From 54d805dac04ba4d43b189d22b0751e45ca69f366 Mon Sep 17 00:00:00 2001
From: Ayman Farhat <823713+aymanfarhat@users.noreply.github.com>
Date: Sun, 10 Jul 2022 09:27:18 +0200
Subject: [PATCH] New example for a data playground Terraform setup (#655)

* Initial commit for adding a sample data playground

* Update README

* Add license boilerplate to variables.tf

* Apply linting rules

* rename var to ptoject_id, create prefix var, remove extra zone var

* Adds the option for using an existing project by default

* Bundles all VPC related variables in a single vpc_config variable of type object

* Add encryption_key usage example + policy_boolean

* Add tests, apply linting and todos for upcoming PRs

* Update variables in readme

* Fix formatting via fmt

* Rename test dir to fix module conflict issue

* Add high level diagram and sort vars/outputs by alphabetical

* Modify diagram and update main README under data examples with link / summary

* Line break

* Use png in diagram

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
---
 .gitignore                                    |   1 +
 examples/data-solutions/README.md             |   6 +
 .../data-solutions/data-playground/README.md  |  43 +++++++
 .../data-playground/diagram.png               | Bin 0 -> 27555 bytes
 .../data-solutions/data-playground/main.tf    | 113 ++++++++++++++++++
 .../data-solutions/data-playground/outputs.tf |  33 +++++
 .../data-playground/variables.tf              |  68 +++++++++++
 .../data-playground/versions.tf               |  27 +++++
 .../data_playground/__init__.py               |  13 ++
 .../data_playground/fixture/main.tf           |  24 ++++
 .../data_playground/test_plan.py              |  26 ++++
 11 files changed, 354 insertions(+)
 create mode 100644 examples/data-solutions/data-playground/README.md
 create mode 100644 examples/data-solutions/data-playground/diagram.png
 create mode 100644 examples/data-solutions/data-playground/main.tf
 create mode 100644 examples/data-solutions/data-playground/outputs.tf
 create mode 100644 examples/data-solutions/data-playground/variables.tf
 create mode 100644 examples/data-solutions/data-playground/versions.tf
 create mode 100644 tests/examples/data_solutions/data_playground/__init__.py
 create mode 100644 tests/examples/data_solutions/data_playground/fixture/main.tf
 create mode 100644 tests/examples/data_solutions/data_playground/test_plan.py

diff --git a/.gitignore b/.gitignore
index f2ac5f40d..01b747b91 100644
--- a/.gitignore
+++ b/.gitignore
@@ -31,3 +31,4 @@ fast/stages/**/globals.auto.tfvars.json
 cloud_sql_proxy
 examples/cloud-operations/binauthz/tenant-setup.yaml
 examples/cloud-operations/binauthz/app/app.yaml
+env/
diff --git a/examples/data-solutions/README.md b/examples/data-solutions/README.md
index ec2cfd08d..23fabdcc2 100644
--- a/examples/data-solutions/README.md
+++ b/examples/data-solutions/README.md
@@ -32,4 +32,10 @@ This [example](./data-platform-foundations/) implements SQL Server Always On Ava
 
