1m%sdj~LAjK*v9=gyGCIvHf#WI}kyBEd;`WVOOMpQ@duteNI4R5H1#6bv7s_6P+ z1T{1aS=JJ6pLSFy5MY}W^n*Uy5+#@KN+K7f8=`XlMK$v}`Y@rWo+L@UA%v(rZ;S{B zB6OW|HFG)>O+x~vQ&J1vJ9(`$ya6(9^;RUecN={6ksAON>pFg4zkjnEDSu?bMJc>S z_}2~`r?A^OvNc>C|NXNVj}eXZ?-LxsJg`0W>EwQA-1duseJ!5!+esnz8Gwv++IykY zn)puf^uADw^zt(KrR0e+K#L$~JcMd~ehAz1DeI?RT|PCs{phx(8JPy@9qEE0MGoO|Lr0ytROS+N`LHKFMQ`RrLq{e>yz=JoRNZ;N z*d7d+WMvrL?p}HklG_5P)MpX7qDe~PGzycutWZWxbH07wWbX1^Y{#5??q?cqv;b0U z+4_?uCFopZKc)FR>i09LJpVnKi9FgIt>Q4~W!jY8n_~+rph~5FL3F-bnl3hOc@vDX z9bO2RO_%)k|LVBXXtuL9o`fKlK`|jzX=`gr5sFTzL@A}3)>w<$m#QtQO)9OuLM^p) zis{(8QLQkwWJ)t)LL}1alr|m27Lt|`L{-%`fAfBt5AT=zdw$P-wh#B*d(U~!c_wlZ zy*QO>^_x=5;OXj=>#i-mVk2mLOyR`#!aC3LTs6Cowy8$?D)Z}DNinyh;!FNW!iu=K zuP~vHv9m22*K+g022ThFH*%J(6xXI`GBDQsMrp{a64$A9+lEkIgH_R6guvO^KhgPA zV6@EN>$YlfsLbPn(tX1ow-I zD4|(CSL2?*(?Q-1d$_L6lxcm3;1qVQjQh0g=MB22_Wi4eoTW-}ij&c50s<+M=U4Km zYumH4$%c3;{x~&g&u1Hsz}1;(gmv}`d>*GM8k`x(`53Jip+6QwfgU_eNgZna_5)Wa z{>0a1Elifc*4Q!7=z;l())DidJ#Q9@dAy>bHs2)uvH2#wgGVSvMWu>}T;6pzJRwj; z<*#(~vavqEFEggeF)Vp(bN=fB-{caNKP%ccUVj!;3|q^KfwMeg zeTZ5UsTSWUP4IXVMM*8*z+*q~EOy3#0_87{c5u4#{~F@)m>n%ZL*m+D{jpomu7@Eh z`vN0vr9A8wpO9W}?+hK46gB1-J-t8Yhus!KJp3jQJr4CA-f3YvCi-vH!zC&~i7jAa z_-o{oOBycW=Tz&Vj9ypw=y2SW^7Qnq&Eq^t-1OOPpOUfk`8&u|9g`a+B43E#WReTW zmx5MK4Z$J_Q-M-CQbl9)vYdX(L9GXG)1lR4u3$-F)vidsI3qo*2Q6a>cR>{)03gdibO+RvX@#JwU30S zG__}*y{VCDq8g!8G^oy)A<|{mpVHkNya0+&b!f>Tklv#cD3mKenD;f93Ka$)CH+|5 z4A2Vzsw{8L(XudHNhgrL0JK0+bX74VvmC7n)H0ZrQqTq$c`Mcd3b=K9BNVWJG5F^} zh_VWMG;Nnk0~8!0KCGiXA^WC=(^J0jQesyCOKG%ASQsXy5lF7~ndTDKKJ|J!`h%e9 zWn-`c`}1T_ZF^dX;WeeAc!emOek5n>HCTZw}b2kXb|c!L1&!9^eR-mTQxhSJ2DeNR~MFrp65>V0Oq`7^-B1cKS&n%3v7W z{qP#~Jf-@^@b2aPl5-a|`U%RA-y35SDAc3r<-wzqfr+shzwd-?UfFpyTE1~?1Ogms zwXQaVVk2mIMJNgFl}tE7^`if^cD$ioGaT8Rv(eeP82goHyMc)&YnFpoyaQXX$Ak6g%93L$Ot}nBJi=P>1eNjF$ z*?p-}RnE`;2(=yjCgNifnzvW!4!$V$nQU6>_f@dx_bhuY`Lls_-P#6=$@vhXb#%{5 zj^BX6J5h5k^-yW)xdHlB-%ylxyd&PT`Q-Z~zq6Pi8*)fpBM6r7iErWF2 z$Yl6a1cKQCo6XKNs32;byigQOs~*ON+FVBCV%&EorO;J>-MFpIXIrxSH?wRv!}_o&&gJ?!)ytc_Iyb^S<00t#NX); zn1pNBx~DzI+bz`<9He;57u;oE@BiqOzhA4*tOxwE$!5^(%XGZq>)Qja)Q?VOvQ~Zf zya|!|q#IpCT^RXP{l~tTd(CQXkGxJ$tGmTm3kSPF%#{npjNZHAJp5Y>j#wLF1%nL7 zG4{Z#`D&4$U9E}19_8|4U zc~hmce@$%V9X2sxBIg3$-Gys4Jy^E&*J-DgYf<`z*SKX|_0<;*d`~U43;yUr@4qv@ zo9mCsm-qgTnqwuy=;ad}&lnI-M(s@En*6Cra`8Cwt;ZOf?SggIyxIsGc6UiPmwNQ5 zx)SNQL6x z0#K?IDU3<*-YjXmGrCEg-~VWSE49YhUS|2M!)Fw-YW%0E0w%2T0N9982tO0LHNfNT z_4@|4eNYI0HVOry0Bi#g37``+!wWM?v57pY}cW@+s}LSV%WGmv1Scxq_^961yg^03&y%3A?ef7|YW%7Z5?m`Y9MlVI=v# z#M#};*kWB^qR(T*_7u$lL?zQKN&J6>8w{lTDtJK;FQ?}Qk3yYotPM+|=CM*c4@KZuX<8^)YkPW2UA^)7^Ew g7OVRohuHYA=m_HfcOY+m`(-z`i=+FACTvi~Kc&H<@&Et; literal 0 HcmV?d00001 From 6cd5dee2d9cc80ee95d8121a8b6a180de7cf73e8 Mon Sep 17 00:00:00 2001 From: Pranav-b-7 Date: Wed, 23 Mar 2022 12:36:48 +0530 Subject: [PATCH 40/43] anonymous group --- .../gate/services/OesPermissionService.groovy | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/services/OesPermissionService.groovy b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/services/OesPermissionService.groovy index 68b6831d94..4e5e614ba8 100644 --- a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/services/OesPermissionService.groovy +++ b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/services/OesPermissionService.groovy @@ -22,6 +22,8 @@ class OesPermissionService extends PermissionService{ @Autowired OesAuthorizationService oesAuthorizationService + static final String defaultGroup = "anonymous" + @Override void loginWithRoles(String userId, Collection roles) { if (fiatStatus.isEnabled()) { @@ -36,9 +38,15 @@ class OesPermissionService extends