From 518147c129f831913d33226cf17068d0d4270f41 Mon Sep 17 00:00:00 2001 From: guoxudong Date: Mon, 15 Jun 2020 13:39:13 +0800 Subject: [PATCH] add zh docsy --- docs/README.md | 1 - docs/api-reference/glossary/index.html | 42 +- docs/api-reference/index.html | 36 +- .../kustomization/bases/index.html | 36 +- .../commonannotations/index.html | 36 +- .../kustomization/commonlabels/index.html | 36 +- .../kustomization/components/index.html | 36 +- .../configmapgenerator/index.html | 36 +- .../kustomization/crds/index.html | 36 +- .../kustomization/generatoroptions/index.html | 38 +- .../kustomization/images/index.html | 36 +- docs/api-reference/kustomization/index.html | 36 +- docs/api-reference/kustomization/index.xml | 4 +- .../kustomization/nameprefix/index.html | 36 +- .../kustomization/namespace/index.html | 36 +- .../kustomization/namesuffix/index.html | 36 +- .../kustomization/patches/index.html | 44 +- .../kustomization/patchesjson6902/index.html | 40 +- .../patchesstrategicmerge/index.html | 40 +- .../kustomization/replicas/index.html | 36 +- .../kustomization/resources/index.html | 36 +- .../kustomization/secretegenerator/index.html | 36 +- .../kustomization/vars/index.html | 38 +- docs/blog/2018/05/21/v1.0.1/index.html | 36 +- docs/blog/2019/02/05/v2.0.0/index.html | 36 +- docs/blog/2019/06/18/v2.1.0/index.html | 36 +- docs/blog/2019/07/03/v3.0.0/index.html | 36 +- docs/blog/2019/07/26/v3.1.0/index.html | 36 +- docs/blog/2019/09/17/v3.2.0/index.html | 36 +- docs/blog/2019/09/26/v3.2.1/index.html | 36 +- docs/blog/2019/10/24/v3.3.0/index.html | 36 +- docs/blog/index.html | 36 +- docs/blog/releases/index.html | 36 +- docs/contributing/bugs/index.html | 38 +- docs/contributing/community/index.html | 38 +- docs/contributing/docs/index.html | 36 +- docs/contributing/features/index.html | 38 +- docs/contributing/howitworks/index.html | 38 +- docs/contributing/index.html | 36 +- docs/contributing/mac/index.html | 36 +- docs/contributing/windows/index.html | 36 +- docs/en/index.html | 1 + docs/en/sitemap.xml | 875 ++++++++++++++ docs/faq/eschewedfeatures/index.html | 36 +- docs/faq/index.html | 36 +- docs/faq/versioningpolicy/index.html | 36 +- docs/guides/bespoke/index.html | 36 +- docs/guides/index.html | 36 +- docs/guides/offtheshelf/index.html | 36 +- docs/guides/plugins/builtins/index.html | 40 +- .../execpluginguidedexample/index.html | 38 +- .../guides/plugins/goplugincaveats/index.html | 36 +- .../plugins/gopluginguidedexample/index.html | 36 +- docs/guides/plugins/index.html | 36 +- docs/guides/plugins/index.xml | 4 +- docs/images/header_templates.png | Bin 0 -> 218551 bytes docs/index.html | 72 +- docs/index.json | 23 +- docs/installation/binaries/index.html | 36 +- docs/installation/chocolatey/index.html | 36 +- docs/installation/homebrew/index.html | 36 +- docs/installation/index.html | 36 +- docs/installation/source/index.html | 36 +- docs/search/index.html | 23 +- docs/sitemap.xml | 311 +---- docs/zh/404.html | 3 + docs/zh/INSTALL.md | 79 -- docs/zh/README.md | 60 - docs/zh/api-reference/glossary/index.html | 1058 +++++++++++++++++ docs/zh/api-reference/glossary/index.xml | 17 + docs/zh/api-reference/index.html | 874 ++++++++++++++ docs/zh/api-reference/index.xml | 17 + .../kustomization/bases/index.html | 888 ++++++++++++++ .../kustomization/bases/index.xml | 17 + .../commonannotations/index.html | 924 ++++++++++++++ .../kustomization/commonannotations/index.xml | 17 + .../kustomization/commonlabels/index.html | 966 +++++++++++++++ .../kustomization/commonlabels/index.xml | 17 + .../kustomization/components/index.html | 881 ++++++++++++++ .../kustomization/components/index.xml | 17 + .../configmapgenerator/index.html | 924 ++++++++++++++ .../configmapgenerator/index.xml | 17 + .../kustomization/crds/index.html | 900 ++++++++++++++ .../kustomization/crds/index.xml | 17 + .../kustomization/generatoroptions/index.html | 895 ++++++++++++++ .../kustomization/generatoroptions/index.xml | 17 + .../kustomization/images/index.html | 916 ++++++++++++++ .../kustomization/images/index.xml | 17 + .../zh/api-reference/kustomization/index.html | 996 ++++++++++++++++ docs/zh/api-reference/kustomization/index.xml | 711 +++++++++++ .../kustomization/nameprefix/index.html | 885 ++++++++++++++ .../kustomization/nameprefix/index.xml | 17 + .../kustomization/namespace/index.html | 885 ++++++++++++++ .../kustomization/namespace/index.xml | 17 + .../kustomization/namesuffix/index.html | 886 ++++++++++++++ .../kustomization/namesuffix/index.xml | 17 + .../kustomization/patches/index.html | 909 ++++++++++++++ .../kustomization/patches/index.xml | 17 + .../kustomization/patchesjson6902/index.html | 924 ++++++++++++++ .../kustomization/patchesjson6902/index.xml | 17 + .../patchesstrategicmerge/index.html | 907 ++++++++++++++ .../patchesstrategicmerge/index.xml | 17 + .../kustomization/replicas/index.html | 903 ++++++++++++++ .../kustomization/replicas/index.xml | 17 + .../kustomization/resources/index.html | 895 ++++++++++++++ .../kustomization/resources/index.xml | 17 + .../kustomization/secretegenerator/index.html | 912 ++++++++++++++ .../kustomization/secretegenerator/index.xml | 17 + .../kustomization/vars/index.html | 922 ++++++++++++++ .../kustomization/vars/index.xml | 17 + docs/zh/blog/2018/05/21/v1.0.1/index.html | 435 +++++++ docs/zh/blog/2019/02/05/v2.0.0/index.html | 538 +++++++++ docs/zh/blog/2019/06/18/v2.1.0/index.html | 607 ++++++++++ docs/zh/blog/2019/07/03/v3.0.0/index.html | 470 ++++++++ docs/zh/blog/2019/07/26/v3.1.0/index.html | 537 +++++++++ docs/zh/blog/2019/09/17/v3.2.0/index.html | 446 +++++++ docs/zh/blog/2019/09/26/v3.2.1/index.html | 431 +++++++ docs/zh/blog/2019/10/24/v3.3.0/index.html | 530 +++++++++ docs/zh/blog/index.html | 552 +++++++++ docs/zh/blog/index.xml | 666 +++++++++++ docs/zh/blog/page/1/index.html | 1 + docs/zh/blog/releases/index.html | 552 +++++++++ docs/zh/blog/releases/index.xml | 666 +++++++++++ docs/zh/blog/releases/page/1/index.html | 1 + docs/zh/contributing/bugs/index.html | 578 +++++++++ docs/zh/contributing/bugs/index.xml | 17 + docs/zh/contributing/community/index.html | 553 +++++++++ docs/zh/contributing/community/index.xml | 17 + docs/zh/contributing/docs/index.html | 624 ++++++++++ docs/zh/contributing/docs/index.xml | 17 + docs/zh/contributing/features/index.html | 578 +++++++++ docs/zh/contributing/features/index.xml | 17 + docs/zh/contributing/howitworks/index.html | 639 ++++++++++ docs/zh/contributing/howitworks/index.xml | 17 + docs/zh/contributing/index.html | 582 +++++++++ docs/zh/contributing/index.xml | 17 + docs/zh/contributing/mac/index.html | 574 +++++++++ docs/zh/contributing/mac/index.xml | 17 + docs/zh/contributing/windows/index.html | 632 ++++++++++ docs/zh/contributing/windows/index.xml | 17 + docs/zh/faq/eschewedfeatures/index.html | 523 ++++++++ docs/zh/faq/eschewedfeatures/index.xml | 17 + docs/zh/faq/index.html | 449 +++++++ docs/zh/faq/index.xml | 17 + docs/zh/faq/versioningpolicy/index.html | 628 ++++++++++ docs/zh/fields.md | 271 ----- docs/zh/guides/bespoke/index.html | 509 ++++++++ docs/zh/guides/bespoke/index.xml | 17 + docs/zh/guides/index.html | 488 ++++++++ docs/zh/guides/index.xml | 17 + docs/zh/guides/offtheshelf/index.html | 513 ++++++++ docs/zh/guides/offtheshelf/index.xml | 17 + docs/zh/guides/plugins/builtins/index.html | 1003 ++++++++++++++++ .../execpluginguidedexample/index.html | 617 ++++++++++ .../guides/plugins/goplugincaveats/index.html | 512 ++++++++ .../plugins/gopluginguidedexample/index.html | 662 +++++++++++ docs/zh/guides/plugins/index.html | 679 +++++++++++ docs/zh/guides/plugins/index.xml | 865 ++++++++++++++ docs/zh/index.html | 295 +++++ docs/zh/index.json | 233 ++++ docs/zh/index.xml | 665 +++++++++++ docs/zh/installation/binaries/index.html | 474 ++++++++ docs/zh/installation/binaries/index.xml | 17 + docs/zh/installation/chocolatey/index.html | 476 ++++++++ docs/zh/installation/chocolatey/index.xml | 17 + docs/zh/installation/homebrew/index.html | 474 ++++++++ docs/zh/installation/homebrew/index.xml | 17 + docs/zh/installation/index.html | 485 ++++++++ docs/zh/installation/index.xml | 17 + docs/zh/installation/source/index.html | 499 ++++++++ docs/zh/installation/source/index.xml | 17 + docs/zh/robots.txt | 1 + docs/zh/search/index.html | 239 ++++ docs/zh/sitemap.xml | 828 +++++++++++++ docs/zh/workflows.md | 127 -- site/config.toml | 15 + site/content/en/_index.md | 27 +- .../en/api-reference/glossary/_index.md | 2 +- .../kustomization/generatoroptions/_index.md | 2 +- site/content/en/guides/plugins/builtins.md | 5 - .../guides/plugins/execPluginGuidedExample.md | 2 +- site/content/zh/_index.md | 36 + site/content/zh/api-reference/_index.md | 11 + .../zh/api-reference/glossary/_index.md | 51 +- .../zh/api-reference/kustomization/_index.md | 11 + .../kustomization/bases/_index.md | 13 + .../kustomization/commonannotations/_index.md | 56 + .../kustomization/commonlabels/_index.md | 99 ++ .../kustomization/components/_index.md | 9 + .../configmapgenerator/_index.md | 64 + .../kustomization/crds/_index.md | 34 + .../kustomization/generatoroptions/_index.md | 26 + .../kustomization/images/_index.md | 51 + .../kustomization/nameprefix/_index.md | 16 + .../kustomization/namespace/_index.md | 16 + .../kustomization/namesuffix/_index.md | 18 + .../kustomization/patches/_index.md | 47 + .../patchesStrategicMerge/_index.md | 44 + .../kustomization/patchesjson6902/_index.md | 68 ++ .../kustomization/replicas/_index.md | 39 + .../kustomization/resources/_index.md | 30 + .../kustomization/secretegenerator/_index.md | 44 + .../kustomization/vars/_index.md | 65 + site/content/zh/blog/_index.md | 7 + site/content/zh/blog/releases/_index.md | 6 + site/content/zh/blog/releases/v1.0.1.md | 22 + site/content/zh/blog/releases/v2.0.0.md | 137 +++ site/content/zh/blog/releases/v2.1.0.md | 249 ++++ site/content/zh/blog/releases/v3.0.0.md | 75 ++ site/content/zh/blog/releases/v3.1.0.md | 132 ++ site/content/zh/blog/releases/v3.2.0.md | 34 + site/content/zh/blog/releases/v3.2.1.md | 19 + site/content/zh/blog/releases/v3.3.0.md | 121 ++ site/content/zh/contributing/_index.md | 10 + site/content/zh/contributing/bugs/_index.md | 57 + .../zh/contributing/community/_index.md | 25 + site/content/zh/contributing/docs/_index.md | 82 ++ .../zh/contributing/features/_index.md | 38 + .../zh/contributing/howitworks/_index.md | 65 + site/content/zh/contributing/mac/_index.md | 46 + .../content/zh/contributing/windows/_index.md | 61 + site/content/zh/faq/_index.md | 65 + .../content/zh/faq/eschewedfeatures/_index.md | 163 +++ site/content/zh/faq/versioningPolicy.md | 272 +++++ site/content/zh/guides/_index.md | 11 + site/content/zh/guides/bespoke/_index.md | 74 ++ site/content/zh/guides/offtheshelf/_index.md | 78 ++ .../content/zh/guides/plugins/_index.md | 72 +- .../content/zh/guides/plugins/builtins.md | 112 +- .../plugins}/execPluginGuidedExample.md | 43 +- .../zh/guides/plugins}/goPluginCaveats.md | 15 +- .../guides/plugins}/goPluginGuidedExample.md | 15 +- site/content/zh/installation/_index.md | 9 + .../zh/installation/binaries/_index.md | 20 + .../zh/installation/chocolatey/_index.md | 16 + .../zh/installation/homebrew/_index.md | 20 + site/content/zh/installation/source/_index.md | 41 + site/content/zh/search-index.md | 4 + site/content/zh/search.md | 6 + site/static/images/header_templates.png | Bin 0 -> 218551 bytes 240 files changed, 49830 insertions(+), 1083 deletions(-) create mode 100644 docs/en/index.html create mode 100644 docs/en/sitemap.xml create mode 100644 docs/images/header_templates.png create mode 100644 docs/zh/404.html delete mode 100644 docs/zh/INSTALL.md delete mode 100644 docs/zh/README.md create mode 100644 docs/zh/api-reference/glossary/index.html create mode 100644 docs/zh/api-reference/glossary/index.xml create mode 100644 docs/zh/api-reference/index.html create mode 100644 docs/zh/api-reference/index.xml create mode 100644 docs/zh/api-reference/kustomization/bases/index.html create mode 100644 docs/zh/api-reference/kustomization/bases/index.xml create mode 100644 docs/zh/api-reference/kustomization/commonannotations/index.html create mode 100644 docs/zh/api-reference/kustomization/commonannotations/index.xml create mode 100644 docs/zh/api-reference/kustomization/commonlabels/index.html create mode 100644 docs/zh/api-reference/kustomization/commonlabels/index.xml create mode 100644 docs/zh/api-reference/kustomization/components/index.html create mode 100644 docs/zh/api-reference/kustomization/components/index.xml create mode 100644 docs/zh/api-reference/kustomization/configmapgenerator/index.html create mode 100644 docs/zh/api-reference/kustomization/configmapgenerator/index.xml create mode 100644 docs/zh/api-reference/kustomization/crds/index.html create mode 100644 docs/zh/api-reference/kustomization/crds/index.xml create mode 100644 docs/zh/api-reference/kustomization/generatoroptions/index.html create mode 100644 docs/zh/api-reference/kustomization/generatoroptions/index.xml create mode 100644 docs/zh/api-reference/kustomization/images/index.html create mode 100644 docs/zh/api-reference/kustomization/images/index.xml create mode 100644 docs/zh/api-reference/kustomization/index.html create mode 100644 docs/zh/api-reference/kustomization/index.xml create mode 100644 docs/zh/api-reference/kustomization/nameprefix/index.html create mode 100644 docs/zh/api-reference/kustomization/nameprefix/index.xml create mode 100644 docs/zh/api-reference/kustomization/namespace/index.html create mode 100644 docs/zh/api-reference/kustomization/namespace/index.xml create mode 100644 docs/zh/api-reference/kustomization/namesuffix/index.html create mode 100644 docs/zh/api-reference/kustomization/namesuffix/index.xml create mode 100644 docs/zh/api-reference/kustomization/patches/index.html create mode 100644 docs/zh/api-reference/kustomization/patches/index.xml create mode 100644 docs/zh/api-reference/kustomization/patchesjson6902/index.html create mode 100644 docs/zh/api-reference/kustomization/patchesjson6902/index.xml create mode 100644 docs/zh/api-reference/kustomization/patchesstrategicmerge/index.html create mode 100644 docs/zh/api-reference/kustomization/patchesstrategicmerge/index.xml create mode 100644 docs/zh/api-reference/kustomization/replicas/index.html create mode 100644 docs/zh/api-reference/kustomization/replicas/index.xml create mode 100644 docs/zh/api-reference/kustomization/resources/index.html create mode 100644 docs/zh/api-reference/kustomization/resources/index.xml create mode 100644 docs/zh/api-reference/kustomization/secretegenerator/index.html create mode 100644 docs/zh/api-reference/kustomization/secretegenerator/index.xml create mode 100644 docs/zh/api-reference/kustomization/vars/index.html create mode 100644 docs/zh/api-reference/kustomization/vars/index.xml create mode 100644 docs/zh/blog/2018/05/21/v1.0.1/index.html create mode 100644 docs/zh/blog/2019/02/05/v2.0.0/index.html create mode 100644 docs/zh/blog/2019/06/18/v2.1.0/index.html create mode 100644 docs/zh/blog/2019/07/03/v3.0.0/index.html create mode 100644 docs/zh/blog/2019/07/26/v3.1.0/index.html create mode 100644 docs/zh/blog/2019/09/17/v3.2.0/index.html create mode 100644 docs/zh/blog/2019/09/26/v3.2.1/index.html create mode 100644 docs/zh/blog/2019/10/24/v3.3.0/index.html create mode 100644 docs/zh/blog/index.html create mode 100644 docs/zh/blog/index.xml create mode 100644 docs/zh/blog/page/1/index.html create mode 100644 docs/zh/blog/releases/index.html create mode 100644 docs/zh/blog/releases/index.xml create mode 100644 docs/zh/blog/releases/page/1/index.html create mode 100644 docs/zh/contributing/bugs/index.html create mode 100644 docs/zh/contributing/bugs/index.xml create mode 100644 docs/zh/contributing/community/index.html create mode 100644 docs/zh/contributing/community/index.xml create mode 100644 docs/zh/contributing/docs/index.html create mode 100644 docs/zh/contributing/docs/index.xml create mode 100644 docs/zh/contributing/features/index.html create mode 100644 docs/zh/contributing/features/index.xml create mode 100644 docs/zh/contributing/howitworks/index.html create mode 100644 docs/zh/contributing/howitworks/index.xml create mode 100644 docs/zh/contributing/index.html create mode 100644 docs/zh/contributing/index.xml create mode 100644 docs/zh/contributing/mac/index.html create mode 100644 docs/zh/contributing/mac/index.xml create mode 100644 docs/zh/contributing/windows/index.html create mode 100644 docs/zh/contributing/windows/index.xml create mode 100644 docs/zh/faq/eschewedfeatures/index.html create mode 100644 docs/zh/faq/eschewedfeatures/index.xml create mode 100644 docs/zh/faq/index.html create mode 100644 docs/zh/faq/index.xml create mode 100644 docs/zh/faq/versioningpolicy/index.html delete mode 100644 docs/zh/fields.md create mode 100644 docs/zh/guides/bespoke/index.html create mode 100644 docs/zh/guides/bespoke/index.xml create mode 100644 docs/zh/guides/index.html create mode 100644 docs/zh/guides/index.xml create mode 100644 docs/zh/guides/offtheshelf/index.html create mode 100644 docs/zh/guides/offtheshelf/index.xml create mode 100644 docs/zh/guides/plugins/builtins/index.html create mode 100644 docs/zh/guides/plugins/execpluginguidedexample/index.html create mode 100644 docs/zh/guides/plugins/goplugincaveats/index.html create mode 100644 docs/zh/guides/plugins/gopluginguidedexample/index.html create mode 100644 docs/zh/guides/plugins/index.html create mode 100644 docs/zh/guides/plugins/index.xml create mode 100644 docs/zh/index.html create mode 100644 docs/zh/index.json create mode 100644 docs/zh/index.xml create mode 100644 docs/zh/installation/binaries/index.html create mode 100644 docs/zh/installation/binaries/index.xml create mode 100644 docs/zh/installation/chocolatey/index.html create mode 100644 docs/zh/installation/chocolatey/index.xml create mode 100644 docs/zh/installation/homebrew/index.html create mode 100644 docs/zh/installation/homebrew/index.xml create mode 100644 docs/zh/installation/index.html create mode 100644 docs/zh/installation/index.xml create mode 100644 docs/zh/installation/source/index.html create mode 100644 docs/zh/installation/source/index.xml create mode 100644 docs/zh/robots.txt create mode 100644 docs/zh/search/index.html create mode 100644 docs/zh/sitemap.xml delete mode 100644 docs/zh/workflows.md create mode 100644 site/content/zh/_index.md create mode 100644 site/content/zh/api-reference/_index.md rename docs/zh/glossary.md => site/content/zh/api-reference/glossary/_index.md (95%) create mode 100644 site/content/zh/api-reference/kustomization/_index.md create mode 100644 site/content/zh/api-reference/kustomization/bases/_index.md create mode 100644 site/content/zh/api-reference/kustomization/commonannotations/_index.md create mode 100644 site/content/zh/api-reference/kustomization/commonlabels/_index.md create mode 100644 site/content/zh/api-reference/kustomization/components/_index.md create mode 100644 site/content/zh/api-reference/kustomization/configmapgenerator/_index.md create mode 100644 site/content/zh/api-reference/kustomization/crds/_index.md create mode 100644 site/content/zh/api-reference/kustomization/generatoroptions/_index.md create mode 100644 site/content/zh/api-reference/kustomization/images/_index.md create mode 100644 site/content/zh/api-reference/kustomization/nameprefix/_index.md create mode 100644 site/content/zh/api-reference/kustomization/namespace/_index.md create mode 100644 site/content/zh/api-reference/kustomization/namesuffix/_index.md create mode 100644 site/content/zh/api-reference/kustomization/patches/_index.md create mode 100644 site/content/zh/api-reference/kustomization/patchesStrategicMerge/_index.md create mode 100644 site/content/zh/api-reference/kustomization/patchesjson6902/_index.md create mode 100644 site/content/zh/api-reference/kustomization/replicas/_index.md create mode 100644 site/content/zh/api-reference/kustomization/resources/_index.md create mode 100644 site/content/zh/api-reference/kustomization/secretegenerator/_index.md create mode 100644 site/content/zh/api-reference/kustomization/vars/_index.md create mode 100644 site/content/zh/blog/_index.md create mode 100644 site/content/zh/blog/releases/_index.md create mode 100644 site/content/zh/blog/releases/v1.0.1.md create mode 100644 site/content/zh/blog/releases/v2.0.0.md create mode 100644 site/content/zh/blog/releases/v2.1.0.md create mode 100644 site/content/zh/blog/releases/v3.0.0.md create mode 100644 site/content/zh/blog/releases/v3.1.0.md create mode 100644 site/content/zh/blog/releases/v3.2.0.md create mode 100644 site/content/zh/blog/releases/v3.2.1.md create mode 100644 site/content/zh/blog/releases/v3.3.0.md create mode 100644 site/content/zh/contributing/_index.md create mode 100644 site/content/zh/contributing/bugs/_index.md create mode 100644 site/content/zh/contributing/community/_index.md create mode 100644 site/content/zh/contributing/docs/_index.md create mode 100644 site/content/zh/contributing/features/_index.md create mode 100644 site/content/zh/contributing/howitworks/_index.md create mode 100644 site/content/zh/contributing/mac/_index.md create mode 100644 site/content/zh/contributing/windows/_index.md create mode 100644 site/content/zh/faq/_index.md create mode 100644 site/content/zh/faq/eschewedfeatures/_index.md create mode 100644 site/content/zh/faq/versioningPolicy.md create mode 100644 site/content/zh/guides/_index.md create mode 100644 site/content/zh/guides/bespoke/_index.md create mode 100644 site/content/zh/guides/offtheshelf/_index.md rename docs/zh/plugins.md => site/content/zh/guides/plugins/_index.md (80%) rename docs/zh/plugins-builtins.md => site/content/zh/guides/plugins/builtins.md (90%) rename {docs/zh => site/content/zh/guides/plugins}/execPluginGuidedExample.md (91%) rename {docs/zh => site/content/zh/guides/plugins}/goPluginCaveats.md (95%) rename {docs/zh => site/content/zh/guides/plugins}/goPluginGuidedExample.md (96%) create mode 100644 site/content/zh/installation/_index.md create mode 100644 site/content/zh/installation/binaries/_index.md create mode 100644 site/content/zh/installation/chocolatey/_index.md create mode 100644 site/content/zh/installation/homebrew/_index.md create mode 100644 site/content/zh/installation/source/_index.md create mode 100644 site/content/zh/search-index.md create mode 100644 site/content/zh/search.md create mode 100644 site/static/images/header_templates.png diff --git a/docs/README.md b/docs/README.md index 1eaca3d2c..5d49bd945 100644 --- a/docs/README.md +++ b/docs/README.md @@ -1,3 +1,2 @@ -English | [简体中文](zh/README.md) Moved to [https://kubernetes-sigs.github.io/kustomize](https://kubernetes-sigs.github.io/kustomize) diff --git a/docs/api-reference/glossary/index.html b/docs/api-reference/glossary/index.html index 72a7dbc63..492baa9d8 100644 --- a/docs/api-reference/glossary/index.html +++ b/docs/api-reference/glossary/index.html @@ -3,7 +3,7 @@ - + @@ -99,6 +99,14 @@ + Example + + +
  • + + + + FAQ @@ -126,6 +134,19 @@ +
  • + + + +
    + + 简体中文 + +
    +
    • +
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -150,6 +171,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -150,6 +171,19 @@
    @@ -161,6 +182,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -158,6 +179,19 @@
    @@ -158,6 +179,19 @@
    @@ -158,6 +179,19 @@
    @@ -158,6 +179,19 @@
    @@ -153,6 +174,19 @@
    @@ -137,14 +158,45 @@ - -
    -
    - - Kustomize provides a solution for customizing Kubernetes resource configuration free from templates -and DSLs. - -
    + + + + + + +
    +
    +
    +
    +
    +

    Kustomize

    + +
    +
    +

    Kustomize provides a solution for customizing Kubernetes resource configuration free from templates +and DSLs.

    + + Get Started + + + Contribute + +
    +

    +
    +
    + +
    +
    +
    +
    +
    diff --git a/docs/index.json b/docs/index.json index 100bf1913..09f44bc6c 100644 --- a/docs/index.json +++ b/docs/index.json @@ -3,7 +3,7 @@ - + @@ -100,6 +100,14 @@ + Example + + +
  • + + + + FAQ @@ -127,6 +135,19 @@ +
  • + + + +
    + + 简体中文 + +
    +
    • +
    diff --git a/docs/installation/binaries/index.html b/docs/installation/binaries/index.html index f44c9db4d..bddbe630d 100644 --- a/docs/installation/binaries/index.html +++ b/docs/installation/binaries/index.html @@ -3,7 +3,7 @@ - + @@ -99,6 +99,14 @@ + Example + + +
  • + + + + FAQ @@ -126,6 +134,19 @@ +
  • + + + +
    + + 简体中文 + +
    +
    • +
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -153,6 +174,19 @@
    @@ -150,6 +171,19 @@
    @@ -153,6 +174,19 @@
    diff --git a/docs/sitemap.xml b/docs/sitemap.xml index e6f600928..b65f1e483 100644 --- a/docs/sitemap.xml +++ b/docs/sitemap.xml @@ -1,295 +1,18 @@ - - - - https://kubernetes-sigs.github.io/kustomize/guides/bespoke/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/installation/source/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/guides/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/guides/offtheshelf/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/installation/binaries/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/installation/homebrew/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/installation/chocolatey/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/contributing/bugs/ - 2020-06-14T08:04:16-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/contributing/community/ - 2020-06-14T08:04:16-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/installation/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/blog/releases/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/contributing/features/ - 2020-06-14T08:04:16-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/contributing/docs/ - 2020-06-11T21:40:35-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/contributing/howitworks/ - 2020-06-14T08:04:16-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/contributing/mac/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/contributing/windows/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/guides/plugins/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/faq/eschewedfeatures/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/glossary/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/faq/versioningpolicy/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/blog/2019/10/24/v3.3.0/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/blog/2019/09/26/v3.2.1/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/blog/2019/09/17/v3.2.0/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/blog/2019/07/26/v3.1.0/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/blog/2019/07/03/v3.0.0/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/blog/2019/06/18/v2.1.0/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/blog/2019/02/05/v2.0.0/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/blog/2018/05/21/v1.0.1/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/index.json - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/bases/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/blog/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/guides/plugins/builtins/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/commonannotations/ - 2020-06-11T21:40:35-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/commonlabels/ - 2020-06-11T21:40:35-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/components/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/configmapgenerator/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/contributing/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/crds/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/guides/plugins/execpluginguidedexample/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/faq/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/generatoroptions/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/guides/plugins/goplugincaveats/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/guides/plugins/gopluginguidedexample/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/images/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/nameprefix/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/namespace/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/namesuffix/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/patches/ - 2020-06-11T21:40:35-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/patchesjson6902/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/patchesstrategicmerge/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/replicas/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/resources/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/search/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/secretegenerator/ - 2020-06-07T21:07:46-07:00 - - - - https://kubernetes-sigs.github.io/kustomize/api-reference/kustomization/vars/ - 2020-06-07T21:07:46-07:00 - - - \ No newline at end of file + + + + https://kubernetes-sigs.github.io/kustomize/en/sitemap.xml + + 2020-06-14T08:04:16-07:00 + + + + + https://kubernetes-sigs.github.io/kustomize/zh/sitemap.xml + + 2019-10-24T00:00:00+00:00 + + + + diff --git a/docs/zh/404.html b/docs/zh/404.html new file mode 100644 index 000000000..b28b04f64 --- /dev/null +++ b/docs/zh/404.html @@ -0,0 +1,3 @@ + + + diff --git a/docs/zh/INSTALL.md b/docs/zh/INSTALL.md deleted file mode 100644 index 585aa011f..000000000 --- a/docs/zh/INSTALL.md +++ /dev/null @@ -1,79 +0,0 @@ -[release 页面]: /../../releases -[Go]: https://golang.org -[脚本]: https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh -[快速开始]: https://www.arp242.net/curl-to-sh.html - -## 安装 - -适用于 Linux、MacOS 和 Windows 的各版本的二进制可执行文件可以在 [release 页面] 上手动下载。 - -如果希望[快速开始]，可以执行: - -```bash -curl -s "https://raw.githubusercontent.com/\ -kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash -``` - -这个[脚本]会： - -- 尝试检测您的操作系统 -- 在临时目录中下载并解压 tar 文件 -- 将 kustomize 二进制可执行文件复制到您当前的工作目录中 -- 删除临时目录 - -## 尝试 `go` - -这种方式只是为了更好的展示如何使用 `go` 语言来安装 kustomize。实际使用中，我们并不推荐此方法。kustomize 的开发者应该拉取此 repo（详见下一部分），而 CI/CD 脚本中应直接下载可执行文件，而不要依赖 `go` 语言工具。 - -将 kustomize 的最新版本 v3 安装到 `$GOPATH/bin`: - -```bash -GO111MODULE=on go install sigs.k8s.io/kustomize/kustomize/v3 -``` - -安装指定版本 - -```bash -GO111MODULE=on go get sigs.k8s.io/kustomize/kustomize/v3@v3.3.0 -``` - -## 本地源码构建 kustomize CLI - -```bash -# 需要 go 1.13 或更高版本 -unset GOPATH -# 详见 https://golang.org/doc/go1.13#modules -unset GO111MODULES - -# 拉取 repo -git clone git@github.com:kubernetes-sigs/kustomize.git -# 进入目录 -cd kustomize - -# 如果您不想从 HEAD 开始构建， 则可以选择切换特定的标签 -git checkout kustomize/v3.2.3 - -# 开始构建 -(cd kustomize; go install .) - -# 运行 -~/go/bin/kustomize version -``` - -### 其他方式 - -#### macOS - -```bash -brew install kustomize -``` - -#### windows - -```bash -choco install kustomize -``` - -有关软件包管理器 chocolatey 的使用以及对之前版本的支持，请参考以下链接： -- [Choco Package](https://chocolatey.org/packages/kustomize) -- [Package Source](https://github.com/kenmaglio/choco-kustomize) diff --git a/docs/zh/README.md b/docs/zh/README.md deleted file mode 100644 index 8a767dbf3..000000000 --- a/docs/zh/README.md +++ /dev/null @@ -1,60 +0,0 @@ -[English](../README.md) | 简体中文 - -# 文档 - - * [安装说明](INSTALL.md) - - * [示例](../../examples) - 各种使用流程和概念的详细演示。 - - * [术语表](glossary.md) - 用于消除术语歧义。 - - * [Kustomize 字段](fields.md) - 介绍 [kustomization](../glossary.md#kustomization) 文件中各字段的含义。 - - * [插件](plugins.md) - 使用自定义的资源生成器和资源转换器来拓展 kustomize 功能。 - - * [工作流](workflows.md) - 使用定制及使用现成配置使用的一些步骤。 - - * [FAQ](../FAQ.md) - - -## 发行说明 - -* [kustomize/3.2.2](/../../releases/tag/kustomize%2Fv3.2.2) - 基于 kustomize Go API [3.3.0](../v3.3.0.md) 的 `kustomize` CLI。 - - * [API 3.3.0](../v3.3.0.md) - kustomize Go API 的首个 release，该 release 不包含 `kustomize` CLI，且之后 CLI 和 API 将独立发布。 - - * [kustomize/3.2.1](/../../releases/tag/kustomize%2Fv3.2.1) - `kustomize` CLI 基于 kustomize Go API release [3.2.0](../v3.2.0.md) 发布的补丁。 - - * [3.2.0](../v3.2.0.md) - - * [3.1.1](../v3.1.0.md) - - * [3.1](../v3.1.0.md) - 2019年7月下旬，扩展 patches 和改进的资源匹配。 - - * [3.0](../v3.0.0.md) - 2019年6月下旬，插件开发者发布。 - - * [2.1](../v2.1.0.md) - 2019年6月18日 - 插件、有序资源等。 - - * [2.0](../v2.0.0.md) - 2019年3月 - 可以在 [kubectl v1.14][kubectl] 中使用 kustomize [v2.0.3] 。 - - * [1.0](../v1.0.1.md) - 2018年5月 - 于 [kubectl repository] 开发后的首发版本。 - - -## 行为守则 - - * [版本控制](../versioningPolicy.md) - kustomize 代码及 kustomization 文件的版本控制策略。 - - * [规避功能](../eschewedFeatures.md) - 目前 Kustomize 不支持某些功能的原因。 - - * [贡献指南](../../CONTRIBUTING.md) - 请在提交 PR 之前阅读。 - - * [行为准则](../../code-of-conduct.md) - ->声明：部分文档可能稍微滞后于英文版本，同步工作持续进行中 - -[v2.0.3]: /../../releases/tag/v2.0.3 -[kubectl]: https://kubernetes.io/blog/2019/03/25/kubernetes-1-14-release-announcement -[kubectl repository]: https://github.com/kubernetes/kubectl diff --git a/docs/zh/api-reference/glossary/index.html b/docs/zh/api-reference/glossary/index.html new file mode 100644 index 000000000..d9455e977 --- /dev/null +++ b/docs/zh/api-reference/glossary/index.html @@ -0,0 +1,1058 @@ + + + + + + + + + + + + + + + + + + + + + + + +术语表 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + 术语表 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    术语表

    +
    术语表
    +

    应用

    +

    应用是为某种目的关联起来的一组 Kubernetes 资源，例如一个前有负载均衡器，后有数据库的 Web 服务器。用标签、命名和元数据将[资源]组织起来，可以进行添加或删除等操作。

    +

    有提案（Declarative Application Management）描述了一种称为应用的新的 Kubernetes 资源。更加正式的描述了这一思路，并在应用程序级别提供了运维和仪表盘的支持。

    +

    Kustomize 对 Kubernetes 资源进行配置，其中描述的应用程序资源只是另一种普通的资源。

    +

    apply

    +

    Apply 这个动词在 Kubernetes 的上下文中，指的是一个 Kubernetes 命令以及能够对集群施加影响的进程内 API 端点。

    +

    用户可以将对集群的运行要求用一组完整的资源列表的形式进行表达，通过 apply 命令进行提交。

    +

    集群把新提交的资源和之前提交的状态以及当前的实际状态进行合并，形成新的状态。这就是 Kubernetes 的状态管理过程。

    +

    base

    +

    Base 指的是会被其它 Kustomization 引用的 Kustomization。

    +

    包括 Overlay 在内的任何 Kustomization，都可以作为其它 Kustomization 的 Base。

    +

    Base 对引用自己的 Overlay 并无感知。

    +

    Base 和 Overlay 可以作为 Git 仓库中的唯一内容，用于简单的 GitOps 管理。对仓库的变更可以触发构建、测试以及部署过程。

    +

    定制配置

    +

    定制配置是由组织为满足自身需要，在内部创建和管理的 Kustomization 和[资源]。

    +

    和定制配置关联的 Workflow 比关联到通用配置的 Workflow 要简单一些，原因是通用配置是共享的，需要周期性的跟踪他人作出的变更。

    +

    custom resource definition

    +

    可以通过定制 CRD (CRD spec) 的方式对 Kubernetes API 进行扩展。

    +

    CRD 定义的[资源]是一种全新的资源，可以和 ConfigMap、Deployment 之类的原生资源以相同的方式来使用。

    +

    Kustomize 能够生成自定义资源，但是要完成这个目标，必须给出对应的 CRD，这样才能正确的对这种结构进行处理。

    +

    声明式应用程序管理

    +

    Kustomize 鼓励对声明式应用程序管理（Declarative Application Management）的支持，这种方式是一系列 Kubernetes 集群管理的最佳实践。Kustomize 应该可以：

    +
      +
    • 适用于任何配置，例如自有配置、共享配置、无状态、有状态等。
      • +
    • 支持通用配置，以及创建变体（例如开发、预发布、生产）。
      • +
    • 开放使用原生 Kubernetes API，而不是隐藏它们。
      • +
    • 不会给版本控制系统和集成的评审和审计工作造成困难。
      • +
    • 用 Unix 的风格和其它工具进行协作。
      • +
    • 避免使用模板、领域特定的语言等额外的学习内容。
      • +
    +

    生成器

    +

    生成器生成的资源，可以直接使用，也可以输出给转换器（transformer）。

    +

    gitops

    +

    Kustomization 这个词可以指 kustomization.yaml 这个文件，更常见的情况是一个包含了 kustomization.yaml 及其所有直接引用文件的相对路径（所有不需要 URL 的本地数据）。

    +

    也就是说，如果在 Kustomize 的上下文中说到 Kustomization，可能是以下的情况之一：

    +
      +
    • 一个叫做 kustomization.yaml 的文件。
      • +
    • 一个压缩包（包含 YAML 文件以及它的引用文件）。
      • +
    • 一个 Git 压缩包。
      • +
    • 一个 Git 仓库的 URL。
      • +
    +

    一个 Kustomization 文件包含的字段，分为四个类别：

    +
      +
    • resources：待定制的现存[资源]，示例字段：resources、crds。
      • +
    • generator：将要创建的新资源，示例字段：configMapGenerator（传统）、secretGenerator（传统）、generators（v2.1）
      • +
    • transformer：对前面提到的新旧资源进行处理的方式。示例字段：namePrefix、nameSuffix、images、commonLabels、patchesJson6902 等。在 v2.1 中还有更多的 transformer。
      • +
    • meta：会对上面几种字段产生影响。示例字段：vars、namespace、apiVersion、kind 等。
      • +
    +

    kustomization root

    +

    直接包含 kustomization.yaml 文件的目录。

    +

    处理 Kustomization 文件时，可能访问到该目录以内或以外的文件。

    +

    像 YAML 资源这样的数据文件，或者用于生成 ConfigMap 或 Secret 的包含 name=value 的文本文件，或者用于补丁转换的补丁文件，必须在这个目录的内部，需要显式的使用相对路径来表达。

    +

    v2.1 中有一个特殊选项 --load_restrictions none 能够放宽这个限制，从而让不同的 Kustomization 可以共享补丁文件。

    +

    可以用 URL、绝对路径或者相对路径引用其它的 Kustomization（包含 kustomization.yaml 文件的其它目录）。

    +

    如果 A Kustomization 依赖 B Kustomization，那么：

    +
      +
    • B 不能包含 A。
      • +
    • B 不能依赖 A，间接依赖也不可以。
      • +
    +

    A 可以包含 B，但是这样的话，最简单的方式可能是让 A 直接依赖 B 的资源，并去除 B 的 kustomization.yaml 文件（就是把 B 合并到 A）。

    +

    通常情况下，B 和 A 处于同级目录，或者 B 放在一个完全独立的 Git 仓库里，可以从任意的 Kustomization 进行引用。

    +

    常见布局大致如下：

    +
    +
    ├── base
+│   ├── deployment.yaml
+│   ├── kustomization.yaml
+│   └── service.yaml
+└── overlays
+    ├── dev
+    │   ├── kustomization.yaml
+    │   └── patch.yaml
+    ├── prod
+    │   ├── kustomization.yaml
+    │   └── patch.yaml
+    └── staging
+        ├── kustomization.yaml
+        └── patch.yaml
+
    +

    dev、prod 以及 staging 是否依赖于 base，要根据 kustomization.yaml 具体判断。

    +

    kubernetes

    +

    Kubernetes 是一个开源软件，为容器化应用提供了自动部署、伸缩和管理的能力。

    +

    它经常会被简写为 k8s。

    +

    Kubernetes 风格的对象

    +

    用 YAML 或者 JSON 文件表达一个对象，其中包含一些必要字段。kind 字段用于标识对象类型，metadata/name 字段用于区分实例，apiVersion 表示的是版本（如果有多个版本的话）。

    +

    kustomize

    +

    kustomize 是一个面向 Kubernetes 的命令行工具，用一种无模板、结构化的的方式为为声明式配置提供定制支持。

    +

    面向 Kubernetes 的意思是 Kustomize 对 API 资源、Kubernetes 概念（例如名称、标签、命名空间等）、以及资源补丁是有支持的。

    +

    Kustomize 是 DAM 的一个实现。

    +

    通用配置

    +

    通用配置是一种用于共享的 Kustomization 以及资源。

    +

    例如创建一个这样的 Github 仓库：

    +
    +
    github.com/username/someapp/
+  kustomization.yaml
+  deployment.yaml
+  configmap.yaml
+  README.md
+
    +

    其他人可以 fork 这个仓库，并把它们的 Fork clone 到本地进行定制。

    +

    用户可以用这个克隆回来的版本作为 Base，在此基础上定制 Overlay 来满足自身需求。

    +

    overlay

    +

    Overlay 是一个 依赖于其它 Kustomization 的 Kustomization。

    +

    Overlay 引用（通过文件路径、URI 或者别的什么方式）的 Kustomization 被称为 Base。

    +

    Overlay 无法脱离 Base 独立生效。

    +

    Overlay 可以作为其它 Overlay 的 Base。

    +

    通常 Overlay 都是不止一个的，因为实际情况中就需要为单一 Base 创建不同的[变体]，例如 development、QA、production 等。

    +

    总的说来，这些变体使用的资源基本是一致的，只有一些简单的差异，例如 Deployment 的实例数量、特定 Pod 的 CPU 资源、ConfigMap 中的数据源定义等。

    +

    可以这样把配置提交到集群：

    +
    +
     kustomize build someapp/overlays/staging |\
+     kubectl apply -f -
+
+ kustomize build someapp/overlays/production |\
+     kubectl apply -f -
+
    +

    对 Base 的使用是隐性的——Overlay 的依赖是指向 Base 的。

    +

    请参考 root。

    +

    包

    +

    在 Kustomize 中，包是没有意义的，Kustomize 并无意成为 apt、rpm 那样的传统包管理工具。

    +

    patch

    +

    修改资源的通用指令。

    +

    有两种功能类似但是实现不同的补丁方式：strategic merge patch 和 JSON patch。

    +

    patchStrategicMerge

    +

    patchStrategicMerge 是 strategic-merge 风格的补丁（SMP）。

    +

    SMP 看上去像个不完整的 Kubernetes 资源 YAML。SMP 中包含 TypeMeta 字段，用于表明这个补丁的目标[资源]的 group/version/kind/name，剩余的字段是一个嵌套的结构，用于指定新的字段值，例如镜像标签。

    +

    缺省情况下，SMP 会替换目标值。如果目标值是一个字符串，这种行为是合适的，但是如果目标值是个列表，可能就不合适了。

    +

    可以加入 directive 来修改这种行为，，可以接受的 directive 包括 replace（缺省）、merge（不替换列表）、delete 等（相关说明）。

    +

    注意对自定义资源来说，SMP 会被当作 json merge patches.