 <a href="./cloudsql-multiregion/" title="Cloud SQL instance with multi-region read replicas"><img src="./cloudsql-multiregion/diagram.png" align="left" width="280px"></a>
 This [example](./cloudsql-multiregion/) creates a [Cloud SQL instance](https://cloud.google.com/sql) with multi-region read replicas as described in the [Cloud SQL for PostgreSQL disaster recovery](https://cloud.google.com/architecture/cloud-sql-postgres-disaster-recovery-complete-failover-fallback) article.
+<br clear="left">
+
+### Data Playground starter with Cloud Vertex AI Notebook and GCS
+
+<a href="./data-playground/" title="Data Playground starter with Cloud Vertex AI Notebook and GCS"><img src="./data-playground/diagram.png" align="left" width="280px"></a>
+This [example](./data-playground/) creates a [Vertex AI Notebook](https://cloud.google.com/vertex-ai/docs/workbench/introduction) running under a VPC network and a starter GCS bucket to store inputs and outputs of data experiments.
 <br clear="left">
\ No newline at end of file
diff --git a/examples/data-solutions/data-playground/README.md b/examples/data-solutions/data-playground/README.md
new file mode 100644
index 000000000..fb7596950
--- /dev/null
+++ b/examples/data-solutions/data-playground/README.md
@@ -0,0 +1,43 @@
+# Data Playground
+
+This example creates a minimum viable template for a data experimentation project with the needed APIs enabled, basic VPC and Firewall set in place, GCS bucket and an AI notebook to get started.
+
+This is the high level diagram:
+
+![High-level diagram](diagram.png "High-level diagram")
+
+## Managed resources and services
+
+This sample creates several distinct groups of resources:
+
+- projects
+    - Service Project configured for GCE instances and GCS buckets
+- networking
+    - VPC network
+    - One default subnet
+    - Firewall rules for [SSH access via IAP](https://cloud.google.com/iap/docs/using-tcp-forwarding) and open communication within the VPC
+- Vertex AI notebook
+  - One Jupyter lab notebook instance with public access
+- GCS
+    - One bucket initial bucket
+
+
+
+## Variables
+| name                      | description                                                                                                                             | type        | required | default      |
+| ------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- | ----------- | -------- | ------------ |
+| project\_id               | Project id, references existing project if \`project\_create\` is null.                                                                 | string      | ✓        |              |
+| location                  | The location where resources will be deployed                                                                                           | string      |          | europe       |
+| region                    | The region where resources will be deployed.                                                                                            | string      |          | europe-west1 |
+| project\_create           | Provide values if project creation is needed, uses existing project if null. Parent format: folders/folder\_id or organizations/org\_id | object({…}) |          | null         |
+| prefix                    | Unique prefix used for resource names. Not used for project if 'project\_create' is null.                                               | string      |          | dp           |
+| service\_encryption\_keys | Cloud KMS to use to encrypt different services. Key location should match service region.                                               | object({…}) |          | null         |
+| vpc\_config               | Parameters to create a simple VPC for the Data Playground                                                                               | object({…}) |          | {...}        |
+
+## Outputs
+| Name                                                                                                                                                  | Description             |
+| ----------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| bucket  | GCS Bucket URL.         |
+| project | Project id              |
+| vpc                                                                                                                                                   | VPC Network name        |
+| notebook                                                                                                                                              | Vertex AI notebook name |
diff --git a/examples/data-solutions/data-playground/diagram.png b/examples/data-solutions/data-playground/diagram.png
new file mode 100644
index 0000000000000000000000000000000000000000..9da71fd09edc9e7aa171658766a8e0224bf04bbb
GIT binary patch
literal 27555
zcmeFXbySsIw<r!GT`Hh-cXyYBbVvv&2piZS!lt{GMnXcmyPHin(j^U>knZmOJ@~%o
zJKsC*`Hefy828@4&UVQ2JS*m!Yp&UI1*s~_V4@MC!NI{{%E?Np!NEOAgM)*oL_q>t
zXp0QK0qr`j8rt@1ASZHbTPqVY3oyC8i#3=W>}+NN2j@JS9S?CNZorg!u*1`Ng8G8G
zoY*rZip2P;Zj)e3ry|Ofj?mn7e9$CHJiUM&YeWB`af$49b(RJf()7MKBGvGx@nL%R
z)Ufk{I`i;NH-k&+ovmnKqu4cv-9RaNQ*+qX%I%GRxDlcIC>ibcjt9uI$zaVP`W})o
z<!X42ceQbs(zAdAcF~hPK<zUBQ2yRZ%o3C`b>#8DgmH`H#dNn*;dR~cys222?psol
z?W%~W3k&&8sju**s!MDUh9WWY!MWf`N{II@qjIWPS8xei^{wqlY>~U?bxiT~!spAB
z;^T;)w=6wpCzt&v6k9duS0`7;D^Us$zP+(0Pc2&Bow8ityB+Lb%y2c}XTR9KUKsCw
znW_?!DBMmqkDyRkepIOVD<$@5TihAmk3=h}@m&SA@Lf)%BjHxg39;6D=JFoY(M$3Q
zYB4%DOT&tajnYddJ+oEo4ds_pQRk6sb}U;iML+RUavf3{aU^Lt;w68F>o2KT)lMl;
z(1g?EtCZdbJD2JBn+`1!ym>R~fvlMd=hfK!;QWz`KqI^&Ht_lMRf6H?>u;#XQJVwe
zYnKIW<L7QqBsw#H{LE5B>UrOn@Htp1D_e?O2$hgo&o)91DYC%gB?HZdyk-4mW?go+
zX<nYSpfxEc6^{H*9$U#D5k+daw^gHUBO^u9nuWZ3p9MdcWPdKM)};IS%a$qKtgyIx
zp(r%PZEM!ts>x}mqmwf$|6Q>TUnPh0y1{zeybrvQV!TUCK4@~rB$c=OiD)6So<sFS
zY;iew1Ji4_9<~oV=ih?MRu4;Yo!#mlsukZ`x9*?#VAXIpOOmSNmV1^vMP|&>R7tCn
z<8E*>Kxq2mCXP}dId3DxH=Qylgii(D`{l6CZa(hOfXh$@s%CmS<%AtH$}|KcCQ8cc
zx<~K3)*BJK2dxDOCjDdD2lMr>x%=2$7j_GtKdSdQt5QOm3PyYgxhA^fD3ZNCO-yB;