PermissionService{ } if (isOesAuthorizationServiceEnabled){ try { + if (roles == null){ + roles = new ArrayList<>() + roles.add(defaultGroup) + } else if (!roles.isEmpty()){ + roles.add(defaultGroup) + } oesAuthorizationService.cacheUserGroups(roles, userId) } catch(Exception e1){ - log.error("Exception occured while login with roles : {}", e1) + log.error("Exception occurred while login with roles : {}", e1) } } } From 560f9293e101f98ab0246b9125aa7f46db3844f8 Mon Sep 17 00:00:00 2001 From: Pranav-b-7 Date: Wed, 23 Mar 2022 13:48:14 +0530 Subject: [PATCH 41/43] added default user-group when the user is not assigned to any groups --- .../netflix/spinnaker/gate/services/OesPermissionService.groovy | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/services/OesPermissionService.groovy b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/services/OesPermissionService.groovy index 4e5e614ba8..43d062c494 100644 --- a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/services/OesPermissionService.groovy +++ b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/services/OesPermissionService.groovy @@ -41,7 +41,7 @@ class OesPermissionService extends PermissionService{ if (roles == null){ roles = new ArrayList<>() roles.add(defaultGroup) - } else if (!roles.isEmpty()){ + } else if (roles.isEmpty()){ roles.add(defaultGroup) } oesAuthorizationService.cacheUserGroups(roles, userId) From a236ef6f14f6acede1286fa24008e41bf412aaf7 Mon Sep 17 00:00:00 2001 From: Rahul Chekuri <89373036+rahul-chekuri@users.noreply.github.com> Date: Wed, 25 May 2022 14:59:53 +0530 Subject: [PATCH 42/43] OP-14834: Added new filter to handle token expiring cases (#211) --- .../gate/security/saml/SamlSsoConfig.groovy | 4 ++ .../saml/SAMLAuthenticationException.java | 13 ++++ .../saml/SamlAuthTokenUpdateFilter.java | 59 +++++++++++++++++++ 3 files changed, 76 insertions(+) create mode 100644 gate-saml/src/main/java/com/opsmx/spinnaker/gate/security/saml/SAMLAuthenticationException.java create mode 100644 gate-saml/src/main/java/com/opsmx/spinnaker/gate/security/saml/SamlAuthTokenUpdateFilter.java diff --git a/gate-saml/src/main/groovy/com/netflix/spinnaker/gate/security/saml/SamlSsoConfig.groovy b/gate-saml/src/main/groovy/com/netflix/spinnaker/gate/security/saml/SamlSsoConfig.groovy index c97679396e..3818439f20 100644 --- a/gate-saml/src/main/groovy/com/netflix/spinnaker/gate/security/saml/SamlSsoConfig.groovy +++ b/gate-saml/src/main/groovy/com/netflix/spinnaker/gate/security/saml/SamlSsoConfig.groovy @@ -24,6 +24,7 @@ import com.netflix.spinnaker.gate.security.SpinnakerAuthConfig import com.netflix.spinnaker.gate.services.PermissionService import com.netflix.spinnaker.kork.core.RetrySupport import com.netflix.spinnaker.security.User +import com.opsmx.spinnaker.gate.security.saml.SamlAuthTokenUpdateFilter import groovy.util.logging.Slf4j import org.opensaml.saml2.core.Assertion import org.opensaml.saml2.core.Attribute @@ -168,6 +169,9 @@ class SamlSsoConfig extends WebSecurityConfigurerAdapter { .keyPassword(samlSecurityConfigProperties.keyStorePassword) saml.init(http) + SamlAuthTokenUpdateFilter authTokenUpdateFilter = new SamlAuthTokenUpdateFilter() + http.addFilterAfter(authTokenUpdateFilter, + BasicAuthenticationFilter.class) // @formatter:on diff --git a/gate-saml/src/main/java/com/opsmx/spinnaker/gate/security/saml/SAMLAuthenticationException.java b/gate-saml/src/main/java/com/opsmx/spinnaker/gate/security/saml/SAMLAuthenticationException.java new file mode 100644 index 0000000000..76000a0113 --- /dev/null +++ b/gate-saml/src/main/java/com/opsmx/spinnaker/gate/security/saml/SAMLAuthenticationException.java @@ -0,0 +1,13 @@ +package com.opsmx.spinnaker.gate.security.saml; + +import org.springframework.security.core.AuthenticationException; + +public class SAMLAuthenticationException extends AuthenticationException { + public SAMLAuthenticationException(String msg) { + super(msg); + } + + public SAMLAuthenticationException(String msg, Throwable t) { + super(msg, t); + } +} diff --git a/gate-saml/src/main/java/com/opsmx/spinnaker/gate/security/saml/SamlAuthTokenUpdateFilter.java b/gate-saml/src/main/java/com/opsmx/spinnaker/gate/security/saml/SamlAuthTokenUpdateFilter.java new file mode 100644 index 0000000000..1c9af92c1c --- /dev/null +++ b/gate-saml/src/main/java/com/opsmx/spinnaker/gate/security/saml/SamlAuthTokenUpdateFilter.java @@ -0,0 +1,59 @@ +/* + * Copyright 2022 OpsMx, Inc. + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +package com.opsmx.spinnaker.gate.security.saml; + +import java.io.IOException; +import javax.servlet.FilterChain; +import javax.servlet.ServletException; +import javax.servlet.ServletRequest; +import javax.servlet.ServletResponse; +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import javax.servlet.http.HttpSession; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.context.SecurityContextHolder; +import org.springframework.security.providers.ExpiringUsernameAuthenticationToken; +import org.springframework.web.filter.GenericFilterBean; + +public class SamlAuthTokenUpdateFilter extends GenericFilterBean { + + public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) + throws IOException, ServletException { + logger.debug("SamlAuthTokenUpdateFilter doFilter started"); + HttpServletRequest request = (HttpServletRequest) req; + HttpServletResponse response = (HttpServletResponse) res; + Authentication authentication = SecurityContextHolder.getContext().getAuthentication(); + + logger.debug("Previously Authenticated is : " + authentication); + if (authentication instanceof ExpiringUsernameAuthenticationToken + && !authentication.isAuthenticated()) { + if (logger.isDebugEnabled()) { + logger.debug( + "Previously Authenticated token Expired; redirecting to authentication entry point."); + } + + HttpSession session = request.getSession(); + if (session != null) { + session.invalidate(); + } + throw new SAMLAuthenticationException("Previously Authenticated token Expired"); + } + logger.debug("SamlAuthTokenUpdateFilter doFilter ended"); + + chain.doFilter(request, response); + } +} From f2218ade4840f8612a1b3a18e4dc1ed38a041ba3 Mon Sep 17 00:00:00 2001 From: rahul-chekuri Date: Wed, 25 May 2022 15:58:07 +0530 Subject: [PATCH 43/43] OP-14834: Added missing import statement --- .../netflix/spinnaker/gate/security/saml/SamlSsoConfig.groovy | 1 + 1 file changed, 1 insertion(+) diff --git a/gate-saml/src/main/groovy/com/netflix/spinnaker/gate/security/saml/SamlSsoConfig.groovy b/gate-saml/src/main/groovy/com/netflix/spinnaker/gate/security/saml/SamlSsoConfig.groovy index 3818439f20..7d9a6ed834 100644 --- a/gate-saml/src/main/groovy/com/netflix/spinnaker/gate/security/saml/SamlSsoConfig.groovy +++ b/gate-saml/src/main/groovy/com/netflix/spinnaker/gate/security/saml/SamlSsoConfig.groovy @@ -56,6 +56,7 @@ import javax.annotation.PostConstruct import java.security.KeyStore import static org.springframework.security.extensions.saml2.config.SAMLConfigurer.saml +import org.springframework.security.web.authentication.www.BasicAuthenticationFilter @ConditionalOnExpression('${saml.enabled:false}') @Configuration