    +

    有趣的事实：所有的资源文件都可以当作 SMP 使用，相同 group/version/kind/name 资源中的匹配字段会被替换，其它内容则保持不变。

    +

    patchJson6902

    +

    patchJson6902 引用一个 Kubernetes 资源，并用 JSONPatch 指定了修改这一资源的方法。

    +

    patchJson6902 几乎可以做到所有 patchStrategicMerge 的功能，但是语法更加简单，参考示例

    +

    插件

    +

    Kustomize 可以使用的一段代码，但是无需编译到 Kustomize 内部，可以作为 Kustomization 的一部分，生成或转换 Kubernetes 资源。

    +

    插件的细节。

    +

    资源

    +

    在 REST-ful API 的上下文中，资源是 GET、PUT 或者 POST 等 HTTP 操作的目标。Kubernetes 提供了 REST-ful API 界面，用于和客户端进行交互。

    +

    在 Kustomization 的上下文中，资源是一个相对于 root 的相对路径，指向 YAML 或者 JSON 文件，描述了一个 Kubernetes API 对象，例如 Deployment 或者 ConfigMap，或者一个 Kustomization、或者一个指向 Kustomization 的 URL。

    +

    或者说任何定义了对象的格式正确的 YAML 文件，其中包含了 kind 和 metadata/name 字段，都是资源。

    +

    root

    +

    参看 kustomization root.

    +

    sub-target / sub-application / sub-package

    +

    不存在 sub-xxx，只有 Base 和 Overlay。

    +

    target

    +

    target 是 kustomize build 的参数，例如：

    +
    +
     kustomize build $target
+
    +

    $target 必须是一个指向 Kustomization 的路径或者 URL。

    +

    要创建用于进行 Apply 操作的资源，target 中必须包含或者引用所有相关信息。

    +

    Base 或者 Overlay 都可以作为 target。

    +

    transformer

    +

    转换器能够修改资源，或者在 kustomize build 的过程中获取资源的信息。

    +

    变体

    +

    在集群中把 Overlay 应用到 Base 上的产物称为变体。

    +

    比如 staging 和 production 两个 Overlay，都修改了同样的 Base，来创建各自的变体。

    +

    staging 变体包含了一组用来保障测试过程的资源，或者一些想要看到生产环境下一个版本的外部用户。

    +

    production 变体用于承载生产流量，可能使用大量的副本，分配更多的 CPU 和内存。

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/glossary/index.xml b/docs/zh/api-reference/glossary/index.xml new file mode 100644 index 000000000..e87ecb4eb --- /dev/null +++ b/docs/zh/api-reference/glossary/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – 术语表 + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/glossary/ + Recent content in 术语表 on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/index.html b/docs/zh/api-reference/index.html new file mode 100644 index 000000000..da5b3374a --- /dev/null +++ b/docs/zh/api-reference/index.html @@ -0,0 +1,874 @@ + + + + + + + + + + + + + + + + + + + + + + + +API 参考 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + API 参考 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    API 参考

    +
    Kustomize 客户端 API 参考。
    + +
    + + + + +
    + + + + +
    +
    + kustomization.yaml +
    +

    kustomization.yaml fields and API

    +
    + + + +
    +
    + 术语表 +
    +

    术语表

    +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/index.xml b/docs/zh/api-reference/index.xml new file mode 100644 index 000000000..3b3fa2982 --- /dev/null +++ b/docs/zh/api-reference/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – API 参考 + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/ + Recent content in API 参考 on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/bases/index.html b/docs/zh/api-reference/kustomization/bases/index.html new file mode 100644 index 000000000..c1524bc70 --- /dev/null +++ b/docs/zh/api-reference/kustomization/bases/index.html @@ -0,0 +1,888 @@ + + + + + + + + + + + + + + + + + + + + + + + +bases | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + bases | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    bases

    +
    在 Kustomization 目录中添加资源。
    + + +
    +

    bases 字段在 v2.1.0 中已被弃用。

    + +
    + +

    该条目已被移动到 resources 字段中，其仍是核心概念，这使得相对于其他输入资源 base 可以进行排序。

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/bases/index.xml b/docs/zh/api-reference/kustomization/bases/index.xml new file mode 100644 index 000000000..c299c8fa3 --- /dev/null +++ b/docs/zh/api-reference/kustomization/bases/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – bases + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/bases/ + Recent content in bases on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/commonannotations/index.html b/docs/zh/api-reference/kustomization/commonannotations/index.html new file mode 100644 index 000000000..33ae2d70b --- /dev/null +++ b/docs/zh/api-reference/kustomization/commonannotations/index.html @@ -0,0 +1,924 @@ + + + + + + + + + + + + + + + + + + + + + + + +commonAnnotations | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + commonAnnotations | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    commonAnnotations

    +
    为所有字段添加注释。
    +

    为所有资源添加注释，如果资源上已经存在注解键，该值将被覆盖。

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+commonAnnotations:
+  oncallPager: 800-555-1212
+

    Example

    +

    输入文件

    +
    # kustomization.yaml
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+commonAnnotations:
+  oncallPager: 800-555-1212
+
+resources:
+- deploy.yaml
+
    # deploy.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: example
+spec:
+  ...
+

    构建输出

    +
    apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: example
+  annotations:
+    oncallPager: 800-555-1212
+spec:
+  ...
+
    +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/commonannotations/index.xml b/docs/zh/api-reference/kustomization/commonannotations/index.xml new file mode 100644 index 000000000..c93366cff --- /dev/null +++ b/docs/zh/api-reference/kustomization/commonannotations/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – commonAnnotations + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/commonannotations/ + Recent content in commonAnnotations on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/commonlabels/index.html b/docs/zh/api-reference/kustomization/commonlabels/index.html new file mode 100644 index 000000000..d026a2655 --- /dev/null +++ b/docs/zh/api-reference/kustomization/commonlabels/index.html @@ -0,0 +1,966 @@ + + + + + + + + + + + + + + + + + + + + + + + +commonLabels | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + commonLabels | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    commonLabels

    +
    为所有资源和 selectors 增加标签。
    +

    为所有资源和 selectors 增加标签。如果资源上已经存在注解键，该值将被覆盖。

    + + +
    +

    一旦将资源应用于集群，就不应更改诸如 Deployments 和 Services 之类的资源选择器。

    +

    将 commonLabels 更改为可变资源可能会导致部署失败。

    + +
    + +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+commonLabels:
+  someName: someValue
+  owner: alice
+  app: bingo
+

    Example

    +

    文件输入

    +
    # kustomization.yaml
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+commonLabels:
+  someName: someValue
+  owner: alice
+  app: bingo
+
+resources:
+- deploy.yaml
+- service.yaml
+
    # deploy.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: example
+
    # service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: example
+

    构建输出

    +
    apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: bingo
+    owner: alice
+    someName: someValue
+  name: example
+spec:
+  selector:
+    app: bingo
+    owner: alice
+    someName: someValue
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: bingo
+    owner: alice
+    someName: someValue
+  name: example
+spec:
+  selector:
+    matchLabels:
+      app: bingo
+      owner: alice
+      someName: someValue
+  template:
+    metadata:
+      labels:
+        app: bingo
+        owner: alice
+        someName: someValue
+
    +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/commonlabels/index.xml b/docs/zh/api-reference/kustomization/commonlabels/index.xml new file mode 100644 index 000000000..163017e7a --- /dev/null +++ b/docs/zh/api-reference/kustomization/commonlabels/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – commonLabels + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/commonlabels/ + Recent content in commonLabels on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/components/index.html b/docs/zh/api-reference/kustomization/components/index.html new file mode 100644 index 000000000..2fe7bb070 --- /dev/null +++ b/docs/zh/api-reference/kustomization/components/index.html @@ -0,0 +1,881 @@ + + + + + + + + + + + + + + + + + + + + + + + +components | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + components | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    components

    +
    Compose kustomizations.
    +

    Coming soon

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/components/index.xml b/docs/zh/api-reference/kustomization/components/index.xml new file mode 100644 index 000000000..15d9add6f --- /dev/null +++ b/docs/zh/api-reference/kustomization/components/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – components + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/components/ + Recent content in components on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/configmapgenerator/index.html b/docs/zh/api-reference/kustomization/configmapgenerator/index.html new file mode 100644 index 000000000..6c4f68da5 --- /dev/null +++ b/docs/zh/api-reference/kustomization/configmapgenerator/index.html @@ -0,0 +1,924 @@ + + + + + + + + + + + + + + + + + + + + + + + +configMapGenerator | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + configMapGenerator | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    configMapGenerator

    +
    生成 ConfigMap 资源.
    +

    列表中的每个条目都将生成一个 ConfigMap （合计可以生成 n 个 ConfigMap）。

    +

    下面的示例会生成 3 个ConfigMap：第一个带有给定文件的名称和内容，第二个将在 data 中添加 key/value，第三个通过 options 为单个 ConfigMap 设置注释和标签。

    +

    每个 configMapGenerator 项均接受的参数 behavior: [create|replace|merge]，这个参数允许修改或替换父级现有的 configMap。

    +

    此外，每个条目都有一个 options 字段，该字段具有与 kustomization 文件的 generatorOptions 字段相同的子字段。

    +

    options 字段允许用户为生成的实例添加标签和（或）注释，或者分别禁用该实例名称的哈希后缀。此处添加的标签和注释不会被 kustomization 文件 generatorOptions 字段关联的全局选项覆盖。但是如果全局 generatorOptions 字段指定 disableNameSuffixHash: true，其他 options 的设置将无法将其覆盖。

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+# 这个标签将添加到所有的 ConfigMap 和 Secret 中。
+generatorOptions:
+  labels:
+    fruit: apple
+
+configMapGenerator:
+- name: my-java-server-props
+  behavior: merge
+  files:
+  - application.properties
+  - more.properties
+- name: my-java-server-env-vars
+  literals:	
+  - JAVA_HOME=/opt/java/jdk
+  - JAVA_TOOL_OPTIONS=-agentlib:hprof
+  options:
+    disableNameSuffixHash: true
+    labels:
+      pet: dog
+- name: dashboards
+  files:
+  - mydashboard.json
+  options:
+    annotations:
+      dashboard: "1"
+    labels:
+      app.kubernetes.io/name: "app1"
+

    这里也可以定义一个 key 来为文件设置不同名称。

    +

    下面这个示例会创建一个 ConfigMap，并将 whatever.ini 重命名为 myFileName.ini：

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+configMapGenerator:
+- name: app-whatever
+  files:
+  - myFileName.ini=whatever.ini
+
    +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/configmapgenerator/index.xml b/docs/zh/api-reference/kustomization/configmapgenerator/index.xml new file mode 100644 index 000000000..fb6b5fbb9 --- /dev/null +++ b/docs/zh/api-reference/kustomization/configmapgenerator/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – configMapGenerator + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/configmapgenerator/ + Recent content in configMapGenerator on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/crds/index.html b/docs/zh/api-reference/kustomization/crds/index.html new file mode 100644 index 000000000..b302be034 --- /dev/null +++ b/docs/zh/api-reference/kustomization/crds/index.html @@ -0,0 +1,900 @@ + + + + + + + + + + + + + + + + + + + + + + + +crds | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + crds | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    crds

    +
    增加对 CRD 的支持。
    +

    此列表中的每个条目都应该是自定义资源定义（CRD）文件的相对路径。

    +

    该字段的存在是为了让 kustomize 识别用户自定义的 CRD ，并对这些类型中的对象应用适当的转换。

    +

    典型用例：CRD 引用 ConfigMap 对象

    +

    在 kustomization 中，ConfigMap 对象名称可能会通过 namePrefix 、nameSuffix 或 hashing 来更改 CRD 对象中该 ConfigMap 对象的名称， +引用时需要以相同的方式使用 namePrefix 、 nameSuffix 或 hashing 来进行更新。

    +

    Annotations 可以放入 openAPI 的定义中：

    +
      +
    • “x-kubernetes-annotation”: "”
      • +
    • “x-kubernetes-label-selector”: "”
      • +
    • “x-kubernetes-identity”: "”
      • +
    • “x-kubernetes-object-ref-api-version”: “v1”,
      • +
    • “x-kubernetes-object-ref-kind”: “Secret”,
      • +
    • “x-kubernetes-object-ref-name-key”: “name”,
      • +
    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+crds:
+- crds/typeA.yaml
+- crds/typeB.yaml
+
    +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/crds/index.xml b/docs/zh/api-reference/kustomization/crds/index.xml new file mode 100644 index 000000000..bf3a7b6b5 --- /dev/null +++ b/docs/zh/api-reference/kustomization/crds/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – crds + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/crds/ + Recent content in crds on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/generatoroptions/index.html b/docs/zh/api-reference/kustomization/generatoroptions/index.html new file mode 100644 index 000000000..5adf2ce0a --- /dev/null +++ b/docs/zh/api-reference/kustomization/generatoroptions/index.html @@ -0,0 +1,895 @@ + + + + + + + + + + + + + + + + + + + + + + + +generatorOptions | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + generatorOptions | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    generatorOptions

    +
    控制生成 ConfigMap 和 Secret 的行为。
    +

    此外，在每个生成器中，还可以按每个资源级别设置 generatorOptions，具体使用方法请参见configMapGenerator和secretGenerator。

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+generatorOptions:
+  # labels to add to all generated resources
+  labels:
+    kustomize.generated.resources: somevalue
+  # annotations to add to all generated resources
+  annotations:
+    kustomize.generated.resource: somevalue
+  # disableNameSuffixHash is true disables the default behavior of adding a
+  # suffix to the names of generated resources that is a hash of
+  # the resource contents.
+  disableNameSuffixHash: true
+
    +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/generatoroptions/index.xml b/docs/zh/api-reference/kustomization/generatoroptions/index.xml new file mode 100644 index 000000000..086081581 --- /dev/null +++ b/docs/zh/api-reference/kustomization/generatoroptions/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – generatorOptions + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/generatoroptions/ + Recent content in generatorOptions on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/images/index.html b/docs/zh/api-reference/kustomization/images/index.html new file mode 100644 index 000000000..e5aaea44c --- /dev/null +++ b/docs/zh/api-reference/kustomization/images/index.html @@ -0,0 +1,916 @@ + + + + + + + + + + + + + + + + + + + + + + + +images | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + images | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    images

    +
    修改镜像的名称、tag 或 image digest。
    +

    修改镜像的名称、tag 或 image digest ，而无需使用 patches 。例如，对于这种 kubernetes Deployment 片段：

    +
    kind: Deployment
+...
+spec:
+  template:
+    spec:
+      containers:
+      - name: mypostgresdb
+        image: postgres:8
+      - name: nginxapp
+        image: nginx:1.7.9
+      - name: myapp
+        image: my-demo-app:latest
+      - name: alpine-app
+        image: alpine:3.7
+

    想要将 image 做如下更改：

    +
      +
    • 将 postgres:8 改为 my-registry/my-postgres:v1
      • +
    • 将 nginx tag 从 1.7.9 改为 1.8.0
      • +
    • 将镜像名称 my-demo-app 改为 my-app
      • +
    • 将 alpine 的 tag 3.7 改为 digest 值
      • +
    +

    只需在 kustomization 中添加以下内容：

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+images:
+- name: postgres
+  newName: my-registry/my-postgres
+  newTag: v1
+- name: nginx
+  newTag: 1.8.0
+- name: my-demo-app
+  newName: my-app
+- name: alpine
+  digest: sha256:24a0c4b4a4c0eb97a1aabb8e29f18e917d05abfe1b7a7c07857230879ce7d3d3
+
    +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/images/index.xml b/docs/zh/api-reference/kustomization/images/index.xml new file mode 100644 index 000000000..dfc981cc6 --- /dev/null +++ b/docs/zh/api-reference/kustomization/images/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – images + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/images/ + Recent content in images on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/index.html b/docs/zh/api-reference/kustomization/index.html new file mode 100644 index 000000000..c8f890ddf --- /dev/null +++ b/docs/zh/api-reference/kustomization/index.html @@ -0,0 +1,996 @@ + + + + + + + + + + + + + + + + + + + + + + + +kustomization.yaml | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + kustomization.yaml | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    kustomization.yaml

    +
    kustomization.yaml fields and API
    + +
    + + + + +
    + + + + + + + + +
    +
    + bases +
    +

    在 Kustomization 目录中添加资源。

    +
    + + + +
    +
    + commonAnnotations +
    +

    为所有字段添加注释。

    +
    + + + +
    +
    + commonLabels +
    +

    为所有资源和 selectors 增加标签。

    +
    + + + +
    +
    + components +
    +

    Compose kustomizations.

    +
    + + + +
    +
    + configMapGenerator +
    +

    生成 ConfigMap 资源.

    +
    + + + +
    +
    + crds +
    +

    增加对 CRD 的支持。

    +
    + + + +
    +
    + generatorOptions +
    +

    控制生成 ConfigMap 和 Secret 的行为。

    +
    + + + +
    +
    + images +
    +

    修改镜像的名称、tag 或 image digest。

    +
    + + + +
    +
    + namePrefix +
    +

    为所有资源和引用的名称添加前缀。

    +
    + + + +
    +
    + namespace +
    +

    为所有资源添加 namespace。

    +
    + + + +
    +
    + nameSuffix +
    +

    为所有资源和引用的名称添加后缀。

    +
    + + + +
    +
    + patches +
    +

    Patch resources

    +
    + + + +
    +
    + patchesJson6902 +
    +

    使用 json 6902 标准 Patch resources

    +
    + + + +
    +
    + patchesStrategicMerge +
    +

    使用 strategic merge patch 标准 Patch resources.

    +
    + + + +
    +
    + replicas +
    +

    修改资源的副本数。

    +
    + + + +
    +
    + resources +
    +

    包含的资源。

    +
    + + + +
    +
    + secretGenerator +
    +

    生成 Secret 资源。

    +
    + + + +
    +
    + vars +
    +

    Substitute name references.

    +
    + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/index.xml b/docs/zh/api-reference/kustomization/index.xml new file mode 100644 index 000000000..f47717d81 --- /dev/null +++ b/docs/zh/api-reference/kustomization/index.xml @@ -0,0 +1,711 @@ + + + Kustomize – kustomization.yaml + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/ + Recent content in kustomization.yaml on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + Api-Reference: bases + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/bases/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/bases/ + + + + + +<div class="pageinfo pageinfo-warning"> +<p><code>bases</code> 字段在 v2.1.0 中已被弃用。</p> + +</div> + +<p>该条目已被移动到 <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/zh/api-reference/kustomization/resource">resources</a> 字段中，其仍是<a href="https://kubernetes-sigs.github.io/kustomize/kustomize/zh/api-reference/kustomization/glossary#base">核心概念</a>，这使得相对于其他输入资源 base 可以进行排序。</p> + + + + + + Api-Reference: commonAnnotations + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/commonannotations/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/commonannotations/ + + + + <p>为所有资源添加注释，如果资源上已经存在注解键，该值将被覆盖。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">commonAnnotations</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">oncallPager</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#0000cf;font-weight:bold">800-555-1212</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h2 id="example">Example</h2> +<h3 id="输入文件">输入文件</h3> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#8f5902;font-style:italic"># kustomization.yaml</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">commonAnnotations</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">oncallPager</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#0000cf;font-weight:bold">800-555-1212</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">resources</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- deploy.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#8f5902;font-style:italic"># deploy.yaml</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps/v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>...<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="构建输出">构建输出</h3> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps/v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">annotations</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">oncallPager</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#0000cf;font-weight:bold">800-555-1212</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>...<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div> + + + + + Api-Reference: commonLabels + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/commonlabels/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/commonlabels/ + + + + <p>为所有资源和 selectors 增加标签。如果资源上已经存在注解键，该值将被覆盖。</p> + + +<div class="pageinfo pageinfo-warning"> +<p>一旦将资源应用于集群，就不应更改诸如 Deployments 和 Services 之类的资源选择器。</p> +<p>将 commonLabels 更改为可变资源可能会导致部署失败。</p> + +</div> + +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">commonLabels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">someName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>someValue<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">owner</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alice<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>bingo<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h2 id="example">Example</h2> +<h3 id="文件输入">文件输入</h3> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#8f5902;font-style:italic"># kustomization.yaml</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">commonLabels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">someName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>someValue<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">owner</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alice<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>bingo<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">resources</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- deploy.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- service.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#8f5902;font-style:italic"># deploy.yaml</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps/v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>example<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#8f5902;font-style:italic"># service.yaml</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>example<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="构建输出">构建输出</h3> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>bingo<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">owner</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alice<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">someName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>someValue<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">selector</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>bingo<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">owner</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alice<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">someName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>someValue<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>---<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps/v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>bingo<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">owner</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alice<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">someName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>someValue<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">selector</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">matchLabels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>bingo<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">owner</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alice<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">someName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>someValue<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">template</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>bingo<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">owner</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alice<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">someName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>someValue<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div> + + + + + Api-Reference: components + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/components/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/components/ + + + + <p><em>Coming soon</em></p> + + + + + + Api-Reference: configMapGenerator + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/configmapgenerator/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/configmapgenerator/ + + + + <p>列表中的每个条目都将生成一个 ConfigMap （合计可以生成 n 个 ConfigMap）。</p> +<p>下面的示例会生成 3 个ConfigMap：第一个带有给定文件的名称和内容，第二个将在 data 中添加 key/value，第三个通过 <code>options</code> 为单个 ConfigMap 设置注释和标签。</p> +<p>每个 configMapGenerator 项均接受的参数 <code>behavior: [create|replace|merge]</code>，这个参数允许修改或替换父级现有的 configMap。</p> +<p>此外，每个条目都有一个 <code>options</code> 字段，该字段具有与 kustomization 文件的 <code>generatorOptions</code> 字段相同的子字段。</p> +<p><code>options</code> 字段允许用户为生成的实例添加标签和（或）注释，或者分别禁用该实例名称的哈希后缀。此处添加的标签和注释不会被 kustomization 文件 <code>generatorOptions</code> 字段关联的全局选项覆盖。但是如果全局 <code>generatorOptions</code> 字段指定 <code>disableNameSuffixHash: true</code>，其他 <code>options</code> 的设置将无法将其覆盖。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#8f5902;font-style:italic"># 这个标签将添加到所有的 ConfigMap 和 Secret 中。</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">generatorOptions</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fruit</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apple<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">configMapGenerator</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-java-server-props<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">behavior</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>merge<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- application.properties<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- more.properties<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-java-server-env-vars<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>literals<span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- JAVA_HOME=/opt/java/jdk<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- JAVA_TOOL_OPTIONS=-agentlib<span style="color:#000;font-weight:bold">:</span>hprof<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">options</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">disableNameSuffixHash</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">true</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">pet</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>dog<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>dashboards<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- mydashboard.json<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">options</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">annotations</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">dashboard</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;1&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app.kubernetes.io/name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;app1&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>这里也可以<a href="https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-configmap/#define-the-key-to-use-when-creating-a-configmap-from-a-file">定义一个 key</a> 来为文件设置不同名称。</p> +<p>下面这个示例会创建一个 ConfigMap，并将 <code>whatever.ini</code> 重命名为 <code>myFileName.ini</code>：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">configMapGenerator</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>app-whatever<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- myFileName.ini=whatever.ini<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div> + + + + + Api-Reference: crds + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/crds/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/crds/ + + + + <p>此列表中的每个条目都应该是自定义资源定义（CRD）文件的相对路径。</p> +<p>该字段的存在是为了让 kustomize 识别用户自定义的 CRD ，并对这些类型中的对象应用适当的转换。</p> +<p>典型用例：CRD 引用 ConfigMap 对象</p> +<p>在 kustomization 中，ConfigMap 对象名称可能会通过 <code>namePrefix</code> 、<code>nameSuffix</code> 或 <code>hashing</code> 来更改 CRD 对象中该 ConfigMap 对象的名称， +引用时需要以相同的方式使用 <code>namePrefix</code> 、 <code>nameSuffix</code> 或 <code>hashing</code> 来进行更新。</p> +<p>Annotations 可以放入 openAPI 的定义中：</p> +<ul> +<li>&ldquo;x-kubernetes-annotation&rdquo;: &quot;&rdquo;</li> +<li>&ldquo;x-kubernetes-label-selector&rdquo;: &quot;&rdquo;</li> +<li>&ldquo;x-kubernetes-identity&rdquo;: &quot;&rdquo;</li> +<li>&ldquo;x-kubernetes-object-ref-api-version&rdquo;: &ldquo;v1&rdquo;,</li> +<li>&ldquo;x-kubernetes-object-ref-kind&rdquo;: &ldquo;Secret&rdquo;,</li> +<li>&ldquo;x-kubernetes-object-ref-name-key&rdquo;: &ldquo;name&rdquo;,</li> +</ul> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">crds</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- crds/typeA.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- crds/typeB.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div> + + + + + Api-Reference: generatorOptions + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/generatoroptions/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/generatoroptions/ + + + + <p>此外，在每个生成器中，还可以按每个资源级别设置 generatorOptions，具体使用方法请参见<a href="https://kubernetes-sigs.github.io/kustomize/kustomize/zh/api-reference/kustomization/configmapgenerator">configMapGenerator</a>和<a href="https://kubernetes-sigs.github.io/kustomize/kustomize/zh/api-reference/kustomization/secretgenerator">secretGenerator</a>。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">generatorOptions</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#8f5902;font-style:italic"># labels to add to all generated resources</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kustomize.generated.resources</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>somevalue<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#8f5902;font-style:italic"># annotations to add to all generated resources</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">annotations</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kustomize.generated.resource</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>somevalue<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#8f5902;font-style:italic"># disableNameSuffixHash is true disables the default behavior of adding a</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#8f5902;font-style:italic"># suffix to the names of generated resources that is a hash of</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#8f5902;font-style:italic"># the resource contents.</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">disableNameSuffixHash</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">true</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div> + + + + + Api-Reference: images + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/images/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/images/ + + + + <p>修改镜像的名称、tag 或 image digest ，而无需使用 patches 。例如，对于这种 kubernetes Deployment 片段：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>...<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">template</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">containers</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>mypostgresdb<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">image</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>postgres<span style="color:#000;font-weight:bold">:</span><span style="color:#0000cf;font-weight:bold">8</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginxapp<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">image</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#000;font-weight:bold">:</span><span style="color:#0000cf;font-weight:bold">1.7.9</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>myapp<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">image</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-demo-app<span style="color:#000;font-weight:bold">:</span>latest<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alpine-app<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">image</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alpine<span style="color:#000;font-weight:bold">:</span><span style="color:#0000cf;font-weight:bold">3.7</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>想要将 <code>image</code> 做如下更改：</p> +<ul> +<li>将 <code>postgres:8</code> 改为 <code>my-registry/my-postgres:v1</code></li> +<li>将 nginx tag 从 <code>1.7.9</code> 改为 <code>1.8.0</code></li> +<li>将镜像名称 <code>my-demo-app</code> 改为 <code>my-app</code></li> +<li>将 alpine 的 tag <code>3.7</code> 改为 digest 值</li> +</ul> +<p>只需在 <em>kustomization</em> 中添加以下内容：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">images</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>postgres<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">newName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-registry/my-postgres<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">newTag</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">newTag</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#0000cf;font-weight:bold">1.8.0</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-demo-app<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">newName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-app<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alpine<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">digest</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>sha256<span style="color:#000;font-weight:bold">:</span>24a0c4b4a4c0eb97a1aabb8e29f18e917d05abfe1b7a7c07857230879ce7d3d3<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div> + + + + + Api-Reference: namePrefix + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/nameprefix/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/nameprefix/ + + + + <div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">namePrefix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alices-<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>deployment 名称从 <code>wordpress</code> 变为 <code>alices-wordpress</code>。</p> + + + + + + Api-Reference: namespace + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/namespace/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/namespace/ + + + + <div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-namespace<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>如果在资源上设置了现有 namespace，则将覆盖现有 namespace；如果在资源上未设置现有 namespace，则使用现有 namespace。</p> + + + + + + Api-Reference: nameSuffix + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/namesuffix/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/namesuffix/ + + + + <div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">nameSuffix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>-v2<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>deployment 名称从 <code>wordpress</code> 变为 <code>wordpress-v2</code>。</p> +<p><strong>注意:</strong> 如果资源类型是 ConfigMap 或 Secret，则在哈希值之前添加后缀。</p> + + + + + + Api-Reference: patches + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patches/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patches/ + + + + <p>Patches 在资源上添加或覆盖字段，Kustomization 使用 <code>patches</code> 字段来提供该功能。</p> +<p><code>patches</code> 字段包含要按指定顺序应用的 patch 列表。</p> +<p>patch 可以:</p> +<ul> +<li>是一个 <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/zh/api-reference/glossary#patchstrategicmerge">strategic merge</a> patch，或者是一个 <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/zh/api-reference/glossary#patchjson6902">JSON</a> patch。</li> +<li>也可以是 patch 文件或 inline string</li> +<li>针对单个资源或多个资源</li> +</ul> +<p>目标选择器可以通过 group、version、kind、name、namespace、标签选择器和注释选择器来选择资源，选择一个或多个匹配所有<strong>指定</strong>字段的资源来应用 patch。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">patches</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>patch.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">group</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">version</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deploy.*<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labelSelector</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;env=dev&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">annotationSelector</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;zone=west&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">patch</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>|<span style="color:#8f5902;font-style:italic">- +</span><span style="color:#8f5902;font-style:italic"> - op: replace</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>/some/existing/path<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>new<span style="color:#f8f8f8;text-decoration:underline"> </span>value<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>MyKind<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labelSelector</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;env=dev&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>patch 目标选择器的 <code>name</code> 和 <code>namespace</code> 字段是自动锚定的正则表达式。这意味着 <code>myapp</code> 的值相当于 <code>^myapp$</code>。</p> + + + + + + Api-Reference: patchesJson6902 + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patchesjson6902/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patchesjson6902/ + + + + <p>patchesJson6902 列表中的每个条目都应可以解析为 kubernetes 对象和将应用于该对象的 <a href="https://tools.ietf.org/html/rfc6902">JSON patch</a>。</p> +<p>目标字段指向的 kubernetes 对象的 group、 version、 kind、 name 和 namespace 在同一 kustomization 内 path 字段内容是 JSON patch 文件的相对路径。</p> +<p>patch 文件中的内容可以如下这种 JSON 格式：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-json" data-lang="json"> <span style="color:#000;font-weight:bold">[</span> + <span style="color:#000;font-weight:bold">{</span><span style="color:#204a87;font-weight:bold">&#34;op&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;add&#34;</span><span style="color:#000;font-weight:bold">,</span> <span style="color:#204a87;font-weight:bold">&#34;path&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;/some/new/path&#34;</span><span style="color:#000;font-weight:bold">,</span> <span style="color:#204a87;font-weight:bold">&#34;value&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;value&#34;</span><span style="color:#000;font-weight:bold">},</span> + <span style="color:#000;font-weight:bold">{</span><span style="color:#204a87;font-weight:bold">&#34;op&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;replace&#34;</span><span style="color:#000;font-weight:bold">,</span> <span style="color:#204a87;font-weight:bold">&#34;path&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;/some/existing/path&#34;</span><span style="color:#000;font-weight:bold">,</span> <span style="color:#204a87;font-weight:bold">&#34;value&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;new value&#34;</span><span style="color:#000;font-weight:bold">}</span> + <span style="color:#000;font-weight:bold">]</span> +</code></pre></div><p>也可以使用 YAML 格式表示：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml">- <span style="color:#204a87;font-weight:bold">op</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>add<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>/some/new/path<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>value<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">op</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>replace<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>/some/existing/path<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>new<span style="color:#f8f8f8;text-decoration:underline"> </span>value<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">patchesJson6902</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">version</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>add_init_container.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">version</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>add_service_annotation.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>patch 内容也可以是一个inline string：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">patchesJson6902</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">version</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">patch</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>|<span style="color:#8f5902;font-style:italic">- +</span><span style="color:#8f5902;font-style:italic"> - op: add</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>/some/new/path<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>value<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">op</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>replace<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>/some/existing/path<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;new value&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div> + + + + + Api-Reference: patchesStrategicMerge + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patchesstrategicmerge/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patchesstrategicmerge/ + + + + <p>此列表中的每个条目都应可以解析为 <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/sig-api-machinery/strategic-merge-patch.md">StrategicMergePatch</a>.</p> +<p>这些（也可能是部分的）资源文件中的 name 必须与已经通过 <code>resources</code> 加载的 name 字段匹配，或者通过 <code>bases</code> 中的 name 字段匹配。这些条目将用于 <em>patch</em>（修改）已知资源。</p> +<p>推荐使用小的 patches，例如：修改内存的 request/limit，更改 ConfigMap 中的 env 变量等。小的 patches 易于维护和查看，并且易于在 overlays 中混合使用。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">patchesStrategicMerge</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- service_port_8888.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- deployment_increase_replicas.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- deployment_increase_memory.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>patch 内容也可以是一个inline string：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">patchesStrategicMerge</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- |<span style="color:#8f5902;font-style:italic">- +</span><span style="color:#8f5902;font-style:italic"> apiVersion: apps/v1</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">template</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">containers</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">image</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nignx<span style="color:#000;font-weight:bold">:</span>latest<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>请注意，kustomize 不支持同一个 patch 对象中包含多个 <em>删除</em> 指令。要从一个对象中删除多个字段或切片元素，需要创建一个单独的 patch，以执行所有需要的删除。</p> + + + + + + Api-Reference: replicas + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/replicas/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/replicas/ + + + + <p>对于如下 kubernetes Deployment 片段：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#8f5902;font-style:italic"># deployment.yaml</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deployment-name<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">replicas</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#0000cf;font-weight:bold">3</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>在 kustomization 中添加以下内容，将副本数更改为 5：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">replicas</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deployment-name<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">count</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#0000cf;font-weight:bold">5</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>该字段内容为列表，所以可以同时修改许多资源。</p> +<p>由于这个声明无法设置 <code>kind:</code> 或 <code>group:</code>，所以他只能匹配如下资源中的一种：</p> +<ul> +<li><code>Deployment</code></li> +<li><code>ReplicationController</code></li> +<li><code>ReplicaSet</code></li> +<li><code>StatefulSet</code></li> +</ul> +<p>对于更复杂的用例，请使用 patch 。</p> + + + + + + Api-Reference: resources + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/resources/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/resources/ + + + + <p>该条目可以是指向本地目录的相对路径，也可以是指向远程仓库中的目录的 URL，例如：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">resources</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- myNamespace.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- sub-dir/some-deployment.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- ../../commonbase<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- github.com/kubernetes-sigs/kustomize/examples/multibases<span style="color:#000;font-weight:bold">?</span>ref=v1<span style="color:#0000cf;font-weight:bold">.0.6</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- deployment.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- github.com/kubernets-sigs/kustomize/examples/helloWorld<span style="color:#000;font-weight:bold">?</span>ref=test-branch<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>将以深度优先的顺序读取和处理资源。</p> +<p>文件应包含 YAML 格式的 k8s 资源。一个资源描述文件可以含有多个由（<code>---</code>）分隔的资源。 +应该包含 <code>resources</code> 字段的 kustomization 文件的指定文件目录的相对路径。</p> +<p>目录规范可以是相对、绝对或部分的 URL。URL 规范应遵循 <a href="https://github.com/hashicorp/go-getter#url-format">hashicorp URL</a> 格式。该目录必须包含 <code>kustomization.yaml</code> 文件。</p> + + + + + + Api-Reference: secretGenerator + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/secretegenerator/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/secretegenerator/ + + + + <p>列表中的每个条目都将生成一个 Secret（合计可以生成 n 个 Secrets）。</p> +<p>功能与之前描述的 <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/zh/api-reference/kustomization/configmapgenerator">configMapGenerator</a> 字段类似。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">secretGenerator</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>app-tls<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- secret/tls.cert<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- secret/tls.key<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">type</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;kubernetes.io/tls&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>app-tls-namespaced<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#8f5902;font-style:italic"># you can define a namespace to generate</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#8f5902;font-style:italic"># a secret in, defaults to: &#34;default&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- tls.crt=catsecret/tls.cert<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- tls.key=secret/tls.key<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">type</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;kubernetes.io/tls&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>env_file_secret<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">envs</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- env.txt<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">type</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Opaque<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>secret-with-annotation<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- app-config.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">type</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Opaque<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">options</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">annotations</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app_config</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;true&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app.kubernetes.io/name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;app2&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div> + + + + + Api-Reference: vars + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/vars/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/vars/ + + + + <p>Vars 用于从一个 resource 字段中获取值，并将该值插入指定位置 - 反射功能。</p> +<p>例如，假设需要在容器的 command 中指定了 Service 对象的名称，并在容器的 env 中指定了 Secret 对象的名称来确保以下内容可以正常工作：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">containers</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">image</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>myimage<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">command</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#000;font-weight:bold">[</span><span style="color:#4e9a06">&#34;start&#34;</span><span style="color:#000;font-weight:bold">,</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;--host&#34;</span><span style="color:#000;font-weight:bold">,</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;$(MY_SERVICE_NAME)&#34;</span><span style="color:#000;font-weight:bold">]</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">env</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>SECRET_TOKEN<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>$(SOME_SECRET_NAME)<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>则可以在 <code>vars：</code> 中添加如下内容：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>kustomize.config.k8s.io/v1beta1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Kustomization<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">vars</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>SOME_SECRET_NAME<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">objref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Secret<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-secret<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>MY_SERVICE_NAME<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">objref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldpath</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>metadata.name<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ANOTHER_DEPLOYMENTS_POD_RESTART_POLICY<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">objref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps/v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldpath</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>spec.template.spec.restartPolicy<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>var 是包含该对象的变量名、对象引用和字段引用的元组。</p> +<p>字段引用是可选的，默认为 <code>metadata.name</code>，这是正常的默认值，因为 kustomize 用于生成或修改 resources 的名称。</p> +<p>在撰写本文档时，仅支持字符串类型字段，不支持 ints，bools，arrays 等。例如，在某些pod模板的容器编号2中提取镜像的名称是不可能的。</p> +<p>变量引用，即字符串 &lsquo;$(FOO)&rsquo; ，只能放在 kustomize 配置指定的特定对象的特定字段中。</p> +<p>关于 vars 的默认配置数据可以查看： +<a href="https://kubernetes-sigs.github.io/kustomize/api/konfig/builtinpluginconsts/varreference.go">/api/konfig/builtinpluginconsts/varreference.go</a></p> +<p>默认目标是所有容器 command args 和 env 字段。</p> +<p>Vars <em>不应该</em> 被用于 kustomize 已经处理过的配置中插入 names 。 +例如， Deployment 可以通过 name 引用 ConfigMap ，如果 kustomize 更改 ConfigMap 的名称，则知道更改 Deployment 中的引用的 name 。</p> + + + + + + diff --git a/docs/zh/api-reference/kustomization/nameprefix/index.html b/docs/zh/api-reference/kustomization/nameprefix/index.html new file mode 100644 index 000000000..d76c1d013 --- /dev/null +++ b/docs/zh/api-reference/kustomization/nameprefix/index.html @@ -0,0 +1,885 @@ + + + + + + + + + + + + + + + + + + + + + + + +namePrefix | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + namePrefix | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    namePrefix