zNcU8SCS&~~AX-ps`M$q%5I%+xUaq%uGcfuw;0$7LxfkKZ#eR#8{jk=0=tiZoXm0Bl
z65o?tNHXyHiKevPDvw_{_ArN8OK(^H7IWhJ^)lBt^WgEJYDYLw%Idx<yeXWITgASG
zDN=R3l~v6&x9tZ^lq?f7lIn$F4f57(z3U<;tK^mMv+vrxC*SePPTzdQ%w<%6qH8eD
zSN#-);hWvLMd3?!&L(Rte*->x>uL_1v0)yyD40KPt%^yU>~nTyH_Y$j$NOgUoaaw7
zo$FYh#~n~1c5ZH2zx-lw6+Dw)A{?N(Z}=s$_pAr5ThaozpPhXTG<!1|Kbn*`QLpy~
zVeo0eb~ciu+(ejamY`0M-<PQf!y5S~Bb-Q8hD;>#;kFC7Dr+@l`}udR3=@9ek<E{|
zVa_bh{*%3?$m8=U6BP|Fv6-r0er5_6Z79F~#8B$`^0`>Q5&nl>Q`SE7tk==z(>AoY
zciv<?-+I-(>G&NLnjBP%=W3LTAbjhKuESeeWcY8B_An@$6Ei4@NM%WJg=M1f=9y{+
z7El@{o9CA_H+~}G)b`qs+}UG1Y_;pl{K%*|Ye)`gUa4pLqMgtAYkndxXdS(ArvEGI
zxrtRGN|Dc=G!sn<ndwx56AAmm46>S%$5XrQP4NY+5TAmt^p$-%-pEyGPG2>KGdkVm
zc|?rMtc+`>3s^u>dsRe~L3L4`bF`KF!l3c#giPCNbmx~+#9D(kWl%<^`9@yFJ#)%Y
zJU@maOg>u@RuLYsiJS1a=1<PV+}XNnB{j!+^|*CgAuZ&o1l%&UUEB<xGn`l~e7r;+
za**tr4RQ4ELHYzx|I6m|t`EvQXh@|~=OsHyJw`7*!;*_tA-yrD-?^viJm7i5U6P{3
zU>w=o36dKUPZ_J=_s`=Jy^1&72vIR*Eg*uZ2e?IjKXCNsghR3{REhal<h)^l!Oq^S
zc0I0K2BCS;$*uPW(yA1G=N)w$xC}WT1Las=?J;5p-N(LOs(IsqMJeahUeiZuLm{aU
zUz6U;^=u}JA`MY=`eP`!^(IO1T;S3d5!+<b;K<|@RT*uI9|G9-1`(;f=NFqi+5sxx
zPZb^83dJSOjGoC8@`?QtZ%@~lL_&YP>;$GFvSpuQ{I1=mhJnshQrY(5<I&t`gaUY-
zC_kN_i!41})4R~J;A!_|8A8$YzVPryg!U(NVRD~ZbX4dr3%vF@?qu^hH7?u_PW~~5
z9*QP3ht4&oRg4Aixy{&XOoE(!r+wWn5W!Ph-Qdd^jb?}IUzvVv;>fA!rDMZ#lRhqR
zW}&?1TZNJ79ULKQ7QrWF?|&=tFCH6i&?l1?U3_&-e#Kx}+}ej%IbLnYpUVsr%6(0G
zL-n-A#Pl=gNaKOPDF#700>X5RUbI1~0;Z87$R_AF$Z(n?BAaZr?-k>w8J<OD;we@P
z?F*<79`9jP&}Q960BAynjN04|l~zApwMtFzXeC`1C)@ov3e$Dv=Q26{%P*N7WW~)m
zxBSU**IB|3^|<%_Jgjm7EyyfLB-GF74+|=+BwqVSFx!yo_LJ^*I~+NqY13<r2Uv94
z7_e%f9vMQ;T)JiX$H2Ego4_5h1uhiL%;~j6py=>h&alZ10-e@(?nw9ZwTB(zYT-Kj
z-&}DY2z`pwnM+9Uo^*US{A|OEKXV=PB7vD0O|X)?(bq&i@ly8%;=UP_UQyA?B+z!V
zs_JmJ`3!CgovK9|_cgP#mn08D*41iY`2{W9kal_&J%m_PmET1Bip{Y|KMDOJ4J$9$
zYm}(3@Q^%#14KPlbrr``XgLhovCe5LtgXNFAg>KGt_b~EZxOk;C;biWOb7Z2hNGjM
zTV@;^<<WCSJ6t*0bYCCvA<5rjwJGf~X;bl;>}QDbXU5_!MG`J(_KPYG5M{e!rRs#%
zIM+veYzTLj8&=+PoJ|)6M0(^N-wggw&*XXbPX%-54PvTQ`ECPN*N72$3^cYzh{8>>
zrFCBXW_n)7Zj;GV^wXSQpukNvS1CZ99D?4%pD04z`1020$4@$toowG($+zN!n5X>*
z;+a)MSlZ88zO*S$46ZHvo^R@Y^FiS6pS}x1XOctL@+0AX<>}Pb`j*DJJ4QWk>_q_O
zcXrinQl?whppV}#eFzDq;_EpI@hZfkKE8Y<N4hhZg+}~~yB<?z`kBPf4w$&sz*Ne?
zIQ$G<<A)aQ#A&P7B3qTToXs}O8j9=j0^Z2fj)Rd_{()Futs-3|t-e3EFqFt?WB5uN
zw}W+H2+Q$drTnOregft|4kYoxw>ghft#6$u4||HC*X@dZOLs>Kp?PzeE^0NzCmN|%
zJi&kyTNo&A@OqO(>f6V0{vh~eG!(7$Xo_F$_di>X0>?`E<<NyC>AXP(=*miKX;r60
z(XLLp;k8R1zKlrq*@7v(2jR~C^=V&d3E-K%)10o|-w)t{dQc7~XW)Z!cpGbJznYE7
z$SK_Vbj4_4%RAJEHbornF6Od#Y{$KsMMGa$?@(Gzr50y@u6v^4;_-7^zjZXl;227W
zo%tr>IZ?O&&NITNcUIA;-Tv`AbAhjNxi-Ju(?u}~Mr;jsfBdC6DHo_`ygQa={=w4w
zDv>Zr{CoOq6@_1J<UNgVYMc{R+W2u}yw~VH;6iMl;iYx(c2j?cVk(4M(*@v7d@CvT
z<IY%u5T(GI3I!+HA54Fmo?BG>3?jF%$4%?I=?3py&1Uc#4HB^<R`{ui+vlh4C2roM
zEbO)Sj<Ze{29tA*6THK@S(zup)I7frkg*_Ul1C@V_MuB{R~#Xj+#7M(vu^_VW-%z@
zBQSlZXH%rSi*#1PM`CmH`pv(^0e5<aOOt`7-rKRr4QEue2dz;WT^xWxM)NbvXyi$o
zJ=~gW*3dJ(V(|r0ZOFJ&n|<oXPSu(A^}3Cu`vRg+g>%JDrfSF-VsmKRAV%9B=b;{=
zIwLP)#qjkU^ChRWjX%(e^X;FrWuRqUQZDR8zso<~5AK_6Yf<RgfzwmD4#VUcV=(mc
zc0O1A-bG9*BdaBe&ecmEw{}fv$uxh7oj_I7zUHB-$Xq>Wpdf5jFPB*;MSg(u`C@E}
z7aM*Fr?Q4)a(YZTcBk`pr_La5m<Mq%)qGoB`|FDr#ONaRuW;>qPxWcr>pLh$o}GnU
zK-d^jpGP8j;|m0a=15VAgCq$Q>MHrj@#PZsfBeQAaI^R%!hYHnHKA$v{t%h&_dd~=
zrv4-wL7M3K8qRJTRK<G{7LV65+$lu&W0!|(NZDktn6jDk;H20_VP1*~LXYLTITJm%
zH1zkxmX=kwuW>2-R`);B(teySX00!}D6>684kvKdNq6dJ(Z5a<w?-TeFLQS<9^bhL
zyW7f#z)?RmXIZ>AD+`Ux<n-gkM@^1H`4qGemn2TDp<THwvX7_xOmk}y_eVx;lV8u(
z6y7Idhx--X(7JZ3(Cg4gdwJKDc9@8L3j^M#?)iM$$$XaxR`rGW3q-F98!K=^UfPWM
znI^I8I@dhp!dl>Skpt>Fi$1IZ5tpBtq@=2xq~w1DSwLu&<Pjkv+aXT;Q(wJWjq$6a
zs!floLpeF)a-Jr=gr6!?)wY4{R=`LWg`ABIt}Z&3C-XZJ-6RJGYrLmz*w19>=%imU
z9C?|gONStL-#I%S*j!*eE0E67ff#w`z)UzvamM2DI1YocPN@P(LwW`{O=uY4hmRbv
z$@C90g!^yiQZp3>-(wsGb#e``LzW$u^Oaz~8&!x+5Oruo=}39DzIKM|YHi<k2^>_k
za&?$63dj)CzC2+ms$yq~BRrzEk(#jYdo}9tPQc1$G8jBrOXmfmFJxo0NnR&k)^4Sw
z4pdd`LJBT>o()6}5|QUdr1$VsY!M0+Q%Lv%>u<jz&7Ao>v>jL$&viPBFyJE0>Jx7m
zp`h$OsSaLoClgZMdwM8_pyfKIU+`osHA^eu{VK}l0upOUVnPM7?mnD{ioZo)$!adc
zs%`5HfrmQMW)tGq!m|a!8-5QswQ<d5B!2#<{wL8*>qq-TlMDAEW19!a#ss$MUn`o-
zfT-8i42XKQl@tYytRSo)V=F^2t24wJh>GFhgvFe#K}P0advZgtshOn+<v~LWCApcg
z2&EQ}61$SMB>0n=tg9_p-Bnq`$kp6Pz?f1@6iwJ!5C8xH+k?oRAr_W)g3cn8f8YuN
z?~l!Fl;nSg*qe(`YAdOdOIq22$+=m%S=m{noy{CMDMiu9g>8*Z1l6S8{0##55~2KL
zZ*MKg#^&VY#OlPwYGrH6#vvdez{bwW#>vS7j9{^Iv9t#{vsl_uJ%acPh7{P&$kxo-
z-ptC9{1GO|(8|GHgpv~IC;t!pAl6Ds{{nAm_cs*)dayZztl2nN+1Vfvwtt^tXD{st
z0QnoC|8j<%29P{pQv=&sIoKM3r5(YR_Ei54!r16v^Q|3hE&goB*oX~m0fqoW?SNG|
z{;{NtoRaFlW;~L>)C^+%XBI&0e~h#@Gx<+q{R6kho<H09cSL~c|APCE(f_gcKZAi$
zN=kxKRz?nw=*dZmP(H3NXl!L<W-R#URe+ld4B`Osvao}=I9Rv^cz9VrU=A>g2|G6*
z52rCVzY!<Tzk!mow6h0U8i5}{0l-<!063hy0z4ov9~X;}i6H=josXM^A7seG!pYCi
z!O11S2R7j``8N<Mwq^iVf-L?Wt4C1A04M=Nc0N8X0e%)fLvCXhZXP~E7DFSj5epB$
zF(0rBry-{R-ycxMMuKmwY#|`vIL#m+Q!tygrRkrJM}iB!R+ST><YZ<4&lXh+ki7{o
zL4;BXWJIo_{+~S>W)QHtJ?N2~9K1Zd96X#{ynNi;9DLk=t@H=rJFu-Cz>1GRIoMgb
zIR8w4JQqP=HvnZpkBkZc_|pz-Mo`ig46?Vf)v&U%5TSeoLH;=NU)@T8JQ;)RK~f-l
zFaVUDlT(nLSCErOgM(9$LjZVTVh39OZM>DSnTgB)ZuFz{kPH8H=CWpX!1^wKn*I_g
zb+FA}Uw?gCnEjC@a`Hb?AqX=1YYTQDN3ii9JONmLbs2pES(<_Y_3<~q{ztpnf58iU
zMjS@$0wCbnj0L~|FBtN%2=H<nu^94#K}KK`c1~WCzlirQ=yp~n_D&#M@M}|mjsUFy
z{`^BLa{9kcis7HgIDG;?9s@uz7It2i|D+h--xOo}d&g{#TH`;qEX?-55JmXUfPYgn
zz`VcO0QCiEL$-gZ!@r3JApC#x_xEA^-&}&6{C^htZ_)RE$n`(u`fpL-zcu)Oxa)t&
z_1~hve{1mnaM%Aaa-scaKn1o0+#n|)T=LmEaRx#yBtr!msXsv%+?8a57x0E^EvsV(
z2ZxUH_#YlFAqgL7M7Ebxl15%fB0$3-lJ%>ggo7i8laqR_;XJ!L@8Yg;mj3WCB~WRi
z((}aFN1S{&k@*Q@2IXY2CTw;xySnCGF|?*%t7XC5{A|k8%BtA4RN<l?x4Hxct@ayQ
zUx5XDWZ6@R7qUIg%CuZ|LkHm$2o&&?NKcPFMM*`eP1l+2)|28d+~0LTAw<uCUqn>r
zIK#8YH$>IPzi;92{_XKsTSTVKHtwmOXsQa`Ybhxy<vifW+OP41krMdP{dkfW2>j^1
zgC8G%ef<6SyX_xc|5e-n%i;f91pkT5KZYm0P7*{s2A6*>C_CTvuYYgR(W<E2Hb58>
zF|I-<1CRz@Ba81vu3xn|U0b*qd95SjI~RthKFO&owjdMCE&&Mbke#WK3D%R2kvg2`
z&joz&p%9oLrbpE9hLG7!1?=wW$E#Ogq)*B}BrM^_CW8{DIm&BWTo6k7OS`PMYa#;!
zd$#Bq84LP3tKom(kclQHe0u1odiv27siAHwZV9Iq%KYhb*3yg%vxgmW@g7|X?l=^}
z+}~coeCnnsCAHeAULKjG`c47;UdBu1(^<C&T1xU)iZc4U&o8ZpLFO8PWGPn5TR)kg
zO(NnpN36W-RyhUrNHFMDY;;d;xe>l7^Q-V~5BZd_b8+wW920ho7dXotN_SznkK7Xx
zIO1mY?0rMU%^?AaPy8$y6$Ly3%EW|(10J*#uVrg#K7`4cXQRQpEdUW|g%e^Ddbv!K