    +
    为所有资源和引用的名称添加前缀。
    + 
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namePrefix: alices-
+

    deployment 名称从 wordpress 变为 alices-wordpress。

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/nameprefix/index.xml b/docs/zh/api-reference/kustomization/nameprefix/index.xml new file mode 100644 index 000000000..5e3a6f23f --- /dev/null +++ b/docs/zh/api-reference/kustomization/nameprefix/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – namePrefix + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/nameprefix/ + Recent content in namePrefix on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/namespace/index.html b/docs/zh/api-reference/kustomization/namespace/index.html new file mode 100644 index 000000000..62028c3d5 --- /dev/null +++ b/docs/zh/api-reference/kustomization/namespace/index.html @@ -0,0 +1,885 @@ + + + + + + + + + + + + + + + + + + + + + + + +namespace | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + namespace | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    namespace

    +
    为所有资源添加 namespace。
    + 
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: my-namespace
+

    如果在资源上设置了现有 namespace，则将覆盖现有 namespace；如果在资源上未设置现有 namespace，则使用现有 namespace。

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/namespace/index.xml b/docs/zh/api-reference/kustomization/namespace/index.xml new file mode 100644 index 000000000..791ecce88 --- /dev/null +++ b/docs/zh/api-reference/kustomization/namespace/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – namespace + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/namespace/ + Recent content in namespace on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/namesuffix/index.html b/docs/zh/api-reference/kustomization/namesuffix/index.html new file mode 100644 index 000000000..3ddf3c812 --- /dev/null +++ b/docs/zh/api-reference/kustomization/namesuffix/index.html @@ -0,0 +1,886 @@ + + + + + + + + + + + + + + + + + + + + + + + +nameSuffix | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + nameSuffix | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    nameSuffix

    +
    为所有资源和引用的名称添加后缀。
    + 
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+nameSuffix: -v2
+

    deployment 名称从 wordpress 变为 wordpress-v2。

    +

    注意: 如果资源类型是 ConfigMap 或 Secret，则在哈希值之前添加后缀。

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/namesuffix/index.xml b/docs/zh/api-reference/kustomization/namesuffix/index.xml new file mode 100644 index 000000000..86f88cd19 --- /dev/null +++ b/docs/zh/api-reference/kustomization/namesuffix/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – nameSuffix + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/namesuffix/ + Recent content in nameSuffix on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/patches/index.html b/docs/zh/api-reference/kustomization/patches/index.html new file mode 100644 index 000000000..09027b003 --- /dev/null +++ b/docs/zh/api-reference/kustomization/patches/index.html @@ -0,0 +1,909 @@ + + + + + + + + + + + + + + + + + + + + + + + +patches | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + patches | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    patches

    +
    Patch resources
    +

    Patches 在资源上添加或覆盖字段，Kustomization 使用 patches 字段来提供该功能。

    +

    patches 字段包含要按指定顺序应用的 patch 列表。

    +

    patch 可以:

    +
      +
    • 是一个 strategic merge patch，或者是一个 JSON patch。
      • +
    • 也可以是 patch 文件或 inline string
      • +
    • 针对单个资源或多个资源
      • +
    +

    目标选择器可以通过 group、version、kind、name、namespace、标签选择器和注释选择器来选择资源，选择一个或多个匹配所有指定字段的资源来应用 patch。

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+patches:
+- path: patch.yaml
+  target:
+    group: apps
+    version: v1
+    kind: Deployment
+    name: deploy.*
+    labelSelector: "env=dev"
+    annotationSelector: "zone=west"
+- patch: |-
+    - op: replace
+      path: /some/existing/path
+      value: new value
+  target:
+    kind: MyKind
+    labelSelector: "env=dev"
+

    patch 目标选择器的 name 和 namespace 字段是自动锚定的正则表达式。这意味着 myapp 的值相当于 ^myapp$。

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/patches/index.xml b/docs/zh/api-reference/kustomization/patches/index.xml new file mode 100644 index 000000000..55847fe49 --- /dev/null +++ b/docs/zh/api-reference/kustomization/patches/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – patches + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patches/ + Recent content in patches on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/patchesjson6902/index.html b/docs/zh/api-reference/kustomization/patchesjson6902/index.html new file mode 100644 index 000000000..33520a7f7 --- /dev/null +++ b/docs/zh/api-reference/kustomization/patchesjson6902/index.html @@ -0,0 +1,924 @@ + + + + + + + + + + + + + + + + + + + + + + + +patchesJson6902 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + patchesJson6902 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    patchesJson6902

    +
    使用 json 6902 标准 Patch resources
    +

    patchesJson6902 列表中的每个条目都应可以解析为 kubernetes 对象和将应用于该对象的 JSON patch。

    +

    目标字段指向的 kubernetes 对象的 group、 version、 kind、 name 和 namespace 在同一 kustomization 内 path 字段内容是 JSON patch 文件的相对路径。

    +

    patch 文件中的内容可以如下这种 JSON 格式：

    +
     [
+   {"op": "add", "path": "/some/new/path", "value": "value"},
+   {"op": "replace", "path": "/some/existing/path", "value": "new value"}
+ ]
+

    也可以使用 YAML 格式表示：

    +
    - op: add
+  path: /some/new/path
+  value: value
+- op: replace
+  path: /some/existing/path
+  value: new value
+
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+patchesJson6902:
+- target:
+    version: v1
+    kind: Deployment
+    name: my-deployment
+  path: add_init_container.yaml
+- target:
+    version: v1
+    kind: Service
+    name: my-service
+  path: add_service_annotation.yaml
+

    patch 内容也可以是一个inline string：

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+patchesJson6902:
+- target:
+    version: v1
+    kind: Deployment
+    name: my-deployment
+  patch: |-
+    - op: add
+      path: /some/new/path
+      value: value
+    - op: replace
+      path: /some/existing/path
+      value: "new value"
+
    +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/patchesjson6902/index.xml b/docs/zh/api-reference/kustomization/patchesjson6902/index.xml new file mode 100644 index 000000000..c4355cf63 --- /dev/null +++ b/docs/zh/api-reference/kustomization/patchesjson6902/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – patchesJson6902 + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patchesjson6902/ + Recent content in patchesJson6902 on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/patchesstrategicmerge/index.html b/docs/zh/api-reference/kustomization/patchesstrategicmerge/index.html new file mode 100644 index 000000000..67ef6be50 --- /dev/null +++ b/docs/zh/api-reference/kustomization/patchesstrategicmerge/index.html @@ -0,0 +1,907 @@ + + + + + + + + + + + + + + + + + + + + + + + +patchesStrategicMerge | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + patchesStrategicMerge | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    patchesStrategicMerge

    +
    使用 strategic merge patch 标准 Patch resources.
    +

    此列表中的每个条目都应可以解析为 StrategicMergePatch.

    +

    这些（也可能是部分的）资源文件中的 name 必须与已经通过 resources 加载的 name 字段匹配，或者通过 bases 中的 name 字段匹配。这些条目将用于 patch（修改）已知资源。

    +

    推荐使用小的 patches，例如：修改内存的 request/limit，更改 ConfigMap 中的 env 变量等。小的 patches 易于维护和查看，并且易于在 overlays 中混合使用。

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+patchesStrategicMerge:
+- service_port_8888.yaml
+- deployment_increase_replicas.yaml
+- deployment_increase_memory.yaml
+

    patch 内容也可以是一个inline string：

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+patchesStrategicMerge:
+- |-
+  apiVersion: apps/v1
+  kind: Deployment
+  metadata:
+    name: nginx
+  spec:
+    template:
+      spec:
+        containers:
+          - name: nginx
+            image: nignx:latest
+

    请注意，kustomize 不支持同一个 patch 对象中包含多个 删除 指令。要从一个对象中删除多个字段或切片元素，需要创建一个单独的 patch，以执行所有需要的删除。

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/patchesstrategicmerge/index.xml b/docs/zh/api-reference/kustomization/patchesstrategicmerge/index.xml new file mode 100644 index 000000000..c1d7f84ff --- /dev/null +++ b/docs/zh/api-reference/kustomization/patchesstrategicmerge/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – patchesStrategicMerge + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patchesstrategicmerge/ + Recent content in patchesStrategicMerge on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/replicas/index.html b/docs/zh/api-reference/kustomization/replicas/index.html new file mode 100644 index 000000000..825726b1d --- /dev/null +++ b/docs/zh/api-reference/kustomization/replicas/index.html @@ -0,0 +1,903 @@ + + + + + + + + + + + + + + + + + + + + + + + +replicas | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + replicas | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    replicas

    +
    修改资源的副本数。
    +

    对于如下 kubernetes Deployment 片段：

    +
    # deployment.yaml
+kind: Deployment
+metadata:
+  name: deployment-name
+spec:
+  replicas: 3
+

    在 kustomization 中添加以下内容，将副本数更改为 5：

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+replicas:
+- name: deployment-name
+  count: 5
+

    该字段内容为列表，所以可以同时修改许多资源。

    +

    由于这个声明无法设置 kind: 或 group:，所以他只能匹配如下资源中的一种：

    +
      +
    • Deployment
      • +
    • ReplicationController
      • +
    • ReplicaSet
      • +
    • StatefulSet
      • +
    +

    对于更复杂的用例，请使用 patch 。

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/replicas/index.xml b/docs/zh/api-reference/kustomization/replicas/index.xml new file mode 100644 index 000000000..067d5dda6 --- /dev/null +++ b/docs/zh/api-reference/kustomization/replicas/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – replicas + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/replicas/ + Recent content in replicas on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/resources/index.html b/docs/zh/api-reference/kustomization/resources/index.html new file mode 100644 index 000000000..2a19b9bcf --- /dev/null +++ b/docs/zh/api-reference/kustomization/resources/index.html @@ -0,0 +1,895 @@ + + + + + + + + + + + + + + + + + + + + + + + +resources | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + resources | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    resources

    +
    包含的资源。
    +

    该条目可以是指向本地目录的相对路径，也可以是指向远程仓库中的目录的 URL，例如：

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- myNamespace.yaml
+- sub-dir/some-deployment.yaml
+- ../../commonbase
+- github.com/kubernetes-sigs/kustomize/examples/multibases?ref=v1.0.6
+- deployment.yaml
+- github.com/kubernets-sigs/kustomize/examples/helloWorld?ref=test-branch
+

    将以深度优先的顺序读取和处理资源。

    +

    文件应包含 YAML 格式的 k8s 资源。一个资源描述文件可以含有多个由（---）分隔的资源。 +应该包含 resources 字段的 kustomization 文件的指定文件目录的相对路径。

    +

    目录规范可以是相对、绝对或部分的 URL。URL 规范应遵循 hashicorp URL 格式。该目录必须包含 kustomization.yaml 文件。

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/resources/index.xml b/docs/zh/api-reference/kustomization/resources/index.xml new file mode 100644 index 000000000..9a91c4cf9 --- /dev/null +++ b/docs/zh/api-reference/kustomization/resources/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – resources + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/resources/ + Recent content in resources on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/secretegenerator/index.html b/docs/zh/api-reference/kustomization/secretegenerator/index.html new file mode 100644 index 000000000..2218f6f66 --- /dev/null +++ b/docs/zh/api-reference/kustomization/secretegenerator/index.html @@ -0,0 +1,912 @@ + + + + + + + + + + + + + + + + + + + + + + + +secretGenerator | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + secretGenerator | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    secretGenerator

    +
    生成 Secret 资源。
    +

    列表中的每个条目都将生成一个 Secret（合计可以生成 n 个 Secrets）。

    +

    功能与之前描述的 configMapGenerator 字段类似。

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+secretGenerator:
+- name: app-tls
+  files:
+  - secret/tls.cert
+  - secret/tls.key
+  type: "kubernetes.io/tls"
+- name: app-tls-namespaced
+  # you can define a namespace to generate
+  # a secret in, defaults to: "default"
+  namespace: apps
+  files:
+  - tls.crt=catsecret/tls.cert
+  - tls.key=secret/tls.key
+  type: "kubernetes.io/tls"
+- name: env_file_secret
+  envs:
+  - env.txt
+  type: Opaque
+- name: secret-with-annotation
+  files:
+  - app-config.yaml
+  type: Opaque
+  options:
+    annotations:
+      app_config: "true"
+    labels:
+      app.kubernetes.io/name: "app2"
+
    +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/secretegenerator/index.xml b/docs/zh/api-reference/kustomization/secretegenerator/index.xml new file mode 100644 index 000000000..cf346bd07 --- /dev/null +++ b/docs/zh/api-reference/kustomization/secretegenerator/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – secretGenerator + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/secretegenerator/ + Recent content in secretGenerator on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/api-reference/kustomization/vars/index.html b/docs/zh/api-reference/kustomization/vars/index.html new file mode 100644 index 000000000..c77a63939 --- /dev/null +++ b/docs/zh/api-reference/kustomization/vars/index.html @@ -0,0 +1,922 @@ + + + + + + + + + + + + + + + + + + + + + + + +vars | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + vars | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    vars

    +
    Substitute name references.
    +

    Vars 用于从一个 resource 字段中获取值，并将该值插入指定位置 - 反射功能。

    +

    例如，假设需要在容器的 command 中指定了 Service 对象的名称，并在容器的 env 中指定了 Secret 对象的名称来确保以下内容可以正常工作：

    +
    
+containers:
+  - image: myimage
+    command: ["start", "--host", "$(MY_SERVICE_NAME)"]
+    env:
+    - name: SECRET_TOKEN
+      value: $(SOME_SECRET_NAME)
+

    则可以在 vars： 中添加如下内容：

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+vars:
+- name: SOME_SECRET_NAME
+  objref:
+    kind: Secret
+    name: my-secret
+    apiVersion: v1
+- name: MY_SERVICE_NAME
+  objref:
+    kind: Service
+    name: my-service
+    apiVersion: v1
+  fieldref:
+    fieldpath: metadata.name
+- name: ANOTHER_DEPLOYMENTS_POD_RESTART_POLICY
+  objref:
+    kind: Deployment
+    name: my-deployment
+    apiVersion: apps/v1
+  fieldref:
+    fieldpath: spec.template.spec.restartPolicy
+

    var 是包含该对象的变量名、对象引用和字段引用的元组。

    +

    字段引用是可选的，默认为 metadata.name，这是正常的默认值，因为 kustomize 用于生成或修改 resources 的名称。

    +

    在撰写本文档时，仅支持字符串类型字段，不支持 ints，bools，arrays 等。例如，在某些pod模板的容器编号2中提取镜像的名称是不可能的。

    +

    变量引用，即字符串 ‘$(FOO)’ ，只能放在 kustomize 配置指定的特定对象的特定字段中。

    +

    关于 vars 的默认配置数据可以查看： +/api/konfig/builtinpluginconsts/varreference.go

    +

    默认目标是所有容器 command args 和 env 字段。

    +

    Vars 不应该 被用于 kustomize 已经处理过的配置中插入 names 。 +例如， Deployment 可以通过 name 引用 ConfigMap ，如果 kustomize 更改 ConfigMap 的名称，则知道更改 Deployment 中的引用的 name 。

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/api-reference/kustomization/vars/index.xml b/docs/zh/api-reference/kustomization/vars/index.xml new file mode 100644 index 000000000..88aa55e4b --- /dev/null +++ b/docs/zh/api-reference/kustomization/vars/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – vars + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/vars/ + Recent content in vars on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/blog/2018/05/21/v1.0.1/index.html b/docs/zh/blog/2018/05/21/v1.0.1/index.html new file mode 100644 index 000000000..fcb68e16b --- /dev/null +++ b/docs/zh/blog/2018/05/21/v1.0.1/index.html @@ -0,0 +1,435 @@ + + + + + + + + + + + + + + + + + + + + + + +v1.0.1 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + v1.0.1 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + RSS + + +
    +

    v1.0.1

    +
    Kustomize v1.0.1
    +
    + + +
    +

    Initial release after move from github.com/kubernetes/kubectl to github.com/kubernetes-sigs/kustomize.

    +

    History

    +
      +
    • May 2018: v1.0 after move to github.com/kubernetes-sigs/kubectl +from github.com/kubernetes/kubectl. +Has kustomization file, bases, overlays, basic transforms.
      • +
    • Apr 2018: s/kinflate/kustomize/, s/manifest/kustomization/
      • +
    • Oct 2017: s/kexpand/kinflate/
      • +
    • Sep 2017: kexpand starts +in github.com/kubernetes/kubectl
      • +
    • Aug 2017: DAM authored by Brian Grant
      • +
    + + + + + +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/blog/2019/02/05/v2.0.0/index.html b/docs/zh/blog/2019/02/05/v2.0.0/index.html new file mode 100644 index 000000000..cb998c380 --- /dev/null +++ b/docs/zh/blog/2019/02/05/v2.0.0/index.html @@ -0,0 +1,538 @@ + + + + + + + + + + + + + + + + + + + + + + +v2.0.0 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + v2.0.0 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + RSS + + +
    +

    v2.0.0

    +
    Kustomize v2.0.0
    +
    + + +
    +

    After security review, a field used in secret +generation (see below) was removed from the +definition of a kustomization file with no +mechanism to convert it to a new form. Also, the +set of files accessible from a kustomization file +has been further constrained.

    +

    Per the versioning policy, +backward incompatible changes trigger an increment +of the major version number, hence we go +from 1.0.11 to 2.0.0. We’re taking this major +version increment opportunity to remove some +already deprecated fields, and the code paths +associated with them.

    +

    Backward Incompatible Changes

    +

    Kustomization Path Constraints

    +

    A kustomization file can specify paths to other +files, including resources, patches, configmap +generation data, secret generation data and +bases. In the case of a base, the path can be a +git URL instead.

    +

    In 1.x, these paths had to be relative to the +current kustomization directory (the location of +the kustomization file used in the build +command).

    +

    In 2.0, bases can continue to specify, via +relative paths, kustomizations outside the current +kustomization directory. But non-base paths are +constrained to terminate in or below the current +kustomization directory. Further, bases specified +via a git URL may not reference files outside of +the directory used to clone the repository.

    +

    Kustomization Field Removals

    +

    patches

    +

    patches was deprecated and replaced by +patchesStrategicMerge when patchesJson6902 was +introduced. In Kustomize 2.0.0, patches is +removed. Please use patchesStrategicMerge +instead.

    +

    imageTags

    +

    imageTags is replaced by images since images +can provide more features to change image names, +registries, tags and digests.

    +

    secretGenerator/commands

    +

    commands is removed from SecretGenerator due to +a security concern. One can use files or +literals, similar to ConfigMapGenerator, to +generate a secret.

    +
    secretGenerator:
+- name: app-tls
+  files:
+    - secret/tls.cert
+    - secret/tls.key
+  type: "kubernetes.io/tls"
+

    Compatible Changes (New Features)

    +

    As this release is triggered by a security change, +there are no major new features to announce. A few +things that are worth mentioning in this release +are:

    +
      +
    • +

      More than 40 issues closed since 1.0.11 +release (including many extensions to +transformation rules).

      +
      • +
    • +

      Users can run kustomize edit fix to migrate a +kustomization file working with previous +versions to one working with 2.0.0. For example, +a kustomization.yaml with following content

      +
      patches:
+  - deployment-patch.yaml
+imageTags:
+  - name: postgres
+    newTag: v1
+

      will be converted to

      +
      apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+patchesStrategicMerge:
+  - deployment-patch.yaml
+images:
+  - name: postgres
+    newTag: v1
+
      • +
    • +

      Kustomization filename

      +

      In previous versions, the name of a +kustomization file had to be +kustomization.yaml. +Kustomize allows kustomization.yaml, +kustomization.yml and +Kustomization. In a directory, only one of +those filenames is allowed. If there are more +than one found, Kustomize will exit with an +error. Please select the best filename for your +use cases.

      +
      • +
    • +

      Cancelled plans to deprecate applying prefix/suffix to namespace. +The deprecation warning

      +
      Adding nameprefix and namesuffix to Namespace resource will be deprecated in next release.
+

      was removed.

      +
      • +
    + + + + + +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/blog/2019/06/18/v2.1.0/index.html b/docs/zh/blog/2019/06/18/v2.1.0/index.html new file mode 100644 index 000000000..622e402e6 --- /dev/null +++ b/docs/zh/blog/2019/06/18/v2.1.0/index.html @@ -0,0 +1,607 @@ + + + + + + + + + + + + + + + + + + + + + + +v2.1.0 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + v2.1.0 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + RSS + + +
    +

    v2.1.0

    +
    Kustomize v2.1.0
    +
    + + +
    +

    Go modules, resource ordering respected, generator and transformer plugins, eased +loading restrictions, the notion of inventory, eased replica count modification. +About ~90 issues closed since v2.0.3 in ~400 commits.

    +

    Download here.

    +

    Go modules

    +

    gopher with boxes

    +

    Kustomize now defines its dependencies in a top +level go.mod file. This is the first step +towards a package structure intentially exported +as one or more Go modules for use in other +programs (kubectl, kubebuilder, etc.) and in +kustomize plugins (see below).

    +

    Resource ordering

    +

    sort order retained

    +

    Kustomize now retains the depth-first order of +resources as read, a frequently requested +feature.

    +

    This means resource order can be controlled +by editting kustomization files. This is +also vital to applying user-defined +transformations (plugins) in a particular +order.

    +

    Nothing needs to be done to activate this; +it happens automatically.

    +

    The build command now accepts a --reorder +flag with values legacy and none, +with a default value of legacy.

    +

    legacy means apply an ordering based on +GVK, that currently emits Namespace objects +first, and ValidatingWebhookConfiguration +objects last. This means that despite +automatic retention of load order, your +build output won’t change by default.

    +

    none means don’t reorder the resources before +output. Specify this to see output order +respect input order.

    +

    Generator and transformer plugins

    +

    kid putting knife in electrical outlet

    +

    Since the beginning (as kinflate back in Sep +2017), kustomize has read or generated resources, +applied a series of pipelined transformation to +them, and emitted the result to stdout.

    +

    At that time, the only way to change the behavior +of a generator (e.g. a secret generator), or +change the behavior of a transformer (e.g. a name +changer, or json patcher), was to modify source +code and put out a release.

    +

    v1.0.9 introduced generator options as a means +to change the behavior of the only two generators +available at the time - Secret and ConfigMap +generators. It also introduced +transformer configs as a way to fine tune the +targets of transformations (e.g. to which fields +selectors should be added). Most of the feature +requests for kustomize revolve around changing the +behavior of the builtin generators and +transformers.

    +

    v2.1.0 adds an alpha plugin framework, that +encourages users to write their own generators or +transformers, declaring them as kubernetes +objects just like everything else, and apply them +as part of the kustomize build process.

    +

    To inform the API exposed to plugins, and to +confirm that the plugin framework can offer plugin +authors the same capabilities as builtin +operations, all the builtin generators and +tranformers have been converted to plugin form +(with one exceptions awaiting Go module +refinements). This means that adding, say, a +secretGenerator or commonAnnotations directive +to your kustomization will (in v2.1.0) trigger +execution of +code committed as a plugin.

    +

    For more information, see the +kustomize plugin documentation.

    +

    Remove load restrictions

    +

    removed training wheels

    +

    The following usage:

    +
    kustomize build --load_restrictor none $target
+

    allows a kustomization.yaml file used in this +build to refer to files outside its own directory +(i.e. outside its root).

    +

    This is an opt-in to suppress a security feature +that denies this precise behavior.

    +

    This feature should only be used to allow multiple +overlays (e.g. prod, staging and dev) to share a +patch file. To share resources, use a relative +path or URL to a kustomization directory in the +resources directive.

    +

    Inventory generation for pruning

    +

    pruning dead branches

    +

    Alpha

    +

    Users can add an inventory stanza to their +kustomization file, to add a special inventory +object to the build result.

    +

    This object applies to the cluster along with +everything else in the build result and can be +used by other clients to intelligently prune +orphaned cluster resources.

    +

    For more information see the +kustomize inventory object documentation.

    +

    Field changes / deprecations

    +

    resources expanded, bases deprecated

    +

    The resources field has been generalized; it now +accepts what formerly could only be specified in +the bases field.

    +

    This change was made to allow users fine control +over resource processing order. With a distinct +bases field, bases had to be loaded separately +from resources as a group. Now, base loading may +be interleaved as desired with the loading of +resource files from the current +directory. Resource ordering +had to be respected before this feature could be +introduced.

    +

    The bases field is now deprecated, and will be +deleted in some future major release. Manage the +deprecation simply moving the arguments of the +bases field to the resources field in the +desired order, e.g.

    +
    +
    resources:
+- someResouceFile.yaml
+- someOtherResourceFile.yaml
+bases:
+- ../../someBaseDir
+
    +

    could become

    +
    +
    resources:
+- someResouceFile.yaml
+- ../../someBaseDir
+- someOtherResourceFile.yaml
+
    +

    The kustomized edit fix command will do this for +you, though it will always put the bases at the +end.

    +

    As an aside, the resources, generators and +transformers fields now all accept the same +argument format.

    +
    +

    Each field’s argument is a string list, +where each entry is either a resource (a +relative path to a YAML file) or a +kustomization (a path or URL +pointing to a directory with a kustomization +file). A kustomization directory used in this +context is called a base.

    +
    +

    The fact that the generators and transformers +field accept bases and the fact that generator +and transformer configuration objects are just +normal k8s resources means that one can generate +or transform a generator or a transformer (see +TestTransformerTransformers).

    +

    replicas field

    +

    The common task of patching a deployment to edit +the number of replicas is now made easier +with the new replicas field.

    +

    envs field

    +

    An envs sub-field has been added to both +configMapGenerator and secretGenerator, +replacing the now deprecated (and singular) +env field. The new field accepts lists, just +like its sibling fields files and literals.

    +

    Optionally use kustomize edit fix to merge +singular env field into a plural field.

    + + + + + +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/blog/2019/07/03/v3.0.0/index.html b/docs/zh/blog/2019/07/03/v3.0.0/index.html new file mode 100644 index 000000000..9d2da47ba --- /dev/null +++ b/docs/zh/blog/2019/07/03/v3.0.0/index.html @@ -0,0 +1,470 @@ + + + + + + + + + + + + + + + + + + + + + + +v3.0.0 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + v3.0.0 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + RSS + + +
    +

    v3.0.0

    +
    Kustomize v3.0.0
    +
    + + +
    +

    This release is basically v2.1.0, +with many post-v2.1.0 bugs fixed (in about 150 +commits) and a v3 in Go package paths.

    +

    The major version increment to v3 puts a new +floor on a stable API for plugin developers +(both Go plugin developers and exec plugin +developers who happen to use Go).

    +

    Why so soon after v2.1.0?

    +

    We made a mistake - v2.1.0 should have been +v3.0.0. Per the Go modules doc (which have +improved a great deal recently), a release that’s +already tagged v2 or higher should increment the +major version when performing their first Go +module-based release.

    +

    This advice applies to kustomize, since it was +already at major version 2 when it began using Go +modules to state its own dependencies in v2.1.0.

    +

    But the more important reason for v3 is a change +to the kustomize versioning policy, forced by +the introduction of plugins.

    +

    Historically, kustomize’s versioning policy +didn’t involve Go modules and addressed only the +command line tool’s behavior and the fields in a +kustomization file. The underlying packages were +an implementation detail, not under semantic +versioning, because they weren’t intended for +export (and should have all been under +internal). Thus although the v2.1.0 CLI is +backward compatible with v2.0.3, the underlying +package APIs are not.

    +

    With Go modules, the go tool must assume that Go +packages respect semantic versioning, so it can +perform minimal version selection.

    +

    With the introduction of alpha plugins, kustomize +sub-packages - in particular loader and +resmap - become part of an API formally exposed +to plugin authors, and so must be semantically +versioned. This allows plugins defined in other +repositories to clarify that they depend on +kustomize v3.0.0, and not see confusing errors +arising from incompatibilities between v2.1.0 and +v2.0.3. Hence, the jump to v3.

    +

    Aside - the set of kustomize packages outside +internal is too large, and over time, informed +by package use, this API surface must shrink. +Such shrinkage will trigger a major version +increment.

    + + + + + +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/blog/2019/07/26/v3.1.0/index.html b/docs/zh/blog/2019/07/26/v3.1.0/index.html new file mode 100644 index 000000000..9a837901a --- /dev/null +++ b/docs/zh/blog/2019/07/26/v3.1.0/index.html @@ -0,0 +1,537 @@ + + + + + + + + + + + + + + + + + + + + + + +v3.1.0 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + v3.1.0 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + RSS + + +
    +

    v3.1.0

    +
    Kustomize v3.1.0
    +
    + + +
    +

    Extended patches

    +

    Since this version, Kustomize allows applying one patch to multiple resources. This works for both Strategic Merge Patch and JSON Patch. Take a look at patch multiple objects.

    +

    Improved Resource Matching

    +

    Multiple improvements have been made to allow the user to leverage “namespace” +instead/or with “name suffix/prefix” to segregate resources.

    +

    Patch resolution improvement

    +

    The following example demonstrates how using the namespace field in the patch definition, +will let the user define two different patches against two different Deployment having the +same “deploy1” name but in different namespaces in the same Kustomize context/folder. +Unless the namespace: field has been specified in the kustomization.yaml, no namespace +value will be handled as Kubernetes default namespace.

    +
    apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: deploy1
+  namespace: main
+spec:
+  template:
+    spec:
+      containers:
+      - name: nginx
+        env:
+        - name: ANOTHERENV
+          value: TESTVALUE
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: deploy1
+  namespace: production
+spec:
+  template:
+    spec:
+      containers:
+      - name: main
+        env:
+        - name: ANOTHERENV
+          value: PRODVALUE
+

    Variable resolution improvement

    +

    It is possible to add namespace field to the variable declaration. In the following example, +two Service objects with the same elasticsearch name have been declared. +Specifying the namespace in the objRef of the corresponding varriables, allows Kustomize to +resovlve thoses variables. +If the namespace is not specified, Kustomize will handle it has a “wildcard” value.

    +

    Extract of kustomization.yaml:

    +
    vars:
+- name: elasticsearch-test-protocol
+  objref:
+    kind: Service
+    name: elasticsearch
+    namespace: test
+    apiVersion: v1
+  fieldref:
+    fieldpath: spec.ports[0].protocol
+- name: elasticsearch-dev-protocol
+  objref:
+    kind: Service
+    name: elasticsearch
+    namespace: dev
+    apiVersion: v1
+  fieldref:
+    fieldpath: spec.ports[0].protocol
+
+

    Simultaneous change of names and namespaces

    +

    Kustomize is now able to deal with simultaneous changes of name and namespace. +Special attention has been paid the handling of:

    +
      +
    • ClusterRoleBinding/RoleBinding “subjects” field,
      • +
    • ValidatingWebhookConfiguration “webhooks” field.
      • +
    +

    The user should be able to use a kustomization.yaml as shown in the example bellow +even if ClusterRoleBind,RoleBinding and ValidatingWebookConfiguration are part of the +resources he needs to declare.

    +

    Extract of kustomization.yaml:

    +
    namePrefix: pfx-
+nameSuffix: -sfx
+namespace: testnamespace
+
+resources:
+...
+

    Resource and Kustomize Context matching.

    +

    Kustomize is now able to support more aggregation patterns.

    +

    If for instance, the top level of kustomization.yaml, is simply +combining sub-components, (as in the following example), Kustomize has improved +resource matching capabilities. This removes some of the constraints which were +present on the utilization of prefix/suffix and namespace transformers in the +individual components.

    +
    resources:
+- ../component1
+- ../component2
+- ../component3
+

    Other improvements

    +
      +
    • Image transformation has been improved. This allows the user to update the sha256 of +an image with another sha256.
      • +
    • Multiple default transformer configuration entries have been added, removing the need for the +user to add them as part of the configurations: section of the kustomization.yaml.
      • +
    • kustomize help command has been tidied up.
      • +
    + + + + + +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/blog/2019/09/17/v3.2.0/index.html b/docs/zh/blog/2019/09/17/v3.2.0/index.html new file mode 100644 index 000000000..35a386bbc --- /dev/null +++ b/docs/zh/blog/2019/09/17/v3.2.0/index.html @@ -0,0 +1,446 @@ + + + + + + + + + + + + + + + + + + + + + + +v3.2.0 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + v3.2.0 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + RSS + + +
    +

    v3.2.0

    +
    Kustomize v3.2.0
    +
    + + +
    +

    Inline Patch

    +

    Since this version, Kustomize allows inline patches in all three of patchesStrategicMerge, patchesJson6902 and patches. Take a look at inline patch.

    +

    New Subcommand

    +

    Since this version, one can create a kustomization.yaml file in a directory through a create subcommand.

    +

    Create a new overlay from the base ../base

    +
    kustomize create --resources ../base
+

    Create a new kustomization detecing resources in the current directory

    +
    kustomize create --autodetect
+

    Once can also add all resources in the current directory recursively by

    +
    kustomize create --autodetect --recursive
+

    New Example Generator

    +

    A new example generator of using go-getter to download resources is added. Take a look at go-getter generator.

    + + + + + +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/blog/2019/09/26/v3.2.1/index.html b/docs/zh/blog/2019/09/26/v3.2.1/index.html new file mode 100644 index 000000000..20c52496a --- /dev/null +++ b/docs/zh/blog/2019/09/26/v3.2.1/index.html @@ -0,0 +1,431 @@ + + + + + + + + + + + + + + + + + + + + + + +v3.2.1 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + v3.2.1 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + RSS + + +
    +

    v3.2.1

    +
    Kustomize v3.2.1
    +
    + + +
    +

    This is a patch release, with no new features from 3.2.0.

    +

    It reflects a change in dependence.

    +

    The kustomize binary is now built as a client, with no special +consideration, of the set of public packages represented by the Go +module at [https://github.com/kubernetes-sigs/kustomize].

    +

    kustomize the binary is now a client of the kustomize API +represented by the public package surface presented by +https://github.com/kubernetes-sigs/kustomize/v{whatever}

    + + + + + +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/blog/2019/10/24/v3.3.0/index.html b/docs/zh/blog/2019/10/24/v3.3.0/index.html new file mode 100644 index 000000000..1a41b2b25 --- /dev/null +++ b/docs/zh/blog/2019/10/24/v3.3.0/index.html @@ -0,0 +1,530 @@ + + + + + + + + + + + + + + + + + + + + + + +v3.3.0 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + v3.3.0 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + RSS + + +
    +

    v3.3.0

    +
    Kustomize v3.3.0
    +
    + + +
    +

    Summary of changes

    +

    First release of the Go API-only module.

    +

    Many of the PRs since the last vrelease were +around restructuring the sigs.k8s.io/kustomize +repository into three Go modules instead of just one.

    +

    The reasons for this are detailed in the versioning +policy documentation, and what it means for releasing +is explained in the release process documentation.

    +

    The tl;dr is that the top level module +sigs.k8s.io/kustomize now defines the kustomize Go +API, and the kustomize CLI sits below it in an +independent module sigs.k8s.io/kustomize/kustomize.

    +

    The modules release independently, though in practice a +new release of the kustomize Go API will likely be +followed quickly by a new release of the kustomize +executable.

    +

    This is a necessary step to creating a much smaller +kustomize Go API surface that has some hope of +conforming to semantic versioning and being of some use +to clients.

    +

    The kustomize CLI will see the same kustomize Go API as +any other client.

    +

    The new semver-able API will begin with v4.0.0 (not +yet released) and be a clean break with v3 etc.

    +

    Change log since v3.2.0

    +
    3c9d828f - Have kustomize CLI depend on kustomize Go API v3.3.0 (Jeffrey Regan)
+5d800f0b - Merge pull request #1595 from monopole/threeReleases (Jeff Regan)
+4eb2d5bc - Three builders. (Jeffrey Regan)
+988af1ff - Update README.md (Jeff Regan)
+1617183e - Merge pull request #1590 from monopole/releaseProcessUpdate (Kubernetes Prow Robot)
+ee727464 - update release process doc (jregan)
+c9e7dc3b - Merge pull request #1589 from monopole/moreTestsAroundKustFileName (Jeff Regan)
+07e0e46a - improve tests for alternative kustomization file names (Jeffrey Regan)
+404d2d63 - Merge pull request #1587 from monopole/reducePgmconfig (Jeff Regan)
+baa0296a - Reduce size of pgmconfig package (Jeffrey Regan)
+0f665ac1 - Merge pull request #1544 from ptux/add-transformer-href (Jeff Regan)
+14b0a650 - Merge pull request #1581 from monopole/refactorFs (Jeff Regan)
+2d58f8b8 - Break the dep between fs and pgmconfig. (Jeffrey Regan)
+9a43ca53 - Merge pull request #1578 from nlamirault/fix/build-plugins-doc (Jeff Regan)
+5372fc6f - Merge pull request #1579 from monopole/fsPackageCleanup (Jeff Regan)
+86bc3440 - Merge pull request #1513 from nimohunter/fix_empty_list_item (Kubernetes Prow Robot)
+a014f7d4 - Merge pull request #1561 from beautytiger/dev-190925 (Jeff Regan)
+9a94bcb8 - Improve fs package and doc in prep to officially go public (Jeffrey Regan)
+07634ef0 - Merge pull request #1575 from monopole/versioning (Jeff Regan)
+995f88d6 - Update versioning notes. (jregan)
+334a6467 - Fix: documentation link for plugins (Nicolas Lamirault)
+08963ba5 - improve test code coverage in transformers (Guangming Wang)
+326fb689 - Merge pull request #1570 from bzub/1234-go_plugin_doc (Jeff Regan)
+970ce67c - Update goPluginCaveats.md (Jeff Regan)
+98d18930 - Update INSTALL.md (Jeff Regan)
+d89b448c - Fix git tag recovery in cloud build. (Jeff Regan)
+17bf9d32 - Update releasing README. (Jeff Regan)
+a99aff1d - Merge pull request #1571 from monopole/updateCloudBuildProcess (Kubernetes Prow Robot)
+a694ac7b - Update cloud build process for kustomize. (Jeffrey Regan)
+b5b11ef6 - Fix compile kustomize example. (bzub)
+fa1af6f5 - Merge pull request #1473 from richardmarshall/execpluginhash (Jeff Regan)
+9288dec0 - Fix failing BashedConfigMapTest (Jeff Regan)
+1a45dd0b - Merge pull request #1566 from monopole/releaseNotes3.2.1 (Kubernetes Prow Robot)
+592c5acf - docs: Exec plugin generator options (Richard Marshall)
+ac9424fa - tests: Add unit tests for update resource options (Richard Marshall)
+79fbe7c4 - Support resource generator options in exec plugins (Richard Marshall)
+f69d526f - v3.2.1 release notes (Jeff Regan)
+07a95a60 - Merge pull request #1565 from monopole/tweakBinaryDepsBeforeTagging (Jeff Regan)
+032b3857 - Pin the kustomize binary's dependence on kustomize libs. (jregan)
+81062959 - Merge pull request #1564 from monopole/moveKustomizeBinaryToOwnModule (Kubernetes Prow Robot)
+b82a8fd3 - Move the kustomize binary to its own module. (Jeffrey Regan)
+2d0c22d6 - Merge pull request #1562 from keleustes/tools (Kubernetes Prow Robot)
+aa342def - Pin tool versions using go modules (Ian Howell)
+10786ec0 - Merge pull request #1554 from keleustes/readme (Kubernetes Prow Robot)
+7c705687 - Update README.md to include Kubernetes 1.16 (Jerome Brette)
+e8933d97 - Merge pull request #1560 from monopole/precommitTuneup (Jeff Regan)
+9d7b6544 - Make pre-commit more portable and less tricky. (jregan)
+7a0946a9 - Merge pull request #1558 from monopole/dependOnNewPluginatorModule (Jeff Regan)
+def4f045 - Depend on new pluginator location. (Jeffrey Regan)
+2f2408f1 - Merge pull request #1559 from monopole/compressCopyright (Jeff Regan)
+3b9bcc48 - Compress copyright in the commands package. (Jeffrey Regan)
+d0429ff4 - Merge pull request #1557 from monopole/pluginatorModule (Jeff Regan)
+33deefc3 - Copy pluginator to its own module. (Jeffrey Regan)
+9b3de82b - Merge pull request #1506 from Liujingfang1/release (Jeff Regan)
+d217074f - Merge pull request #1550 from keleustes/apiversion (Kubernetes Prow Robot)
+1d90ba7c - Fix typo in apiVersion yaml declaration (Jerome Brette)
+eeeb4c36 - Merge pull request #1547 from keleustes/extensions (Kubernetes Prow Robot)
+b1faa989 - Update Ingress apiVersion to networking.k8s.io/v1beta1 (Jerome Brette)
+d8250c9e - move test case (nimohunter)
+c9500466 - add transformer href (Wang(わん))
+0c32691e - Merge pull request #1537 from jaypipes/gomod-install-note (Kubernetes Prow Robot)
+88b1d627 - Merge pull request #1541 from rtnpro/patch-1 (Jeff Regan)
+aec82066 - Update INSTALL.md (Jeff Regan)
+20c2b53a - Merge pull request #1542 from monopole/tweakFilePathsInTest (Jeff Regan)
+274b5c3b - Tweak file path handling and logging in test. (Jeffrey Regan)
+b1fdaa23 - Fix typo in transformerconfigs README (Ratnadeep Debnath)
+b5d5e70b - empty list or map item return error (nimohunter)
+2e829853 - empty list or map item return error (nimohunter)
+55941f57 - add note about GO111MODULE for source install (Jay Pipes)
+9e226001 - empty list or map item return error (nimohunter)
+77b63f96 - add release note for v3.2.0 (jingfangliu)
+
    + + + + +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/blog/index.html b/docs/zh/blog/index.html new file mode 100644 index 000000000..3ada6d9c1 --- /dev/null +++ b/docs/zh/blog/index.html @@ -0,0 +1,552 @@ + + + + + + + + + + + + + + + + + + + + + + + +Kustomize 博客 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Kustomize 博客 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + RSS + + + + + + + + + +
    +
    + +

    Posts in 2019

    +
      + +
    • +
      +
      v3.3.0
      +

      2019年10月24日 in Releases

      + + + + + + +

      Summary of changes First release of the Go API-only module. Many of the PRs since the last vrelease were around restructuring the sigs.k8s.io/kustomize repository into three Go modules instead of just one. +The reasons for this are detailed in the …

      +

      更多

      +
      +
      • + +
    • +
      +
      v3.2.1
      +

      2019年09月26日 in Releases

      + + + + + + +

      This is a patch release, with no new features from 3.2.0. +It reflects a change in dependence. +The kustomize binary is now built as a client, with no special consideration, of the set of public packages represented by the Go module at …

      +

      更多

      +
      +
      • + +
    • +
      +
      v3.2.0
      +

      2019年09月17日 in Releases

      + + + + + + +

      Inline Patch Since this version, Kustomize allows inline patches in all three of patchesStrategicMerge, patchesJson6902 and patches. Take a look at inline patch. +New Subcommand Since this version, one can create a kustomization.yaml file in a …

      +

      更多

      +
      +
      • + +
    • +
      +
      v3.1.0
      +

      2019年07月26日 in Releases

      + + + + + + +

      Extended patches Since this version, Kustomize allows applying one patch to multiple resources. This works for both Strategic Merge Patch and JSON Patch. Take a look at patch multiple objects. +Improved Resource Matching Multiple improvements have …

      +

      更多

      +
      +
      • + +
    • +
      +
      v3.0.0
      +

      2019年07月03日 in Releases

      + + + + + + +

      This release is basically v2.1.0, with many post-v2.1.0 bugs fixed (in about 150 commits) and a v3 in Go package paths. +The major version increment to v3 puts a new floor on a stable API for plugin developers (both Go plugin developers and exec …

      +

      更多

      +
      +
      • + +
    • +
      +
      v2.1.0
      +

      2019年06月18日 in Releases

      + + + + + + +

      Go modules, resource ordering respected, generator and transformer plugins, eased loading restrictions, the notion of inventory, eased replica count modification. About ~90 issues closed since v2.0.3 in ~400 commits. +Download here. +Go modules …

      +

      更多

      +
      +
      • + +
    • +
      +
      v2.0.0
      +

      2019年02月05日 in Releases

      + + + + + + +

      After security review, a field used in secret generation (see below) was removed from the definition of a kustomization file with no mechanism to convert it to a new form. Also, the set of files accessible from a kustomization file has been further …

      +

      更多

      +
      +
      • + +
    + +

    Posts in 2018

    +
      + +
    • +
      +
      v1.0.1
      +

      2018年05月21日 in Releases

      + + + + + + +

      Initial release after move from github.com/kubernetes/kubectl to github.com/kubernetes-sigs/kustomize. +History + May 2018: v1.0 after move to github.com/kubernetes-sigs/kubectl from github.com/kubernetes/kubectl. Has kustomization file, bases, …

      +

      更多

      +
      +
      • + +
    + +
    +
    +
    +
    + + + +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/blog/index.xml b/docs/zh/blog/index.xml new file mode 100644 index 000000000..da0b46c43 --- /dev/null +++ b/docs/zh/blog/index.xml @@ -0,0 +1,666 @@ + + + Kustomize – Kustomize 博客 + https://kubernetes-sigs.github.io/kustomize/zh/blog/ + Recent content in Kustomize 博客 on Kustomize + Hugo -- gohugo.io + Thu, 24 Oct 2019 00:00:00 +0000 + + + + + + + + + + + Blog: v3.3.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/10/24/v3.3.0/ + Thu, 24 Oct 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/10/24/v3.3.0/ + + + + <h2 id="summary-of-changes">Summary of changes</h2> +<h3 id="first-release-of-the-go-api-only-module">First release of the Go API-only module.</h3> +<p>Many of the PRs since the last vrelease were +around restructuring the <em>sigs.k8s.io/kustomize</em> +repository into three Go modules instead of just one.</p> +<p>The reasons for this are detailed in the <a href="https://kubernetes-sigs.github.io/kustomize/site/content/en/faq/versioningPolicy.md">versioning +policy documentation</a>, and what it means for releasing +is explained in the <a href="https://kubernetes-sigs.github.io/kustomize/releasing">release process documentation</a>.</p> +<p>The tl;dr is that the top level module +<code>sigs.k8s.io/kustomize</code> now defines the kustomize Go +API, and the <em>kustomize</em> CLI sits below it in an +independent module <code>sigs.k8s.io/kustomize/kustomize</code>.</p> +<p>The modules release independently, though in practice a +new release of the kustomize Go API will likely be +followed quickly by a new release of the <code>kustomize</code> +executable.</p> +<p>This is a necessary step to creating a much smaller +kustomize Go API surface that has some hope of +conforming to semantic versioning and being of some use +to clients.</p> +<p>The kustomize CLI will see the same kustomize Go API as +any other client.</p> +<p>The new semver-able API will begin with <code>v4.0.0</code> (not +yet released) and be a clean break with <code>v3</code> etc.</p> +<h3 id="change-log-since-v320">Change log since v3.2.0</h3> +<pre><code>3c9d828f - Have kustomize CLI depend on kustomize Go API v3.3.0 (Jeffrey Regan) +5d800f0b - Merge pull request #1595 from monopole/threeReleases (Jeff Regan) +4eb2d5bc - Three builders. (Jeffrey Regan) +988af1ff - Update README.md (Jeff Regan) +1617183e - Merge pull request #1590 from monopole/releaseProcessUpdate (Kubernetes Prow Robot) +ee727464 - update release process doc (jregan) +c9e7dc3b - Merge pull request #1589 from monopole/moreTestsAroundKustFileName (Jeff Regan) +07e0e46a - improve tests for alternative kustomization file names (Jeffrey Regan) +404d2d63 - Merge pull request #1587 from monopole/reducePgmconfig (Jeff Regan) +baa0296a - Reduce size of pgmconfig package (Jeffrey Regan) +0f665ac1 - Merge pull request #1544 from ptux/add-transformer-href (Jeff Regan) +14b0a650 - Merge pull request #1581 from monopole/refactorFs (Jeff Regan) +2d58f8b8 - Break the dep between fs and pgmconfig. (Jeffrey Regan) +9a43ca53 - Merge pull request #1578 from nlamirault/fix/build-plugins-doc (Jeff Regan) +5372fc6f - Merge pull request #1579 from monopole/fsPackageCleanup (Jeff Regan) +86bc3440 - Merge pull request #1513 from nimohunter/fix_empty_list_item (Kubernetes Prow Robot) +a014f7d4 - Merge pull request #1561 from beautytiger/dev-190925 (Jeff Regan) +9a94bcb8 - Improve fs package and doc in prep to officially go public (Jeffrey Regan) +07634ef0 - Merge pull request #1575 from monopole/versioning (Jeff Regan) +995f88d6 - Update versioning notes. (jregan) +334a6467 - Fix: documentation link for plugins (Nicolas Lamirault) +08963ba5 - improve test code coverage in transformers (Guangming Wang) +326fb689 - Merge pull request #1570 from bzub/1234-go_plugin_doc (Jeff Regan) +970ce67c - Update goPluginCaveats.md (Jeff Regan) +98d18930 - Update INSTALL.md (Jeff Regan) +d89b448c - Fix git tag recovery in cloud build. (Jeff Regan) +17bf9d32 - Update releasing README. (Jeff Regan) +a99aff1d - Merge pull request #1571 from monopole/updateCloudBuildProcess (Kubernetes Prow Robot) +a694ac7b - Update cloud build process for kustomize. (Jeffrey Regan) +b5b11ef6 - Fix compile kustomize example. (bzub) +fa1af6f5 - Merge pull request #1473 from richardmarshall/execpluginhash (Jeff Regan) +9288dec0 - Fix failing BashedConfigMapTest (Jeff Regan) +1a45dd0b - Merge pull request #1566 from monopole/releaseNotes3.2.1 (Kubernetes Prow Robot) +592c5acf - docs: Exec plugin generator options (Richard Marshall) +ac9424fa - tests: Add unit tests for update resource options (Richard Marshall) +79fbe7c4 - Support resource generator options in exec plugins (Richard Marshall) +f69d526f - v3.2.1 release notes (Jeff Regan) +07a95a60 - Merge pull request #1565 from monopole/tweakBinaryDepsBeforeTagging (Jeff Regan) +032b3857 - Pin the kustomize binary's dependence on kustomize libs. (jregan) +81062959 - Merge pull request #1564 from monopole/moveKustomizeBinaryToOwnModule (Kubernetes Prow Robot) +b82a8fd3 - Move the kustomize binary to its own module. (Jeffrey Regan) +2d0c22d6 - Merge pull request #1562 from keleustes/tools (Kubernetes Prow Robot) +aa342def - Pin tool versions using go modules (Ian Howell) +10786ec0 - Merge pull request #1554 from keleustes/readme (Kubernetes Prow Robot) +7c705687 - Update README.md to include Kubernetes 1.16 (Jerome Brette) +e8933d97 - Merge pull request #1560 from monopole/precommitTuneup (Jeff Regan) +9d7b6544 - Make pre-commit more portable and less tricky. (jregan) +7a0946a9 - Merge pull request #1558 from monopole/dependOnNewPluginatorModule (Jeff Regan) +def4f045 - Depend on new pluginator location. (Jeffrey Regan) +2f2408f1 - Merge pull request #1559 from monopole/compressCopyright (Jeff Regan) +3b9bcc48 - Compress copyright in the commands package. (Jeffrey Regan) +d0429ff4 - Merge pull request #1557 from monopole/pluginatorModule (Jeff Regan) +33deefc3 - Copy pluginator to its own module. (Jeffrey Regan) +9b3de82b - Merge pull request #1506 from Liujingfang1/release (Jeff Regan) +d217074f - Merge pull request #1550 from keleustes/apiversion (Kubernetes Prow Robot) +1d90ba7c - Fix typo in apiVersion yaml declaration (Jerome Brette) +eeeb4c36 - Merge pull request #1547 from keleustes/extensions (Kubernetes Prow Robot) +b1faa989 - Update Ingress apiVersion to networking.k8s.io/v1beta1 (Jerome Brette) +d8250c9e - move test case (nimohunter) +c9500466 - add transformer href (Wang(わん)) +0c32691e - Merge pull request #1537 from jaypipes/gomod-install-note (Kubernetes Prow Robot) +88b1d627 - Merge pull request #1541 from rtnpro/patch-1 (Jeff Regan) +aec82066 - Update INSTALL.md (Jeff Regan) +20c2b53a - Merge pull request #1542 from monopole/tweakFilePathsInTest (Jeff Regan) +274b5c3b - Tweak file path handling and logging in test. (Jeffrey Regan) +b1fdaa23 - Fix typo in transformerconfigs README (Ratnadeep Debnath) +b5d5e70b - empty list or map item return error (nimohunter) +2e829853 - empty list or map item return error (nimohunter) +55941f57 - add note about GO111MODULE for source install (Jay Pipes) +9e226001 - empty list or map item return error (nimohunter) +77b63f96 - add release note for v3.2.0 (jingfangliu) +</code></pre> + + + + + Blog: v3.2.1 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/26/v3.2.1/ + Thu, 26 Sep 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/26/v3.2.1/ + + + + <p>This is a patch release, with no new features from 3.2.0.</p> +<p>It reflects a change in dependence.</p> +<p>The kustomize binary is now built as a client, with no special +consideration, of the set of public packages represented by the Go +module at [https://github.com/kubernetes-sigs/kustomize].</p> +<p>kustomize the binary is now a client of the kustomize API +represented by the public package surface presented by +<code>https://github.com/kubernetes-sigs/kustomize/v{whatever}</code></p> + + + + + + Blog: v3.2.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/17/v3.2.0/ + Tue, 17 Sep 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/17/v3.2.0/ + + + + <h2 id="inline-patch">Inline Patch</h2> +<p>Since this version, Kustomize allows inline patches in all three of <code>patchesStrategicMerge</code>, <code>patchesJson6902</code> and <code>patches</code>. Take a look at <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/examples/inlinePatch.md">inline patch</a>.</p> +<h2 id="new-subcommand">New Subcommand</h2> +<p>Since this version, one can create a kustomization.yaml file in a directory through a <code>create</code> subcommand.</p> +<p>Create a new overlay from the base ../base</p> +<pre><code>kustomize create --resources ../base +</code></pre><p>Create a new kustomization detecing resources in the current directory</p> +<pre><code>kustomize create --autodetect +</code></pre><p>Once can also add all resources in the current directory recursively by</p> +<pre><code>kustomize create --autodetect --recursive +</code></pre><h3 id="new-example-generator">New Example Generator</h3> +<p>A new example generator of using go-getter to download resources is added. Take a look at <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/goGetterGeneratorPlugin.md">go-getter generator</a>.</p> + + + + + + Blog: v3.1.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/26/v3.1.0/ + Fri, 26 Jul 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/26/v3.1.0/ + + + + <h2 id="extended-patches">Extended patches</h2> +<p>Since this version, Kustomize allows applying one patch to multiple resources. This works for both Strategic Merge Patch and JSON Patch. Take a look at <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/patchMultipleObjects.md">patch multiple objects</a>.</p> +<h2 id="improved-resource-matching">Improved Resource Matching</h2> +<p>Multiple improvements have been made to allow the user to leverage &ldquo;namespace&rdquo; +instead/or with &ldquo;name suffix/prefix&rdquo; to segregate resources.</p> +<h3 id="patch-resolution-improvement">Patch resolution improvement</h3> +<p>The following example demonstrates how using the namespace field in the patch definition, +will let the user define two different patches against two different Deployment having the +same &ldquo;deploy1&rdquo; name but in different namespaces in the same Kustomize context/folder. +Unless the <code>namespace:</code> field has been specified in the kustomization.yaml, no namespace +value will be handled as Kubernetes <code>default</code> namespace.</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps/v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deploy1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>main<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">template</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">containers</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">env</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ANOTHERENV<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>TESTVALUE<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>---<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps/v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deploy1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>production<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">template</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">containers</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>main<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">env</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ANOTHERENV<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>PRODVALUE<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="variable-resolution-improvement">Variable resolution improvement</h3> +<p>It is possible to add namespace field to the variable declaration. In the following example, +two <code>Service</code> objects with the same <code>elasticsearch</code> name have been declared. +Specifying the namespace in the objRef of the corresponding varriables, allows Kustomize to +resovlve thoses variables. +If the namespace is not specified, Kustomize will handle it has a &ldquo;wildcard&rdquo; value.</p> +<p>Extract of kustomization.yaml:</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">vars</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch-test-protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">objref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>test<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldpath</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>spec.ports<span style="color:#000;font-weight:bold">[</span><span style="color:#0000cf;font-weight:bold">0</span><span style="color:#000;font-weight:bold">]</span>.protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch-dev-protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">objref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>dev<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldpath</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>spec.ports<span style="color:#000;font-weight:bold">[</span><span style="color:#0000cf;font-weight:bold">0</span><span style="color:#000;font-weight:bold">]</span>.protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="simultaneous-change-of-names-and-namespaces">Simultaneous change of names and namespaces</h3> +<p>Kustomize is now able to deal with simultaneous changes of name and namespace. +Special attention has been paid the handling of:</p> +<ul> +<li>ClusterRoleBinding/RoleBinding &ldquo;subjects&rdquo; field,</li> +<li>ValidatingWebhookConfiguration &ldquo;webhooks&rdquo; field.</li> +</ul> +<p>The user should be able to use a kustomization.yaml as shown in the example bellow +even if ClusterRoleBind,RoleBinding and ValidatingWebookConfiguration are part of the +resources he needs to declare.</p> +<p>Extract of kustomization.yaml:</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">namePrefix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>pfx-<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">nameSuffix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>-sfx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>testnamespace<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">resources</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>...<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="resource-and-kustomize-context-matching">Resource and Kustomize Context matching.</h3> +<p>Kustomize is now able to support more aggregation patterns.</p> +<p>If for instance, the top level of kustomization.yaml, is simply +combining sub-components, (as in the following example), Kustomize has improved +resource matching capabilities. This removes some of the constraints which were +present on the utilization of prefix/suffix and namespace transformers in the +individual components.</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">resources</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- ../component1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- ../component2<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- ../component3<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h2 id="other-improvements">Other improvements</h2> +<ul> +<li>Image transformation has been improved. This allows the user to update the sha256 of +an image with another sha256.</li> +<li>Multiple default transformer configuration entries have been added, removing the need for the +user to add them as part of the <code>configurations:</code> section of the kustomization.yaml.</li> +<li><code>kustomize</code> help command has been tidied up.</li> +</ul> + + + + + + Blog: v3.0.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/03/v3.0.0/ + Wed, 03 Jul 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/03/v3.0.0/ + + + + <p>This release is basically <a href="v2.1.0.md">v2.1.0</a>, +with many post-v2.1.0 bugs fixed (in about 150 +commits) and a <code>v3</code> in Go package paths.</p> +<p>The major version increment to <code>v3</code> puts a new +floor on a stable API for <a href="https://kubernetes-sigs.github.io/kustomize/docs/plugins">plugin</a> developers +(both <em>Go</em> plugin developers and <em>exec</em> plugin +developers who happen to use Go).</p> +<h3 id="why-so-soon-after-v210">Why so soon after v2.1.0?</h3> +<p>We made a mistake - v2.1.0 should have been +v3.0.0. Per the <a href="https://github.com/golang/go/wiki/Modules#releasing-modules-v2-or-higher">Go modules doc</a> (which have +improved a great deal recently), a release that&rsquo;s +already tagged v2 or higher should increment the +major version when performing their first Go +module-based release.</p> +<p>This advice applies to kustomize, since it was +already at major version 2 when it began using Go +modules to state <em>its own</em> dependencies in v2.1.0.</p> +<p>But the more important reason for <code>v3</code> is a change +to the kustomize <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/faq/versioningpolicy">versioning policy</a>, forced by +the introduction of plugins.</p> +<p>Historically, kustomize&rsquo;s <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/faq/versioningpolicy">versioning policy</a> +didn&rsquo;t involve Go modules and addressed <em>only</em> the +command line tool&rsquo;s behavior and the fields in a +kustomization file. The underlying packages were +an implementation detail, not under semantic +versioning, because they weren&rsquo;t intended for +export (and should have all been under +<code>internal</code>). Thus although the v2.1.0 CLI is +backward compatible with v2.0.3, the underlying +package APIs are not.</p> +<p>With Go modules, the <code>go</code> tool must assume that Go +packages respect <a href="https://semver.org">semantic versioning</a>, so it can +perform <a href="https://research.swtch.com/vgo-mvs">minimal version selection</a>.</p> +<p>With the introduction of alpha plugins, kustomize +sub-packages - in particular <code>loader</code> and +<code>resmap</code> - become part of an API formally exposed +to plugin authors, and so must be semantically +versioned. This allows plugins defined in other +repositories to clarify that they depend on +kustomize v3.0.0, and not see confusing errors +arising from incompatibilities between v2.1.0 and +v2.0.3. Hence, the jump to v3.</p> +<p>Aside - the set of kustomize packages outside +<code>internal</code> is too large, and over time, informed +by package use, this API surface must shrink. +Such shrinkage will trigger a major version +increment.</p> + + + + + + Blog: v2.1.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/06/18/v2.1.0/ + Tue, 18 Jun 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/06/18/v2.1.0/ + + + + <p>Go modules, resource ordering respected, generator and transformer plugins, eased +loading restrictions, the notion of inventory, eased replica count modification. +About ~90 issues closed since <a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.0.3">v2.0.3</a> in ~400 commits.</p> +<p>Download <a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.1.0">here</a>.</p> +<h2 id="go-modules">Go modules</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/goModules.png" alt="gopher with boxes"></p> +<p>Kustomize now defines its dependencies in a top +level <code>go.mod</code> file. This is the first step +towards a package structure intentially exported +as one or more <a href="https://github.com/golang/go/wiki/Modules">Go modules</a> for use in other +programs (kubectl, kubebuilder, etc.) and in +kustomize plugins (see below).</p> +<h2 id="resource-ordering">Resource ordering</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/sorted.png" alt="sort order retained"></p> +<p>Kustomize now retains the depth-first order of +resources as read, a frequently requested +feature.</p> +<p>This means resource order can be controlled +by editting kustomization files. This is +also vital to applying user-defined +transformations (plugins) in a particular +order.</p> +<p>Nothing needs to be done to activate this; +it happens automatically.</p> +<p>The <code>build</code> command now accepts a <code>--reorder</code> +flag with values <code>legacy</code> and <code>none</code>, +with a default value of <code>legacy</code>.</p> +<p><code>legacy</code> means apply an ordering based on +GVK, that currently emits <code>Namespace</code> objects +first, and <code>ValidatingWebhookConfiguration</code> +objects last. This means that despite +automatic retention of load order, your +<code>build</code> output won&rsquo;t change by default.</p> +<p><code>none</code> means <em>don&rsquo;t</em> reorder the resources before +output. Specify this to see output order +respect input order.</p> +<h2 id="generator-and-transformer-plugins">Generator and transformer plugins</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/plugins.png" alt="kid putting knife in electrical outlet"></p> +<p>Since the beginning (as <code>kinflate</code> back in Sep +2017), kustomize has read or generated resources, +applied a series of pipelined transformation to +them, and emitted the result to <code>stdout</code>.</p> +<p>At that time, the only way to change the behavior +of a generator (e.g. a secret generator), or +change the behavior of a transformer (e.g. a name +changer, or json patcher), was to modify source +code and put out a release.</p> +<p><a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9">v1.0.9</a> introduced <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/generatorOptions.md">generator options</a> as a means +to change the behavior of the only two generators +available at the time - Secret and ConfigMap +generators. It also introduced +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs">transformer configs</a> as a way to fine tune the +targets of transformations (e.g. to which fields +<em>selectors</em> should be added). Most of the feature +requests for kustomize revolve around changing the +behavior of the builtin generators and +transformers.</p> +<p><a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.1.0">v2.1.0</a> adds an <em>alpha</em> plugin framework, that +encourages users to write their own generators or +transformers, <em>declaring them as kubernetes +objects just like everything else</em>, and apply them +as part of the <code>kustomize build</code> process.</p> +<p>To inform the API exposed to plugins, and to +confirm that the plugin framework can offer plugin +authors the same capabilities as builtin +operations, all the builtin generators and +tranformers have been converted to plugin form +(with one exceptions awaiting Go module +refinements). This means that adding, say, a +<code>secretGenerator</code> or <code>commonAnnotations</code> directive +to your kustomization will (in <a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.1.0">v2.1.0</a>) trigger +execution of +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/builtin">code committed as a plugin</a>.</p> +<p>For more information, see the +<a href="plugins">kustomize plugin documentation</a>.</p> +<h2 id="remove-load-restrictions">Remove load restrictions</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/abandonedTrainingWheels.png" alt="removed training wheels"></p> +<p>The following usage:</p> +<pre><code>kustomize build --load_restrictor none $target +</code></pre><p>allows a <code>kustomization.yaml</code> file used in this +build to refer to files outside its own directory +(i.e. outside its <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#kustomization-root">root</a>).</p> +<p>This is an opt-in to suppress a security feature +that denies this precise behavior.</p> +<p>This feature should only be used to allow multiple +overlays (e.g. prod, staging and dev) to share a +patch file. To share <em>resources</em>, use a relative +path or URL to a kustomization directory in the +<code>resources</code> directive.</p> +<h2 id="inventory-generation-for-pruning">Inventory generation for pruning</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/pruning.png" alt="pruning dead branches"></p> +<p><em>Alpha</em></p> +<p>Users can add an <code>inventory</code> stanza to their +kustomization file, to add a special <em>inventory +object</em> to the <code>build</code> result.</p> +<p>This object applies to the cluster along with +everything else in the build result and can be +used by other clients to intelligently <em>prune</em> +orphaned cluster resources.</p> +<p>For more information see the +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/docs/inventory_object.md">kustomize inventory object documentation</a>.</p> +<h2 id="field-changes--deprecations">Field changes / deprecations</h2> +<h3 id="resources-expanded-bases-deprecated"><code>resources</code> expanded, <code>bases</code> deprecated</h3> +<p>The <code>resources</code> field has been generalized; it now +accepts what formerly could only be specified in +the <code>bases</code> field.</p> +<p>This change was made to allow users fine control +over resource processing order. With a distinct +<code>bases</code> field, bases had to be loaded separately +from resources as a group. Now, base loading may +be interleaved as desired with the loading of +resource files from the current +directory. <a href="#resource-ordering">Resource ordering</a> +had to be respected before this feature could be +introduced.</p> +<p>The <code>bases</code> field is now deprecated, and will be +deleted in some future major release. Manage the +deprecation simply moving the arguments of the +<code>bases</code> field to the <code>resources</code> field in the +desired order, e.g.</p> +<blockquote> +<pre><code>resources: +- someResouceFile.yaml +- someOtherResourceFile.yaml +bases: +- ../../someBaseDir +</code></pre></blockquote> +<p>could become</p> +<blockquote> +<pre><code>resources: +- someResouceFile.yaml +- ../../someBaseDir +- someOtherResourceFile.yaml +</code></pre></blockquote> +<p>The <code>kustomized edit fix</code> command will do this for +you, though it will always put the bases at the +end.</p> +<p>As an aside, the <code>resources</code>, <code>generators</code> and +<code>transformers</code> fields now all accept the same +argument format.</p> +<blockquote> +<p>Each field&rsquo;s argument is a <em>string list</em>, +where each entry is either a <em>resource</em> (a +relative path to a YAML file) or a +<a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#kustomization"><em>kustomization</em></a> (a path or URL +pointing to a directory with a kustomization +file). A kustomization directory used in this +context is called a <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#base"><em>base</em></a>.</p> +</blockquote> +<p>The fact that the <code>generators</code> and <code>transformers</code> +field accept <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#base">bases</a> and the fact that generator +and transformer configuration objects are just +normal k8s resources means that one can generate +or transform a generator or a transformer (see +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/internal/target/transformerplugin_test.go">TestTransformerTransformers</a>).</p> +<h3 id="replicas-field"><code>replicas</code> field</h3> +<p>The common task of patching a deployment to edit +the number of replicas is now made easier +with the new <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/kustomization/replicas">replicas</a> field.</p> +<h3 id="envs-field"><code>envs</code> field</h3> +<p>An <code>envs</code> sub-field has been added to both +<code>configMapGenerator</code> and <code>secretGenerator</code>, +replacing the now deprecated (and singular) +<code>env</code> field. The new field accepts lists, just +like its sibling fields <code>files</code> and <code>literals</code>.</p> +<p>Optionally use <code>kustomize edit fix</code> to merge +singular <code>env</code> field into a plural field.</p> + + + + + + Blog: v2.0.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/02/05/v2.0.0/ + Tue, 05 Feb 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/02/05/v2.0.0/ + + + + <p>After security review, a field used in secret +generation (see below) was removed from the +definition of a kustomization file with no +mechanism to convert it to a new form. Also, the +set of files accessible from a kustomization file +has been further constrained.</p> +<p>Per the <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/faq/versioningpolicy">versioning policy</a>, +backward incompatible changes trigger an increment +of the major version number, hence we go +from 1.0.11 to 2.0.0. We&rsquo;re taking this major +version increment opportunity to remove some +already deprecated fields, and the code paths +associated with them.</p> +<h2 id="backward-incompatible-changes">Backward Incompatible Changes</h2> +<h3 id="kustomization-path-constraints">Kustomization Path Constraints</h3> +<p>A kustomization file can specify paths to other +files, including resources, patches, configmap +generation data, secret generation data and +bases. In the case of a base, the path can be a +git URL instead.</p> +<p>In 1.x, these paths had to be relative to the +current kustomization directory (the location of +the kustomization file used in the <code>build</code> +command).</p> +<p>In 2.0, bases can continue to specify, via +relative paths, kustomizations outside the current +kustomization directory. But non-base paths are +constrained to terminate in or below the current +kustomization directory. Further, bases specified +via a git URL may not reference files outside of +the directory used to clone the repository.</p> +<h3 id="kustomization-field-removals">Kustomization Field Removals</h3> +<h4 id="patches">patches</h4> +<p><code>patches</code> was deprecated and replaced by +<code>patchesStrategicMerge</code> when <code>patchesJson6902</code> was +introduced. In Kustomize 2.0.0, <code>patches</code> is +removed. Please use <code>patchesStrategicMerge</code> +instead.</p> +<h4 id="imagetags">imageTags</h4> +<p><code>imageTags</code> is replaced by <code>images</code> since <code>images</code> +can provide more features to change image names, +registries, tags and digests.</p> +<h4 id="secretgeneratorcommands">secretGenerator/commands</h4> +<p><code>commands</code> is removed from SecretGenerator due to +a <a href="https://docs.google.com/document/d/1FYgLVdq-siB_Cef9yuQBmit0PbrE8lsyTBdGI2eA2y8/edit">security concern</a>. One can use <code>files</code> or +<code>literals</code>, similar to ConfigMapGenerator, to +generate a secret.</p> +<pre><code>secretGenerator: +- name: app-tls + files: + - secret/tls.cert + - secret/tls.key + type: &quot;kubernetes.io/tls&quot; +</code></pre><h2 id="compatible-changes-new-features">Compatible Changes (New Features)</h2> +<p>As this release is triggered by a security change, +there are no major new features to announce. A few +things that are worth mentioning in this release +are:</p> +<ul> +<li> +<p>More than <em>40</em> issues closed since 1.0.11 +release (including many extensions to +transformation rules).</p> +</li> +<li> +<p>Users can run <code>kustomize edit fix</code> to migrate a +kustomization file working with previous +versions to one working with 2.0.0. For example, +a kustomization.yaml with following content</p> +<pre><code>patches: + - deployment-patch.yaml +imageTags: + - name: postgres + newTag: v1 +</code></pre><p>will be converted to</p> +<pre><code>apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +patchesStrategicMerge: + - deployment-patch.yaml +images: + - name: postgres + newTag: v1 +</code></pre></li> +<li> +<p>Kustomization filename</p> +<p>In previous versions, the name of a +kustomization file had to be +<code>kustomization.yaml</code>. +Kustomize allows <code>kustomization.yaml</code>, +<code>kustomization.yml</code> and +<code>Kustomization</code>. In a directory, only one of +those filenames is allowed. If there are more +than one found, Kustomize will exit with an +error. Please select the best filename for your +use cases.</p> +</li> +<li> +<p>Cancelled plans to deprecate applying prefix/suffix to namespace. +The deprecation warning</p> +<pre><code>Adding nameprefix and namesuffix to Namespace resource will be deprecated in next release. +</code></pre><p>was removed.</p> +</li> +</ul> + + + + + + Blog: v1.0.1 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2018/05/21/v1.0.1/ + Mon, 21 May 2018 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2018/05/21/v1.0.1/ + + + + <p>Initial release after move from github.com/kubernetes/kubectl to github.com/kubernetes-sigs/kustomize.</p> +<p>History</p> +<ul> +<li>May 2018: v1.0 after move to github.com/kubernetes-sigs/kubectl +from github.com/kubernetes/kubectl. +Has kustomization file, bases, overlays, basic transforms.</li> +<li>Apr 2018: s/kinflate/kustomize/, s/manifest/kustomization/</li> +<li>Oct 2017: s/kexpand/kinflate/</li> +<li>Sep 2017: kexpand <a href="https://github.com/kubernetes/kubectl/pull/65">starts</a> +in github.com/kubernetes/kubectl</li> +<li>Aug 2017: <a href="https://docs.google.com/document/d/1cLPGweVEYrVqQvBLJg6sxV-TrE5Rm2MNOBA_cxZP2WU">DAM</a> authored by Brian Grant</li> +</ul> + + + + + + diff --git a/docs/zh/blog/page/1/index.html b/docs/zh/blog/page/1/index.html new file mode 100644 index 000000000..7b0dfa59b --- /dev/null +++ b/docs/zh/blog/page/1/index.html @@ -0,0 +1 @@ +https://kubernetes-sigs.github.io/kustomize/zh/blog/ \ No newline at end of file diff --git a/docs/zh/blog/releases/index.html b/docs/zh/blog/releases/index.html new file mode 100644 index 000000000..f1642b496 --- /dev/null +++ b/docs/zh/blog/releases/index.html @@ -0,0 +1,552 @@ + + + + + + + + + + + + + + + + + + + + + + + +New Releases | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + New Releases | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + RSS + + + + + + + + + +
    +
    + +

    Posts in 2019

    +
      + +
    • +
      +
      v3.3.0
      +

      2019年10月24日 in Releases

      + + + + + + +

      Summary of changes First release of the Go API-only module. Many of the PRs since the last vrelease were around restructuring the sigs.k8s.io/kustomize repository into three Go modules instead of just one. +The reasons for this are detailed in the …

      +

      更多

      +
      +
      • + +
    • +
      +
      v3.2.1
      +

      2019年09月26日 in Releases

      + + + + + + +

      This is a patch release, with no new features from 3.2.0. +It reflects a change in dependence. +The kustomize binary is now built as a client, with no special consideration, of the set of public packages represented by the Go module at …

      +

      更多

      +
      +
      • + +
    • +
      +
      v3.2.0
      +

      2019年09月17日 in Releases

      + + + + + + +

      Inline Patch Since this version, Kustomize allows inline patches in all three of patchesStrategicMerge, patchesJson6902 and patches. Take a look at inline patch. +New Subcommand Since this version, one can create a kustomization.yaml file in a …

      +

      更多

      +
      +
      • + +
    • +
      +
      v3.1.0
      +

      2019年07月26日 in Releases

      + + + + + + +

      Extended patches Since this version, Kustomize allows applying one patch to multiple resources. This works for both Strategic Merge Patch and JSON Patch. Take a look at patch multiple objects. +Improved Resource Matching Multiple improvements have …

      +

      更多

      +
      +
      • + +
    • +
      +
      v3.0.0
      +

      2019年07月03日 in Releases

      + + + + + + +

      This release is basically v2.1.0, with many post-v2.1.0 bugs fixed (in about 150 commits) and a v3 in Go package paths. +The major version increment to v3 puts a new floor on a stable API for plugin developers (both Go plugin developers and exec …

      +

      更多

      +
      +
      • + +
    • +
      +
      v2.1.0
      +

      2019年06月18日 in Releases

      + + + + + + +

      Go modules, resource ordering respected, generator and transformer plugins, eased loading restrictions, the notion of inventory, eased replica count modification. About ~90 issues closed since v2.0.3 in ~400 commits. +Download here. +Go modules …

      +

      更多

      +
      +
      • + +
    • +
      +
      v2.0.0
      +

      2019年02月05日 in Releases

      + + + + + + +

      After security review, a field used in secret generation (see below) was removed from the definition of a kustomization file with no mechanism to convert it to a new form. Also, the set of files accessible from a kustomization file has been further …

      +

      更多

      +
      +
      • + +
    + +

    Posts in 2018

    +
      + +
    • +
      +
      v1.0.1
      +

      2018年05月21日 in Releases

      + + + + + + +

      Initial release after move from github.com/kubernetes/kubectl to github.com/kubernetes-sigs/kustomize. +History + May 2018: v1.0 after move to github.com/kubernetes-sigs/kubectl from github.com/kubernetes/kubectl. Has kustomization file, bases, …