z{zd$|UW0=6;Vh;6d9)+L*{$<WM$XZ(t1cdW@aA{oq+IQ@hxNe^S2s})om=+Dup2Kq
z33vBWh|n{X(UEC!Jv{``RO}A!z@RW%fjTmq^74o>a~Q9K!<nxHg_>F<M{|~AeQ2ms
z)fG%uUa@n{cFP|J;PD^LLzWh49&O*A2^M8Wm@Ov>B23{;{l*t07GfksC`(L4*`v>Z
z{Ce`Slw|1ZYd*LogB9%A+Y_8P!A|mRbX-LwABqJRF9xfoJJL3TX8|3rP2LC!_#lJg
zkZ5SKqho%kH#@O~KU^Km9VVN{3$7K39(ihNP909d4$2|jVY0PPt@(*DHdDKNkBsUr
zGtjLY=Cxyfat$}NHuuSUdJNA?NxQT}8+|;Ugjp=;wzBXoN;$sEu@rnH^VZJouox!h
z5B#Io1JjNeRwzQ7tpaC-wIvS%alZ`W?4y$jj!^mOlzwt~G7c)R><%W^)U-TL`2arg
zISDJR8iYb7ix*oX`4*mFR8(-*o+0!7D%IZrr4kYnUBSdsx+<7yQ+bXC9?}h9yM=kb
z(;qyNpuA$`<s2adB9Rn6$YZ1^s#P9BV6dCZO0g3I<80er%^h59zqGm?7ba$?{&xAz
zdyjEG?q|a8+=!3*<VSP2WkJ{5JLZMLi=_d}E^Csab>0D)a;SUY4_mzSssj-JieT}M
zZENU8+-?b!p<q*2q}h^>Tg7jBh29#b^|q~YxWyOJQ8q_0XTRb=O+(}8@=?NFSgd|+
z@zAx&Bg12@IavPw_#zj@PeRxF-en-!jsn0pqMOZ>wL#(h@c7m*D~lEfO(zffK}rf&
zd~F;pHHOUer%3J4;^f}56ewQnr+W;Ue%Aqy2XgLv1Pjv*wH{yk%NZJ^8qs+H@0iKi
z#xg=r_MMX-U;QO0UN%DG#L30&?QtJGyNmgW!>B~XXlZkX8}$#G9^fY?cm|Sec(pvv
zjx8lGe!rf%J?*XmCD398P^pQqQBr2WG3tvJ;%$^Pa1?&@H3Cb)+7A!9-k$17xIFB>
zkl>0k_(Zrn=hef=+X!VPmTz$j`_libvg5O*WeyaI)xjR;us@LLKWt=G=!Z$fS6-U&
zweN0%y0befp5yylDw&ZMulF0j&2?~bUzVGyFl2+>$|2tdLNF>SIq|t%HDb$Zob(a>
zq+#?73_qvVsZ0;aa}-lLCyS-0p@VfBiek$)ni~72Co#p*y9_kXP$GZC4;{|w+S&yW
zmq&dc-Y~lBa({t?Q@d`iMO@ukLznDMn3ymf-Qp*b4c=YUmo_wfG7}#kLLwAA9v$6t
zB6@F3V_B0Zhtut}y}EW$Q~CMqJun@g&(VIhw$S|Zbgd27&j!cm7=HNC$%A<jF8GA-
z;*VOibNT{%pwGn@`Rz6Vj0+#O+uV6{2-o+8g>BY=iyx7daK18fr2ZOddz*+|DGL7X
z#z_PTmUBjra3VyE)kuns85(+f7vxn@>8!Oe1;MALW7}w$@=Babm!#}p)W4>%YCdCy
zczPMnbSWj;G|U4W1Fs)1ME9cNe6R3#xYxZ<wSz;%hUJ1<>v6c2nwCCxYsi**gGe*W
z2XvQneKtVz;BQT|*r<!XecNAql|w`zz*!1AoAj&?gF<;(>n<f47uY5v^3u~I=pL?^
zVNScd+!d_})u~6leVVs0CB8^eAURvg?40cD>)aJa05BQ!#${>kYIP0MXdvz_KZeh>
z{~J<|+ft3GaVcm6gBN<g=)Ldh7X*i~Ai&bfr%rzSl6k#m*`E6a??=FrTsIc4A=DDS
zA32AJ>FTqDBpH0>O=M9U15*55TI0|@ccgmH*Nd8VfsQtq&w1e9-rmzE@E9GN(9^N0
z$*za1mKNdVYg46!)(gwVFqh%x)}duRXJJxWCH&#IUsN;I4ZaRLd}?}n9XKi?9Ud+9
zMB&{XIk$t%&JYebs$+jH%YjddV+H_k1VbUFzandT26_zUrhipcRUMB|g^!Jn%FD}h
z;&g?AN79&iE$0Su20w&d&wl>=*~RSs$u<!oK7X26)Nn$l_q|!s-6_{`4esG|>O)uQ
z{faUYDT-GB<1CcKdwhJH?e@F{x`_!rn3h{8(=EAM=K+-H8#@Jb^p76~3MR~5ma?zr
zY+%?n4Q>nGRn-&SsrT1T+uJ+wylc!QcU=?CO&_;+h@6j8ht;&J_7sSo$V*9urEZsI
zP2o2~@S8I_UJ9asAL!EGo}h-g`;FvX`64~ESko&th5i0c6`<nXPltc&rA44C(6*_T
zsjmSV8=tH+va8dr)g9_7l1YsP>sSCRGx=457z?>(&K-wO*NG*HHf$rIuw+%H=9VbO
zOl@(bwGjQ)bCjpft_v-2{BGOEmQ7c*CaGSml|w=SAFP^#Y>Z?O4#yi!;p18k9p1lx
zf8^S9yBR}fJ*cV0=`t$S?6l$(XSZ}EBLdwM`j%f%@M!nMZrd(uPa_3F2zkC14IGw9
zK_Qi^#ZD-G_09VRzgtxm^vf6<+z&)2-LDBGZIMno$mTk|5tN=A8W~;=RqLCMb{<(Q
zmPY~XEjr~`b1?lH{L|AG341wFzlBjvJ~1w?)v5U`)H2rz=Xr#Bs=Rpih36o5DRTd!
zS$r}(y7_O&Z~l?7`S?Jd--~6Ke2&{S>;svx{_#jzKRc?&Frd5DGjClE%g@Q(p+u|%
zZo5Vbf#Gx<91+36eX<Vc=^2?B&bwX@BjBsCla!T82O?{M<Ra}lH1FLa#W(Ai2d9l8
zA@-~-_N=9Bo>7Az(BcHwm}e2-0V2l^G@*od<G7Se?W`>}J0U#We`_!^KdEdfNbtbJ
zTWa;#(nZ4JpO$J}vbMg;jy*hYIKaVhTs$)EpL}8gqvfE059nwkvTEvYIAF^z9#qkY
zj?K#A&QVGJYUaqoptzHY_8~1hdkwwmVrR;V8W)WNbUV#z^i_};%S17?%Re;n(qbNo
zRvCY4WpBSQFH7W^!R<7MUi&)0$g5Z+?dvQb98Q7)lPu$3=Zd?AwlwxrGC3}{9lCsC
z-}6F<6DbW2{r2^KUhz`BvBeakw6d}yE4Lp2fw|xI_E~m^+6xjV-&eAHD@I&;F+Vq#
z9+9$0Krmk;L>!$=;yDPF_V7S}LRPH#+3OjWM5<<MZ67=>m~I6PGcp@m-VRbZB@`5*
zBX9Th-3cF#P%(czrY+|v*R`3UnR7k4sJnT%jsBG><M=_-V`yM2E~mF|!aTgtxK>i;
zW+soSiprrump@sVkWg%~HodsGxd%INKa2We%!BUHgn7izE2#^w*bO~+a=+sfVh>4y
zEN<D`uC2uy;v;EJ@CcuGx4aOP|BdD+A$)VIaOo~8Y{|zpltQ?L`0*XI2IdfqZLeq>
zM|&3;$&TS;z&^eAT{^(O2~gxRuBm)AQ2QI*9r_N^>?~@8k<r<&W`dXZPNf@K4=!}E
zA8k20Yy(Ig7=PWH<zo<!q>>1IW0-|D^;cyjFX+QW4H+y3zSu~5K;~<L4sT$nNRrgF
zq!^L&)pHgXHBQ$;*W%=*Ru-F%4HG=o^+%8XK(@-sx;<uKXg|kSePL=1Uf*swk-5Cn
z6esasS+bt&*nu`~CFlY3dT(wjXgFn*mBtG&@{O0rg++JvBv=7HOr^EB02{e%48WyT
z6(#YQi|yb}0y?T!=ztB;U^}|k*d#|Lr^tQpjONlE*+)mgoXP91drZ7G)cCW!tubM5
z&4O#Vh?_jsFeZ{uWAi2ER~gi_OqsA&Zp@5~jLZGAMZ@D&x!U=qD|tT4*#TrSmYu4H
z4n3DEEx`Q|zA1ghKtJo)33s(r5q{Ot5w6-?V-6=~zU-{a`pR7F!(z6e7;c63eJ|SA
zHgfeLG!^r00rm`Wb93`t?*_AzN!Ek-?iEl+mwN&>%<^i%V|Thv{USNA$E?R@(c@x1
zcWi|3?Ech`*W|3<fNZYhd7f_!rf(!`8+*7_Tq<p98`(nHw9bT!OBL+*;?U03+@U|{
zJD2mbGtAKFm>9r6i5#AUJemf_mj{OG_a+M-2a*e}8zPSTv!M`Jl86IZtiIr@F>X2K
zeHk+y9p}cu!4C{9Y~8KDS5)2|&Svl(-P{2#pKU+3W&4(Wq>wQR)4SqyfYX8C1n^bQ
zcNtdvV)emOCG+_HZNr}KL_tA87-YO5YpF$P+0{QBh<Hb*#}yMxL;XrwOa^mzC_xuY
zb{l10UU)l`R-N2RtZ^QsX8HLRGw;PA5RwlyFCT{+spA|p*F-xleCS(eK?IyxcFTcH
z%fcmfH8p^xrW>=pm97$JYD&KX7CA69lmfS6y3YL7Ns32`X5r+>=r$Ff6AHq0?$Hq)
zliBCbCi_X~a`K8<(2|tf!4K2#YeO4Bb)8*ZBcr43VyPY}p^3aveD2z-y88=y5@tFA
z;59b_F-r{A*l&6bPA7o(T6J}ol|{`3=`((T^J2Q9`g^1ZjmBQ7$-rjBQo${Pq^Rc9
zI3Ra`e9i6^y`!W&UfZ!GHtT@8m4|64Gc{+1xVg9oL6KzIYB&<#k?9%}H6EyJ{5s$2
zti1s_s&85%sUN-bAfuY*5!Ze>4i*29wzE&W(dwmZxqOwRw*{~b8Oww3kHX1{(u@ok
zG(4Z7S22z~rN712CX4%dT6uZUhQ6zx($$ChB0gtT-YL(O&q&yPVazwbGuIlA)`j%s
z4>B?{ulnY`#fj|9^^~as8;rl$Jptk*C$vGGcmm+X2*w*Odh2$~XSH^qa*vZc)@ya}
zK!bX8w9CM<auvJo#PG|ZPInb^c&%%vSxHxS_xW%TSjWA>kcZ5@D#Qct2jGYIAp0*K
zbb}I%O-$G~+GiB;#a_aoSMvziKr}{%Eq166L{(;=ELO8)UzLH>MU?}5^780!_x3LD
zJZ%H8mS9sKJ6hqF($feD2`?ABA0)tQo^zIbmNnnR-MoWvx+_igOjp;jmb%625d+NB
z)YbddPg0Dg_Fp6^(~*WJ0zp!5@13lI0{CRT_;xwhiJjWC%<?l}FIAnWV(7gYz0WC$
zD!1{7VOBXt%p-g-PUl)M@!)xc5OMq-LePQ}oe6tgw;Lzs<=PKg^#J0Hh*@4BaNT8K
z%B*$fTXVYr!FbK`8CEe!JJWWVfzY;rg~P(!Jkxo~68aMNQP4U&pS}t0G1A^wU0ya6
zD#k(c%PX2wdA-Ezi2KUu1FvMjI=kyQ%5`qG17Q@97XSi22Ijf0$#%-wTTj5unlAg=
z%-J1Sl`(&lA-fk*8XN>v0eXiw>Ppv}uZHUCT+*-_byaOCBO@G!-rf)ru3!oQA2;rv
zMhI+tVxqFa7#ncq)!){U1$0nTi6qaZ3mBV%pX1<!g7AUhBBt1{>e@Yt$Hslt0Wb%_
zPO)V!3h*}<2Xq`15fN1WT<+SIv3BZpUSfb;8am0L{(Ad1gpAL>ajD}`-fC<4->hPO
z6Rye654uI@FhKNq?Z1Wvo{Reh2#1D-2IuEh6hp%d2la1{?(rgenm1&L{tD0WXH?Pg
zPh0&H9U08jZXEF@Rv#w1R!lC;p=gdC$@FIvJUo|odlBbp$Ug7!F7DQy06Un8{cw-2
zL<J<bY#E=bh9WRF^|Paz+(n9X8F)6h5DYfmp3qJrObvSXccls};TT-(zeq{AAih6$
zv~0YGg%IG8^5)mo`E8_lp?V*!ykT+=4(uU#4X@!U<|CMa&%J3vy5+>+HFNz0(c$N1
zu_JTC4JceO7d?Eeb=T2=lqkULx6MolF$&+1_rNNb)%MSH$$)1#L<$fy0<XK9s7Kuf
z95j$OQdWYHd@PMUF-^|>rXVFX6jGGNc-g$;tI<YAYk-)4s;U0#y${>8ztU9yU|A#o
ztUqX4uc4C2|8;bKj@Q@MpNaX0et+ozyl?F?>*uK?ahmkE*A#X7oceXfSYtU!*)M>6
zpuk=pW?s@M9Am1!q$Cy0>E+nuy6JCkZa}`@9sbGs{FN^hSb!^t{|+R;q*k-k{>mW!
z|EClGnQ8oM+&|m?PD1`yU4LgJaXRzW$>}~QjbuiV0|ymJBXpNLP@eZx;}Hj3ap}hg
z{GX4%AAh&~qwBwF`(K7D=QYs?%~X1rr@GB+-t<kEyCk#1J%7ISJXiTkQs08t83B-B
z+p-76(Q??JW?>J}P?=6|%!Yw=@V!B#i&m^Hr9bej*mm7dYDK7NbJ^`rr810G;HUMf