      +

      更多

      +
      +
      • + +
    + +
    +
    +
    +
    + + + +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/blog/releases/index.xml b/docs/zh/blog/releases/index.xml new file mode 100644 index 000000000..41a9576ef --- /dev/null +++ b/docs/zh/blog/releases/index.xml @@ -0,0 +1,666 @@ + + + Kustomize – New Releases + https://kubernetes-sigs.github.io/kustomize/zh/blog/releases/ + Recent content in New Releases on Kustomize + Hugo -- gohugo.io + Thu, 24 Oct 2019 00:00:00 +0000 + + + + + + + + + + + Blog: v3.3.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/10/24/v3.3.0/ + Thu, 24 Oct 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/10/24/v3.3.0/ + + + + <h2 id="summary-of-changes">Summary of changes</h2> +<h3 id="first-release-of-the-go-api-only-module">First release of the Go API-only module.</h3> +<p>Many of the PRs since the last vrelease were +around restructuring the <em>sigs.k8s.io/kustomize</em> +repository into three Go modules instead of just one.</p> +<p>The reasons for this are detailed in the <a href="https://kubernetes-sigs.github.io/kustomize/site/content/en/faq/versioningPolicy.md">versioning +policy documentation</a>, and what it means for releasing +is explained in the <a href="https://kubernetes-sigs.github.io/kustomize/releasing">release process documentation</a>.</p> +<p>The tl;dr is that the top level module +<code>sigs.k8s.io/kustomize</code> now defines the kustomize Go +API, and the <em>kustomize</em> CLI sits below it in an +independent module <code>sigs.k8s.io/kustomize/kustomize</code>.</p> +<p>The modules release independently, though in practice a +new release of the kustomize Go API will likely be +followed quickly by a new release of the <code>kustomize</code> +executable.</p> +<p>This is a necessary step to creating a much smaller +kustomize Go API surface that has some hope of +conforming to semantic versioning and being of some use +to clients.</p> +<p>The kustomize CLI will see the same kustomize Go API as +any other client.</p> +<p>The new semver-able API will begin with <code>v4.0.0</code> (not +yet released) and be a clean break with <code>v3</code> etc.</p> +<h3 id="change-log-since-v320">Change log since v3.2.0</h3> +<pre><code>3c9d828f - Have kustomize CLI depend on kustomize Go API v3.3.0 (Jeffrey Regan) +5d800f0b - Merge pull request #1595 from monopole/threeReleases (Jeff Regan) +4eb2d5bc - Three builders. (Jeffrey Regan) +988af1ff - Update README.md (Jeff Regan) +1617183e - Merge pull request #1590 from monopole/releaseProcessUpdate (Kubernetes Prow Robot) +ee727464 - update release process doc (jregan) +c9e7dc3b - Merge pull request #1589 from monopole/moreTestsAroundKustFileName (Jeff Regan) +07e0e46a - improve tests for alternative kustomization file names (Jeffrey Regan) +404d2d63 - Merge pull request #1587 from monopole/reducePgmconfig (Jeff Regan) +baa0296a - Reduce size of pgmconfig package (Jeffrey Regan) +0f665ac1 - Merge pull request #1544 from ptux/add-transformer-href (Jeff Regan) +14b0a650 - Merge pull request #1581 from monopole/refactorFs (Jeff Regan) +2d58f8b8 - Break the dep between fs and pgmconfig. (Jeffrey Regan) +9a43ca53 - Merge pull request #1578 from nlamirault/fix/build-plugins-doc (Jeff Regan) +5372fc6f - Merge pull request #1579 from monopole/fsPackageCleanup (Jeff Regan) +86bc3440 - Merge pull request #1513 from nimohunter/fix_empty_list_item (Kubernetes Prow Robot) +a014f7d4 - Merge pull request #1561 from beautytiger/dev-190925 (Jeff Regan) +9a94bcb8 - Improve fs package and doc in prep to officially go public (Jeffrey Regan) +07634ef0 - Merge pull request #1575 from monopole/versioning (Jeff Regan) +995f88d6 - Update versioning notes. (jregan) +334a6467 - Fix: documentation link for plugins (Nicolas Lamirault) +08963ba5 - improve test code coverage in transformers (Guangming Wang) +326fb689 - Merge pull request #1570 from bzub/1234-go_plugin_doc (Jeff Regan) +970ce67c - Update goPluginCaveats.md (Jeff Regan) +98d18930 - Update INSTALL.md (Jeff Regan) +d89b448c - Fix git tag recovery in cloud build. (Jeff Regan) +17bf9d32 - Update releasing README. (Jeff Regan) +a99aff1d - Merge pull request #1571 from monopole/updateCloudBuildProcess (Kubernetes Prow Robot) +a694ac7b - Update cloud build process for kustomize. (Jeffrey Regan) +b5b11ef6 - Fix compile kustomize example. (bzub) +fa1af6f5 - Merge pull request #1473 from richardmarshall/execpluginhash (Jeff Regan) +9288dec0 - Fix failing BashedConfigMapTest (Jeff Regan) +1a45dd0b - Merge pull request #1566 from monopole/releaseNotes3.2.1 (Kubernetes Prow Robot) +592c5acf - docs: Exec plugin generator options (Richard Marshall) +ac9424fa - tests: Add unit tests for update resource options (Richard Marshall) +79fbe7c4 - Support resource generator options in exec plugins (Richard Marshall) +f69d526f - v3.2.1 release notes (Jeff Regan) +07a95a60 - Merge pull request #1565 from monopole/tweakBinaryDepsBeforeTagging (Jeff Regan) +032b3857 - Pin the kustomize binary's dependence on kustomize libs. (jregan) +81062959 - Merge pull request #1564 from monopole/moveKustomizeBinaryToOwnModule (Kubernetes Prow Robot) +b82a8fd3 - Move the kustomize binary to its own module. (Jeffrey Regan) +2d0c22d6 - Merge pull request #1562 from keleustes/tools (Kubernetes Prow Robot) +aa342def - Pin tool versions using go modules (Ian Howell) +10786ec0 - Merge pull request #1554 from keleustes/readme (Kubernetes Prow Robot) +7c705687 - Update README.md to include Kubernetes 1.16 (Jerome Brette) +e8933d97 - Merge pull request #1560 from monopole/precommitTuneup (Jeff Regan) +9d7b6544 - Make pre-commit more portable and less tricky. (jregan) +7a0946a9 - Merge pull request #1558 from monopole/dependOnNewPluginatorModule (Jeff Regan) +def4f045 - Depend on new pluginator location. (Jeffrey Regan) +2f2408f1 - Merge pull request #1559 from monopole/compressCopyright (Jeff Regan) +3b9bcc48 - Compress copyright in the commands package. (Jeffrey Regan) +d0429ff4 - Merge pull request #1557 from monopole/pluginatorModule (Jeff Regan) +33deefc3 - Copy pluginator to its own module. (Jeffrey Regan) +9b3de82b - Merge pull request #1506 from Liujingfang1/release (Jeff Regan) +d217074f - Merge pull request #1550 from keleustes/apiversion (Kubernetes Prow Robot) +1d90ba7c - Fix typo in apiVersion yaml declaration (Jerome Brette) +eeeb4c36 - Merge pull request #1547 from keleustes/extensions (Kubernetes Prow Robot) +b1faa989 - Update Ingress apiVersion to networking.k8s.io/v1beta1 (Jerome Brette) +d8250c9e - move test case (nimohunter) +c9500466 - add transformer href (Wang(わん)) +0c32691e - Merge pull request #1537 from jaypipes/gomod-install-note (Kubernetes Prow Robot) +88b1d627 - Merge pull request #1541 from rtnpro/patch-1 (Jeff Regan) +aec82066 - Update INSTALL.md (Jeff Regan) +20c2b53a - Merge pull request #1542 from monopole/tweakFilePathsInTest (Jeff Regan) +274b5c3b - Tweak file path handling and logging in test. (Jeffrey Regan) +b1fdaa23 - Fix typo in transformerconfigs README (Ratnadeep Debnath) +b5d5e70b - empty list or map item return error (nimohunter) +2e829853 - empty list or map item return error (nimohunter) +55941f57 - add note about GO111MODULE for source install (Jay Pipes) +9e226001 - empty list or map item return error (nimohunter) +77b63f96 - add release note for v3.2.0 (jingfangliu) +</code></pre> + + + + + Blog: v3.2.1 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/26/v3.2.1/ + Thu, 26 Sep 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/26/v3.2.1/ + + + + <p>This is a patch release, with no new features from 3.2.0.</p> +<p>It reflects a change in dependence.</p> +<p>The kustomize binary is now built as a client, with no special +consideration, of the set of public packages represented by the Go +module at [https://github.com/kubernetes-sigs/kustomize].</p> +<p>kustomize the binary is now a client of the kustomize API +represented by the public package surface presented by +<code>https://github.com/kubernetes-sigs/kustomize/v{whatever}</code></p> + + + + + + Blog: v3.2.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/17/v3.2.0/ + Tue, 17 Sep 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/17/v3.2.0/ + + + + <h2 id="inline-patch">Inline Patch</h2> +<p>Since this version, Kustomize allows inline patches in all three of <code>patchesStrategicMerge</code>, <code>patchesJson6902</code> and <code>patches</code>. Take a look at <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/examples/inlinePatch.md">inline patch</a>.</p> +<h2 id="new-subcommand">New Subcommand</h2> +<p>Since this version, one can create a kustomization.yaml file in a directory through a <code>create</code> subcommand.</p> +<p>Create a new overlay from the base ../base</p> +<pre><code>kustomize create --resources ../base +</code></pre><p>Create a new kustomization detecing resources in the current directory</p> +<pre><code>kustomize create --autodetect +</code></pre><p>Once can also add all resources in the current directory recursively by</p> +<pre><code>kustomize create --autodetect --recursive +</code></pre><h3 id="new-example-generator">New Example Generator</h3> +<p>A new example generator of using go-getter to download resources is added. Take a look at <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/goGetterGeneratorPlugin.md">go-getter generator</a>.</p> + + + + + + Blog: v3.1.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/26/v3.1.0/ + Fri, 26 Jul 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/26/v3.1.0/ + + + + <h2 id="extended-patches">Extended patches</h2> +<p>Since this version, Kustomize allows applying one patch to multiple resources. This works for both Strategic Merge Patch and JSON Patch. Take a look at <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/patchMultipleObjects.md">patch multiple objects</a>.</p> +<h2 id="improved-resource-matching">Improved Resource Matching</h2> +<p>Multiple improvements have been made to allow the user to leverage &ldquo;namespace&rdquo; +instead/or with &ldquo;name suffix/prefix&rdquo; to segregate resources.</p> +<h3 id="patch-resolution-improvement">Patch resolution improvement</h3> +<p>The following example demonstrates how using the namespace field in the patch definition, +will let the user define two different patches against two different Deployment having the +same &ldquo;deploy1&rdquo; name but in different namespaces in the same Kustomize context/folder. +Unless the <code>namespace:</code> field has been specified in the kustomization.yaml, no namespace +value will be handled as Kubernetes <code>default</code> namespace.</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps/v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deploy1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>main<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">template</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">containers</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">env</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ANOTHERENV<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>TESTVALUE<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>---<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps/v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deploy1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>production<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">template</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">containers</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>main<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">env</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ANOTHERENV<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>PRODVALUE<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="variable-resolution-improvement">Variable resolution improvement</h3> +<p>It is possible to add namespace field to the variable declaration. In the following example, +two <code>Service</code> objects with the same <code>elasticsearch</code> name have been declared. +Specifying the namespace in the objRef of the corresponding varriables, allows Kustomize to +resovlve thoses variables. +If the namespace is not specified, Kustomize will handle it has a &ldquo;wildcard&rdquo; value.</p> +<p>Extract of kustomization.yaml:</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">vars</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch-test-protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">objref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>test<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldpath</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>spec.ports<span style="color:#000;font-weight:bold">[</span><span style="color:#0000cf;font-weight:bold">0</span><span style="color:#000;font-weight:bold">]</span>.protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch-dev-protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">objref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>dev<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldpath</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>spec.ports<span style="color:#000;font-weight:bold">[</span><span style="color:#0000cf;font-weight:bold">0</span><span style="color:#000;font-weight:bold">]</span>.protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="simultaneous-change-of-names-and-namespaces">Simultaneous change of names and namespaces</h3> +<p>Kustomize is now able to deal with simultaneous changes of name and namespace. +Special attention has been paid the handling of:</p> +<ul> +<li>ClusterRoleBinding/RoleBinding &ldquo;subjects&rdquo; field,</li> +<li>ValidatingWebhookConfiguration &ldquo;webhooks&rdquo; field.</li> +</ul> +<p>The user should be able to use a kustomization.yaml as shown in the example bellow +even if ClusterRoleBind,RoleBinding and ValidatingWebookConfiguration are part of the +resources he needs to declare.</p> +<p>Extract of kustomization.yaml:</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">namePrefix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>pfx-<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">nameSuffix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>-sfx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>testnamespace<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">resources</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>...<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="resource-and-kustomize-context-matching">Resource and Kustomize Context matching.</h3> +<p>Kustomize is now able to support more aggregation patterns.</p> +<p>If for instance, the top level of kustomization.yaml, is simply +combining sub-components, (as in the following example), Kustomize has improved +resource matching capabilities. This removes some of the constraints which were +present on the utilization of prefix/suffix and namespace transformers in the +individual components.</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">resources</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- ../component1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- ../component2<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- ../component3<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h2 id="other-improvements">Other improvements</h2> +<ul> +<li>Image transformation has been improved. This allows the user to update the sha256 of +an image with another sha256.</li> +<li>Multiple default transformer configuration entries have been added, removing the need for the +user to add them as part of the <code>configurations:</code> section of the kustomization.yaml.</li> +<li><code>kustomize</code> help command has been tidied up.</li> +</ul> + + + + + + Blog: v3.0.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/03/v3.0.0/ + Wed, 03 Jul 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/03/v3.0.0/ + + + + <p>This release is basically <a href="v2.1.0.md">v2.1.0</a>, +with many post-v2.1.0 bugs fixed (in about 150 +commits) and a <code>v3</code> in Go package paths.</p> +<p>The major version increment to <code>v3</code> puts a new +floor on a stable API for <a href="https://kubernetes-sigs.github.io/kustomize/docs/plugins">plugin</a> developers +(both <em>Go</em> plugin developers and <em>exec</em> plugin +developers who happen to use Go).</p> +<h3 id="why-so-soon-after-v210">Why so soon after v2.1.0?</h3> +<p>We made a mistake - v2.1.0 should have been +v3.0.0. Per the <a href="https://github.com/golang/go/wiki/Modules#releasing-modules-v2-or-higher">Go modules doc</a> (which have +improved a great deal recently), a release that&rsquo;s +already tagged v2 or higher should increment the +major version when performing their first Go +module-based release.</p> +<p>This advice applies to kustomize, since it was +already at major version 2 when it began using Go +modules to state <em>its own</em> dependencies in v2.1.0.</p> +<p>But the more important reason for <code>v3</code> is a change +to the kustomize <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/faq/versioningpolicy">versioning policy</a>, forced by +the introduction of plugins.</p> +<p>Historically, kustomize&rsquo;s <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/faq/versioningpolicy">versioning policy</a> +didn&rsquo;t involve Go modules and addressed <em>only</em> the +command line tool&rsquo;s behavior and the fields in a +kustomization file. The underlying packages were +an implementation detail, not under semantic +versioning, because they weren&rsquo;t intended for +export (and should have all been under +<code>internal</code>). Thus although the v2.1.0 CLI is +backward compatible with v2.0.3, the underlying +package APIs are not.</p> +<p>With Go modules, the <code>go</code> tool must assume that Go +packages respect <a href="https://semver.org">semantic versioning</a>, so it can +perform <a href="https://research.swtch.com/vgo-mvs">minimal version selection</a>.</p> +<p>With the introduction of alpha plugins, kustomize +sub-packages - in particular <code>loader</code> and +<code>resmap</code> - become part of an API formally exposed +to plugin authors, and so must be semantically +versioned. This allows plugins defined in other +repositories to clarify that they depend on +kustomize v3.0.0, and not see confusing errors +arising from incompatibilities between v2.1.0 and +v2.0.3. Hence, the jump to v3.</p> +<p>Aside - the set of kustomize packages outside +<code>internal</code> is too large, and over time, informed +by package use, this API surface must shrink. +Such shrinkage will trigger a major version +increment.</p> + + + + + + Blog: v2.1.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/06/18/v2.1.0/ + Tue, 18 Jun 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/06/18/v2.1.0/ + + + + <p>Go modules, resource ordering respected, generator and transformer plugins, eased +loading restrictions, the notion of inventory, eased replica count modification. +About ~90 issues closed since <a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.0.3">v2.0.3</a> in ~400 commits.</p> +<p>Download <a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.1.0">here</a>.</p> +<h2 id="go-modules">Go modules</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/goModules.png" alt="gopher with boxes"></p> +<p>Kustomize now defines its dependencies in a top +level <code>go.mod</code> file. This is the first step +towards a package structure intentially exported +as one or more <a href="https://github.com/golang/go/wiki/Modules">Go modules</a> for use in other +programs (kubectl, kubebuilder, etc.) and in +kustomize plugins (see below).</p> +<h2 id="resource-ordering">Resource ordering</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/sorted.png" alt="sort order retained"></p> +<p>Kustomize now retains the depth-first order of +resources as read, a frequently requested +feature.</p> +<p>This means resource order can be controlled +by editting kustomization files. This is +also vital to applying user-defined +transformations (plugins) in a particular +order.</p> +<p>Nothing needs to be done to activate this; +it happens automatically.</p> +<p>The <code>build</code> command now accepts a <code>--reorder</code> +flag with values <code>legacy</code> and <code>none</code>, +with a default value of <code>legacy</code>.</p> +<p><code>legacy</code> means apply an ordering based on +GVK, that currently emits <code>Namespace</code> objects +first, and <code>ValidatingWebhookConfiguration</code> +objects last. This means that despite +automatic retention of load order, your +<code>build</code> output won&rsquo;t change by default.</p> +<p><code>none</code> means <em>don&rsquo;t</em> reorder the resources before +output. Specify this to see output order +respect input order.</p> +<h2 id="generator-and-transformer-plugins">Generator and transformer plugins</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/plugins.png" alt="kid putting knife in electrical outlet"></p> +<p>Since the beginning (as <code>kinflate</code> back in Sep +2017), kustomize has read or generated resources, +applied a series of pipelined transformation to +them, and emitted the result to <code>stdout</code>.</p> +<p>At that time, the only way to change the behavior +of a generator (e.g. a secret generator), or +change the behavior of a transformer (e.g. a name +changer, or json patcher), was to modify source +code and put out a release.</p> +<p><a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9">v1.0.9</a> introduced <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/generatorOptions.md">generator options</a> as a means +to change the behavior of the only two generators +available at the time - Secret and ConfigMap +generators. It also introduced +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs">transformer configs</a> as a way to fine tune the +targets of transformations (e.g. to which fields +<em>selectors</em> should be added). Most of the feature +requests for kustomize revolve around changing the +behavior of the builtin generators and +transformers.</p> +<p><a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.1.0">v2.1.0</a> adds an <em>alpha</em> plugin framework, that +encourages users to write their own generators or +transformers, <em>declaring them as kubernetes +objects just like everything else</em>, and apply them +as part of the <code>kustomize build</code> process.</p> +<p>To inform the API exposed to plugins, and to +confirm that the plugin framework can offer plugin +authors the same capabilities as builtin +operations, all the builtin generators and +tranformers have been converted to plugin form +(with one exceptions awaiting Go module +refinements). This means that adding, say, a +<code>secretGenerator</code> or <code>commonAnnotations</code> directive +to your kustomization will (in <a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.1.0">v2.1.0</a>) trigger +execution of +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/builtin">code committed as a plugin</a>.</p> +<p>For more information, see the +<a href="plugins">kustomize plugin documentation</a>.</p> +<h2 id="remove-load-restrictions">Remove load restrictions</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/abandonedTrainingWheels.png" alt="removed training wheels"></p> +<p>The following usage:</p> +<pre><code>kustomize build --load_restrictor none $target +</code></pre><p>allows a <code>kustomization.yaml</code> file used in this +build to refer to files outside its own directory +(i.e. outside its <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#kustomization-root">root</a>).</p> +<p>This is an opt-in to suppress a security feature +that denies this precise behavior.</p> +<p>This feature should only be used to allow multiple +overlays (e.g. prod, staging and dev) to share a +patch file. To share <em>resources</em>, use a relative +path or URL to a kustomization directory in the +<code>resources</code> directive.</p> +<h2 id="inventory-generation-for-pruning">Inventory generation for pruning</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/pruning.png" alt="pruning dead branches"></p> +<p><em>Alpha</em></p> +<p>Users can add an <code>inventory</code> stanza to their +kustomization file, to add a special <em>inventory +object</em> to the <code>build</code> result.</p> +<p>This object applies to the cluster along with +everything else in the build result and can be +used by other clients to intelligently <em>prune</em> +orphaned cluster resources.</p> +<p>For more information see the +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/docs/inventory_object.md">kustomize inventory object documentation</a>.</p> +<h2 id="field-changes--deprecations">Field changes / deprecations</h2> +<h3 id="resources-expanded-bases-deprecated"><code>resources</code> expanded, <code>bases</code> deprecated</h3> +<p>The <code>resources</code> field has been generalized; it now +accepts what formerly could only be specified in +the <code>bases</code> field.</p> +<p>This change was made to allow users fine control +over resource processing order. With a distinct +<code>bases</code> field, bases had to be loaded separately +from resources as a group. Now, base loading may +be interleaved as desired with the loading of +resource files from the current +directory. <a href="#resource-ordering">Resource ordering</a> +had to be respected before this feature could be +introduced.</p> +<p>The <code>bases</code> field is now deprecated, and will be +deleted in some future major release. Manage the +deprecation simply moving the arguments of the +<code>bases</code> field to the <code>resources</code> field in the +desired order, e.g.</p> +<blockquote> +<pre><code>resources: +- someResouceFile.yaml +- someOtherResourceFile.yaml +bases: +- ../../someBaseDir +</code></pre></blockquote> +<p>could become</p> +<blockquote> +<pre><code>resources: +- someResouceFile.yaml +- ../../someBaseDir +- someOtherResourceFile.yaml +</code></pre></blockquote> +<p>The <code>kustomized edit fix</code> command will do this for +you, though it will always put the bases at the +end.</p> +<p>As an aside, the <code>resources</code>, <code>generators</code> and +<code>transformers</code> fields now all accept the same +argument format.</p> +<blockquote> +<p>Each field&rsquo;s argument is a <em>string list</em>, +where each entry is either a <em>resource</em> (a +relative path to a YAML file) or a +<a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#kustomization"><em>kustomization</em></a> (a path or URL +pointing to a directory with a kustomization +file). A kustomization directory used in this +context is called a <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#base"><em>base</em></a>.</p> +</blockquote> +<p>The fact that the <code>generators</code> and <code>transformers</code> +field accept <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#base">bases</a> and the fact that generator +and transformer configuration objects are just +normal k8s resources means that one can generate +or transform a generator or a transformer (see +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/internal/target/transformerplugin_test.go">TestTransformerTransformers</a>).</p> +<h3 id="replicas-field"><code>replicas</code> field</h3> +<p>The common task of patching a deployment to edit +the number of replicas is now made easier +with the new <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/kustomization/replicas">replicas</a> field.</p> +<h3 id="envs-field"><code>envs</code> field</h3> +<p>An <code>envs</code> sub-field has been added to both +<code>configMapGenerator</code> and <code>secretGenerator</code>, +replacing the now deprecated (and singular) +<code>env</code> field. The new field accepts lists, just +like its sibling fields <code>files</code> and <code>literals</code>.</p> +<p>Optionally use <code>kustomize edit fix</code> to merge +singular <code>env</code> field into a plural field.</p> + + + + + + Blog: v2.0.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/02/05/v2.0.0/ + Tue, 05 Feb 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/02/05/v2.0.0/ + + + + <p>After security review, a field used in secret +generation (see below) was removed from the +definition of a kustomization file with no +mechanism to convert it to a new form. Also, the +set of files accessible from a kustomization file +has been further constrained.</p> +<p>Per the <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/faq/versioningpolicy">versioning policy</a>, +backward incompatible changes trigger an increment +of the major version number, hence we go +from 1.0.11 to 2.0.0. We&rsquo;re taking this major +version increment opportunity to remove some +already deprecated fields, and the code paths +associated with them.</p> +<h2 id="backward-incompatible-changes">Backward Incompatible Changes</h2> +<h3 id="kustomization-path-constraints">Kustomization Path Constraints</h3> +<p>A kustomization file can specify paths to other +files, including resources, patches, configmap +generation data, secret generation data and +bases. In the case of a base, the path can be a +git URL instead.</p> +<p>In 1.x, these paths had to be relative to the +current kustomization directory (the location of +the kustomization file used in the <code>build</code> +command).</p> +<p>In 2.0, bases can continue to specify, via +relative paths, kustomizations outside the current +kustomization directory. But non-base paths are +constrained to terminate in or below the current +kustomization directory. Further, bases specified +via a git URL may not reference files outside of +the directory used to clone the repository.</p> +<h3 id="kustomization-field-removals">Kustomization Field Removals</h3> +<h4 id="patches">patches</h4> +<p><code>patches</code> was deprecated and replaced by +<code>patchesStrategicMerge</code> when <code>patchesJson6902</code> was +introduced. In Kustomize 2.0.0, <code>patches</code> is +removed. Please use <code>patchesStrategicMerge</code> +instead.</p> +<h4 id="imagetags">imageTags</h4> +<p><code>imageTags</code> is replaced by <code>images</code> since <code>images</code> +can provide more features to change image names, +registries, tags and digests.</p> +<h4 id="secretgeneratorcommands">secretGenerator/commands</h4> +<p><code>commands</code> is removed from SecretGenerator due to +a <a href="https://docs.google.com/document/d/1FYgLVdq-siB_Cef9yuQBmit0PbrE8lsyTBdGI2eA2y8/edit">security concern</a>. One can use <code>files</code> or +<code>literals</code>, similar to ConfigMapGenerator, to +generate a secret.</p> +<pre><code>secretGenerator: +- name: app-tls + files: + - secret/tls.cert + - secret/tls.key + type: &quot;kubernetes.io/tls&quot; +</code></pre><h2 id="compatible-changes-new-features">Compatible Changes (New Features)</h2> +<p>As this release is triggered by a security change, +there are no major new features to announce. A few +things that are worth mentioning in this release +are:</p> +<ul> +<li> +<p>More than <em>40</em> issues closed since 1.0.11 +release (including many extensions to +transformation rules).</p> +</li> +<li> +<p>Users can run <code>kustomize edit fix</code> to migrate a +kustomization file working with previous +versions to one working with 2.0.0. For example, +a kustomization.yaml with following content</p> +<pre><code>patches: + - deployment-patch.yaml +imageTags: + - name: postgres + newTag: v1 +</code></pre><p>will be converted to</p> +<pre><code>apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +patchesStrategicMerge: + - deployment-patch.yaml +images: + - name: postgres + newTag: v1 +</code></pre></li> +<li> +<p>Kustomization filename</p> +<p>In previous versions, the name of a +kustomization file had to be +<code>kustomization.yaml</code>. +Kustomize allows <code>kustomization.yaml</code>, +<code>kustomization.yml</code> and +<code>Kustomization</code>. In a directory, only one of +those filenames is allowed. If there are more +than one found, Kustomize will exit with an +error. Please select the best filename for your +use cases.</p> +</li> +<li> +<p>Cancelled plans to deprecate applying prefix/suffix to namespace. +The deprecation warning</p> +<pre><code>Adding nameprefix and namesuffix to Namespace resource will be deprecated in next release. +</code></pre><p>was removed.</p> +</li> +</ul> + + + + + + Blog: v1.0.1 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2018/05/21/v1.0.1/ + Mon, 21 May 2018 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2018/05/21/v1.0.1/ + + + + <p>Initial release after move from github.com/kubernetes/kubectl to github.com/kubernetes-sigs/kustomize.</p> +<p>History</p> +<ul> +<li>May 2018: v1.0 after move to github.com/kubernetes-sigs/kubectl +from github.com/kubernetes/kubectl. +Has kustomization file, bases, overlays, basic transforms.</li> +<li>Apr 2018: s/kinflate/kustomize/, s/manifest/kustomization/</li> +<li>Oct 2017: s/kexpand/kinflate/</li> +<li>Sep 2017: kexpand <a href="https://github.com/kubernetes/kubectl/pull/65">starts</a> +in github.com/kubernetes/kubectl</li> +<li>Aug 2017: <a href="https://docs.google.com/document/d/1cLPGweVEYrVqQvBLJg6sxV-TrE5Rm2MNOBA_cxZP2WU">DAM</a> authored by Brian Grant</li> +</ul> + + + + + + diff --git a/docs/zh/blog/releases/page/1/index.html b/docs/zh/blog/releases/page/1/index.html new file mode 100644 index 000000000..2ad033c67 --- /dev/null +++ b/docs/zh/blog/releases/page/1/index.html @@ -0,0 +1 @@ +https://kubernetes-sigs.github.io/kustomize/zh/blog/releases/ \ No newline at end of file diff --git a/docs/zh/contributing/bugs/index.html b/docs/zh/contributing/bugs/index.html new file mode 100644 index 000000000..97d549eda --- /dev/null +++ b/docs/zh/contributing/bugs/index.html @@ -0,0 +1,578 @@ + + + + + + + + + + + + + + + + + + + + + + + +Filing Bugs | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Filing Bugs | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    Filing Bugs

    +
    How to file bugs and fix Kustomize bugs
    +

    File issues as desired, but if you’ve found a problem +with how kustomize build works, please report

    +
      +
    • the output of kustomize version,
      • +
    • the input (the content of kustomization.yaml +and any files it refers to),
      • +
    • the expected YAML output.
      • +
    +

    If you have go installed

    +

    kustomize has a simple test harness in the krusty +package for specifying a kustomization’s input and the +expected output.

    +

    Copy one of those tests, e.g. this reusable custom +transformer test, to a new test file in the +krusty package.

    +

    Insert the inputs you want to use, and run it as +you’d run the reusable custom transformer test:

    +
    (cd api; go test -run TestReusableCustomTransformers ./krusty)
+

    The output will demonstrate the bug or missing feature.

    +

    Record this output in the test file in a call to +AssertActualEqualsExpected, per all the other tests +in the krusty package. This makes the test pass, +albeit with output demonstrating behavior you +presumably want to change.

    +

    Send the new test in a PR, along with commentary (in +the test) on what you’d prefer to see.

    +

    The person who fixes the bug then has a clear bug +reproduction and a test to modify when the bug is +fixed.

    +

    Any bug fix first requires a test demonstrating the bug +(so we have permanent regression coverage), so if the +bug reporter does this, it saves time and avoids +misunderstandings.

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/contributing/bugs/index.xml b/docs/zh/contributing/bugs/index.xml new file mode 100644 index 000000000..f6a7fa5b4 --- /dev/null +++ b/docs/zh/contributing/bugs/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – Filing Bugs + https://kubernetes-sigs.github.io/kustomize/zh/contributing/bugs/ + Recent content in Filing Bugs on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/contributing/community/index.html b/docs/zh/contributing/community/index.html new file mode 100644 index 000000000..aa4669ee3 --- /dev/null +++ b/docs/zh/contributing/community/index.html @@ -0,0 +1,553 @@ + + + + + + + + + + + + + + + + + + + + + + + +Community Engagment | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Community Engagment | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    Community Engagment

    +
    Joining SIG-CLI and the Kubernetes community
    +

    Kustomize is a sub project of the Kubernetes CLI special interest group and follows the Kubernetes +project contributor roles.

    +

    If you are interested in contributing towards Kustomize or getting more involved with the community:

    + + +
    + + + + +
    + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/contributing/community/index.xml b/docs/zh/contributing/community/index.xml new file mode 100644 index 000000000..810e54147 --- /dev/null +++ b/docs/zh/contributing/community/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – Community Engagment + https://kubernetes-sigs.github.io/kustomize/zh/contributing/community/ + Recent content in Community Engagment on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/contributing/docs/index.html b/docs/zh/contributing/docs/index.html new file mode 100644 index 000000000..a261f8276 --- /dev/null +++ b/docs/zh/contributing/docs/index.html @@ -0,0 +1,624 @@ + + + + + + + + + + + + + + + + + + + + + + + +Writing Docs | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Writing Docs | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    Writing Docs

    +
    How to make Kustomize docs contributions
    +

    Kustomize uses Docsy for the site, and was +forked from the docsy-example

    +

    Prerequisites

    +
      +
    • Install hugo
      • +
    • Clone kustomize +
        +
      • git clone git@github.com:kubernetes-sigs/kustomize && cd kustomize/
        • +
      +
      • +
    +

    Development

    +

    The doc input files are in the site directory. The site can be hosted locally using +hugo serve.

    +
    cd site/
+hugo serve
+
    ...
+Running in Fast Render Mode. For full rebuilds on change: hugo server --disableFastRender
+Web Server is available at http://localhost:1313/kustomize/ (bind address 127.0.0.1)
+

    Publishing

    +

    Hugo compiles the files under site Hugo into html which it puts in the docs folder:

    +
    cd site/
+hugo
+
                       | EN  
+-------------------+-----
+  Pages            | 99  
+  Paginator pages  |  0  
+  Non-page files   |  0  
+  Static files     | 47  
+  Processed images |  0  
+  Aliases          |  2  
+  Sitemaps         |  1  
+  Cleaned          |  0  
+

    Add the site/ and docs/ folders to a commit, then create a PR.

    +

    Publishing docs to your kustomize fork

    +

    It is possible to have the kustomize docs published to your forks github pages.

    +

    Setup GitHub Pages for the fork

    +
      +
    1. Go to the forked repo’s Settings tab + +
      2. +
    2. Go to the GitHub Pages section
      3. +
    3. Set the source to master branch /docs folder
      4. +
    +

    Publish to the fork’s GitHub Pages

    + + +
    +

    Changes must be pushed to the fork’s master branch to be served as the fork’s GitHub Page.

    + +
    + +
      +
    1. Make a change to a file under site/content
      2. +
    2. Run hugo from the site/ directory
      3. +
    3. Add the site and docs directories to the master branch
      4. +
    4. Commit and push the changes to the remote fork’s master branch
      5. +
    5. After a few minutes, the docs should be served from the fork’s GitHub Page + +
      6. +
    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/contributing/docs/index.xml b/docs/zh/contributing/docs/index.xml new file mode 100644 index 000000000..caad94ef5 --- /dev/null +++ b/docs/zh/contributing/docs/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – Writing Docs + https://kubernetes-sigs.github.io/kustomize/zh/contributing/docs/ + Recent content in Writing Docs on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/contributing/features/index.html b/docs/zh/contributing/features/index.html new file mode 100644 index 000000000..c94c326b3 --- /dev/null +++ b/docs/zh/contributing/features/index.html @@ -0,0 +1,578 @@ + + + + + + + + + + + + + + + + + + + + + + + +Contributing Features | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Contributing Features | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    Contributing Features

    +
    How to contribute features
    +

    Following is the process for proposing a new Kustomize feature:

    +
      +
    1. Check the eschewed feature list to see if the feature has already been proposed
      2. +
    2. File an issue describing the desired feature +
        +
      • label it kind/feature
        • +
      • the motivation for the feature
        • +
      • example of how you would accomplish the motivating task without the feature
        • +
      • example of how you would accomplish the motivating task with the feature
        • +
      +
      3. +
    3. Email the sig-cli mailing list with the issue
      4. +
    4. Present the issue at sig-cli bi-weekly meeting on Zoom +
        +
      • add it to the meeting agenda doc
        • +
      • be present to discuss the feature
        • +
      • response may be – move forward with a PoC, not to move forward, defer and come back later, +or more information is needed.
        • +
      +
      5. +
    5. Address the feedback on the issue +
        +
      • Possibly write a KEP for tracking the feature
        • +
      +
      6. +
    6. Implement the feature and send a PR +
        +
      • Add table-driven tests
        • +
      • Expect comments on the PR within 2 weeks
        • +
      +
      7. +
    7. Kustomize team will release the kustomize api and kustomize modules
      8. +
    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/contributing/features/index.xml b/docs/zh/contributing/features/index.xml new file mode 100644 index 000000000..3cb72e4c6 --- /dev/null +++ b/docs/zh/contributing/features/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – Contributing Features + https://kubernetes-sigs.github.io/kustomize/zh/contributing/features/ + Recent content in Contributing Features on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/contributing/howitworks/index.html b/docs/zh/contributing/howitworks/index.html new file mode 100644 index 000000000..0e3111feb --- /dev/null +++ b/docs/zh/contributing/howitworks/index.html @@ -0,0 +1,639 @@ + + + + + + + + + + + + + + + + + + + + + + + +Writing Code | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Writing Code | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    Writing Code

    +
    How to modify Kustomize
    + + +
    +

    To build kustomize using the locally modified modules, replace statements must be added to +the kustomize/go.mod.

    +

    e.g. if code in api was modified, a replace statement would need to be added for the +kustomize/api module.

    + +
    + +

    Call stack when running kustomize build, with links to code.

    +

    Run build

    + +

    Make resource map

    + + +
    + + + + +
    + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/contributing/howitworks/index.xml b/docs/zh/contributing/howitworks/index.xml new file mode 100644 index 000000000..b4968dade --- /dev/null +++ b/docs/zh/contributing/howitworks/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – Writing Code + https://kubernetes-sigs.github.io/kustomize/zh/contributing/howitworks/ + Recent content in Writing Code on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/contributing/index.html b/docs/zh/contributing/index.html new file mode 100644 index 000000000..8e0100e97 --- /dev/null +++ b/docs/zh/contributing/index.html @@ -0,0 +1,582 @@ + + + + + + + + + + + + + + + + + + + + + + + +贡献指南 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + 贡献指南 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    贡献指南

    + +

    以下是 Kustomize 贡献指南。

    + +
    + + + + +
    + + +
    +
    + Filing Bugs +
    +

    How to file bugs and fix Kustomize bugs

    +
    + + + +
    +
    + Community Engagment +
    +

    Joining SIG-CLI and the Kubernetes community

    +
    + + + +
    +
    + Contributing Features +
    +

    How to contribute features

    +
    + + + +
    +
    + Writing Docs +
    +

    How to make Kustomize docs contributions

    +
    + + + +
    +
    + Writing Code +
    +

    How to modify Kustomize

    +
    + + + +
    +
    + MacOS Dev Guide +
    +

    How to develop on MacOS

    +
    + + + +
    +
    + Windows Dev Guide +
    +

    How to develop on Windows

    +
    + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/contributing/index.xml b/docs/zh/contributing/index.xml new file mode 100644 index 000000000..cdc39f1de --- /dev/null +++ b/docs/zh/contributing/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – 贡献指南 + https://kubernetes-sigs.github.io/kustomize/zh/contributing/ + Recent content in 贡献指南 on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/contributing/mac/index.html b/docs/zh/contributing/mac/index.html new file mode 100644 index 000000000..d6c223869 --- /dev/null +++ b/docs/zh/contributing/mac/index.html @@ -0,0 +1,574 @@ + + + + + + + + + + + + + + + + + + + + + + + +MacOS Dev Guide | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + MacOS Dev Guide | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    MacOS Dev Guide

    +
    How to develop on MacOS
    +

    First install the tools to build and run tests

    +

    Install go 1.13

    +

    Instructions

    +

    Add go to your PATH

    +

    Install kubeval

    +

    Instructions

    +
    go get github.com/instrumenta/kubeval
+

    Add kubeval to your PATH

    +

    Install gnu tools

    +

    Instructions

    +
    brew install coreutils wget gnu-sed tree
+

    Add the new tools to your PATH

    +

    Make everything

    +

    Verify your install by running make:

    +
    make
+

    Be default, this runs all tests needed to qualify a pull request.

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/contributing/mac/index.xml b/docs/zh/contributing/mac/index.xml new file mode 100644 index 000000000..697ef5b3f --- /dev/null +++ b/docs/zh/contributing/mac/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – MacOS Dev Guide + https://kubernetes-sigs.github.io/kustomize/zh/contributing/mac/ + Recent content in MacOS Dev Guide on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/contributing/windows/index.html b/docs/zh/contributing/windows/index.html new file mode 100644 index 000000000..6d97d1919 --- /dev/null +++ b/docs/zh/contributing/windows/index.html @@ -0,0 +1,632 @@ + + + + + + + + + + + + + + + + + + + + + + + +Windows Dev Guide | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Windows Dev Guide | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    Windows Dev Guide

    +
    How to develop on Windows
    +

    This is the PowerShell script to run all go tests for Kustomize on a windows based platform which mimics /build/pre-commit.sh

    +

    Pre-Reqs:

    +
      +
    • PowerShell installed +
        +
      • PowerShell Core is supported
        • +
      +
      • +
    • go installed
      • +
    • golangci-lint installed
      • +
    • mdrip installed
      • +
    +

    This script should output to the current console and return an exit code if all tests are successful(0) or any failed(1).

    +

    If you are tryin to run these tests locally you can follow these instructions.

    +

    Assume:

    +
      +
    • Running a stock Windows 10 system
      • +
    • Local Admin rights.
      • +
    • You can open PowerShell as administrator
      • +
    • You should be knowledgeable enough to pull source for packages into your GO src directory +
        +
      • Yes, this means you also need to know a bit about git usually
        • +
      +
      • +
    +

    Step 1 - Install Go

    +
      +
    • Install Go - please use the msi +
        +
      • If you use chocolatey - it’s using the zip not msi and assumptions on where go is located are made for you.
        • +
      +
      • +
    +

    Step 2 - Install Go Packages

    +
      +
    • Open new PowerShell Administrative window +
        +
      • Install golangci-lint +
          +
        • go get -u github.com/golangci/golangci-lint/cmd/golangci-lint
          • +
        +
        • +
      • Install mdrip +
          +
        • go get github.com/monopole/mdrip
          • +
        +
        • +
      +
      • +
    +

    You should now be able to issue these commands and see comparable responses

    +
    C:\...> golangci-lint --help
+Smart, fast linters runner. Run it in cloud for every GitHub pull request on https://golangci.com
+...
+
+C:\...> mdrip --help
+Usage:  C:\_go\bin\mdrip.exe {fileName}...
+...
+

    Step 3 - Get Source and Test

    +
      +
    • In your GoRoot src +
        +
      • Example: C:\_go\src
        • +
      +
      • +
    • Navigate to the Kustomize travis directory +
        +
      • Example: C:\_go\src\sigs.k8s.io\kustomize\travis
        • +
      +
      • +
    • Now Execute: +
        +
      • .\Invoke-PreCommit.ps1
        • +
      +
      • +
    +

    This should run all pre-commit tests thus defined in the script.

    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/contributing/windows/index.xml b/docs/zh/contributing/windows/index.xml new file mode 100644 index 000000000..489427671 --- /dev/null +++ b/docs/zh/contributing/windows/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – Windows Dev Guide + https://kubernetes-sigs.github.io/kustomize/zh/contributing/windows/ + Recent content in Windows Dev Guide on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/faq/eschewedfeatures/index.html b/docs/zh/faq/eschewedfeatures/index.html new file mode 100644 index 000000000..4e878dd89 --- /dev/null +++ b/docs/zh/faq/eschewedfeatures/index.html @@ -0,0 +1,523 @@ + + + + + + + + + + + + + + + + + + + + + + + +Eschewed Features | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Eschewed Features | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    Eschewed Features

    +
    Eschewed Features
    +

    The maintainers established this list to +place bounds on the kustomize feature +set. The bounds can be changed with +a consensus on the risks.

    +

    For a bigger picture about why kustomize +does some things and not others, see the +glossary entry for DAM.

    +

    Removal directives

    +

    kustomize supports configurations that can be reasoned about as +compositions or mixins - concepts that are widely accepted as +a best practice in various programming languages.

    +

    To this end, kustomize offers various addition directives. +One may add labels, annotations, patches, resources, bases, etc. +Corresponding removal directives are not offered.

    +

    Removal semantics would introduce many possibilities for +inconsistency, and the need to add code to detect, report and +reject it. It would also allow, and possibly encourage, +unnecessarily complex configuration layouts.

    +

    When faced with a situation where removal is desirable, it’s +always possible to remove things from a base like labels and +annotations, and/or split multi-resource manifests into individual +resource files - then add things back as desired via the +kustomization.

    +

    If the underlying base is outside of one’s control, an OTS +workflow is the recommended best practice. Fork the base, remove +what you don’t want and commit it to your private fork, then use +kustomize on your fork. As often as desired, use git rebase to +capture improvements from the upstream base.

    +

    Unstructured edits

    +

    Structured edits are changes controlled by +knowledge of the k8s API, and YAML or JSON syntax.

    +

    Most edits performed by kustomize can be expressed as +JSON patches or SMP patches. +Those can be verbose, so common patches, +like adding labels or annotatations, get dedicated +transformer plugins - LabelTransformer, +AnnotationsTransformer, etc. +These accept relatively simple YAML configuration +allowing easy targeting of any number of resources.

    +

    Another class of edits take data from one specific +object’s field and use it in another (e.g. a service +object’s name found and copied into a container’s +command line). These reflection-style edits +are called replacements.

    +

    The above edits create valid output given valid input, +and can provide syntactically and semantically +informed error messages if inputs are invalid.

    +

    Unstructured edits, edits that don’t limit +themselves to a syntax or object structure, +come in many forms. A common one in the +configuration domain is the template or +parameterization approach.

    +

    In this technique, the source +material is sprinkled with strings of the +form ${VAR}. A scanner replaces them +with a value taken from a map using VAR +as the map key. It’s trivial to implement.

    +

    kustomize eschews parameterization, because

    +
      +
    • The source yaml gets polluted with $VARs +and can no longed be applied as is +to the cluster (it must be processed).
      • +
    • The source material is no longer structured, +making it unusable with any YAML processor. +It’s no longer data, it’s now logic that +must be compiled.
      • +
    • Errors in the output are disconnected from +the edit that caused it.
      • +
    • The input becomes unintelligible as the project +scales in any number of dimensions (resource +count, cluster count, environment count, etc.)
      • +
    +

    Kustomizations are meant to be sharable and stackable. +Imagine tracing down a problem rooted in a +clever set of stacked regexp replacements +performed by various overlays on some remote base. +We’ve used such systems, and never want to again.

    +

    Other tools (sed, jinja, erb, envsubst, kafka, helm, ksonnet, +etc.) provide varying degrees of unstructured editting +and/or embedded languages, and can be used instead +of, or in a pipe with, kustomize. If you want to +go all-in on configuration as a language, consider cue.

    +

    kustomize is going to stick to YAML in / YAML out.

    +

    Build-time side effects from CLI args or env variables

    +

    kustomize supports the best practice of storing one’s +entire configuration in a version control system.

    +

    Changing kustomize build configuration output as a result +of additional arguments or flags to build, or by +consulting shell environment variable values in build +code, would frustrate that goal.

    +

    kustomize insteads offers kustomization file edit +commands. Like any shell command, they can accept +environment variable arguments.

    +

    For example, to set the tag used on an image to match an +environment variable, run

    +
    kustomize edit set image nginx:$MY_NGINX_VERSION
+

    as part of some encapsulating work flow executed before +kustomize build.

    +

    Globs in kustomization files

    +

    kustomize supports the best practice of storing one’s +entire configuration in a version control system.

    +

    Globbing the local file system for files not explicitly +declared in the kustomization file at kustomize build time +would violate that goal.

    +

    Allowing globbing in a kustomization file would also introduce +the same problems as allowing globbing in java import +declarations or BUILD/Makefile dependency rules.

    +

    kustomize will instead provide kustomization file editting +commands that accept globbed arguments, expand them at edit +time relative to the local file system, and store the resulting +explicit names into the kustomization file.

    + +
    + + + + +
    + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/faq/eschewedfeatures/index.xml b/docs/zh/faq/eschewedfeatures/index.xml new file mode 100644 index 000000000..61c99c962 --- /dev/null +++ b/docs/zh/faq/eschewedfeatures/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – Eschewed Features + https://kubernetes-sigs.github.io/kustomize/zh/faq/eschewedfeatures/ + Recent content in Eschewed Features on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/faq/index.html b/docs/zh/faq/index.html new file mode 100644 index 000000000..8da9aca69 --- /dev/null +++ b/docs/zh/faq/index.html @@ -0,0 +1,449 @@ + + + + + + + + + + + + + + + + + + + + + + + +FAQ | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + FAQ | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    FAQ

    + +

    security: file ‘foo’ is not in or below ‘bar’

    +

    v2.0 added a security check that prevents +kustomizations from reading files outside their own +directory root.

    +

    This was meant to help protect the person inclined to +download kustomization directories from the web and use +them without inspection to control their production +cluster +(see #693, +#700, +#995 and +#998)

    +

    Resources (including configmap and secret generators) +can still be shared via the recommended best practice +of placing them in a directory with their own +kustomization file, and referring to this directory as a +base from any kustomization that +wants to use it. This encourages modularity and +relocatability.

    +

    To disable this, use v3, and the load_restrictor flag:

    +
    kustomize build --load_restrictor none $target
+

    Some field is not transformed by kustomize

    +

    Example: #1319, #1322, #1347 and etc.

    +

    The fields transformed by kustomize is configured explicitly in defaultconfig. The configuration itself can be customized by including configurations in kustomization.yaml, e.g.

    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+configurations:
+- kustomizeconfig.yaml
+

    The configuration directive allows customization of the following transformers:

    +
    commonAnnotations: []
+commonLabels: []
+nameprefix: []
+namespace: []
+varreference: []
+namereference: []
+images: []
+replicas: []
+

    To persist the changes to default configuration, submit a PR like #1338, #1348 and etc.

    + +
    + + + + +
    + + +
    +
    + Eschewed Features +
    +

    Eschewed Features

    +
    + + + +
    +
    + Versioning Policy +
    +

    +
    + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/faq/index.xml b/docs/zh/faq/index.xml new file mode 100644 index 000000000..11d6baba4 --- /dev/null +++ b/docs/zh/faq/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – FAQ + https://kubernetes-sigs.github.io/kustomize/zh/faq/ + Recent content in FAQ on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/faq/versioningpolicy/index.html b/docs/zh/faq/versioningpolicy/index.html new file mode 100644 index 000000000..09540cc4a --- /dev/null +++ b/docs/zh/faq/versioningpolicy/index.html @@ -0,0 +1,628 @@ + + + + + + + + + + + + + + + + + + + + + + +Versioning Policy | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Versioning Policy | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    Versioning Policy

    + +

    Running kustomize means one is running a +particular version of a program (a CLI), using a +particular version of underlying packages (a Go +API), and reading a particular version of a +kustomization file.

    +
    +

    If you’re having trouble with go get, please +read Go API Versioning +and be patient.

    +
    +

    CLI Program Versioning

    +

    The command kustomize version prints a three +field version tag (e.g. v3.0.0) that aspires to +semantic versioning.

    +

    This notion of semver applies only to the CLI; +the command names, their arguments and their flags.

    +

    The major version changes when some backward +incompatibility appears in how the commands +behave.

    +

    Installation

    +

    See the installation docs.

    +

    Go API Versioning

    +

    The public methods in the public packages +of module sigs.k8s.io/kustomize/api constitute +the kustomize Go API.

    +

    Version sigs.k8s.io/kustomize/v3 and earlier

    +

    In kustomize/v3 (and preceding major versions), the +kustomize program and the API live the same Go +module at sigs.k8s.io/kustomize, at import path +sigs.k8s.io/kustomize/v3.

    +

    This has been fine for the CLI, but it presents a +problem for the Go API.

    +

    The process around Go modules, in particular the +notion of minimal version selection, demands +that the module respect semver.

    +

    Almost all the code in module +sigs.k8s.io/kustomize/v3 is exposed (not in a +directory named internal). Even a minor +refactor changing a method name or argument type +in some deeply buried (but still public) method is +a backward incompatible change. As a result, Go +API semver hasn’t been followed. This was a mistake.

    +

    Some options are

    +
      +
    • +

      continue to ignore Go API semver and stick to +CLI semver (eliminating the usefullness of +minimal version selection),

      +
      • +
    • +

      obey semver, and increment the module’s major +version number with every release (drastically +reducing the usefullness of minimal version +selection - since virtually all releases will +be major),

      +
      • +
    • +

      slow down change in the huge API in favor of +stability, yet somehow continue to deliver +features,

      +
      • +
    • +

      drastically reduce the API surface, stabilize on +semver there, and refactor as needed inside +internal.

      +
      • +
    +

    The last option seems the most appealing.

    +

    The first stable API version is coming

    +

    The first stable API version will launch +as the Go module

    +
    sigs.k8s.io/kustomize/api
+

    The kustomize program itself (main.go +and CLI specific code) will have moved out of +sigs.k8s.io/kustomize and into the new module +sigs.k8s.io/kustomize/kustomize. This is a +submodule in the same repo, and it will retain its +current notion of semver (e.g. a backward +incompatible change in command behavior will +trigger a major version bump). This module will +not export packages; it’s just home to a main +package.

    +

    The sigs.k8s.io/kustomize/api module will +obey semver with a sustainable public +surface, informed by current usage. Clients +should import packages from this module, i.e. +from import paths prefixed by +sigs.k8s.io/kustomize/api/ at first, +and later by sigs.k8s.io/kustomize/api/v2/. +The kustomize binary +itself is an API client requiring this module.

    +

    The clients and API will evolve independently.

    +

    Kustomization File Versioning

    +

    The kustomization file is a struct that is part of +the kustomize Go API (the sigs.k8s.io/kustomize +module), but it also evolves as a k8s API object - +it has an apiVersion field containing its +own version number.

    +

    Field Change Policy

    +
      +
    • A field’s meaning cannot be changed.
      • +
    • A field may be deprecated, then removed.
      • +
    • Deprecation means triggering a minor (semver) +version bump in the kustomize Go API, and +defining a migration path in a non-fatal error +message.
      • +
    • Removal means triggering a major (semver) +version bump in the kustomize Go API, and fatal +error if field encountered (as with any unknown +field). Likewise a change in apiVersion.
      • +
    +

    The edit fix Command

    +

    This kustomize command reads a Kustomization +file, converts deprecated fields to new +fields, and writes it out again in the latest +format.

    +

    This is a type version upgrade mechanism that +works within major API revisions. There is no +downgrade capability, as there’s no use case for +it (see discussion below).

    +

    Examples

    +

    With the 2.0.0 release, there were three field +removals:

    +
      +
    • imageTag was deprecated when images was +introduced, because the latter offers more +general features for image data manipulation. +imageTag was removed in v2.0.0.
      • +
    • patches was deprecated and replaced by +patchesStrategicMerge when patchesJson6902 +was introduced, to make a clearer +distinction between patch specification formats. +patches was removed in v2.0.0.
      • +
    • secretGenerator/commands was removed +due to security concerns in v2.0.0 +with no deprecation period.
      • +
    +

    The edit fix command in a v2.0.x binary +will no longer recognize these fields.

    +

    Relationship to the k8s API

    +

    Review of k8s API versioning

    +

    The k8s API has specific conventions and a +process for making changes.

    +

    The presence of an apiVersion field in a k8s +native type signals:

    +
      +
    • its reliability level (alpha vs beta vs +generally available),
      • +
    • the existence of code to provide default values +to fields not present in a serialization,
      • +
    • the existence of code to provide both forward +and backward conversion between different +versions of types.
      • +
    +

    The k8s API promises a lossless conversion +between versions over a specific range. This +means that a recent client can write an object +bearing the newest possible value for its version, +the server will accept it and store it in +“versionless” JSON form in storage, and can +convert it to a range of older versions should +an older client request data.

    +

    For native k8s types, this all requires writing Go +code in the kubernetes core repo, to provide +defaulting and conversions.

    +

    For CRDs, there’s a proposal on how to manage +versioning (e.g. a remote service can offer type +defaulting and conversions).

    +

    Differences

    +
      +
    • A k8s API server is able to go forward and +backward in versioning, to work with older +clients, over some range.
      • +
    • The kustomize edit fix command only moves +forward within a major API +version.
      • +
    +

    At the time of writing, the YAML in a +kustomization file does not represent a k8s API +object, and the kustomize command and associated +library is neither a server of, nor a client to, +the k8s API.

    +

    Additional Kustomization file rules

    +

    In addition to the field change policy described +above, kustomization files conform to +the following rules.

    +

    Eschew classic k8s fields

    +

    Field names with dedicated meaning in k8s +(metadata, spec, status, etc.) aren’t used. +This is enforced via code review.

    +

    Default values for k8s kind and apiVersion

    +

    In v3 or below, the two special k8s +resource fields kind and apiVersion may +be omitted from the kustomization file.

    +

    If either field is present, they both must be. +If present, the value of kind must be:

    +
    +
    kind: Kustomization
+
    +

    If missing, the value of apiVersion defaults to

    +
    +
    apiVersion: kustomize.config.k8s.io/v1beta1
+
    + + + +
    最后修改 0001年01月01日 +
    +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/fields.md b/docs/zh/fields.md deleted file mode 100644 index 6cebdb173..000000000 --- a/docs/zh/fields.md +++ /dev/null @@ -1,271 +0,0 @@ -# Kustomization 文件字段 - -[field-name-namespace]: plugins-builtins.md#字段名称namespace -[field-name-images]: plugins-builtins.md#字段名称images -[field-names-namePrefix-nameSuffix]: plugins-builtins.md#字段名称namePrefix-nameSuffix -[field-name-patches]: plugins-builtins.md#字段名称patches -[field-name-patchesStrategicMerge]: plugins-builtins.md#字段名称patchesStrategicMerge -[field-name-patchesJson6902]: plugins-builtins.md#字段名称patchesJson6902 -[field-name-replicas]: plugins-builtins.md#字段名称replicas -[field-name-secretGenerator]: plugins-builtins.md#字段名称secretGenerator -[field-name-commonLabels]: plugins-builtins.md#字段名称commonLabels -[field-name-commonAnnotations]: plugins-builtins.md#字段名称commonAnnotations -[field-name-configMapGenerator]: plugins-builtins.md#字段名称configMapGenerator - -介绍 [kustomization.yaml](glossary.md#kustomization) 配置文件中各字段的含义。 - -## Resources - -现有可定制对象。 - -| 字段 | 类型 | 说明 | -| --- | --- | --- | -|[resources](#resources) | list | 包含 k8s API 对象的文件，或其他包含 `kustomization.yaml` 文件的目录。 | -|[CRDs](#crds)| list | CDR 文件，允许在资源列表中指定自定义资源。 | - -## Generators - -资源生成器。 - -| 字段 | 类型 | 说明 | -| --- | --- | --- | -|[configMapGenerator](#configmapgenerator)| list | 列表中的每个条目都将生成一个 ConfigMap （合计可以生成 n 个 ConfigMap）。 | -|[secretGenerator](#secretgenerator)| list | 列表中的每个条目都将生成一个 Secret（合计可以生成 n 个 Secrets）。 | -|[generatorOptions](#generatoroptions)| string | generatorOptions 可以修改所有 ConfigMapGenerator 和 SecretGenerator 的行为。 | -|[generators](#generators)| list | [插件](plugins.md)配置文件。 | - -## Transformers - -资源字段转换项。 - -| 字段 | 类型 | 说明 | -| --- | --- | --- | -| [commonLabels](#commonlabels) | string | 为所有资源和 selectors 增加 Labels 。 | -| [commonAnnotations](#commonannotations) | string | 为所有资源增加 Annotations 。 | -| [images](#images) | list | 无需使用 patches，即可修改镜像的名称、tag 或 image digest。 | -| [inventory](#inventory) | struct | 用于生成一个包含清单信息的对象。 | -| [namespace](#namespace) | string | 为所有 resources 添加 namespace 。 | -| [namePrefix](#nameprefix) | string | 为所有资源的名称添加前缀。 | -| [nameSuffix](#namesuffix) | string | 为所有资源的名称添加后缀。 | -| [replicas](#replicas) | list | 修改资源的副本数。 | -| [patchesStrategicMerge](#patchesstrategicmerge) | list | 此列表中的每个条目都应可以解析为部分或完整的资源定义文件。 | -| [patchesJson6902](#patchesjson6902) | list | 列表中的每个条目都应可以解析为 Kubernetes 对象和将应用于该对象的 JSON patch 。 | -| [transformers](#transformers) | list | [插件](plugins.md)配置文件。 | - -## Meta - -[k8s metadata]: https://kubernetes.io/docs/concepts/overview/working-with-objects/kubernetes-objects/#required-fields - -| 字段 | 类型 | 说明 | -| --- | --- | --- | -| [vars](#vars) | string | 将一个对象中的字段值插入另一个对象中。 | -| [apiVersion](#apiversion) | string | [k8s metadata] 字段。 | -| [kind](#kind) | string | [k8s metadata] 字段。 | - ----- - -### apiVersion - -该字段默认值为： -``` -apiVersion: kustomize.config.k8s.io/v1beta1 -``` - -### bases - -`bases` 字段在 v2.1.0 中已被弃用。 - -该条目已被移动到 [resources](#resources) 字段中。 - -### commonLabels - -详见 [field-name-commonLabels]。 - -### commonAnnotations - -详见 [field-name-commonAnnotations]. - -### configMapGenerator - -详见 [field-name-configMapGenerator]. - -### crds - -此列表中的每个条目都应该是自定义资源定义（CRD）文件的相对路径。 - -该字段的存在是为了让 kustomize 识别用户自定义的 CRD ，并对这些类型中的对象应用适当的转换。 - -典型用例：CRD 引用 ConfigMap 对象 - -在 kustomization 中，ConfigMap 对象名称可能会通过 `namePrefix` 、`nameSuffix` 或 `hashing` 来更改 CRD 对象中该 ConfigMap 对象的名称， -引用时需要以相同的方式使用 `namePrefix` 、 `nameSuffix` 或 `hashing` 来进行更新。 - -Annotations 可以放入 openAPI 的定义中： - -- "x-kubernetes-annotation": "" -- "x-kubernetes-label-selector": "" -- "x-kubernetes-identity": "" -- "x-kubernetes-object-ref-api-version": "v1", -- "x-kubernetes-object-ref-kind": "Secret", -- "x-kubernetes-object-ref-name-key": "name", - -``` - -crds: -- crds/typeA.yaml -- crds/typeB.yaml -``` - - -### generatorOptions - -generatorOptions 可以修改所有 [ConfigMapGenerator](#configmapgenerator) 和 [SecretGenerator](#secretgenerator) 的行为。 - -``` -generatorOptions: - # 为所有生成的资源添加 labels - labels: - kustomize.generated.resources: somevalue - # 为所有生成的资源添加 annotations - annotations: - kustomize.generated.resource: somevalue - # disableNameSuffixHash 为 true 时将禁止默认的在名称后添加哈希值后缀的行为 - disableNameSuffixHash: true -``` - -### generators - -[插件](plugins.md)生成器配置文件列表。 - -``` -generators: -- mySecretGeneratorPlugin.yaml -- myAppGeneratorPlugin.yaml -``` - -### images - -详见 [field-name-images]。 - -### inventory - -详见 [inventory object](../inventory_object.md)。 - -### kind - -该字段默认值为： - -``` -kind: Kustomization -``` - - -### namespace - -详见 [field-name-namespace]。 - -### namePrefix - -详见 [field-names-namePrefix-nameSuffix]。 - -### nameSuffix - -详见 [field-names-namePrefix-nameSuffix]。 - -### patches - -详见 [field-name-patches]。 - -### patchesStrategicMerge - -详见 [field-name-patchesStrategicMerge]。 - -### patchesJson6902 - -详见 [field-name-patchesJson6902]。 - -### replicas - -详见 [field-name-replicas]。 - -### resources - -该条目可以是指向本地目录的相对路径，也可以是指向远程仓库中的目录的 URL，例如： - -``` -resource: -- myNamespace.yaml -- sub-dir/some-deployment.yaml -- ../../commonbase -- github.com/kubernetes-sigs/kustomize//examples/multibases?ref=v1.0.6 -- deployment.yaml -- github.com/kubernets-sigs/kustomize//examples/helloWorld?ref=test-branch -``` - -将以深度优先的顺序读取和处理资源。 - -文件应包含 YAML 格式的 k8s 资源。一个资源描述文件可以含有多个由（`---`）分隔的资源。 -应该包含 `resources` 字段的 kustomization 文件的指定文件目录的相对路径。 - -[hashicorp URL]: https://github.com/hashicorp/go-getter#url-format - -目录规范可以是相对、绝对或部分的 URL。URL 规范应遵循 [hashicorp URL] 格式。该目录必须包含 `kustomization.yaml` 文件。 - -### secretGenerator - -详见 [field-name-secretGenerator]。 - -### vars - -Vars 用于从一个 resource 字段中获取值，并将该值插入指定位置 - 反射功能。 - -例如，假设需要在容器的 command 中指定了 Service 对象的名称，并在容器的 env 中指定了 Secret 对象的名称来确保以下内容可以正常工作： - -``` -containers: - - image: myimage - command: ["start", "--host", "$(MY_SERVICE_NAME)"] - env: - - name: SECRET_TOKEN - value: $(SOME_SECRET_NAME) -``` - -则可以在 `vars：` 中添加如下内容： - -``` -vars: -- name: SOME_SECRET_NAME - objref: - kind: Secret - name: my-secret - apiVersion: v1 -- name: MY_SERVICE_NAME - objref: - kind: Service - name: my-service - apiVersion: v1 - fieldref: - fieldpath: metadata.name -- name: ANOTHER_DEPLOYMENTS_POD_RESTART_POLICY - objref: - kind: Deployment - name: my-deployment - apiVersion: apps/v1 - fieldref: - fieldpath: spec.template.spec.restartPolicy -``` -var 是包含该对象的变量名、对象引用和字段引用的元组。 - -字段引用是可选的，默认为 `metadata.name`，这是正常的默认值，因为 kustomize 用于生成或修改 resources 的名称。 - -在撰写本文档时，仅支持字符串类型字段，不支持 ints，bools，arrays 等。例如，在某些pod模板的容器编号2中提取镜像的名称是不可能的。 - -变量引用，即字符串 '$(FOO)' ，只能放在 kustomize 配置指定的特定对象的特定字段中。 - -关于 vars 的默认配置数据可以查看： -[/api/konfig/builtinpluginconsts/varreference.go](/api/konfig/builtinpluginconsts/varreference.go) - -默认目标是所有容器 command args 和 env 字段。 - -Vars _不应该_ 被用于 kustomize 已经处理过的配置中插入 names 。 -例如， Deployment 可以通过 name 引用 ConfigMap ，如果 kustomize 更改 ConfigMap 的名称，则知道更改 Deployment 中的引用的 name 。 diff --git a/docs/zh/guides/bespoke/index.html b/docs/zh/guides/bespoke/index.html new file mode 100644 index 000000000..78b77bba0 --- /dev/null +++ b/docs/zh/guides/bespoke/index.html @@ -0,0 +1,509 @@ + + + + + + + + + + + + + + + + + + + + + + + +配置定制（Bespoke configuration） | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + 配置定制（Bespoke configuration） | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    配置定制（Bespoke configuration）

    +
    自定义配置的工作流。
    +

    在这个工作流方式中，所有的配置文件（ YAML 资源）都为用户所有，存储在用户的私有 repo 中。其他用户是无法使用的。

    +

    bespoke config workflow image

    +

    1) 创建一个目录用于版本控制

    +

    我们希望将一个名为 ldap 的 Kubernetes 集群应用的配置保存在自己的 repo 中。 +这里使用 git 进行版本控制。

    +
    +
    git init ~/ldap
+
    +

    2) 创建一个 base

    +
    +
    mkdir -p ~/ldap/base
+
    +

    在这个目录中创建并提交 kustomization 文件及一组资源 resources 配置。

    +

    3) 创建 overlays

    +
    +
    mkdir -p ~/ldap/overlays/staging
+mkdir -p ~/ldap/overlays/production
+
    +

    每个目录都包含需要一个 kustomization 文件以及一或多个 patches。

    +

    在 staging 目录可能会有一个用于在 configmap 中打开一个实验标记的补丁。

    +

    在 production 目录可能会有一个在 deployment 中增加副本数的补丁。

    +

    4) 生成 variants

    +

    运行 kustomize，将生成的配置用于 kubernetes 应用发布。

    +
    +
    kustomize build ~/ldap/overlays/staging | kubectl apply -f -
+kustomize build ~/ldap/overlays/production | kubectl apply -f -
+
    +

    也可以在 kubectl-v1.14.0 版，使用 kubectl 命令发布你的 variants 。

    +
    +
    kubectl apply -k ~/ldap/overlays/staging
+kubectl apply -k ~/ldap/overlays/production
+
    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/guides/bespoke/index.xml b/docs/zh/guides/bespoke/index.xml new file mode 100644 index 000000000..ef1a29c33 --- /dev/null +++ b/docs/zh/guides/bespoke/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – 配置定制（Bespoke configuration） + https://kubernetes-sigs.github.io/kustomize/zh/guides/bespoke/ + Recent content in 配置定制（Bespoke configuration） on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/guides/index.html b/docs/zh/guides/index.html new file mode 100644 index 000000000..17db84503 --- /dev/null +++ b/docs/zh/guides/index.html @@ -0,0 +1,488 @@ + + + + + + + + + + + + + + + + + + + + + + + +指南 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + 指南 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    指南

    +
    Kustomize CLI 命令参考。
    + +
    + + + + +
    + + + + +
    +
    + 配置定制（Bespoke configuration） +
    +

    自定义配置的工作流。

    +
    + + + + + + + +
    +
    + 通用配置（Off-the-shelf configuration） +
    +

    使用通用配置的工作流。

    +
    + + + + + + + +
    +
    + Kustomize 插件 +
    +

    Kustomize 插件指南

    +
    + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/guides/index.xml b/docs/zh/guides/index.xml new file mode 100644 index 000000000..17f199fe2 --- /dev/null +++ b/docs/zh/guides/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – 指南 + https://kubernetes-sigs.github.io/kustomize/zh/guides/ + Recent content in 指南 on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/guides/offtheshelf/index.html b/docs/zh/guides/offtheshelf/index.html new file mode 100644 index 000000000..7271e6eee --- /dev/null +++ b/docs/zh/guides/offtheshelf/index.html @@ -0,0 +1,513 @@ + + + + + + + + + + + + + + + + + + + + + + + +通用配置（Off-the-shelf configuration） | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + 通用配置（Off-the-shelf configuration） | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    通用配置（Off-the-shelf configuration）

    +
    使用通用配置的工作流。
    +

    在这个工作流程中，所有文件都由用户拥有，并维护在他们控制的存储库中，但它们是基于一个现成的（off-the-shelf）配置，定期查询更新。

    +

    off-the-shelf config workflow image

    +

    1) 寻找并且 fork 一个 OTS 配置

    +

    2) 将其克隆为你自己的 base

    +

    这个 base 目录维护在上游为 OTS 配置的 repo ，在这个示例中使用 ladp 的 repo 。

    +
    +
    mkdir ~/ldap
+git clone https://github.com/$USER/ldap ~/ldap/base
+cd ~/ldap/base
+git remote add upstream git@github.com:$USER/ldap
+
    +

    3) 创建 overlays

    +

    如配置定制方法一样，创建并完善 overlays 目录中的内容。

    +

    所有的 overlays 都依赖于 base 。

    +
    +
    mkdir -p ~/ldap/overlays/staging
+mkdir -p ~/ldap/overlays/production
+
    +

    用户可以将 overlays 维护在不同的 repo 中。

    +

    4) 生成 variants

    +
    +
    kustomize build ~/ldap/overlays/staging | kubectl apply -f -
+kustomize build ~/ldap/overlays/production | kubectl apply -f -
+
    +

    也可以在 kubectl-v1.14.0 版，使用 kubectl 命令发布你的 variants 。

    +
    +
    kubectl apply -k ~/ldap/overlays/staging
+kubectl apply -k ~/ldap/overlays/production
+
    +

    5) （可选）从上游更新

    +

    用户可以定期从上游 repo 中 rebase 他们的 base 以保证及时更新。

    +
    +
    cd ~/ldap/base
+git fetch upstream
+git rebase upstream/master
+
    + +
    + + + + +
    + + + + + + + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/guides/offtheshelf/index.xml b/docs/zh/guides/offtheshelf/index.xml new file mode 100644 index 000000000..d530b9b38 --- /dev/null +++ b/docs/zh/guides/offtheshelf/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – 通用配置（Off-the-shelf configuration） + https://kubernetes-sigs.github.io/kustomize/zh/guides/offtheshelf/ + Recent content in 通用配置（Off-the-shelf configuration） on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/guides/plugins/builtins/index.html b/docs/zh/guides/plugins/builtins/index.html new file mode 100644 index 000000000..4c444e147 --- /dev/null +++ b/docs/zh/guides/plugins/builtins/index.html @@ -0,0 +1,1003 @@ + + + + + + + + + + + + + + + + + + + + + + +内置插件 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 内置插件 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    内置插件

    +
    内置插件
    +

    内置插件包括生成器和转化器。

    +

    每个插件都可以通过如下两种方式触发：

    +
      +
    • +

      通过 kustomization 文件的字段隐式触发插件，例如 AnnotationsTransformer 就是由 commonAnnotations 字段触发的。

      +
      • +
    • +

      通过 generators 或 transformers 字段显式触发插件（通过指定插件的配置文件）。

      +
      • +
    +

    直接使用 kustomization.yaml 文件中的字段比如 commonLables、commonAnnotation 他们可以修改一些默认的字段，如果用户想要添加或减少能被 commonLabel 所修改的字段，则不是很容易做到；而使用 transformers 的话，用户可以指定哪些字段能被修改，而不受默认值的影响。

    +

    AnnotationTransformer

    +

    使用 kustomization.yaml

    +

    字段名称：commonAnnotations

    +

    为所有资源添加注释，和标签一样以 key: value 的形式。

    +
    commonAnnotations:
+  oncallPager: 800-555-1212
+

    使用插件

    +

    Arguments

    +
    +

    Annotations map[string]string

    +

    FieldSpecs []config.FieldSpec

    +
    +

    Example

    +
    +
    apiVersion: builtin
+kind: AnnotationsTransformer
+metadata:
+  name: not-important-to-example
+annotations:
+  app: myApp
+  greeting/morning: a string with blanks
+fieldSpecs:
+- path: metadata/annotations
+  create: true
+
    +

    ConfigMapGenerator

    +

    使用 kustomization.yaml

    +

    字段名称：configMapGenerator

    +

    列表中的每个条目都将生成一个 ConfigMap （合计可以生成 n 个 ConfigMap）。

    +

    下面的示例会生成 3 个ConfigMap：第一个带有给定文件的名称和内容，第二个将在 data 中添加 key/value，第三个通过 options 为单个 ConfigMap 设置注释和标签。

    +

    每个 configMapGenerator 项均接受的参数 behavior: [create|replace|merge]，这个参数允许修改或替换父级现有的 configMap。

    +

    此外，每个条目都有一个 options 字段，该字段具有与 kustomization 文件的 generatorOptions 字段相同的子字段。

    +

    options 字段允许用户为生成的实例添加标签和（或）注释，或者分别禁用该实例名称的哈希后缀。此处添加的标签和注释不会被 kustomization 文件 generatorOptions 字段关联的全局选项覆盖。但是如果全局 generatorOptions 字段指定 disableNameSuffixHash: true，其他 options 的设置将无法将其覆盖。

    +
    # These labels are added to all configmaps and secrets.
+generatorOptions:
+  labels:
+    fruit: apple
+
+configMapGenerator:
+- name: my-java-server-props
+  behavior: merge
+  files:
+  - application.properties
+  - more.properties
+- name: my-java-server-env-vars
+  literals:	
+  - JAVA_HOME=/opt/java/jdk
+  - JAVA_TOOL_OPTIONS=-agentlib:hprof
+  options:
+    disableNameSuffixHash: true
+    labels:
+      pet: dog
+- name: dashboards
+  files:
+  - mydashboard.json
+  options:
+    annotations:
+      dashboard: "1"
+    labels:
+      app.kubernetes.io/name: "app1"
+

    这里也可以定义一个 key 来为文件设置不同名称。

    +

    下面这个示例会创建一个 ConfigMap，并将 whatever.ini 重命名为 myFileName.ini：

    +
    configMapGenerator:
+- name: app-whatever
+  files:
+  - myFileName.ini=whatever.ini
+

    使用插件

    +

    Arguments

    +
    +

    types.ConfigMapArgs

    +
    +

    Example

    +
    +
    apiVersion: builtin
+kind: ConfigMapGenerator
+metadata:
+  name: mymap
+envs:
+- devops.env
+- uxteam.env
+literals:
+- FRUIT=apple
+- VEGETABLE=carrot
+
    +

    ImageTagTransformer

    +

    使用 kustomization.yaml

    +

    字段名称：images

    +

    修改镜像的名称、tag 或 image digest ，而无需使用 patches 。例如，对于这种 kubernetes Deployment 片段：

    +
    containers:
+- name: mypostgresdb
+  image: postgres:8
+- name: nginxapp
+  image: nginx:1.7.9
+- name: myapp
+  image: my-demo-app:latest
+- name: alpine-app
+  image: alpine:3.7
+

    想要将 image 做如下更改：

    +
      +
    • 将 postgres:8 改为 my-registry/my-postgres:v1
      • +
    • 将 nginx tag 从 1.7.9 改为 1.8.0
      • +
    • 将镜像名称 my-demo-app 改为 my-app
      • +
    • 将 alpine 的 tag 3.7 改为 digest 值
      • +
    +

    只需在 kustomization 中添加以下内容：

    +
    images:
+- name: postgres
+  newName: my-registry/my-postgres
+  newTag: v1
+- name: nginx
+  newTag: 1.8.0
+- name: my-demo-app
+  newName: my-app
+- name: alpine
+  digest: sha256:24a0c4b4a4c0eb97a1aabb8e29f18e917d05abfe1b7a7c07857230879ce7d3d3
+

    使用插件

    +

    Arguments

    +
    +

    ImageTag image.Image

    +

    FieldSpecs []config.FieldSpec

    +
    +

    Example

    +
    +
    apiVersion: builtin
+kind: ImageTagTransformer
+metadata:
+  name: not-important-to-example
+imageTag:
+  name: nginx
+  newTag: v2
+
    +

    LabelTransformer

    +

    使用 kustomization.yaml

    +

    字段名称：commonLabels

    +

    为所有资源和 selectors 增加标签。

    +
    commonLabels:
+  someName: someValue
+  owner: alice
+  app: bingo
+

    使用插件

    +

    Arguments

    +
    +

    Labels map[string]string

    +

    FieldSpecs []config.FieldSpec

    +
    +

    Example

    +
    +
    apiVersion: builtin
+kind: LabelTransformer
+metadata:
+  name: not-important-to-example
+labels:
+  app: myApp
+  env: production
+fieldSpecs:
+- path: metadata/labels
+  create: true
+
    +

    NamespaceTransformer

    +

    使用 kustomization.yaml

    +

    字段名称：namespace

    +

    为所有资源添加 namespace。

    +
    namespace: my-namespace
+

    使用插件

    +

    Arguments

    +
    +

    types.ObjectMeta

    +

    FieldSpecs []config.FieldSpec

    +
    +

    Example

    +
    +
    apiVersion: builtin
+ kind: NamespaceTransformer
+ metadata:
+   name: not-important-to-example
+   namespace: test
+ fieldSpecs:
+ - path: metadata/namespace
+   create: true
+ - path: subjects
+   kind: RoleBinding
+   group: rbac.authorization.k8s.io
+ - path: subjects
+   kind: ClusterRoleBinding
+   group: rbac.authorization.k8s.io
+
    +

    PatchesJson6902

    +

    使用 kustomization.yaml

    +

    字段名称：patchesJson6902

    +

    patchesJson6902 列表中的每个条目都应可以解析为 kubernetes 对象和将应用于该对象的 JSON patch。

    +

    目标字段指向的 kubernetes 对象的 group、 version、 kind、 name 和 namespace 在同一 kustomization 内 path 字段内容是 JSON patch 文件的相对路径。

    +

    patch 文件中的内容可以如下这种 JSON 格式：

    +
     [
+   {"op": "add", "path": "/some/new/path", "value": "value"},
+   {"op": "replace", "path": "/some/existing/path", "value": "new value"}
+ ]
+

    也可以使用 YAML 格式表示：

    +
    - op: add
+  path: /some/new/path
+  value: value
+- op: replace
+  path: /some/existing/path
+  value: new value
+
    patchesJson6902:
+- target:
+    version: v1
+    kind: Deployment
+    name: my-deployment
+  path: add_init_container.yaml
+- target:
+    version: v1
+    kind: Service
+    name: my-service
+  path: add_service_annotation.yaml
+

    patch 内容也可以是一个inline string：

    +
    patchesJson6902:
+- target:
+    version: v1
+    kind: Deployment
+    name: my-deployment
+  patch: |-
+    - op: add
+      path: /some/new/path
+      value: value
+    - op: replace
+      path: /some/existing/path
+      value: "new value"
+

    使用插件

    +

    Arguments

    +
    +

    Target types.PatchTarget

    +

    Path string

    +

    JsonOp string

    +
    +

    Example

    +
    +
    apiVersion: builtin
+kind: PatchJson6902Transformer
+metadata:
+  name: not-important-to-example
+target:
+  group: apps
+  version: v1
+  kind: Deployment
+  name: my-deploy
+path: jsonpatch.json
+
    +

    PatchesStrategicMerge

    +

    使用 kustomization.yaml

    +

    字段名称：patchesStrategicMerge

    +

    此列表中的每个条目都应可以解析为 StrategicMergePatch.