z2)xYEXFA@T<zM7C)&>@MfLFuf$077=?_27}I92R1<QU8_$ixr>RxZW-(I$(t+%K?9
z^siWmm8V{LlIWiT$)JdoU%5p|qs;wJ$XV>31u>Xa@$yxiRpJ%h9TpE)Cx<e{94{0O
z6JOX&L#5gATi4FN#|Q*gg;)qL&@=YSYab1nbMuXF4GMl0Z%8#@7q>7J8|6ff;AF?K
zNUT_f6gj(5yrZ|DgM}$5(o!%Wj@h5~m3#i$0VwPGh9=GSvwoWLE7qETUs0xSVjwy<
z9BvAZY84(#K3D+ahzQ)16U(*@K}xd0%oo+XD^@4)Ba^csV|#5bX;lMI<^;me<q{Mx
zuCqxiSD6?f;<-lo`E&jCYX=pD?5X8rLp!34q#!a+eI|d<@AEg(DX@L3jtU9qOhZce
z#_|%v*nTBNcS=a}OI=nztX!tXW-~)UV(xK`i0DzWv86!Y=B|3e<rg<g=g!zj*Q$Yz
zE!g3Fg0{qM2Hpk@WLEaOZ7ZBgbEIsc4inlj(h_R&v34sL)uW^1vhFRbq)o9t0pYYf
zB233lOV<<8`^;INtr+eqk;Z@x^zTvNql^FpTdLrZ7dv8T-C0<usdMcaIY_?q#I3?_
z&69qxGeSVUi?peq(+kV4u8TP5B|ExP<G?O*t9m3J;BbZ$xlCdJM*whvzzgvjh^|5}
z1%!<Ri!KVtbk+J&i+UP)8ebjrt#f^vruPp|l>qCYUYW;$$mqd57(NkEIbJ2(cdPe+
z*DhzIr&JS81|ch4&{r&*AKoq1dxiQswXqt`B5_9l2FpS7hdcB(xu-rQ@6&DbJ5F1F
zj_o3XBKHdii8eSW1Tec%rg{>(YGS<Z718wt!95(EblKLEE_T-SbI}J2%E0~=Qyfs`
z^6%iMBU-{nll_vMX7~=Jq$`i-r>Jf)kPw!z(P9(rnr(SlYmi~knZw>24XtRIa}cS_
zkF(a-lJxUBvU(0Qy$GW^_g(J9Saj*C&pOy^Hxr1=AeP2^0am{}$?=~UV+|Uuc2>gE
zYu5w^kLu~#pJC$X1mU5T-$z~K&3hf5VGoeD$K`K48PV42FzsKU!2cB9Nali*6B*BS
z8#omd7<ekG+19`1^ech3998b=Ed*{{Q}dA<<?<2uH<+}zKwXI1?*fZci(A>1Og`G;
zaU2D~4K%JY`iBsPLv&V4?@@BcepaEg8C@qa+0=>Pmgt|=g=IIJh{b@P$Bviw8+Fgh
zbp6(4?#}>t0ggop^C`k!R*tE(L<)RJyesP%Yhw{CQn<fDR%zI9u1cqqmRjv_25q~5
z5ue)vmuuZKG$~@`Q&FMGN*}h{Z2}N`;$wV|i5Q%DrT6;XKFZfGj*fWi2xX=+@Dq4z
zrwT-^kEnF|nnmQiNbSBq7J;MA$&!xolX#7^5em9Joq+>noaM<q?;Dkr-ctds$T=@^
zu+X>Z%FHwv<YmzZxxITd|FDGC$1YBC9}l<SeCBz~)<??WqH%g&Tjc0D3;eP{1-2Pl
zT3rWw<V$6YAKraty+kBRk`R7+>7QMkmb1*)XJml@%QMo3P5V;6PauQ~3=5@W6!eej
zx|TJiV8S)r9X|<FQlzA1r65MJ^DhU4_p$4lz}&*T5M{Pc@t_j-q^41VNp22Y08(A%
z9+mkf3b0l6=EA`Hcpv)3Y7*~V5LJF*0X0AnE<<L7$^ba)$vQi2=<1p>44D#y*-lep
z6Ld#O<5ZVPr>5VOI(v76;`dcVu!bbtCo?w*L42W>A$p%aE4!T3yCPW{Kc_d#Zrvb`
z_DGHa*HYVKVDBYFTM|5D$qdV=OHYaEa!q1&%2J~DRiF+C6+!o&y~C@jx#}U{h&gSm
zgHseX#Uf+Aebw-dH!4}EqF?lUkAaqzL*NBz_i(LuHhN07h1PSd*lz}D$#Wc0vi&_s
z2JIm;MLO3=XFQr&*o3odfL{Jn44GVCKSbQMU$U>y!`w4kYbeDztdW*q37bqAv*$nT
z>ipi~N-!9D7NLqtT*+PfS)V|>R#NQ^ucVC9CT|(3IT;|ZhRZkrVLE{*C-%p0`???%
z`E+|z3OInJu@{O;tlgwqO3!|aV!4DC4~9-dm24kQmAfN=<E}42OV~CK-_a$?2?F73
zzpJfObxRE2jH^}NnA$rU^-PnxmUS;4e0p9@b_xGn^34$YahFQllD)KqRbT5s&k4~^
zK?5@vhEHvlG2!QPry0)==3G$7n1+7GDB`dK+BT%PI3mn20Ll^?7P@iE)RIjE<k5iA
z7czWRK71?;!B^-B<mwd15GN9!14OtGhtFGl`5g+Kq$(l9s5;pSumTAtg(NximZJtm
zTPzah7l=dxv`-eKAW>2|kKmyWZ^tZTSggj>H|Nr+qiTPRo=GL@fa&Z1{HkR`+%#LV
zV{-}qdgMHJUO+gmelEqb@TMgXm5X(A95r7kMN-gM`bmk$v_RROrM^P<jw64PG4_tG
zAR!)(Oxk=Y5m2Us*I2#8Ez*~!$ECLGv4&%mcY<f%O8N$9HH4*6Xyz8Z1F@*5Vb<7N
zNhQrvQd0n@2(FNfP;+`=c4ZTpYFi7#+E-p@%@wjiCNkK2l5T@!eMBVRK=|Vt(H#`Y
zrsrgzj0j^#!Y9{hy_K_nkkEvRtObR&P0a=3p-H>WlNFwxI8&c0z_$;gy->fFX}6cu
z<N0W1AG;yb-DQN2w6Gbcyb=MehW-u>3$j-%D50lI*Z;gK2&h&yK&GGN$GrMe2U=lf
z@-3~72Us33`)Yc1u>flezx}mJ`iTiY7JnbE%4N?M$pjm`n6g}wz9r7i0@IOFoAs7$
zg=xlxcPwR<H~T{;UwV_){1A>w+3m3BmsOO@EGc-QqG6x42QsuJv<#00^nI<!M*u1=
zMAvP=!(<gBv&fk!@tue4n;~n)bKEg)twHaiwm2*q>Tw9{lmSR^YH1$T2|Zg2!S7$^
z>DOtpN0odNl39{-?Av$|)N3Zy-Bk%FIlyfIn9I>p2hhD3BwXb%2PEUQGAk7hqIb+R
zfQBI4`8-_*7SWNE`OXJo1Q5|fOav^FRCnjwDjSyOm>gNUijLB#FlfV{ii!uLw|~dm
zwrfp%|1bS3j{pFp`6AzTh%i!SVnJklzckI!3lS@Ti_<uwG&?9Sj-NANy}Z<z4sk~-
zLco}xicZP2C+}#Nak?``MXZe-17O`xmU)@w(1gy_D&_89Z&BT|KJV^JNq3)rBHQw@
zebiTA@i)0=bg5pbsh*cFg`h>q?KJKr5E_B@qgAE2H}v>f8TPM!fN9_WE5TvXR~G>>
zUJFaJm!SZ*h#4+9t8_D%*);TJM)Ff$eg+`ciSM|db%y=NT>vj%vxJBf4~^87IfppT
z8>XTU_pCxSmMF-MW5(0dm6RlvSbVO>iWabpiXv*xdU1&s4gatdxYluWww2281rY2D
z`+<FZ9Q%nx23E+I*?9+`Qr|RO27yhQZ6>;lF2+_YCZuh2`c5GD6ggq!dGf<5K0z$0
z8EIM794ugt)LDex&%e7aYu`-QIUxM}z-POkt=~=LQKpo;I28<#__tNZlI>eS8=sN2
zboT_AMhS42%G{j3>2?%)V@i+Pd0>7g(bNR#&lsGN&`_KUdZ2iLwq#|#S5c}|D3(!S
z?_^9oBB}2MC>ByH`_(2<4d=tVbLEYjPk=4&i6@`ATC4I458j@&R|GuGE_RYIDt{Fe
zr_Tb7HT58TI`^Jrs=dsnL7BmOk6p$AI$F_k1^o9{`#b!}thU|Cl(-lbkd^ls9sDLT
zDJhMt0UcL<`altmj>g@wu_j=@zk(Uij{x1<xd&OPNb&t`#*KFHMbdNsI1;QtDVwc#
z=xb>79&@`rKfc#_5o>rjVB-^~nCZOEDh>y?ZMnAQzESPr-c$f~fJb2w?oyXa3qU;o
zwdSG6bo@I+uX@y~8^FP#7Uj6gGm3%Uz}S^ed@+EGu6bT@I}u){I4k9-WUd-s<CDC{
ze~%X@HsvtW63{;amRL%e@gLFCe-#J)BShND3=_mN)hEhaV8_sV{&*`x{|#I<B(b8R
zLKIIzsNK}WB<JhnB0aqrX@9)F81Rz4;LUh13X)GmYw<JJ^<MkfE$Tq`*WkT)K~zdx
z!zZ8UaoZ0rR_q0PdwMo;=rS4`iCY#`fW{^3zpij3k*_Z;;k46y@oZ@sPR0N_+3|Pn
zSs(FVeTp;^_8YA8@{4%daB_$^xi?q`E%gyEIxcTV-w{>%@eSoS^tfu5Kn(f(iu1`Q
z8I(P9T+zp{t+^BK&%F{L%ltS2E$#8|-;clB{?YaK$EZ1QHG?vl#dAYFA;DeOZ9*U}
z=hs#_i=Ufzs{X)fFI8E&&Y9WU+-{?crc)Iq<LxXEe{xvQaaYbe(f8$k_17lM{j{vS
z!R47q9PXd$m1_Z)Qh*U2PeAd#{1eE%W3U2az3{uTVqh~;@7|z!dU*pcEuH*Gre}0a
zRERJr!|dCk!f#s7(RAR(C-_dbmo>*HdARtQLL)l3fF!hgMZGtGjD5SbRMzlY)Vv<h
zoA4eJg(cEpXlzs>7kfox_JoRhW%&5&)46@0nxVLe8DrC&H}@aU%$_5{`li+2Ne`vn
zyH^>aLm?*<rHV8R9520laco^cZMKseuee;Lpvv_C&J2HWR;&u}z5G=0nGjexVhs@{
zkNtGKD6>S&{tyn1v2eSbIT6_KsM-rk;LgYrJHd}wzy7VPL9!9KSI;9v*Ro=~XQ6}s
zm_*vupYecVVODlFhxsJ)=vepymgT`hll$o}ncc+}vKrXnjA`niFDec@hU7t7(laW5
zaK&{cWOuqc{CNi_{Pf#K>@jZqq-4i&2Zg=@I9Ua`tn_k3@95P_*5O2cM--fHtY5t^
z0c$pblil2$Vw&ROKRP<vQ*nH3%L|$99M4y;+b$@q*E^Wd(g*L&R{KgID`YtC&Hn5r
z^BTb9n-d38J`2)Y4jlnGl_v9!!H&^fhT624p~aW8v%Li4E&bT36R8lRi<CQU$J(mO
z=5)jwm>h6=nmm|rQZDm?`2c4jCq*+l!=Mem!&vF6fj^kED(tsLS;Lzi?r)0TR~M*X
z?yA0j-^Vp9>;r+hzRJGviWeZk*iDs!=yC1sy@tN@E1l<<ubQ&3G|RNN;#s@-3=}k$
zB*(7SwT9c)Y=1lYd973<fBmx*$zmm)5gie)#U`&i>2`6=g5hkHS!ZXbZ_9XMqRY)*
zO?bVsnHfVOpOwk(bh#^C_Eaco#Na~kd+4i!?Aoj+rQP!o&1=7n(4BGAEme{|(VgwY
z24Se37GlG>hV9S{)sd@)1RymY-Es`@dexsb!&9cFr>FN?!cErtez?9`^X*Yo>Dsa{
zvsC8*aQENvyyp-i!HU|X$97}dJ|vr**&M?Zn*Q*%@Q~qA<me>a+}y%bOm*I^F3xK<
zICXEFZ0SYg(9#L9jN*7|e4Mm_7_C=D09RLTrI{F}-*pYm<1xEzsK58Pmqn&~^n*t}
z#>B)-W^UB!mh`lUkg9}F60jS1FGvf3x<ZI?o8Ky)1d;@W@eoRyxN^Qq;lt{OY6JY<
z|IQ-4B;AjLsxn^CEKa%NQ55O2F*l2JDyOT=#@;IMG<~$nCEY_sMFlFlv$L~dwP77g
zzi&^5ryA(#6b&UX_&he+Ey;*PC>y$cdQ44oZ14Dnx)(`Xp=~=hTdTo=vZ)Sg^5SD-
zWAU8ez6kZQv0mUbf?*zIzP&3)*8MCszwJo{s8o^#f85{Q?C3?0`FHRAQC5f}QPr7+
zrOgR-b{md5`)96oD`7(QBq5?yR6a1P7Lw8_*jl*)Yu##~QNZJUxSsr-tRY|fCBIjk
zkXdd*BBF8#5pY*VLZbaG%+18u*m_vxVq|1QocviUJI3<LN>FI%L<1e5C!@O(VsKt_
z38bvTp*<rax~c2P>|WWjk;!3OHvM*DV1x2$a^42x;4Z))>qP{Ykn=th8~Ov0pX%1n
zLpgqTtbv~0vDf4I3c!86EW67p2vI+@M}8z6vgMJDxfd~d)=Vg&@*WOiZr-tRvUG7H
zbms3=rwb4hNYsbVF6GtN6Sgd3`?|Hb36lafsCo#QYvcXKG3A?3LTL>R+#Iu%qgOwV