    +

    这些（也可能是部分的）资源文件中的 name 必须与已经通过 resources 加载的 name 字段匹配，或者通过 bases 中的 name 字段匹配。这些条目将用于 patch（修改）已知资源。

    +

    推荐使用小的 patches，例如：修改内存的 request/limit，更改 ConfigMap 中的 env 变量等。小的 patches 易于维护和查看，并且易于在 overlays 中混合使用。

    +
    patchesStrategicMerge:
+- service_port_8888.yaml
+- deployment_increase_replicas.yaml
+- deployment_increase_memory.yaml
+

    patch 内容也可以是一个inline string：

    +
    patchesStrategicMerge:
+- |-
+  apiVersion: apps/v1
+  kind: Deployment
+  metadata:
+    name: nginx
+  spec:
+    template:
+      spec:
+        containers:
+          - name: nginx
+            image: nignx:latest
+

    请注意，kustomize 不支持同一个 patch 对象中包含多个 删除 指令。要从一个对象中删除多个字段或切片元素，需要创建一个单独的 patch，以执行所有需要的删除。

    +

    使用插件

    +

    Arguments

    +
    +

    Paths []types.PatchStrategicMerge

    +

    Patches string

    +
    +

    Example

    +
    +
    apiVersion: builtin
+kind: PatchStrategicMergeTransformer
+metadata:
+  name: not-important-to-example
+paths:
+- patch.yaml
+
    +

    PatchTransformer

    +

    使用 kustomization.yaml

    +

    字段名称：patches

    +

    这个列表中的每个条目应该解析到一个 Patch 对象，其中包括一个 patch 和一个目标选择器。patch 可以是 Strategic Merge Patch 或 JSON patch，也可以是 patch 文件或 inline string。目标选择器可以通过 group、version、kind、name、namespace、标签选择器和注释选择器来选择资源，选择一个或多个匹配所有指定字段的资源来应用 patch。

    +
    patches:
+- path: patch.yaml
+  target:
+    group: apps
+    version: v1
+    kind: Deployment
+    name: deploy.*
+    labelSelector: "env=dev"
+    annotationSelector: "zone=west"
+- patch: |-
+    - op: replace
+      path: /some/existing/path
+      value: new value
+  target:
+    kind: MyKind
+    labelSelector: "env=dev"
+

    The name and namespace fields of the patch target selector are +automatically anchored regular expressions. This means that the value myapp +is equivalent to ^myapp$。

    +

    使用插件

    +

    Arguments

    +
    +

    Path string

    +

    Patch string

    +

    Target *types.Selector

    +
    +

    Example

    +
    +
    apiVersion: builtin
+kind: PatchTransformer
+metadata:
+  name: not-important-to-example
+patch: '[{"op": "replace", "path": "/spec/template/spec/containers/0/image", "value": "nginx:latest"}]'
+target:
+  name: .*Deploy
+  kind: Deployment
+
    +

    PrefixSuffixTransformer

    +

    使用 kustomization.yaml

    +

    字段名称：namePrefix, nameSuffix

    +

    为所有资源的名称添加前缀或后缀。

    +

    例如：将 deployment 名称从 wordpress 变为 alices-wordpress 或 wordpress-v2 或 alices-wordpress-v2。

    +
    namePrefix: alices-
+nameSuffix: -v2
+

    如果资源类型是 ConfigMap 或 Secret，则在哈希值之前添加后缀。

    +

    使用插件

    +

    Arguments

    +
    +

    Prefix string

    +

    Suffix string

    +

    FieldSpecs []config.FieldSpec

    +
    +

    Example

    +
    +
    apiVersion: builtin
+kind: PrefixSuffixTransformer
+metadata:
+  name: not-important-to-example
+prefix: baked-
+suffix: -pie
+fieldSpecs:
+  - path: metadata/name
+
    +

    ReplicaCountTransformer

    +

    使用 kustomization.yaml

    +

    字段名称：replicas

    +

    修改资源的副本数。

    +

    例如：对于如下 kubernetes Deployment 片段：

    +
    kind: Deployment
+metadata:
+  name: deployment-name
+spec:
+  replicas: 3
+

    在 kustomization 中添加以下内容，将副本数更改为 5：

    +
    replicas:
+- name: deployment-name
+  count: 5
+

    该字段内容为列表，所以可以同时修改许多资源。

    +

    由于这个声明无法设置 kind: 或 group:，所以他只能匹配如下资源中的一种：

    +
      +
    • Deployment
      • +
    • ReplicationController
      • +
    • ReplicaSet
      • +
    • StatefulSet
      • +
    +

    对于更复杂的用例，请使用 patch 。

    +

    使用插件

    +

    Arguments

    +
    +

    Replica types.Replica

    +

    FieldSpecs []config.FieldSpec

    +
    +

    Example

    +
    +
    apiVersion: builtin
+kind: ReplicaCountTransformer
+metadata:
+  name: not-important-to-example
+replica:
+  name: myapp
+  count: 23
+fieldSpecs:
+- path: spec/replicas
+  create: true
+  kind: Deployment
+- path: spec/replicas
+  create: true
+  kind: ReplicationController
+
    +

    SecretGenerator

    +

    使用 kustomization.yaml

    +

    字段名称：secretGenerator

    +

    列表中的每个条目都将生成一个 Secret（合计可以生成 n 个 Secrets）。

    +

    功能与之前描述的 configMapGenerator 字段类似。

    +
    secretGenerator:
+- name: app-tls
+  files:
+  - secret/tls.cert
+  - secret/tls.key
+  type: "kubernetes.io/tls"
+- name: app-tls-namespaced
+  # you can define a namespace to generate
+  # a secret in, defaults to: "default"
+  namespace: apps
+  files:
+  - tls.crt=catsecret/tls.cert
+  - tls.key=secret/tls.key
+  type: "kubernetes.io/tls"
+- name: env_file_secret
+  envs:
+  - env.txt
+  type: Opaque
+- name: secret-with-annotation
+  files:
+  - app-config.yaml
+  type: Opaque
+  options:
+    annotations:
+      app_config: "true"
+    labels:
+      app.kubernetes.io/name: "app2"
+

    使用插件

    +

    Arguments

    +
    +

    types.ObjectMeta

    +

    types.SecretArgs

    +
    +

    Example

    +
    +
    apiVersion: builtin
+kind: SecretGenerator
+metadata:
+  name: my-secret
+  namespace: whatever
+behavior: merge
+envs:
+- a.env
+- b.env
+files:
+- obscure=longsecret.txt
+literals:
+- FRUIT=apple
+- VEGETABLE=carrot
+
    + + + +
    最后修改 0001年01月01日 +
    +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/guides/plugins/execpluginguidedexample/index.html b/docs/zh/guides/plugins/execpluginguidedexample/index.html new file mode 100644 index 000000000..f0e0fe41f --- /dev/null +++ b/docs/zh/guides/plugins/execpluginguidedexample/index.html @@ -0,0 +1,617 @@ + + + + + + + + + + + + + + + + + + + + + + +Exec 插件示例 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Exec 插件示例 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    Exec 插件示例

    +
    60 秒在 Linux 构建一个 Exec 插件
    +

    本教程只是一个快速开始的示例，完整的插件文档请看：kustomize 插件

    +

    本示例将使用 bash 编写了一个简单的 exec 插件，用来生成一个 ConfigMap。

    +

    尝试本教程不会破坏你的当前设置。

    +

    环境要求

    +
      +
    • linux
      • +
    • git
      • +
    • curl
      • +
    • Go 1.13
      • +
    +

    创建一个工作空间/目录

    +
    DEMO=$(mktemp -d)
+

    编写 kustomization

    +

    新建一个目录来保存所有的配置：

    +
    MYAPP=$DEMO/myapp
+mkdir -p $MYAPP
+

    编写一个 Deployment 配置：

    +
    cat <<'EOF' >$MYAPP/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: the-deployment
+spec:
+  replicas: 3
+  template:
+    spec:
+      containers:
+      - name: the-container
+        image: monopole/hello:1
+        command: ["/hello",
+                  "--port=8080",
+                  "--date=$(THE_DATE)",
+                  "--enableRiskyFeature=$(ENABLE_RISKY)"]
+        ports:
+        - containerPort: 8080
+        env:
+        - name: THE_DATE
+          valueFrom:
+            configMapKeyRef:
+              name: the-map
+              key: today
+        - name: ALT_GREETING
+          valueFrom:
+            configMapKeyRef:
+              name: the-map
+              key: altGreeting
+        - name: ENABLE_RISKY
+          valueFrom:
+            configMapKeyRef:
+              name: the-map
+              key: enableRisky
+EOF
+

    编写一个 service 配置：

    +
    cat <<EOF >$MYAPP/service.yaml
+kind: Service
+apiVersion: v1
+metadata:
+  name: the-service
+spec:
+  type: LoadBalancer
+  ports:
+  - protocol: TCP
+    port: 8666
+    targetPort: 8080
+EOF
+

    现在为您要编写的插件创建一个配置文件。

    +

    这个配置文件的内容也是 k8s 资源对象。其中 apiVersion 和 kind 字段的值用于在文件系统中查找插件代码（稍后会对此进行更多介绍）。

    +
    cat <<'EOF' >$MYAPP/cmGenerator.yaml
+apiVersion: myDevOpsTeam
+kind: SillyConfigMapGenerator
+metadata:
+  name: whatever
+argsOneLiner: Bienvenue true
+EOF
+

    最后在 kustomization 文件中引用以上所有内容：

    +
    cat <<EOF >$MYAPP/kustomization.yaml
+commonLabels:
+  app: hello
+resources:
+- deployment.yaml
+- service.yaml
+generators:
+- cmGenerator.yaml
+EOF
+

    检查这些文件

    +
    ls -C1 $MYAPP
+

    为插件创建目录

    +

    插件必须位于特定的目录，以便 Kustomize 能够找到它们。

    +

    该示例将使用临时目录：

    +
    PLUGIN_ROOT=$DEMO/kustomize/plugin
+

    在上面定义的插件配置 $MYAPP/cmGenerator.yaml 中指定：

    +
    +
    apiVersion: myDevOpsTeam
+kind: SillyConfigMapGenerator
+
    +

    这意味着该插件必须位于以下目录中：

    +
    MY_PLUGIN_DIR=$PLUGIN_ROOT/myDevOpsTeam/sillyconfigmapgenerator
+
+mkdir -p $MY_PLUGIN_DIR
+

    插件的目录结构为： apiVersion 的 value/小写 kind 的 value。

    +

    插件拥有自己的目录，不但可以保存插件代码，还可以保存测试代码以需要的补充数据文件。

    +

    编写插件

    +

    插件有 exec 和 Go 两种.

    +

    编写一个 exec 插件，将其安装到正确的目录，文件名必须与插件的类型匹配（在本例中为 SillyConfigMapGenerator）：

    +
    cat <<'EOF' >$MY_PLUGIN_DIR/SillyConfigMapGenerator
+#!/bin/bash
+# Skip the config file name argument.
+shift
+today=`date +%F`
+echo "
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: the-map
+data:
+  today: $today
+  altGreeting: "$1"
+  enableRisky: "$2"
+"
+EOF
+

    根据定义，exec 插件必须是可执行的：

    +
    chmod a+x $MY_PLUGIN_DIR/SillyConfigMapGenerator
+

    安装 kustomize

    +

    根据文档安装 kustomize:

    +
    curl -s "https://raw.githubusercontent.com/\
+kubernetes-sigs/kustomize/master/hack/install_kustomize.sh"  | bash
+mkdir -p $DEMO/bin
+mv kustomize $DEMO/bin
+

    检查目录结构

    +
    tree $DEMO
+

    使用插件构建 APP:

    +
    XDG_CONFIG_HOME=$DEMO $DEMO/bin/kustomize build --enable_alpha_plugins $MYAPP
+

    之前如果您已经设置了 PLUGIN_ROOT=$HOME/.config/kustomize/plugin，则无需在 kustomize 命令前使用 XDG_CONFIG_HOME。

    + + + +
    最后修改 0001年01月01日 +
    +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/guides/plugins/goplugincaveats/index.html b/docs/zh/guides/plugins/goplugincaveats/index.html new file mode 100644 index 000000000..ed69b43e7 --- /dev/null +++ b/docs/zh/guides/plugins/goplugincaveats/index.html @@ -0,0 +1,512 @@ + + + + + + + + + + + + + + + + + + + + + + +Go 插件注意事项 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Go 插件注意事项 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    Go 插件注意事项

    +
    Go 插件注意事项
    +

    Go 插件 是一个编译产品/组件，其定义见 plugin package，需要特殊的构建标志，不能单独运行，必须加载到正在运行的 Go 程序中。

    +
    +

    用 Go 编写的普通程序可以作为 exec 插件，但是不能作为 Go 插件。

    +
    +

    Go 插件允许运行 kustomize 扩展，而无需在每次运行时将资源分配到子流程或从子流程中解封所有资源数据。Go 插件 API 确保一定程度的一致性，以避免混淆下游转换器。

    +

    Go 插件的工作方式与 plugin package 中所述的相同，但与 plugin 一词相关的常见概念不同。

    +

    The skew problem

    +

    Go 插件编译会创建一个 ELF 格式的 .so 文件，根据定义，该文件不包含有关目标代码来源的信息。

    +

    主程序 ELF 和插件 ELF 的编译条件（软件包依赖项的版本 GOOS，GOARCH）之间的偏移会导致插件加载失败，并带有无用的错误消息。

    +

    Exec 插件也会缺乏来源，但不会因编译不正确而失败。

    +

    在任何情况下，共享插件的最好方法是使用某种 捆绑包（git repo URL、git 存档文件、tar 包等），其中包含可解包至 $XDG_CONFIG_HOME/kustomize/plugin 的源代码，测试和相关数据。

    +

    对于 Go 插件，使用共享插件的最终用户 必须同时编译 kustomize 和 plugin。

    +

    这意味着一次性运行

    +
    # Or whatever is appropriate at time of reading
+GOPATH=${whatever} GO111MODULE=on go get sigs.k8s.io/kustomize/api
+

    然后使用一个正常的开发周期

    +
    go build -buildmode plugin \
+    -o ${wherever}/${kind}.so ${wherever}/${kind}.go
+

    并根据需要调整路径和发行版本标记（例如 v3.0.0）。

    +

    为了进行比较，可以参考编写 tensorflow plugin 必须做的事情。

    +

    为什么支持 Go 插件？

    +

    安全

    +

    Go 插件开发者可以操作与原生 kustomize 操作相同的 API，可确保某些语义、变量和检查等一致。exec 插件子进程通过 stdin/stdout 来处理这些问题，但对于下游的转化器和使用者来说，会更容易把事情搞砸。

    +

    关键点：如果插件通过 kustomize 提供的文件 Loader 接口读取文件，则会受到 kustomize 文件加载限制的约束。当然，除了代码审计之外，没有什么可以阻止 Go 插件导入 io 包并执行其所需的任何操作。

    +

    Debugging

    +

    Go 插件开发者可以在功能测试中运行插件时，在 本地 调试插件，并在插件内部和其他位置设置断点。

    +

    为了获得两全其美的方式（共享性和安全性），开发人员可以编写一个 .go 程序作为 exec 插件，同时可以被 go generate 程序处理生成 Go 插件（反之亦然）。

    +

    贡献单元化

    +

    所有内置的生成器和转换器本身都是 Go 插件。这意味着 kustomize 维护者可以将贡献的插件升级为内置插件，而无需更改代码（超出常规代码审阅要求的范围）。

    +

    围绕生态系统发展

    +

    工具可以简化 Go 插件的 共享，但是这需要大量的 Go 插件的创作，而这又会导致围绕共享插件的混乱。Go modules 一旦被更广泛地采用，将解决共享插件最大的难题：含糊不清的插件 vs 主机依赖性。

    + + + +
    最后修改 0001年01月01日 +
    +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/guides/plugins/gopluginguidedexample/index.html b/docs/zh/guides/plugins/gopluginguidedexample/index.html new file mode 100644 index 000000000..da2408d04 --- /dev/null +++ b/docs/zh/guides/plugins/gopluginguidedexample/index.html @@ -0,0 +1,662 @@ + + + + + + + + + + + + + + + + + + + + + + +Go 插件示例 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Go 插件示例 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    Go 插件示例

    +
    Go 插件示例
    +

    本教程只是一个快速开始的示例，完整的插件文档请看：kustomize 插件

    +

    请务必阅读 Go 插件注意事项。

    +

    该示例使用 Go 插件 SopsEncodedSecrets，该插件位于 sopsencodedsecrets repository中。这是一个进程内的 Go 插件，而不是恰巧用 Go 编写的 exec 插件（这是 Go 作者的另一种选择）。

    +

    尝试本教程不会破坏你的当前设置。

    +

    环境要求

    +
      +
    • linux
      • +
    • git
      • +
    • curl
      • +
    • Go 1.13
      • +
    +

    用于加密

    +
      +
    • gpg
      • +
    +

    或

    +
      +
    • Google cloud (gcloud) 安装
      • +
    • 具有 KMS 权限的 Google帐户
      • +
    +

    创建一个工作空间/目录

    +
    # 将这些目录分开，以免造成 DEMO 目录的混乱。
+DEMO=$(mktemp -d)
+tmpGoPath=$(mktemp -d)
+

    安装 kustomize

    +

    需要安装 kustomize v3.0.0，并且必须对其进行 编译（而不是从 release 页面下载二进制文件）：

    +
    GOPATH=$tmpGoPath go install sigs.k8s.io/kustomize/kustomize
+

    为插件创建目录

    +

    kustomize 插件完全由其配置文件和源代码确定。

    +

    Kustomize 插件的配置文件的格式与 kubernetes 资源对象相同，这就意味着在配置文件中 apiVersion，kind 和 metadata 都是必须的字段。

    +

    因为配置文件名出现在 kustomization 文件的 generatorsor 或 transformers 字段中，kustomize 会读取配置文件，然后在以下位置找到 Go 插件的目标代码：

    +
    +
    $XDG_CONFIG_HOME/kustomize/plugin/$apiVersion/$lKind/$kind.so
+
    +

    lKind 必须是小写字母的，然后将插件加载并提供其配置，插件的输出将成为整个 kustomize build 程序的一部分 。

    +

    同一插件在一个 kustomize 构建中可能会多次使用不同的配置文件。此外，kustomize 可能会先自定义 config 数据，然后再发送给插件。由于这些原因，插件不能自己去读取配置文件，而需要通过 kustomize 来读取配置。

    +

    该示例将在如下临时目录中存放其使用的插件：

    +
    PLUGIN_ROOT=$DEMO/kustomize/plugin
+

    并在下面的命令行中临时设置 XDG_CONFIG_HOME。

    +

    使用什么 apiVersion 和 kind？

    +

    在 kustomize 插件的开发时，插件代码不关心也不知道配置文件中的 apiVersion 或 kind。

    +

    插件会检查这些字段，但是剩下的字段提供了实际的配置数据，在这一点上，成功解析其他字段对于插件很重要。

    +

    本示例使用一个名为 SopsEncodedSecrets 的插件，其位于 SopsEncodedSecrets repository 中。

    +

    我们选择安装插件到

    +
    apiVersion=mygenerators
+kind=SopsEncodedSecrets
+

    定义插件的主目录

    +

    按照惯例，存放插件代码和补充数据，测试，文档等的目录名称必须是 kind 的小写形式。

    +
    lKind=$(echo $kind | awk '{print tolower($0)}')
+

    下载 SopsEncodedSecrets 插件

    +

    在这种情况下，存储库名称已经与小写字母的 kind 匹配，因此我们只需克隆存储库并自动获取正确的目录名称即可：

    +
    mkdir -p $PLUGIN_ROOT/${apiVersion}
+cd $PLUGIN_ROOT/${apiVersion}
+git clone git@github.com:monopole/sopsencodedsecrets.git
+

    记住这个目录：

    +
    MY_PLUGIN_DIR=$PLUGIN_ROOT/${apiVersion}/${lKind}
+

    尝试测试插件

    +

    插件可能会自己带有测试文件。因此可以通过如下方式：

    +
    cd $MY_PLUGIN_DIR
+go test SopsEncodedSecrets_test.go
+

    构建对象代码以供 kustomize 使用：

    +
    cd $MY_PLUGIN_DIR
+GOPATH=$tmpGoPath go build -buildmode plugin -o ${kind}.so ${kind}.go
+

    此步骤可能会成功，但是由于依赖关系 skew，kustomize 最终可能无法加载该插件。

    +

    在加载失败时

    +
      +
    • +

      确保使用相同版本的Go (go1.13)，在相同的 $GOOS(linux)和 $GOARCH(amd64) 上构建插件，用于构建本演示中使用的 kustomize。

      +
      • +
    • +

      修改插件中的依赖文件 go.mod 以匹配 kustomize 使用的版本。

      +
      • +
    +

    缺乏工具和元数据来实现自动化，就不会有一个完整的 Go 插件生态。

    +

    Kustomize 采用了 Go 插件架构，可以轻松的接受新的生成器和转换器（只需编写一个插件），并确保本机操作（也已作为插件构建和测试）是分段的、可排序的和可重用的，而不是奇怪的插入在整体代码中。

    +

    编写 kustomization

    +

    新建一个 kustomization 目录存放你的配置：

    +
    MYAPP=$DEMO/myapp
+mkdir -p $MYAPP
+

    为 SopsEncodedSecrets 插件编写一个配置文件。

    +

    插件可以通过 apiVersion 和 kind 找到：

    +
    cat <<EOF >$MYAPP/secGenerator.yaml
+apiVersion: ${apiVersion}
+kind: ${kind}
+metadata:
+  name: mySecretGenerator
+name: forbiddenValues
+namespace: production
+file: myEncryptedData.yaml
+keys:
+- ROCKET
+- CAR
+EOF
+

    插件可以在 myEncryptedData.yaml 中找到更多的数据。

    +

    编写一个引用插件配置的 kustomization 文件：

    +
    cat <<EOF >$MYAPP/kustomization.yaml
+commonLabels:
+  app: hello
+generators:
+- secGenerator.yaml
+EOF
+

    接下来生成真实的加密数据。

    +

    确保您已安装加密工具

    +

    我们将使用 sops 对文件进行编码。选择 GPG 或 Google Cloud KMS 作为加密提供者以继续。

    +

    GPG

    +

    尝试这个命令：

    +
    gpg --list-keys
+

    如果返回 list，则您已经成功创建了密钥。如果不是，请尝试从 sops 导入测试密钥。

    +
    curl https://raw.githubusercontent.com/mozilla/sops/master/pgp/sops_functional_tests_key.asc | gpg --import
+SOPS_PGP_FP="1022470DE3F0BC54BC6AB62DE05550BC07FB1A0A"
+

    Google Cloude KMS

    +

    尝试这个命令：

    +
    gcloud kms keys list --location global --keyring sops
+

    如果成功了，想必你已经创建了密钥，并将其放置在一个名为 sops 的钥匙圈中。如果没有，那就这样做：

    +
    gcloud kms keyrings create sops --location global
+gcloud kms keys create sops-key --location global \
+    --keyring sops --purpose encryption
+

    通过如下方法，获取你的 keyLocation：

    +
    keyLocation=$(\
+    gcloud kms keys list --location global --keyring sops |\
+    grep GOOGLE | cut -d " " -f1)
+echo $keyLocation
+

    安装 sops

    +
    GOPATH=$tmpGoPath go install go.mozilla.org/sops/cmd/sops
+

    用你的私钥创建加密数据

    +

    创建需要加密的原始数据：

    +
    cat <<EOF >$MYAPP/myClearData.yaml
+VEGETABLE: carrot
+ROCKET: saturn-v
+FRUIT: apple
+CAR: dymaxion
+EOF
+

    将数据加密插入到插件要读取的文件中：

    +

    使用 PGP

    +
    $tmpGoPath/bin/sops --encrypt \
+  --pgp $SOPS_PGP_FP \
+  $MYAPP/myClearData.yaml >$MYAPP/myEncryptedData.yaml
+

    或者使用 GCP KMS

    +
    $tmpGoPath/bin/sops --encrypt \
+  --gcp-kms $keyLocation \
+  $MYAPP/myClearData.yaml >$MYAPP/myEncryptedData.yaml
+

    查看文件

    +
    tree $DEMO
+

    结果如下：

    +
    +
    /tmp/tmp.0kIE9VclPt
+├── kustomize
+│   └── plugin
+│       └── mygenerators
+│           └── sopsencodedsecrets
+│               ├── go.mod
+│               ├── go.sum
+│               ├── LICENSE
+│               ├── README.md
+│               ├── SopsEncodedSecrets.go
+│               ├── SopsEncodedSecrets.so
+│               └── SopsEncodedSecrets_test.go
+└── myapp
+    ├── kustomization.yaml
+    ├── myClearData.yaml
+    ├── myEncryptedData.yaml
+    └── secGenerator.yaml
+
    +

    使用插件构建您的应用：

    +
    XDG_CONFIG_HOME=$DEMO $tmpGoPath/bin/kustomize build --enable_alpha_plugins $MYAPP
+

    这将生成一个 kubernetes secret，并对名称 ROCKET 和 CAR 的数据进行加密。

    +

    之前如果您已经设置了 PLUGIN_ROOT=$HOME/.config/kustomize/plugin，则无需在 kustomize 命令前使用 XDG_CONFIG_HOME。

    + + + +
    最后修改 0001年01月01日 +
    +
    + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/guides/plugins/index.html b/docs/zh/guides/plugins/index.html new file mode 100644 index 000000000..9386def64 --- /dev/null +++ b/docs/zh/guides/plugins/index.html @@ -0,0 +1,679 @@ + + + + + + + + + + + + + + + + + + + + + + + +Kustomize 插件 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Kustomize 插件 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    Kustomize 插件

    +
    Kustomize 插件指南
    +

    Kustomize 提供一个插件框架，允许用户开发自己的 生成器 和 转化器。

    +

    通过插件，实现 [generatorOptions] 和 [transformerconfigs] 无法满足的需求。

    +
      +
    • generator 插件生成 k8s 资源，比如 helm chart inflator 是一个 generator 插件，基于少量自由变量生成一个 12-factor 应用所包含的全部组件 deployment，service，scaler，ingress 等）也是一个 generator 插件。
      • +
    • transformer 插件转化（修改）k8s 资源，比如可能会执行对特殊容器命令行的编辑，或为其他内置转换器（namePrefix、commonLabels 等）无法转换的内容提供转换。
      • +
    +

    kustomization.yaml 的格式

    +

    从为添加 generators 或 transformers 字段开始。

    +

    字段内容为一个 string list：

    +
    +
    generators:
+- relative/path/to/some/file.yaml
+- relative/path/to/some/kustomization
+- /absolute/path/to/some/kustomization
+- https://github.com/org/repo/some/kustomization
+
+transformers:
+- {as above}
+
    +

    格式要求与 resources 字段相同，generators 或 transformers 列表的每一列内容都必须是一个 YAML 文件的相对路径或者指向 kustomization 的 URL。

    +

    从磁盘上读取 YAML 文件，kustomization 的路径或 URL 会触发 kustomization 的运行。由此产生的每个的对象都会被 kustomize 进一步解析为 plugin configuration 对象。

    +

    配置

    +

    kustomization 文件可以包含如下内容：

    +
    generators:
+- chartInflator.yaml
+

    像这样，kustomization 进程将在 kustomization root 下寻找到一个名为 chartInflator.yaml 的文件。

    +

    chartInflator.yaml 为插件配置文件，该文件包含 YAML 配置对象，内容如下：

    +
    apiVersion: someteam.example.com/v1
+kind: ChartInflator
+metadata:
+  name: notImportantHere
+chartName: minecraft
+

    apiVersion 和 kind 字段用于定位插件。

    +

    同时由于 kustomize 插件配置对象也是一个 k8s 对象，因此这些字段是必要的。

    +

    为了让插件准备好生成或转换，它包含了配置文件的全部内容。

    +

    更多关于插件配置 YAML 的例子，请浏览根目录下 plugins 中的单元测试，例如 ChartInflator 或 NameTransformer。

    +

    植入

    +

    每个插件都有自己的专用目录，名为：

    +
    $XDG_CONFIG_HOME/kustomize/plugin
+    /${apiVersion}/LOWERCASE(${kind})
+

    The default value of XDG_CONFIG_HOME is +$HOME/.config.

    +

    XDG_CONFIG_HOME 的默认值为 $HOME/.config。

    +

    为了便于插件包（源码、测试、插件数据文件等）的共享，要求每个目录存放一个插件。

    +

    在 Go 插件中，还可以为单个插件提供一个 go.mod 文件，可以缓解包版本依赖性偏移的问题。

    +

    加载时，kustomize 首先会寻找一个 可执行 文件，名为：

    +
    $XDG_CONFIG_HOME/kustomize/plugin
+    /${apiVersion}/LOWERCASE(${kind})/${kind}
+

    如果没有找到这个文件，或者这个文件不是可执行的，kustomize 会在同一目录下寻找一个名为 ${kind}.so 的文件，并尝试将其作为 Go插件 加载。

    +

    如果这两项检查都失败，则插件加载失败，kustomize build 失败。

    +

    执行情况

    +

    插件只有在运行 kustomize build 命令时使用。

    +

    生成器插件是在处理完 resources 字段后运行的（resources 字段本身也可以看成是一个简单地从磁盘上读取对象的生成器）。

    +

    之后所有资源将被传递到转换管道中，由其中内置的转换器，如 namePrefix 和 commonLabel 等先转换应用（如果 kustomization 文件中指定了他们），然后再转换用户指定的 transformers 字段。

    +

    由于无法指定转化的顺序，所以需要遵守 transformers 字段中指定的顺序。

    +

    No Security

    +

    Kustomize 插件不会在任何形式的 kustomize 提供的沙盒中运行。不存在 “plugin security” 的概念。

    +

    kustomize build 会尝试使用插件，但如果省略了 --enable_alpha_plugins，将导致插件无法加载，并且会有一个关于插件使用的警告。

    +

    使用这个 flag 就是承认使用不稳定的插件 API（alpha）、承认使用缺少出处插件，以及插件不属于 kustomize 的事实。

    +

    简单的说，一些从网上下载的 kustomize 插件可能会奇妙地将 k8s 的配置以理想的方式进行改造，同时也会悄悄地对运行 kustomize build 的系统做任何用户可以做的事情。

    +

    编写插件

    +

    插件有 exec 和 Go 两种.

    +

    Exec 插件

    +

    exec 插件 是一个可以在命令行中接收参数可执行文件，该参数指向包含 kustomization 配置的 YAML 文件。

    +
    +

    TODO: 对插件的限制，允许同一个 exec 插件 同时被 generators 和 transformers 字段所触发。

    +
      +
    • 第一个参数可以是固定的字符串 generate 或 transform，（配置文件的名称移动到第2个参数）
      • +
    • 默认情况下，exec plugin 会作为一个转化器,除非提供了标志 -g，将 exec 插件切换为生成器。
      • +
    +
    +

    示例

    + +

    生成器插件无需在 stdin 上输入任何东西，就会将生成的资源输出到 stdout。

    +

    转化器插件需要在 stdin 上输入资源的 YAML，并转化后的资源输出到 stdout。

    +

    kustomize 会使用 exec 插件适配器，为 stdin 提供的资源，并获取 stdout 以进行下一步的处理。

    +

    Generator 选项

    +

    生成器 exec 插件可以通过设置以下内部注释中的一个来调整生成器选项。

    +
    +

    注意：这些注释只会在本地的 kustomize 中，不会出现在最终输出中。

    +
    +

    kustomize.config.k8s.io/needs-hash

    +

    通过包含 needs-hash 注释，可以将资源标记为需要由内部哈希转换器处理的资源。当设置注释的有效值为 "true" 和 "false" 时，分别启用或禁用资源的哈希后缀。忽略该注解相当于将值设置为 "false"。

    +

    如果此注释被设置在不受哈希转换器支持的资源上，将导致构建将失败。

    +

    示例：

    +
    apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: cm-test
+  annotations:
+    kustomize.config.k8s.io/needs-hash: "true"
+data:
+  foo: bar   
+

    kustomize.config.k8s.io/behavior

    +

    behavior 注释为当资源发生冲突时插件的处理方式，有效值包括：“create”、“merge “和 “replace”，默认为 “create”。

    +

    示例：

    +
    apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: cm-test
+  annotations:
+    kustomize.config.k8s.io/behavior: "merge"
+data:
+  foo: bar   
+

    Go 插件

    +

    请务必阅读 Go 插件注意事项。

    +

    如果一个 .go 文件声明 package main，并附加了有用的功能标志，那么它就可以成为一个 Go 插件。

    +

    如果标志被命名为 “KustomizePlugin”，并且附加的函数实现了 Configurable、Generator 和 Transformer 接口，那么它可以进一步作为 kustomize 插件使用。

    +

    kustomize 的一个 Go 插件看起来是这样的：

    +
    +
    package main
+
+import (
+  "sigs.k8s.io/kustomize/api/ifc"
+  "sigs.k8s.io/kustomize/api/resmap"
+  ...
+)
+
+type plugin struct {...}
+
+var KustomizePlugin plugin
+
+func (p *plugin) Config(
+   ldr ifc.Loader,
+   rf *resmap.Factory,
+   c []byte) error {...}
+
+func (p *plugin) Generate() (resmap.ResMap, error) {...}
+
+func (p *plugin) Transform(m resmap.ResMap) error {...}
+
    +

    需要使用标识符 plugin，KustomizePlugin 并且需要实现方法签名 Config。

    +

    实现 Generatoror 或 Transformer 方法允许（分别）将插件的配置文件添加到 kustomization 文件的 generatorsor 或 transformers 字段中，并根据需要执行。

    +

    示例

    +
      +
    • service generator - 使用 name 和 port 参数生成一个 service。
      • +
    • string prefixer - 使用 metadata/name 值作为前缀。这个特殊的示例是为了展示插件的转化行为。详见 target 包中的 TestTransformedTransformers 测试。
      • +
    • date prefixer - 将当前日期作为前缀添加到资源名称上，这是一个用于修改刚才提到的字符串前缀插件的简单示例。
      • +
    • secret generator - 从 toy 数据库生成 secret。
      • +
    • sops encoded secrets - 一个更复杂的 secret 生成器。
      • +
    • All the builtin plugins. +用户自制的插件与内置插件是一样的。
      • +
    +

    Go 插件既可以是生成器，也可以是转化器。Generate 方法将在 Transform 方法运行之前与所有其他生成器一起运行。

    +

    如下的构建命令，假设插件源代码位于 kustomize 期望查找 .so 文件的目录中：

    +
    d=$XDG_CONFIG_HOME/kustomize/plugin\
+/${apiVersion}/LOWERCASE(${kind})
+
+go build -buildmode plugin \
+   -o $d/${kind}.so $d/${kind}.go
+
    +
    + + + + +
    + + +
    +
    + 内置插件 +
    +