zLegD-9n7BfQc#+@!&OUA%-(snD!qB*uN-`u0EjT~S)__GwxkLt@|?NfaK7GwS+72N
zdwbhR)N8dTLf8H1=lsHM4ESi;DBOXth?Ja$#t)sf)>|%$7L<@vVgXnNi6tCzd<;^Q
zG#f#N(H#IFP>iq)K!8DSj8Q}=;Ozlr)Odfr6CE2XBhTWNk(TED_3M-6<z;*UTWT$R
z4+m<Eob2qQgNOTr+u?^>m0X8{!a|p=>{#c$>ZzWdp5J{;rMpm>rocd170EpCho@iR
zlQ9G+p0vTmK+a|kQRxiubNtX>9bc}5tLy6C*0pb>CnO|jSDIk9Tn$=HH@esvU$uTg
zs5>21Xwd6ExBvzXtb~gVwfmtvID8B2d4--XlJw&J>Pdw}x~N#YL@A<be}yx^4BF*}
zh;0UCTF@Dw2Gr<sLQhX0$Sm}5dlD2JEVwM#X7C-4>D^&FI-7ld3E=Ht2~%iDO-(Y8
zK9=otYAokb1$y`voHNH3MF_gg0K$$>PHr;-1D^}1BWxbMtGSQ@gTc8i;gcWkjY*;a
zJ`5yI9kV4?J#&m53o3ZODm9|W_*loKoJSh2IQBrkFFv7YA`tC(7#_gSBWHXxx3=u=
zv(QlR41Z>&gGAO8;)jdVt9T%z3XdDx?=WieZF8~3D?D6owI3}l{ktDfcp(TiQH%IE
z!O>+)Z@gq32Y?uLLip4zeni(%(|pF#WM?ZMpn`&px_(iElc`Qg=e@Y7%#Po=WPP#K
zRwTW8nzbNINk{MdK1Q1S*?8}F9Li@XhB`5VbwQ68GVQU_DF(AB>11WO^8Z{iC1&sq
z-kg2$d`q$EH{dq7{tA=-Myr2`{IwhW9oNowb|Yp=r;0Sri-v))%S6c4;Rc{-a4?#o
zp`on2{PwBQW-nc;@%lh~2tG%~l)jdd5+?d9*41F95^@$6rB`u(Try(Iqib?Rw~j$8
zwPg(24SwZ5&sUy=X+^xm?xvykr|%zKEWSneC~UD?_KJZ$N4t|jKCVwA<QA};yu3hA
zhkx>SI6ynezkU1sm9F&{))KD3f=6VBve+CE427F6&YJDF)I@I&B>_Y_nl2Xl**uTX
zBcr0OPEsEf6%@WH*Zy&}P92oH+h!`7=>g`sn0F!onA>iBfP$Ad2GCA+E1`UbIxnxT
zuI5X$^!10Ae|~dW4x-bpFh<41#Ej?`y*nLK&dvwS_&};y>hbY$PX#6sFT2%(@JH7z
z8hHhUvmD09tGhk16hr76YXX<sI?6-+cF#8U?p-WRYjLaifa(rN=OqrU;%1ewfIvLV
zvLSS-Bfv=~Hz&s*nbg_aVP_I3^K{Hsn_t}>c&PxSgafcC(re&7c5hi6-kvDTFDiO!
zaCN+PyQBY*QBv}FN$Mr5ZXVx*;%$1C`eOp$7DIMZhqLI@reI%N=WDFUmG-qay*5ZV
z$ZZuFC6Y})on1@E)b;d8;DGY39%+AXFMNA;R)Fi>*%XITRKtEfdg;`+;f)o(mMct!
z80MueA}itTd%@X6EE2)!50-U^-ao&+s<fEl)D!;WP}&OTVDHRK?SEB4(2Jq@Nhoti
z)UJ8ZL?A9?GJP%F;rSyvn%(o(xpBezIRwymM%`iAd3l?0JG{KSFEEhe1sy&c&(zwi
z;ELltmKs)_i|0IVD>El}VAS0N$@ikV(L@6uEp(?!^;-^`v7&uRKab@oW##0Iws<`#
z_rqW?s-;RvdwXu+P`c+*7s*Iv`t}^1P}^)x-V&)sjQK)fyZPnxrPZ!S{p_8Qn6H@?
zHnfH;T09rJWj;L7zqZlfo))<-71~jd80Xf}hAJsV{k)DWnK&p<S-><0D8!#UqzvJO
zKi`9OR}PEzFEqI|U=}wx9qd<GT<p(N)6pUPwigug`vrwUS-)J2V9Cw<=?mQDKh;>}
zehV|Kv~)s&`70P=X3XjDe(NGDyISjq;3J)?@Vgk{1-lcV^?${UL39DR2)zn(uxaC`
zyIWQ+<&4XL?!(+2*)a}lU7b?>LDpAmv6a?K5+6OzG;@@b<?ZaaPBw<S_Z+!Q2I5$E
z1`>F_#p-*;Uo5zVAFXs(dfvJA_4n7E&zi&I^IMYx479qjfdjDB?bQjk|BKwH#zx^7
zRy}!FS3wRA4&j^K%6e~r_^bV+p0a~_BiGB>#8?5ZTkw5MT9n?;#eevThvpY2<|Vq)
z9Ztu_cHq00o00Jq+#h4}OZt_xyv-`^Eya}a(J`7BTj?Q}xjlbiSdTDQGnx_tvB|+=
zKY(K^6cWR%(_WxiNJ()Fg;{p297zdMIB5J(NfC~}zII)3I}llL*&tCITV4LfW-^*3
z2RD!;5OuaQbuz#;4EH@ge#Y$1ytFB%<!;YvAdwH-yQqj65I0S{Qb6yTb`Dy#M~Q_{
zKKtrfPIvBe2dt1;U!Rbh;u;LNY(2Js;Am>;{XCn}A9iX!NhXE#Lm?9B&y-DvMVkSg
zQhT%CaJ9zf<syNw2^@1B@TpU4o&IFgY&nw!UUc?_fmBWudY3>v&#c4ymK6Hf*CV1F
zuoMA1S}xO}th&1R&CO2(l7tBfIlTzj!q2W?>==(aNcxqYl)5^Ojg3umyAi<nP75w{
zEG#Uwx+ThcBJhSrMpswEUdra?OqMkb-52$McIrVjML>$dOnn)^j*(btn<PVgGhFdI
zqUKJ6udTG?__xCsNQcoumHID(qs7Hw%2|))FlcRU+#amv<hKvDEpWwz#8&sEpP!$G
zmez$ZxBKby#fSR~7eJ{g_f&a}UJ$<*@oLki+X%OLc8AzZ!j`&eJQ-*m6%!@!>bC3)
z){`&RPeQ*5a@+`?BCnR?`@eQ~zkN;?9uy?7ef{g#uX_F)L%6-mYTHkezqyiwFV-|(
zZt$>USmXb8@GG6zrcFGqw?5NSE>P-wUNEZgnfYZY_S918!jkc%Eb={hV+&0n$XAGO
zfY@;v<~@|i7v9g>5W=9ILwx2E1AhDdeJ})OY-%ba{{e99fSY(v(h3TK2L=X|^#cLb
zyF1?y+vbCegNHW(ZV*ikkBoeQghebXAt4dljqnBT=g*(iw6u;}Gq7}ERzd=yKL){Q
z_UgJdF!iZVo9xE7=IvQA?&O!<Ixyp-zF^0XI`CX47`BEPan8iB-o1zaud%O=imLtE
z9^?U^2N4jZln`m8Q*sofq?ATVM7p~f6a^6k=?1Amq?GOy0g*1HksP`^-aXIy;$80_
zzwcX1T{v@Q?sK1W?`vPzwfB9PFXg0(|Fpp)(uMoUnDQPq5y6!!&}{-~(}l`nUkQ4S
zp@RhK=8=(+H>BpH$yNm8#fIPDR1&>t_4|sCORB6CkQrP2f|=?k)ofNh88aafO2ln&
z@VC%wmF6`G$3G9T@R8y^*^y*l|J(NdUpftb5*1T^Vq|1w_dUMH$kF*mV+L}ZR|+a*
zM?d-=)J)A6cXG{sZKGu%`Fpcw>MSfL%}=yAMQo!s3Q`8=_CW}DeY-vCWUPG(c{)Q}
zwNhAfXJ$V;&hXEA&BnS*ZMgWhe3tK1Q&T47$?u*!CzlWRicnqd4JQ+JMr|h>4Lx1L
zQ$MjW5kM^YsfYYpL?+(j79ME-U0t<-reaG=OL~&OeF`5~sIoxK(5dQea4@~3B<+B}
zo(z3Xeg?sn9Akd=mY2q_#~f27266DI*FL+7TwSkj4tTK9b?wZPiIH(LD(&=jl3jIh
z8?ARJWR<*5=jD}^s;%$0s3d*vsUpt=(3Vacbq7upt|MQa<{zE!<{-BglI)#;#czJQ
zuKG|^P<-p#b#X|!;-{M}N(p?>2H+irovsp~#*<80oEf1+Rmmepc;<ol-k|#Fnmx({
zMBvX<i6qTDEl0@i&hXuipg<lQ8g|pTk2i(;?J|&a==g)cF-M+I0WgXKz!1`k$78Vq
zu1i{IC?Qw%Qie*A38=hrpPjCs3H(8jnD3{t(I79aho1EBPeiHx@^fUS2z7Ki*SXx+
zEmTf%9A<4K#?G1OGqdqCN*B+_(7f*^t!z}51!Yn}1m~Q<KOX~)pN$Er<nZ&o%^z7|
zx<QcAhch_iFzr?Y9jOuDyN{bcs4Ht`b`_q@7{>=@iM(}^4w*7*-6uig3<Qb1b-OiK
zF)DtnBG&Ywi^f?ztM!&Z>FDXH2py+iz?8uXJ<HJQ4INdjH#4B>4v$9~x{c1aDHgg@
z#!P83G9l!BK#Zk{CB98J1>krb&IBd!n&21JZWCZvATB;3;#s3VPK4Di@_Z}Y=WNAj
z(c0+bCZgf6mD^(>!Q2D1Gy{$Rkd>VtB%MEea~ziZ00-dr-nUukN^0}R!L8h=KY?u+
z&@JS2adzO`M&tg)ZbB5q1J?B*7T-hwQvNlKyx2h=0aAG^=jMpw^#Z&*!_oY{$1b#<
zbJwVe-uSCeq^Eqa8G~jtBC5n~XT4fU`KHND2L(1q7W=m)Z_@Bt^RA+_dv0Quh7eY|
z<U>P4&~Vg0FyLySxPjj*jSKB}O&FKdzL}lPk@2mx=A7hrq$Y$J`uHkAG*l}^*<I-D
zE__^{HT*uiPnPAswatxjW3G~0ZV~Md>8%zP<0R3<kc;Fp(`tLzVSKNWo0O;+CY6Ov
zyNwvQZ}ls3yL#CycBg>L@UYojuJ>nmx7o@5+Js#Zkhj=aazoE~GD%3L?c4Al$W9EX
zG{F4J$irk6W|idjR0(ecY&d$pJeZqOuhApA!f|{2B|8_FzLT)ypC<B`XiGll1tnOX
zy%>-6h6_K$dgW{wS4mTQ?!3~iKsG1an<TTCI&ZJGFd9gKMFaj@K!j$O^NPOn5Ptsr
z`B#a#>RjqIk#z*Y!{%QJw35WAi9lm$;HmHv;Euh^e0=od7q__(SsX4G?c%rc;9WP>
z_rfA#BM6&gnx)5yQC3bT)Woq@Gx@?!nO-0oF3KqaCR3_6;vb0eMogXWSB$%j*`7ki
zT0ed15<R08rtycAFi=c;es0bIV9U)bKeO~kb+;)E!J9j4$P^XxxHhrTI(Hv(+UnI_
zTUxdk=WVFd%S8?6$4|U*Iy*+VyXRhgRpFvu6kWs5*w~_|$vj9L{VU)BtU=U=$jD|0
z*9SH>9ANM~n`wRn=<WnkPfbUsJwqlWUcfT49yx!AyOd7<vwTg`l^63pBJ;P-@-q`l
z0n}OJ!jFH}^m+SKt;Rb}UM>*-;+P_DwrsBQRG~JzCzFWw<#|GTXcWpa{&mSBuGF-N
zM)l;A<yX($@2vQY$+at}_3<iwFHANTPgY9Bg@xnbc0xX2kmdj?`^CH`l_BhUVr;Ce
zk`ke(r>D>Ct*N&hMR|D)Y;3`BBm&rYdkZm=@U?e~{b*_M-NMRC{t*mv+aQv9Cnsq!
zzbE^CTP*daN09ao<!STV{Q4sA?+bB2CFW+6GkesAJbz$i#cp)AtX&0w=dt>=&1EO~
zQuphxlC!llPeZbF0;<iD_L%4st1a25-K6Z_%Nc2EzA@Fs;$CT~z-@6JUq3%dF}Kx5
zj7#y04pIbmT>@+T@$o?bSkxRw^~n=8?$_z)dZO9X+q=8*KbDq83tA6<h>L3j-H{+@
zO%8|(r}eTxuY#1|4W*C`<v@;VIJKOK2?L$aCXS$>;N09C2_0QHsDxza?%==Xfee22
zKCnC9TWJHpR8UqPdV?b14<~Cs?nm8`IKFSk=kdHMs7T^wkG)a2nF*%D^2*S3fLWTd
zK?qF(S#EXTbHKX0<w2ip2`=|VT7_Jm+T7Vp@*^NFm3F3adfScbUWc?ODQM0p??6}b
zx%BtU7NO2oxMs0)ivbSq3?NnVyp=$!$gnFMb!r0A^v(<)6BC|)wqjhd^P&o2%d{Nw
z_?ms)9yzh(;cdNg8{@tVnPiAh1N5dhz}&w^1VEmJrR7Ybbs^3)#4UEFr;wIRTLQ1v
zLgE_t-l)Uoq2TK*kx5CN$s*2`K)Hb{(kBVo{wb_k2YcrgWcaE9Ni{V!N-;N%gDDge
ztD)dd4k$YlR9=id$$5B4{o&c}Qp36u_1tZd?r#Ewk+Vw7M9b$TENF_w096GA=#ifE
zJuqOudzYcpzG|M_u4+D3rR-9ysmy4v<ZiEY?b-eq_)D-6#N%|U4a5@zNvfRR-trLO
z0ykfO_exPiH-L3G^i2gey~4YqQ)+Py0s2V%a5^C0u<j=8H~}H)xz$Pm{)fSfhKrMi
zi%yuE9I#X{Oc&CFXfx{T4JpnsTCguwV#lmLM0m#_w1*&NbNMLxUO=BN5ur`(<-jz;
z*Uc@gZ!TzPlO=_I+#WU|DYhXcB9u*uTArR-thU@A`$<WA-v7?&*0^U?5OZ4B96if<
z=JY0=XKrrp>4I>>%p&r_bM7nfXG5PYnf2NomBNN|FU0pysuo4=x`%3NqzH(xWY=L`
zahSFZL{r20UeW1h5Rwsi(LuvS3i1r2ityP<nwkS33|rm6(xyH+x@<I>nOc6m0oiY6
z`!k*wOC-jfdn6)UAt`pE&PGr&!yA+jFJO2PlJ&t|@TBA(S&Dw%5i{(>s)ToBcMpe(
z{8}MEs$D80>n)GJq)u30kz700jdb}HYN{~t^O+fC-L3luTol3+F4r$k7m=Pz=|S=;
zDhsP6J=nkBXSaADKSDoi2s!7Uq^VQpK;tj4LSduMAwZmxmKHe_A0XIy`Izj2ZrN4R
zs|9?q9AK_L9x9R*J(4&Wcg{CzNCotG1t>8vJp5hNZ~HnQKmS*bkeZEpF;bq9LW555
zERHa$D6EnLR*WSuSXnk7qrIG=jvy0prUAy^`WG_p{m!+qPWL#=#*Z(qcb12X&Z#}h
zZ$hCuLu|+5Bg(sYOe(L#MiHVy36pr-PW+L7&Ka?3zsBIatjL$M-?^^k1HCj>0fK&c
zEtSq?%Q|5v%-wLx7ZVc`@!1g?_OT}i`HBdphxLR8Q%iv@Z*P45%nq0^lC6wc{avC9
zMqOE18KlqYEe}x%S_+CbEGt1>9H0hzdr8=W*Lc8+Q90oy%v8Lk9T77Y&{k(>P@=p|
zAEi7f=x%%I#{Bx3&;+cAarY@-EI`4PDFKAT28-Y6ES<ZUaZ8~=jl8`4?YnpHI&s6D
z51=sgco`TN*uLZB?96aczmRAR8|4^4J?Fso)>p4ywM*!0Y028y*t}4h45Rbz>gq~a
z-vBhECKOg-@jh4|!plLhn<s|&jhy2R+g(J4iO#&<NdMe1-7#;Ns=sd9EziyH{Cayk
zCdGE7;`NyS&Bj)fl*(|21AHkV?gFBI+Al}lO2V`(8iQlw+gah|{#|g{JF}XIMsbCv
zPC|%LJmXZBN(;F|^s_nxyRHYV=7|fuW4<&iTP9tz>rPeGuY0&#dL|R_HhieOB_+%R
zMKv`As8KarkO7#9GSqMNwzPVARfy=a-nesvV8*Qm3>9|u9F=T<BCM<c=eBI%1u>0}
zq){B51I=~SL!XK8f@4^r#jYz_Xr+Ya-gId;Hn#LSiBkh`ufs)Gbkx-k6Y~oS)^??Z
zBqR(dlEJ|9F}{qSBpez>JAuzjiyO|b-%R2=9b&E>(^cH;z}ETt0i2B6w8O85RZYe>
zD^o5vd~C+c61u!7LmHv3seX&&uBel@ZOd)GhkEu$5N*2Pr~!1^zZf0E!NvcOnmWn0
zNyE;``JP71&1HG8!g_@3_BguK<glbYeBr)-SCTM4Jk^z}c2f!w%c&;|&h3ko=4Po&
zFA-dEd1Gf}6co;2U&-x5c_k}L1Gc3SZcbiIP1b$a(p>lC(5bFKAc&H&&jp~qC@9-M
z>yNd&l2qP4uVI%hb1z%tzS4WXS7pn=D#`zl%!Ww+>|kV;<==TELwr5Zzn=1H;=Le}
zYkzNFG7${>^f+DLtNU8%?HlSM16m>S*7n{N6LEsvLKDT=hTWJqV+T<m1}CcbpU>;g
zSETKUUtFLn1ARlUI3AFR97t(*emTErMV-!54c2}vI9b?VnXGz(NBtz_G{gB@H*(C}
zLRVoqmL~b^=RQ?+4Wp*GH;<0ts20E9*2<PH`h4*~k}0bEQtDt&RdQf?{uaA&PFR3-
zXGrJ1^*%gHaL?;|X@FkmeR_%ucGH`=#0d<R-N_<eAhC8wt&1?{CmY(gNgkV+n8;43
zruDEWSlQTU7#pXPa~tO4UM8{_E4O|6_4ym{Lp1dC^7QQMT-(*GiGrlzPg^*h_LC<O
zPxbVGaL1hc>FOp}SzDL+p14hTE~a33#B|IGGBTuGU0p}3UGsp8-UxnJYSKo;sawpL
zdCvX!$41x1er5SwgOBAIeGwvV{jpESZ1L*Uy2D>Rzms5f!ZJ3z8@!-;K6_nN-us+X
z-M*m!WiY2?ulBd$c-G*k@rwNvlZMdHk9c}KhqX=7tF3Z}#!&I@hw?xn?DtVDsy|*P
zZrEAq9s)Vbs*ot@TP;o-ZiqT_)zs9q#Pnx-L6Nl#PRMq=@=2tIzJ7iXtrzR;uejkU
zzqtsxT~M9N^KnM8mWc#GEif~6bMu_$nJ=^+(>QgIYOO3R<lQ-`2}@=ibn>(c`nyxa
z2C|2lRa2AghOS&<b(qjKBpvYGITm#9Uy9*9Mz;*7HN5NO%if;SN&H}nUhz)dP(dql
zPDGosbI0pm*l#YL?;EHUZ73GxuqQstbt;b`s!*O{-kYK$WEFju$8Tlf$;P?wKl3SZ
zv6qHl{h&{0|5bx&Mz+q+?n4I=QW!X&CCx|etBz8H{KKYaJhNMFJd}fAPUaOB7Vds;
z{9R&h4F%q13?^b^rR&$OaAoYST6T6eI~&^*clU}{P1C0Q$KcBKR=cjiotis1*#npD
zMLsS!9H5{O?B(S(=TznA*2M~UPLPc|eiUOUVgF2tpwC-B*I*+!%jK~1HNkf#LDZwq
zB)+WAtfaKm__9_9Z=#fc2ntHrSly;4Q<gs?<)$>Zz$htB$z}B?b-5glYf%g|4LJUe
zRBCzbM^uv5=s>1i$!AT>61IJ|;vyQ8BC)H+I3N%c73KVUC16Dsb+v^jaFyEa{M6I-
z*Ov!Sgh>>#O$?(EL)X{WhYnX>w4c005a?h3o-w@m*y#-Y15G8`m-skqN=vb(AZ#-J
z2U;}x7Eh^#*MjY;v!d$wY-|DDyKZm&z|^A&VorvO4JkD}D-)|Vc}~)<Evo8^iZGXZ
zc>Z|{(kR1JtwR0WI`4yJxTxy)sE4t(dx0VX&yKJtf4%C?hBc*{abbEbN6<d%8m!jA
zF>V@*P;0lBuD@**QToR{6(=`TDUT0M#tBY8X&$lU%#M2AL;q^k#GO4wr`C^Tk2fy;
zOm%T}?GWgqH)pP{sWGMet|?~SH#C&3!-0Ox8ogC*JGQ*K8Vv;d2^|kU*6M`9`J2ix
zo(UX%hH)ayx`;~GPhkjix$Uc*{|pIdo5@}-D`na1Iw<dUXW1KaN7@8$gff=RN8!}z
z#u20iW}(;}m%=YrY0Ea*vPX>y^(weBP1B;SiVmREYYklDqSrAgG129C7xScUfxC9|
z)o_tfk%xGRhX*5RAFLD&sE0KEg@E<$%TH*jRi7<p_H?_N@V6Vg!#a{o+gp`=TDg<o
zb)$f2LZU7G&n5M8PTz@$K~x?8M`?4?N26-7BfU`v)q6E~D!Q4qt0e#!TORsGen+O?
zSHPx=jJ7j9Iyhd+4A+3|F;<JPM>F}{>r0Rz;@OMMziBJ+=MR-9csn(uouxR}6!u!P
z0^a|lOk)ohJ$v~m_jy-G*6zBwqi-*X`tEbw&mvJuXNqssh4I=JcFZj;bD_^6`}p`c
zR8UVYoHnL&zCV<TpHU$tC1te2K8;Ji@*|WwHMO*U%sa8&e7`*5KBWnGr;;k33-wdX
zc$G6?Wi;d3WSt(+vhY*ChCf@CfD^9!tGe?G3szfyTETBucXlobqm}p!hKuE&Z^6a3
zdLSRRPtHE)=TmRj64Q!*x_|rQW7e$d>S~uRX++~DFD`+8X01xDO=7n05jr_cqwk2{
zR$<NdEe3@QU#XjQtUGpWm^`;;_wh2wmD&%V!qAq$&2#IHjgDRdey@Ee;;F~Y_p(ES
zgIRc2$lG}cU0qx(&W`smH&L(|Xaqb$*0J)Tk&zq*xiBogTUlB@;UMqyNJbvI@+Axc
z#m<67{$pkDb9(xNTf%mOAXkb&+$?_!zU~FC@r$u?sQF}#jy`=)hxBWA4r`kgbz6;x
zxx(d1Usy1M@pzUH&tCJuOj-yP_;)zx!}&GcnbYM_YDK;`v{f%!-BQX0M0y@Knk-Mn
zRtX4h{P0<*T`M1RIX!et5p{h8&Mii66l~DQEYM<dXv<|xPFm~$1{Oh-ko{yn2+thr
zGcXyJa&uB2(Up{xK;_E73rs8~1-UTlKCrOzSW-Qtz{-0ko9VS)wTR7L%ga^;hILQD
z<9fHhK9L7C#m6uZcrCQsKH+r8!WVqGP*aC}PXLpOK}0nDK=>(L5cd&yx3h;`w7Q*^
z3XbEIT6*`99&=x^kf&^)A2$xFAB3&TW*YIiE^8e5NWx{!tE|+4<)q1a<55uObru!Y
z1SP|A^bQC>g^QouWrNmMR*}(OrD^AQiw;Ym$zmCm6ZmAHG&*>h&gXVeO9WA&bZ%ZA
z0F0KMU1636MO;e|u{D(TOoq2f5r2O~6nfd^Xb4Pd^p~5CsokMxTGL4By-OvTt??2A
zr$012{JE~q04O<R+(#(XCa)K?m>icS@SCG?KW3$I_)C1MsW~Y&QA!e0hU<g5NaZtq
z7e+0T@tBpdXhdwzQB+j4|JH}$LW8>s%NT{2X;|e-MY?zhlKVLF>`7);YVCs?M&UmM
zvL840N@Q!d+15i13aSmNAfF?$LX{=bAIrmojKU@Mb!1rum3Op@>Zp-^wNTbCb(;U-
zV%yzhBClp|U*xtiS@6$w<|POuQHN=NyN0v<&M@c0O=E@rV$;sKog>EVSbh))a=;+|
zdW^X3f2lIs^rqL0aRreObF}>EQ@$3qMa}+Ei5moL)I@m&1<EoqG7wpq4PY1#z4ur9
zK=~9M?JVYHXUjloZa7iU+OJr?Zfau$av@wNH2Ba8u*jfeVPLpG4_HCAJYxoMO^c35
zrl-{|xo+#@xv(gJ_kTj8Wg%{1t#rqm(u{u;0Cy5xWCN-V_nBrqntKlS`z)eg;v-tV
zad}LO&bsHg)o`b+X!JU}ri?+W0+WH^i8DA05cGr4Sd|auVGHmG6NT+l!9p6a=0er(
zJAo#@NlDp@R!(w(<o2e;xZr8oBk+}m;FVI(9WzsNbL;cdBj6pqx#~F@1_lLy9I&Pn
z(7Co_<)+jnxw#6yzP^~9S`AOnDn`tJD$?`=P9qN$>}1mqyfqM$*il8|ZWM9A=~5Qj
zaq_FY0On><s>;%EFY{GygXV(=IJoQDhBfQ!c6gUw?q=?!T@PsmCJ+sB?%HGTf75^A
zm{3ANL4noTGIyfH3b|(;Z30@vEGhFTK0(n5Z@d!o&<Mp)f;x-fMy$ek1LfAq!2o|(
zwdsP5r}!jq9ZEXv9CrNBT6IZ;PvhuIq`kc=t*fisaJ-nJviKn>s&II68-C*uD*}N$
zc`5&>O9v;Dw;WbH;x@zW_}FaK^W!&O-qmCwtuKuFUtT$^X^Xb}fpPgk_cyz@e)m;6
zsej<m(|bNQ(F6qcT5fJ(ck1fiwVIIXG4s^EWXfq_OPeaX&!dPop6sQMMi3wxnPvvc
zZAGYwsw8sxNbM@*f*(r3aFpMFMbdW`&$(31?R(5Q-0L?9gM$(D8fepwHK$Hvk?2k4
zhfS2BgTIQE6k|<0N;%B#;~*M|=^sS?454p&aQKZil)HuJ-}B~YB$Ny@Z{w4_`+Bk+
z`wGboe_olpD)5Xl2qy%>;q1>fah`WeS+DwN^{`0u;Tj1?XMb*w_0YsbrVd9TV~Pe3
zAsRbPR!Tw(eH9`48wi{m_stFkl+}f&l8cg)IrjEtZ-lhwLLn{uZq5LG!&FXwzQ57{
z<LgThGVQBbe;jMFIXY$?b3}7LAbIn@GU>)L#dWfUkNLK^tKq<yo0%k5y6ABVX{lyu
z7P8Q}U&UPK#`xHA8kt~H9G%go3B|T{f}y8})qP^Q*hr+j!`Q2Umq{aq<BuTlhj}$}
ze<YEBSz+ghJplfNnEhX~{P&jrKi`7!-~-z60gC>&WUzt-2jQQG;Qt6O{`-Y6(*OQK
zIBEFt|Bm$^-uiE+@jpNH-`?^Mq1L|?TJ|9`4SvH_<JC~A|8wsD;Y0u7t^dCnH_8Os
njtRxVIzX7b`JY3|e!IZEZ-kQ|-eDRA2Otz=R2~*eJ$v<EMZm}(

literal 0
HcmV?d00001

diff --git a/examples/data-solutions/data-playground/main.tf b/examples/data-solutions/data-playground/main.tf
new file mode 100644
index 000000000..43453f5ae
--- /dev/null
+++ b/examples/data-solutions/data-playground/main.tf
@@ -0,0 +1,113 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+###############################################################################
+#                                   Project                                   #
+###############################################################################
+locals {
+  service_encryption_keys = var.service_encryption_keys
+}
+
+module "project" {
+  source          = "../../../modules/project"
+  name            = var.project_id
+  parent          = try(var.project_create.parent, null)
+  billing_account = try(var.project_create.billing_account_id, null)
+  project_create  = var.project_create != null
+  prefix          = var.project_create == null ? null : var.prefix
+  services = [
+    "stackdriver.googleapis.com",
+    "compute.googleapis.com",
+    "storage-component.googleapis.com",
+    "storage.googleapis.com",
+    "servicenetworking.googleapis.com",
+    "bigquery.googleapis.com",
+    "bigquerystorage.googleapis.com",
+    "bigqueryreservation.googleapis.com",
+    "dataflow.googleapis.com",
+    "notebooks.googleapis.com",
+    "composer.googleapis.com"
+  ]
+  policy_boolean = {
+    # "constraints/compute.requireOsLogin" = false 
+    # Example of applying a project wide policy, mainly useful for Composer
+  }
+  service_encryption_key_ids = {
+    storage = [try(local.service_encryption_keys.storage, null)]
+  }
+}
+
+###############################################################################
+#                                Networking                                   #
+###############################################################################
+
+module "vpc" {
+  source     = "../../../modules/net-vpc"
+  project_id = module.project.project_id
+  name       = var.vpc_config.vpc_name
+  subnets = [
+    {
+      ip_cidr_range      = var.vpc_config.ip_cidr_range
+      name               = var.vpc_config.subnet_name
+      region             = var.region
+      secondary_ip_range = {}
+    }
+  ]
+}
+
+module "vpc-firewall" {
+  source       = "../../../modules/net-vpc-firewall"
+  project_id   = module.project.project_id
+  network      = module.vpc.name
+  admin_ranges = [var.vpc_config.ip_cidr_range]
+}
+
+###############################################################################
+#                                GCS                                          #
+###############################################################################
+
+module "base-gcs-bucket" {
+  source         = "../../../modules/gcs"
+  project_id     = module.project.project_id
+  prefix         = module.project.project_id
+  name           = "base"
+  encryption_key = try(local.service_encryption_keys.storage, null) # Example assignment of an encryption key
+}
+
+###############################################################################
+#                         Vertex AI Notebook                                   #
+###############################################################################
+# TODO: Add encryption_key to Vertex AI notebooks as well
+# TODO: Add shared VPC support
+resource "google_notebooks_instance" "playground" {
+  name         = "data-play-notebook"
+  location     = format("%s-%s", var.region, "b")
+  machine_type = "e2-medium"
+  project      = module.project.project_id
+
+  container_image {
+    repository = "gcr.io/deeplearning-platform-release/base-cpu"
+    tag        = "latest"
+  }
+
+  install_gpu_driver = true
+  boot_disk_type     = "PD_SSD"
+  boot_disk_size_gb  = 110
+
+  no_public_ip    = false
+  no_proxy_access = false
+
+  network = module.vpc.network.id
+  subnet  = module.vpc.subnets[format("%s/%s", var.region, var.vpc_config.subnet_name)].id
+}
diff --git a/examples/data-solutions/data-playground/outputs.tf b/examples/data-solutions/data-playground/outputs.tf
new file mode 100644
index 000000000..3c47229fb
--- /dev/null
+++ b/examples/data-solutions/data-playground/outputs.tf
@@ -0,0 +1,33 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+output "bucket" {
+  description = "GCS Bucket URL."
+  value       = module.base-gcs-bucket.url
+}
+
+output "notebook" {
+  description = "Vertex AI notebook"
+  value       = resource.google_notebooks_instance.playground.name
+}
+
+output "project" {
+  description = "Project id"
+  value       = module.project.project_id
+}
+
+output "vpc" {
+  description = "VPC Network"
+  value       = module.vpc.name
+}
\ No newline at end of file
diff --git a/examples/data-solutions/data-playground/variables.tf b/examples/data-solutions/data-playground/variables.tf
new file mode 100644
index 000000000..92f63e2d9
--- /dev/null
+++ b/examples/data-solutions/data-playground/variables.tf
@@ -0,0 +1,68 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+variable "location" {
+  description = "The location where resources will be deployed."
+  type        = string
+  default     = "europe"
+}
+
+variable "project_id" {
+  description = "Project id, references existing project if `project_create` is null."
+  type        = string
+}
+
+variable "project_create" {
+  description = "Provide values if project creation is needed, uses existing project if null. Parent format:  folders/folder_id or organizations/org_id"
+  type = object({
+    billing_account_id = string
+    parent             = string
+  })
+  default = null
+}
+
+variable "prefix" {
+  description = "Unique prefix used for resource names. Not used for project if 'project_create' is null."
+  type        = string
+  default     = "dp"
+}
+
+variable "region" {
+  description = "The region where resources will be deployed."
+  type        = string
+  default     = "europe-west1"
+}
+
+variable "service_encryption_keys" { # service encription key
+  description = "Cloud KMS to use to encrypt different services. Key location should match service region."
+  type = object({
+    storage = string
+  })
+  default = null
+}
+
+variable "vpc_config" {
+  description = "Parameters to create a simple VPC for the Data Playground"
+  type = object({
+    ip_cidr_range = string
+    subnet_name   = string
+    vpc_name      = string
+  })
+  default = {
+    ip_cidr_range = "10.0.0.0/20"
+    subnet_name   = "default-subnet"
+    vpc_name      = "data-playground-vpc"
+  }
+}
\ No newline at end of file
diff --git a/examples/data-solutions/data-playground/versions.tf b/examples/data-solutions/data-playground/versions.tf
new file mode 100644
index 000000000..32e9ab8ac
--- /dev/null
+++ b/examples/data-solutions/data-playground/versions.tf
@@ -0,0 +1,27 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+terraform {
+  required_version = ">= 1.1.0"
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = ">= 4.17.0"
+    }
+    google-beta = {
+      source  = "hashicorp/google-beta"
+      version = ">= 4.17.0"
+    }
+  }
+}
diff --git a/tests/examples/data_solutions/data_playground/__init__.py b/tests/examples/data_solutions/data_playground/__init__.py
new file mode 100644
index 000000000..6d6d1266c
--- /dev/null
+++ b/tests/examples/data_solutions/data_playground/__init__.py
@@ -0,0 +1,13 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
diff --git a/tests/examples/data_solutions/data_playground/fixture/main.tf b/tests/examples/data_solutions/data_playground/fixture/main.tf
new file mode 100644
index 000000000..8082f997d
--- /dev/null
+++ b/tests/examples/data_solutions/data_playground/fixture/main.tf
@@ -0,0 +1,24 @@
+/**
+ * Copyright 2022 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module "test" {
+  source     = "../../../../../examples/data-solutions/data-playground/"
+  project_id = "sampleproject"
+  project_create = {
+    billing_account_id = "123456-123456-123456",
+    parent             = "folders/467898377"
+  }
+}
diff --git a/tests/examples/data_solutions/data_playground/test_plan.py b/tests/examples/data_solutions/data_playground/test_plan.py
new file mode 100644
index 000000000..1807e3de2
--- /dev/null
+++ b/tests/examples/data_solutions/data_playground/test_plan.py
@@ -0,0 +1,26 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+import os
+import pytest
+
+
+FIXTURES_DIR = os.path.join(os.path.dirname(__file__), 'fixture')
+
+def test_resources(e2e_plan_runner):
+  "Test that plan works and the numbers of resources is as expected."
+  modules, resources = e2e_plan_runner(FIXTURES_DIR)
+  assert len(modules) == 4
+  assert len(resources) == 23