    内置插件

    +
    + + + + + +
    +
    + Exec 插件示例 +
    +

    60 秒在 Linux 构建一个 Exec 插件

    +
    + + + + + + + +
    +
    + Go 插件注意事项 +
    +

    Go 插件注意事项

    +
    + + + +
    +
    + Go 插件示例 +
    +

    Go 插件示例

    +
    + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/guides/plugins/index.xml b/docs/zh/guides/plugins/index.xml new file mode 100644 index 000000000..168c2c8b7 --- /dev/null +++ b/docs/zh/guides/plugins/index.xml @@ -0,0 +1,865 @@ + + + Kustomize – Kustomize 插件 + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/ + Recent content in Kustomize 插件 on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + Guides: 内置插件 + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/builtins/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/builtins/ + + + + <p>内置插件包括生成器和转化器。</p> +<p>每个插件都可以通过如下两种方式触发：</p> +<ul> +<li> +<p>通过 kustomization 文件的字段隐式触发插件，例如 <code>AnnotationsTransformer</code> 就是由 <code>commonAnnotations</code> 字段触发的。</p> +</li> +<li> +<p>通过 <code>generators</code> 或 <code>transformers</code> 字段显式触发插件（通过指定插件的配置文件）。</p> +</li> +</ul> +<p>直接使用 <code>kustomization.yaml</code> 文件中的字段比如 <code>commonLables</code>、<code>commonAnnotation</code> 他们可以修改一些默认的字段，如果用户想要添加或减少能被 <code>commonLabel</code> 所修改的字段，则不是很容易做到；而使用 <code>transformers</code> 的话，用户可以指定哪些字段能被修改，而不受默认值的影响。</p> +<h2 id="_annotationtransformer_"><em>AnnotationTransformer</em></h2> +<h3 id="使用-kustomizationyaml">使用 <code>kustomization.yaml</code></h3> +<h4 id="字段名称commonannotations">字段名称：<code>commonAnnotations</code></h4> +<p>为所有资源添加注释，和标签一样以 key: value 的形式。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">commonAnnotations</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">oncallPager</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#0000cf;font-weight:bold">800-555-1212</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="使用插件">使用插件</h3> +<h4 id="arguments">Arguments</h4> +<blockquote> +<p>Annotations map[string]string</p> +<p>FieldSpecs []<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/fieldspec.go">config.FieldSpec</a></p> +</blockquote> +<h4 id="example">Example</h4> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>builtin<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>AnnotationsTransformer<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>not-important-to-example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">annotations</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>myApp<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">greeting/morning</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>a<span style="color:#f8f8f8;text-decoration:underline"> </span>string<span style="color:#f8f8f8;text-decoration:underline"> </span>with<span style="color:#f8f8f8;text-decoration:underline"> </span>blanks<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">fieldSpecs</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>metadata/annotations<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">create</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">true</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> +<h2 id="_configmapgenerator_"><em>ConfigMapGenerator</em></h2> +<h3 id="使用-kustomizationyaml-1">使用 <code>kustomization.yaml</code></h3> +<h4 id="字段名称configmapgenerator">字段名称：<code>configMapGenerator</code></h4> +<p>列表中的每个条目都将生成一个 ConfigMap （合计可以生成 n 个 ConfigMap）。</p> +<p>下面的示例会生成 3 个ConfigMap：第一个带有给定文件的名称和内容，第二个将在 data 中添加 key/value，第三个通过 <code>options</code> 为单个 ConfigMap 设置注释和标签。</p> +<p>每个 configMapGenerator 项均接受的参数 <code>behavior: [create|replace|merge]</code>，这个参数允许修改或替换父级现有的 configMap。</p> +<p>此外，每个条目都有一个 <code>options</code> 字段，该字段具有与 kustomization 文件的 <code>generatorOptions</code> 字段相同的子字段。</p> +<p><code>options</code> 字段允许用户为生成的实例添加标签和（或）注释，或者分别禁用该实例名称的哈希后缀。此处添加的标签和注释不会被 kustomization 文件 <code>generatorOptions</code> 字段关联的全局选项覆盖。但是如果全局 <code>generatorOptions</code> 字段指定 <code>disableNameSuffixHash: true</code>，其他 <code>options</code> 的设置将无法将其覆盖。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#8f5902;font-style:italic"># These labels are added to all configmaps and secrets.</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">generatorOptions</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fruit</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apple<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">configMapGenerator</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-java-server-props<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">behavior</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>merge<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- application.properties<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- more.properties<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-java-server-env-vars<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>literals<span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- JAVA_HOME=/opt/java/jdk<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- JAVA_TOOL_OPTIONS=-agentlib<span style="color:#000;font-weight:bold">:</span>hprof<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">options</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">disableNameSuffixHash</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">true</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">pet</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>dog<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>dashboards<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- mydashboard.json<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">options</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">annotations</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">dashboard</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;1&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app.kubernetes.io/name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;app1&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>这里也可以<a href="https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-configmap/#define-the-key-to-use-when-creating-a-configmap-from-a-file">定义一个 key</a> 来为文件设置不同名称。</p> +<p>下面这个示例会创建一个 ConfigMap，并将 <code>whatever.ini</code> 重命名为 <code>myFileName.ini</code>：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">configMapGenerator</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>app-whatever<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- myFileName.ini=whatever.ini<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="使用插件-1">使用插件</h3> +<h4 id="arguments-1">Arguments</h4> +<blockquote> +<p><a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/configmapargs.go">types.ConfigMapArgs</a></p> +</blockquote> +<h4 id="example-1">Example</h4> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>builtin<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ConfigMapGenerator<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>mymap<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">envs</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- devops.env<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- uxteam.env<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">literals</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- FRUIT=apple<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- VEGETABLE=carrot<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> +<h2 id="_imagetagtransformer_"><em>ImageTagTransformer</em></h2> +<h3 id="使用-kustomizationyaml-2">使用 <code>kustomization.yaml</code></h3> +<h4 id="字段名称images">字段名称：<code>images</code></h4> +<p>修改镜像的名称、tag 或 image digest ，而无需使用 patches 。例如，对于这种 kubernetes Deployment 片段：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">containers</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>mypostgresdb<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">image</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>postgres<span style="color:#000;font-weight:bold">:</span><span style="color:#0000cf;font-weight:bold">8</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginxapp<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">image</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#000;font-weight:bold">:</span><span style="color:#0000cf;font-weight:bold">1.7.9</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>myapp<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">image</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-demo-app<span style="color:#000;font-weight:bold">:</span>latest<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alpine-app<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">image</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alpine<span style="color:#000;font-weight:bold">:</span><span style="color:#0000cf;font-weight:bold">3.7</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>想要将 <code>image</code> 做如下更改：</p> +<ul> +<li>将 <code>postgres:8</code> 改为 <code>my-registry/my-postgres:v1</code></li> +<li>将 nginx tag 从 <code>1.7.9</code> 改为 <code>1.8.0</code></li> +<li>将镜像名称 <code>my-demo-app</code> 改为 <code>my-app</code></li> +<li>将 alpine 的 tag <code>3.7</code> 改为 digest 值</li> +</ul> +<p>只需在 <em>kustomization</em> 中添加以下内容：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">images</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>postgres<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">newName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-registry/my-postgres<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">newTag</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">newTag</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#0000cf;font-weight:bold">1.8.0</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-demo-app<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">newName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-app<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alpine<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">digest</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>sha256<span style="color:#000;font-weight:bold">:</span>24a0c4b4a4c0eb97a1aabb8e29f18e917d05abfe1b7a7c07857230879ce7d3d3<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="使用插件-2">使用插件</h3> +<h4 id="arguments-2">Arguments</h4> +<blockquote> +<p>ImageTag <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/image.go">image.Image</a></p> +<p>FieldSpecs []<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/fieldspec.go">config.FieldSpec</a></p> +</blockquote> +<h4 id="example-2">Example</h4> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>builtin<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ImageTagTransformer<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>not-important-to-example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">imageTag</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">newTag</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v2<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> +<h2 id="_labeltransformer_"><em>LabelTransformer</em></h2> +<h3 id="使用-kustomizationyaml-3">使用 <code>kustomization.yaml</code></h3> +<h4 id="字段名称commonlabels">字段名称：<code>commonLabels</code></h4> +<p>为所有资源和 selectors 增加标签。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">commonLabels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">someName</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>someValue<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">owner</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alice<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>bingo<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="使用插件-3">使用插件</h3> +<h4 id="arguments-3">Arguments</h4> +<blockquote> +<p>Labels map[string]string</p> +<p>FieldSpecs []<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/fieldspec.go">config.FieldSpec</a></p> +</blockquote> +<h4 id="example-3">Example</h4> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>builtin<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>LabelTransformer<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>not-important-to-example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>myApp<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">env</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>production<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">fieldSpecs</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>metadata/labels<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">create</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">true</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> +<h2 id="_namespacetransformer_"><em>NamespaceTransformer</em></h2> +<h3 id="使用-kustomizationyaml-4">使用 <code>kustomization.yaml</code></h3> +<h4 id="字段名称namespace">字段名称：<code>namespace</code></h4> +<p>为所有资源添加 namespace。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-namespace<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="使用插件-4">使用插件</h3> +<h4 id="arguments-4">Arguments</h4> +<blockquote> +<p><a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/objectmeta.go">types.ObjectMeta</a></p> +<p>FieldSpecs []<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/fieldspec.go">config.FieldSpec</a></p> +</blockquote> +<h4 id="example-4">Example</h4> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>builtin<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>NamespaceTransformer<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>not-important-to-example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>test<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldSpecs</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>metadata/namespace<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">create</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">true</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>subjects<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>RoleBinding<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">group</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>rbac.authorization.k8s.io<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>subjects<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ClusterRoleBinding<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">group</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>rbac.authorization.k8s.io<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> +<h2 id="_patchesjson6902_"><em>PatchesJson6902</em></h2> +<h3 id="使用-kustomizationyaml-5">使用 <code>kustomization.yaml</code></h3> +<h4 id="字段名称patchesjson6902">字段名称：<code>patchesJson6902</code></h4> +<p>patchesJson6902 列表中的每个条目都应可以解析为 kubernetes 对象和将应用于该对象的 <a href="https://tools.ietf.org/html/rfc6902">JSON patch</a>。</p> +<p>目标字段指向的 kubernetes 对象的 group、 version、 kind、 name 和 namespace 在同一 kustomization 内 path 字段内容是 JSON patch 文件的相对路径。</p> +<p>patch 文件中的内容可以如下这种 JSON 格式：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-json" data-lang="json"> <span style="color:#000;font-weight:bold">[</span> + <span style="color:#000;font-weight:bold">{</span><span style="color:#204a87;font-weight:bold">&#34;op&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;add&#34;</span><span style="color:#000;font-weight:bold">,</span> <span style="color:#204a87;font-weight:bold">&#34;path&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;/some/new/path&#34;</span><span style="color:#000;font-weight:bold">,</span> <span style="color:#204a87;font-weight:bold">&#34;value&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;value&#34;</span><span style="color:#000;font-weight:bold">},</span> + <span style="color:#000;font-weight:bold">{</span><span style="color:#204a87;font-weight:bold">&#34;op&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;replace&#34;</span><span style="color:#000;font-weight:bold">,</span> <span style="color:#204a87;font-weight:bold">&#34;path&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;/some/existing/path&#34;</span><span style="color:#000;font-weight:bold">,</span> <span style="color:#204a87;font-weight:bold">&#34;value&#34;</span><span style="color:#000;font-weight:bold">:</span> <span style="color:#4e9a06">&#34;new value&#34;</span><span style="color:#000;font-weight:bold">}</span> + <span style="color:#000;font-weight:bold">]</span> +</code></pre></div><p>也可以使用 YAML 格式表示：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml">- <span style="color:#204a87;font-weight:bold">op</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>add<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>/some/new/path<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>value<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">op</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>replace<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>/some/existing/path<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>new<span style="color:#f8f8f8;text-decoration:underline"> </span>value<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">patchesJson6902</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">version</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>add_init_container.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">version</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>add_service_annotation.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>patch 内容也可以是一个inline string：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">patchesJson6902</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">version</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">patch</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>|<span style="color:#8f5902;font-style:italic">- +</span><span style="color:#8f5902;font-style:italic"> - op: add</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>/some/new/path<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>value<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">op</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>replace<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>/some/existing/path<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;new value&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="使用插件-5">使用插件</h3> +<h4 id="arguments-5">Arguments</h4> +<blockquote> +<p>Target <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/patchtarget.go">types.PatchTarget</a></p> +<p>Path string</p> +<p>JsonOp string</p> +</blockquote> +<h4 id="example-5">Example</h4> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>builtin<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>PatchJson6902Transformer<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>not-important-to-example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">group</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">version</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-deploy<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>jsonpatch.json<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> +<h2 id="_patchesstrategicmerge_"><em>PatchesStrategicMerge</em></h2> +<h3 id="使用-kustomizationyaml-6">使用 <code>kustomization.yaml</code></h3> +<h4 id="字段名称patchesstrategicmerge">字段名称：<code>patchesStrategicMerge</code></h4> +<p>此列表中的每个条目都应可以解析为 <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/sig-api-machinery/strategic-merge-patch.md">StrategicMergePatch</a>.</p> +<p>这些（也可能是部分的）资源文件中的 name 必须与已经通过 <code>resources</code> 加载的 name 字段匹配，或者通过 <code>bases</code> 中的 name 字段匹配。这些条目将用于 <em>patch</em>（修改）已知资源。</p> +<p>推荐使用小的 patches，例如：修改内存的 request/limit，更改 ConfigMap 中的 env 变量等。小的 patches 易于维护和查看，并且易于在 overlays 中混合使用。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">patchesStrategicMerge</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- service_port_8888.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- deployment_increase_replicas.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- deployment_increase_memory.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>patch 内容也可以是一个inline string：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">patchesStrategicMerge</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- |<span style="color:#8f5902;font-style:italic">- +</span><span style="color:#8f5902;font-style:italic"> apiVersion: apps/v1</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">template</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">containers</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">image</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nignx<span style="color:#000;font-weight:bold">:</span>latest<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>请注意，kustomize 不支持同一个 patch 对象中包含多个 <em>删除</em> 指令。要从一个对象中删除多个字段或切片元素，需要创建一个单独的 patch，以执行所有需要的删除。</p> +<h3 id="使用插件-6">使用插件</h3> +<h4 id="arguments-6">Arguments</h4> +<blockquote> +<p>Paths []<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/patchstrategicmerge.go">types.PatchStrategicMerge</a></p> +<p>Patches string</p> +</blockquote> +<h4 id="example-6">Example</h4> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>builtin<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>PatchStrategicMergeTransformer<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>not-important-to-example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">paths</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- patch.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> +<h2 id="_patchtransformer_"><em>PatchTransformer</em></h2> +<h3 id="使用-kustomizationyaml-7">使用 <code>kustomization.yaml</code></h3> +<h4 id="字段名称patches">字段名称：<code>patches</code></h4> +<p>这个列表中的每个条目应该解析到一个 Patch 对象，其中包括一个 patch 和一个目标选择器。patch 可以是 Strategic Merge Patch 或 JSON patch，也可以是 patch 文件或 inline string。目标选择器可以通过 group、version、kind、name、namespace、标签选择器和注释选择器来选择资源，选择一个或多个匹配所有指定字段的资源来应用 patch。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">patches</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>patch.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">group</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">version</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deploy.*<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labelSelector</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;env=dev&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">annotationSelector</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;zone=west&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">patch</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>|<span style="color:#8f5902;font-style:italic">- +</span><span style="color:#8f5902;font-style:italic"> - op: replace</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>/some/existing/path<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>new<span style="color:#f8f8f8;text-decoration:underline"> </span>value<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>MyKind<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labelSelector</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;env=dev&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>The <code>name</code> and <code>namespace</code> fields of the patch target selector are +automatically anchored regular expressions. This means that the value <code>myapp</code> +is equivalent to <code>^myapp$</code>。</p> +<h3 id="使用插件-7">使用插件</h3> +<h4 id="arguments-7">Arguments</h4> +<blockquote> +<p>Path string</p> +<p>Patch string</p> +<p>Target *<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/selector.go">types.Selector</a></p> +</blockquote> +<h4 id="example-7">Example</h4> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>builtin<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>PatchTransformer<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>not-important-to-example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">patch</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#39;[{&#34;op&#34;: &#34;replace&#34;, &#34;path&#34;: &#34;/spec/template/spec/containers/0/image&#34;, &#34;value&#34;: &#34;nginx:latest&#34;}]&#39;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">target</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>.<span style="color:#8f5902;font-style:italic">*Deploy</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> +<h2 id="_prefixsuffixtransformer_"><em>PrefixSuffixTransformer</em></h2> +<h3 id="使用-kustomizationyaml-8">使用 <code>kustomization.yaml</code></h3> +<h4 id="字段名称nameprefix-namesuffix">字段名称：<code>namePrefix</code>, <code>nameSuffix</code></h4> +<p>为所有资源的名称添加前缀或后缀。</p> +<p>例如：将 deployment 名称从 <code>wordpress</code> 变为 <code>alices-wordpress</code> 或 <code>wordpress-v2</code> 或 <code>alices-wordpress-v2</code>。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">namePrefix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>alices-<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">nameSuffix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>-v2<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>如果资源类型是 ConfigMap 或 Secret，则在哈希值之前添加后缀。</p> +<h3 id="使用插件-8">使用插件</h3> +<h4 id="arguments-8">Arguments</h4> +<blockquote> +<p>Prefix string</p> +<p>Suffix string</p> +<p>FieldSpecs []<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/fieldspec.go">config.FieldSpec</a></p> +</blockquote> +<h4 id="example-8">Example</h4> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>builtin<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>PrefixSuffixTransformer<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>not-important-to-example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">prefix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>baked-<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">suffix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>-pie<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">fieldSpecs</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>metadata/name<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> +<h2 id="_replicacounttransformer_"><em>ReplicaCountTransformer</em></h2> +<h3 id="使用-kustomizationyaml-9">使用 <code>kustomization.yaml</code></h3> +<h4 id="字段名称replicas">字段名称：<code>replicas</code></h4> +<p>修改资源的副本数。</p> +<p>例如：对于如下 kubernetes Deployment 片段：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deployment-name<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">replicas</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#0000cf;font-weight:bold">3</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>在 kustomization 中添加以下内容，将副本数更改为 5：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">replicas</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deployment-name<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">count</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#0000cf;font-weight:bold">5</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><p>该字段内容为列表，所以可以同时修改许多资源。</p> +<p>由于这个声明无法设置 <code>kind:</code> 或 <code>group:</code>，所以他只能匹配如下资源中的一种：</p> +<ul> +<li><code>Deployment</code></li> +<li><code>ReplicationController</code></li> +<li><code>ReplicaSet</code></li> +<li><code>StatefulSet</code></li> +</ul> +<p>对于更复杂的用例，请使用 patch 。</p> +<h3 id="使用插件-9">使用插件</h3> +<h4 id="arguments-9">Arguments</h4> +<blockquote> +<p>Replica <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/replica.go">types.Replica</a></p> +<p>FieldSpecs []<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/fieldspec.go">config.FieldSpec</a></p> +</blockquote> +<h4 id="example-9">Example</h4> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>builtin<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ReplicaCountTransformer<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>not-important-to-example<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">replica</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>myapp<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">count</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#0000cf;font-weight:bold">23</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">fieldSpecs</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>spec/replicas<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">create</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">true</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">path</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>spec/replicas<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">create</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">true</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ReplicationController<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> +<h2 id="_secretgenerator_"><em>SecretGenerator</em></h2> +<h3 id="使用-kustomizationyaml-10">使用 <code>kustomization.yaml</code></h3> +<h4 id="字段名称secretgenerator">字段名称：<code>secretGenerator</code></h4> +<p>列表中的每个条目都将生成一个 Secret（合计可以生成 n 个 Secrets）。</p> +<p>功能与之前描述的 <code>configMapGenerator</code> 字段类似。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">secretGenerator</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>app-tls<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- secret/tls.cert<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- secret/tls.key<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">type</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;kubernetes.io/tls&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>app-tls-namespaced<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#8f5902;font-style:italic"># you can define a namespace to generate</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#8f5902;font-style:italic"># a secret in, defaults to: &#34;default&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- tls.crt=catsecret/tls.cert<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- tls.key=secret/tls.key<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">type</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;kubernetes.io/tls&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>env_file_secret<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">envs</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- env.txt<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">type</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Opaque<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>secret-with-annotation<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- app-config.yaml<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">type</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Opaque<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">options</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">annotations</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app_config</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;true&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">labels</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">app.kubernetes.io/name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#4e9a06">&#34;app2&#34;</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="使用插件-10">使用插件</h3> +<h4 id="arguments-10">Arguments</h4> +<blockquote> +<p><a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/objectmeta.go">types.ObjectMeta</a></p> +<p><a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/secretargs.go">types.SecretArgs</a></p> +</blockquote> +<h4 id="example-10">Example</h4> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>builtin<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>SecretGenerator<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>my-secret<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>whatever<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">behavior</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>merge<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">envs</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- a.env<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- b.env<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">files</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- obscure=longsecret.txt<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">literals</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- FRUIT=apple<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- VEGETABLE=carrot<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> + + + + + + Guides: Exec 插件示例 + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/execpluginguidedexample/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/execpluginguidedexample/ + + + + <p>本教程只是一个快速开始的示例，完整的插件文档请看：<a href="..">kustomize 插件</a></p> +<p>本示例将使用 bash 编写了一个简单的 <em>exec</em> 插件，用来生成一个 <code>ConfigMap</code>。</p> +<p>尝试本教程不会破坏你的当前设置。</p> +<h4 id="环境要求">环境要求</h4> +<ul> +<li><code>linux</code></li> +<li><code>git</code></li> +<li><code>curl</code></li> +<li><code>Go 1.13</code></li> +</ul> +<h2 id="创建一个工作空间目录">创建一个工作空间/目录</h2> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash"><span style="color:#000">DEMO</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#204a87;font-weight:bold">$(</span>mktemp -d<span style="color:#204a87;font-weight:bold">)</span> +</code></pre></div><h2 id="编写-kustomization">编写 kustomization</h2> +<p>新建一个目录来保存所有的配置：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash"><span style="color:#000">MYAPP</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#000">$DEMO</span>/myapp +mkdir -p <span style="color:#000">$MYAPP</span> +</code></pre></div><p>编写一个 Deployment 配置：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash">cat <span style="color:#4e9a06">&lt;&lt;&#39;EOF&#39; &gt;$MYAPP/deployment.yaml +</span><span style="color:#4e9a06">apiVersion: apps/v1 +</span><span style="color:#4e9a06">kind: Deployment +</span><span style="color:#4e9a06">metadata: +</span><span style="color:#4e9a06"> name: the-deployment +</span><span style="color:#4e9a06">spec: +</span><span style="color:#4e9a06"> replicas: 3 +</span><span style="color:#4e9a06"> template: +</span><span style="color:#4e9a06"> spec: +</span><span style="color:#4e9a06"> containers: +</span><span style="color:#4e9a06"> - name: the-container +</span><span style="color:#4e9a06"> image: monopole/hello:1 +</span><span style="color:#4e9a06"> command: [&#34;/hello&#34;, +</span><span style="color:#4e9a06"> &#34;--port=8080&#34;, +</span><span style="color:#4e9a06"> &#34;--date=$(THE_DATE)&#34;, +</span><span style="color:#4e9a06"> &#34;--enableRiskyFeature=$(ENABLE_RISKY)&#34;] +</span><span style="color:#4e9a06"> ports: +</span><span style="color:#4e9a06"> - containerPort: 8080 +</span><span style="color:#4e9a06"> env: +</span><span style="color:#4e9a06"> - name: THE_DATE +</span><span style="color:#4e9a06"> valueFrom: +</span><span style="color:#4e9a06"> configMapKeyRef: +</span><span style="color:#4e9a06"> name: the-map +</span><span style="color:#4e9a06"> key: today +</span><span style="color:#4e9a06"> - name: ALT_GREETING +</span><span style="color:#4e9a06"> valueFrom: +</span><span style="color:#4e9a06"> configMapKeyRef: +</span><span style="color:#4e9a06"> name: the-map +</span><span style="color:#4e9a06"> key: altGreeting +</span><span style="color:#4e9a06"> - name: ENABLE_RISKY +</span><span style="color:#4e9a06"> valueFrom: +</span><span style="color:#4e9a06"> configMapKeyRef: +</span><span style="color:#4e9a06"> name: the-map +</span><span style="color:#4e9a06"> key: enableRisky +</span><span style="color:#4e9a06">EOF</span> +</code></pre></div><p>编写一个 service 配置：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash">cat <span style="color:#4e9a06">&lt;&lt;EOF &gt;$MYAPP/service.yaml +</span><span style="color:#4e9a06">kind: Service +</span><span style="color:#4e9a06">apiVersion: v1 +</span><span style="color:#4e9a06">metadata: +</span><span style="color:#4e9a06"> name: the-service +</span><span style="color:#4e9a06">spec: +</span><span style="color:#4e9a06"> type: LoadBalancer +</span><span style="color:#4e9a06"> ports: +</span><span style="color:#4e9a06"> - protocol: TCP +</span><span style="color:#4e9a06"> port: 8666 +</span><span style="color:#4e9a06"> targetPort: 8080 +</span><span style="color:#4e9a06">EOF</span> +</code></pre></div><p>现在为您要编写的插件创建一个配置文件。</p> +<p>这个配置文件的内容也是 k8s 资源对象。其中 <code>apiVersion</code> 和 <code>kind</code> 字段的值用于在文件系统中查找插件代码（稍后会对此进行更多介绍）。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash">cat <span style="color:#4e9a06">&lt;&lt;&#39;EOF&#39; &gt;$MYAPP/cmGenerator.yaml +</span><span style="color:#4e9a06">apiVersion: myDevOpsTeam +</span><span style="color:#4e9a06">kind: SillyConfigMapGenerator +</span><span style="color:#4e9a06">metadata: +</span><span style="color:#4e9a06"> name: whatever +</span><span style="color:#4e9a06">argsOneLiner: Bienvenue true +</span><span style="color:#4e9a06">EOF</span> +</code></pre></div><p>最后在 kustomization 文件中引用以上所有内容：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash">cat <span style="color:#4e9a06">&lt;&lt;EOF &gt;$MYAPP/kustomization.yaml +</span><span style="color:#4e9a06">commonLabels: +</span><span style="color:#4e9a06"> app: hello +</span><span style="color:#4e9a06">resources: +</span><span style="color:#4e9a06">- deployment.yaml +</span><span style="color:#4e9a06">- service.yaml +</span><span style="color:#4e9a06">generators: +</span><span style="color:#4e9a06">- cmGenerator.yaml +</span><span style="color:#4e9a06">EOF</span> +</code></pre></div><p>检查这些文件</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash">ls -C1 <span style="color:#000">$MYAPP</span> +</code></pre></div><h2 id="为插件创建目录">为插件创建目录</h2> +<p>插件必须位于特定的目录，以便 Kustomize 能够找到它们。</p> +<p>该示例将使用临时目录：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash"><span style="color:#000">PLUGIN_ROOT</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#000">$DEMO</span>/kustomize/plugin +</code></pre></div><p>在上面定义的插件配置 <code>$MYAPP/cmGenerator.yaml</code> 中指定：</p> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>myDevOpsTeam<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>SillyConfigMapGenerator<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div></blockquote> +<p>这意味着该插件必须位于以下目录中：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash"><span style="color:#000">MY_PLUGIN_DIR</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#000">$PLUGIN_ROOT</span>/myDevOpsTeam/sillyconfigmapgenerator + +mkdir -p <span style="color:#000">$MY_PLUGIN_DIR</span> +</code></pre></div><p>插件的目录结构为： <code>apiVersion 的 value/小写 kind 的 value</code>。</p> +<p>插件拥有自己的目录，不但可以保存插件代码，还可以保存测试代码以需要的补充数据文件。</p> +<h2 id="编写插件">编写插件</h2> +<p>插件有 <em>exec</em> 和 <em>Go</em> 两种.</p> +<p>编写一个 <em>exec</em> 插件，将其安装到正确的目录，文件名必须与插件的类型匹配（在本例中为 <code>SillyConfigMapGenerator</code>）：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash">cat <span style="color:#4e9a06">&lt;&lt;&#39;EOF&#39; &gt;$MY_PLUGIN_DIR/SillyConfigMapGenerator +</span><span style="color:#4e9a06">#!/bin/bash +</span><span style="color:#4e9a06"># Skip the config file name argument. +</span><span style="color:#4e9a06">shift +</span><span style="color:#4e9a06">today=`date +%F` +</span><span style="color:#4e9a06">echo &#34; +</span><span style="color:#4e9a06">kind: ConfigMap +</span><span style="color:#4e9a06">apiVersion: v1 +</span><span style="color:#4e9a06">metadata: +</span><span style="color:#4e9a06"> name: the-map +</span><span style="color:#4e9a06">data: +</span><span style="color:#4e9a06"> today: $today +</span><span style="color:#4e9a06"> altGreeting: &#34;$1&#34; +</span><span style="color:#4e9a06"> enableRisky: &#34;$2&#34; +</span><span style="color:#4e9a06">&#34; +</span><span style="color:#4e9a06">EOF</span> +</code></pre></div><p>根据定义，<em>exec</em> 插件必须是可执行的：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash">chmod a+x <span style="color:#000">$MY_PLUGIN_DIR</span>/SillyConfigMapGenerator +</code></pre></div><h2 id="安装-kustomize">安装 kustomize</h2> +<p>根据<a href="https://kubernetes-sigs.github.io/kustomize/kustomize/zh/installation">文档</a>安装 kustomize:</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash">curl -s <span style="color:#4e9a06">&#34;https://raw.githubusercontent.com/\ +</span><span style="color:#4e9a06">kubernetes-sigs/kustomize/master/hack/install_kustomize.sh&#34;</span> <span style="color:#000;font-weight:bold">|</span> bash +mkdir -p <span style="color:#000">$DEMO</span>/bin +mv kustomize <span style="color:#000">$DEMO</span>/bin +</code></pre></div><h2 id="检查目录结构">检查目录结构</h2> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash">tree <span style="color:#000">$DEMO</span> +</code></pre></div><h2 id="使用插件构建-app">使用插件构建 APP:</h2> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash"><span style="color:#000">XDG_CONFIG_HOME</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#000">$DEMO</span> <span style="color:#000">$DEMO</span>/bin/kustomize build --enable_alpha_plugins <span style="color:#000">$MYAPP</span> +</code></pre></div><p>之前如果您已经设置了 <code>PLUGIN_ROOT=$HOME/.config/kustomize/plugin</code>，则无需在 <em>kustomize</em> 命令前使用 <code>XDG_CONFIG_HOME</code>。</p> + + + + + + Guides: Go 插件注意事项 + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/goplugincaveats/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/goplugincaveats/ + + + + <p><em>Go 插件</em> 是一个编译产品/组件，其定义见 <a href="https://golang.org/pkg/plugin">plugin package</a>，需要特殊的构建标志，不能单独运行，必须加载到正在运行的 Go 程序中。</p> +<blockquote> +<p>用 Go 编写的普通程序可以作为 <em>exec 插件</em>，但是不能作为 <em>Go 插件</em>。</p> +</blockquote> +<p>Go 插件允许运行 kustomize 扩展，而无需在每次运行时将资源分配到子流程或从子流程中解封所有资源数据。Go 插件 API 确保一定程度的一致性，以避免混淆下游转换器。</p> +<p>Go 插件的工作方式与 <a href="https://golang.org/pkg/plugin">plugin package</a> 中所述的相同，但与 <em>plugin</em> 一词相关的常见概念不同。</p> +<h2 id="the-skew-problem">The skew problem</h2> +<p>Go 插件编译会创建一个 <a href="https://en.wikipedia.org/wiki/Executable_and_Linkable_Format">ELF</a> 格式的 <code>.so</code> 文件，根据定义，该文件不包含有关目标代码来源的信息。</p> +<p>主程序 ELF 和插件 ELF 的编译条件（软件包依赖项的版本 <code>GOOS</code>，<code>GOARCH</code>）之间的偏移会导致插件加载失败，并带有无用的错误消息。</p> +<p>Exec 插件也会缺乏来源，但不会因编译不正确而失败。</p> +<p>在任何情况下，共享插件的最好方法是使用某种 <em>捆绑包</em>（git repo URL、git 存档文件、tar 包等），其中包含可解包至 <code>$XDG_CONFIG_HOME/kustomize/plugin</code> 的源代码，测试和相关数据。</p> +<p>对于 Go 插件，使用共享插件的最终用户 <em>必须同时编译 kustomize 和 plugin</em>。</p> +<p>这意味着一次性运行</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash"><span style="color:#8f5902;font-style:italic"># Or whatever is appropriate at time of reading</span> +<span style="color:#000">GOPATH</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#4e9a06">${</span><span style="color:#000">whatever</span><span style="color:#4e9a06">}</span> <span style="color:#000">GO111MODULE</span><span style="color:#ce5c00;font-weight:bold">=</span>on go get sigs.k8s.io/kustomize/api +</code></pre></div><p>然后使用一个正常的开发周期</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-bash" data-lang="bash">go build -buildmode plugin <span style="color:#4e9a06">\ +</span><span style="color:#4e9a06"></span> -o <span style="color:#4e9a06">${</span><span style="color:#000">wherever</span><span style="color:#4e9a06">}</span>/<span style="color:#4e9a06">${</span><span style="color:#000">kind</span><span style="color:#4e9a06">}</span>.so <span style="color:#4e9a06">${</span><span style="color:#000">wherever</span><span style="color:#4e9a06">}</span>/<span style="color:#4e9a06">${</span><span style="color:#000">kind</span><span style="color:#4e9a06">}</span>.go +</code></pre></div><p>并根据需要调整路径和发行版本标记（例如 <code>v3.0.0</code>）。</p> +<p>为了进行比较，可以参考编写 <a href="https://www.tensorflow.org/guide/extend/op">tensorflow plugin</a> 必须做的事情。</p> +<h2 id="为什么支持-go-插件">为什么支持 Go 插件？</h2> +<h3 id="安全">安全</h3> +<p>Go 插件开发者可以操作与原生 kustomize 操作相同的 API，可确保某些语义、变量和检查等一致。exec 插件子进程通过 stdin/stdout 来处理这些问题，但对于下游的转化器和使用者来说，会更容易把事情搞砸。</p> +<p>关键点：如果插件通过 kustomize 提供的文件 <code>Loader</code> 接口读取文件，则会受到 kustomize 文件加载限制的约束。当然，除了代码审计之外，没有什么可以阻止 Go 插件导入 io 包并执行其所需的任何操作。</p> +<h3 id="debugging">Debugging</h3> +<p>Go 插件开发者可以在功能测试中运行插件时，在 <em>本地</em> 调试插件，并在插件内部和其他位置设置断点。</p> +<p>为了获得两全其美的方式（共享性和安全性），开发人员可以编写一个 <code>.go</code> 程序作为 <em>exec 插件</em>，同时可以被 <code>go generate</code> 程序处理生成 Go 插件（反之亦然）。</p> +<h3 id="贡献单元化">贡献单元化</h3> +<p>所有内置的生成器和转换器本身都是 Go 插件。这意味着 kustomize 维护者可以将贡献的插件升级为内置插件，而无需更改代码（超出常规代码审阅要求的范围）。</p> +<h3 id="围绕生态系统发展">围绕生态系统发展</h3> +<p>工具可以简化 Go 插件的 <em>共享</em>，但是这需要大量的 Go 插件的创作，而这又会导致围绕共享插件的混乱。<a href="https://github.com/golang/go/wiki/Modules">Go modules</a> 一旦被更广泛地采用，将解决共享插件最大的难题：含糊不清的插件 vs 主机依赖性。</p> + + + + + + Guides: Go 插件示例 + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/gopluginguidedexample/ + Mon, 01 Jan 0001 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/gopluginguidedexample/ + + + + <p>本教程只是一个快速开始的示例，完整的插件文档请看：<a href="..">kustomize 插件</a></p> +<p>请务必阅读 <a href="../goplugincaveats">Go 插件注意事项</a>。</p> +<p>该示例使用 Go 插件 <code>SopsEncodedSecrets</code>，该插件位于 <a href="https://github.com/monopole/sopsencodedsecrets">sopsencodedsecrets repository</a>中。这是一个进程内的 Go 插件，而不是恰巧用 Go 编写的 exec 插件（这是 Go 作者的另一种选择）。</p> +<p>尝试本教程不会破坏你的当前设置。</p> +<h4 id="环境要求">环境要求</h4> +<ul> +<li><code>linux</code></li> +<li><code>git</code></li> +<li><code>curl</code></li> +<li><code>Go 1.13</code></li> +</ul> +<p>用于加密</p> +<ul> +<li>gpg</li> +</ul> +<p>或</p> +<ul> +<li>Google cloud (gcloud) 安装</li> +<li>具有 KMS 权限的 Google帐户</li> +</ul> +<h2 id="创建一个工作空间目录">创建一个工作空间/目录</h2> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#8f5902;font-style:italic"># 将这些目录分开，以免造成 DEMO 目录的混乱。</span> +<span style="color:#000">DEMO</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#204a87;font-weight:bold">$(</span>mktemp -d<span style="color:#204a87;font-weight:bold">)</span> +<span style="color:#000">tmpGoPath</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#204a87;font-weight:bold">$(</span>mktemp -d<span style="color:#204a87;font-weight:bold">)</span> +</code></pre></div><h2 id="安装-kustomize">安装 kustomize</h2> +<p>需要安装 kustomize v3.0.0，并且必须对其进行 <em>编译</em>（而不是从 release 页面下载二进制文件）：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">GOPATH</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#000">$tmpGoPath</span> go install sigs.k8s.io/kustomize/kustomize +</code></pre></div><h2 id="为插件创建目录">为插件创建目录</h2> +<p>kustomize 插件完全由其配置文件和源代码确定。</p> +<p>Kustomize 插件的配置文件的格式与 kubernetes 资源对象相同，这就意味着在配置文件中 <code>apiVersion</code>，<code>kind</code> 和 <code>metadata</code> 都是<a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/kubernetes-objects/#required-fields">必须的字段</a>。</p> +<p>因为配置文件名出现在 kustomization 文件的 <code>generatorsor</code> 或 <code>transformers</code> 字段中，kustomize 会读取配置文件，然后在以下位置找到 Go 插件的目标代码：</p> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">$XDG_CONFIG_HOME</span>/kustomize/plugin/<span style="color:#000">$apiVersion</span>/<span style="color:#000">$lKind</span>/<span style="color:#000">$kind</span>.so +</code></pre></div></blockquote> +<p><code>lKind</code> 必须是小写字母的，然后将插件加载并提供其配置，插件的输出将成为整个 <code>kustomize build</code> 程序的一部分 。</p> +<p>同一插件在一个 kustomize 构建中可能会多次使用不同的配置文件。此外，kustomize 可能会先自定义 config 数据，然后再发送给插件。由于这些原因，插件不能自己去读取配置文件，而需要通过 kustomize 来读取配置。</p> +<p>该示例将在如下临时目录中存放其使用的插件：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">PLUGIN_ROOT</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#000">$DEMO</span>/kustomize/plugin +</code></pre></div><p>并在下面的命令行中临时设置 <code>XDG_CONFIG_HOME</code>。</p> +<h3 id="使用什么-apiversion-和-kind">使用什么 apiVersion 和 kind？</h3> +<p>在 kustomize 插件的开发时，插件代码不关心也不知道配置文件中的 <code>apiVersion</code> 或 <code>kind</code>。</p> +<p>插件会检查这些字段，但是剩下的字段提供了实际的配置数据，在这一点上，成功解析其他字段对于插件很重要。</p> +<p>本示例使用一个名为 <em>SopsEncodedSecrets</em> 的插件，其位于 <a href="https://github.com/monopole/sopsencodedsecrets">SopsEncodedSecrets repository</a> 中。</p> +<p>我们选择安装插件到</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">apiVersion</span><span style="color:#ce5c00;font-weight:bold">=</span>mygenerators +<span style="color:#000">kind</span><span style="color:#ce5c00;font-weight:bold">=</span>SopsEncodedSecrets +</code></pre></div><h3 id="定义插件的主目录">定义插件的主目录</h3> +<p>按照惯例，存放插件代码和补充数据，测试，文档等的目录名称必须是 kind 的小写形式。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">lKind</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#204a87;font-weight:bold">$(</span><span style="color:#204a87">echo</span> <span style="color:#000">$kind</span> <span style="color:#000;font-weight:bold">|</span> awk <span style="color:#4e9a06">&#39;{print tolower($0)}&#39;</span><span style="color:#204a87;font-weight:bold">)</span> +</code></pre></div><h3 id="下载-sopsencodedsecrets-插件">下载 SopsEncodedSecrets 插件</h3> +<p>在这种情况下，存储库名称已经与小写字母的 kind 匹配，因此我们只需克隆存储库并自动获取正确的目录名称即可：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell">mkdir -p <span style="color:#000">$PLUGIN_ROOT</span>/<span style="color:#4e9a06">${</span><span style="color:#000">apiVersion</span><span style="color:#4e9a06">}</span> +<span style="color:#204a87">cd</span> <span style="color:#000">$PLUGIN_ROOT</span>/<span style="color:#4e9a06">${</span><span style="color:#000">apiVersion</span><span style="color:#4e9a06">}</span> +git clone git@github.com:monopole/sopsencodedsecrets.git +</code></pre></div><p>记住这个目录：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">MY_PLUGIN_DIR</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#000">$PLUGIN_ROOT</span>/<span style="color:#4e9a06">${</span><span style="color:#000">apiVersion</span><span style="color:#4e9a06">}</span>/<span style="color:#4e9a06">${</span><span style="color:#000">lKind</span><span style="color:#4e9a06">}</span> +</code></pre></div><h3 id="尝试测试插件">尝试测试插件</h3> +<p>插件可能会自己带有测试文件。因此可以通过如下方式：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#204a87">cd</span> <span style="color:#000">$MY_PLUGIN_DIR</span> +go <span style="color:#204a87">test</span> SopsEncodedSecrets_test.go +</code></pre></div><p>构建对象代码以供 kustomize 使用：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#204a87">cd</span> <span style="color:#000">$MY_PLUGIN_DIR</span> +<span style="color:#000">GOPATH</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#000">$tmpGoPath</span> go build -buildmode plugin -o <span style="color:#4e9a06">${</span><span style="color:#000">kind</span><span style="color:#4e9a06">}</span>.so <span style="color:#4e9a06">${</span><span style="color:#000">kind</span><span style="color:#4e9a06">}</span>.go +</code></pre></div><p>此步骤可能会成功，但是由于依赖关系 <a href="https://kubernetes-sigs.github.io/kustomize/docs/plugins/README.md#caveats">skew</a>，kustomize 最终可能无法加载该插件。</p> +<p>在加载失败时</p> +<ul> +<li> +<p>确保使用相同版本的Go (<em>go1.13</em>)，在相同的 <code>$GOOS</code>(<em>linux</em>)和 <code>$GOARCH</code>(<em>amd64</em>) 上构建插件，用于构建本演示中使用的 <a href="#%E5%AE%89%E8%A3%85-kustomize">kustomize</a>。</p> +</li> +<li> +<p>修改插件中的依赖文件 <code>go.mod</code> 以匹配 kustomize 使用的版本。</p> +</li> +</ul> +<p>缺乏工具和元数据来实现自动化，就不会有一个完整的 Go 插件生态。</p> +<p>Kustomize 采用了 Go 插件架构，可以轻松的接受新的生成器和转换器（只需编写一个插件），并确保本机操作（也已作为插件构建和测试）是分段的、可排序的和可重用的，而不是奇怪的插入在整体代码中。</p> +<h2 id="编写-kustomization">编写 kustomization</h2> +<p>新建一个 kustomization 目录存放你的配置：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">MYAPP</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#000">$DEMO</span>/myapp +mkdir -p <span style="color:#000">$MYAPP</span> +</code></pre></div><p>为 SopsEncodedSecrets 插件编写一个配置文件。</p> +<p>插件可以通过 <code>apiVersion</code> 和 <code>kind</code> 找到：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell">cat <span style="color:#4e9a06">&lt;&lt;EOF &gt;$MYAPP/secGenerator.yaml +</span><span style="color:#4e9a06">apiVersion: ${apiVersion} +</span><span style="color:#4e9a06">kind: ${kind} +</span><span style="color:#4e9a06">metadata: +</span><span style="color:#4e9a06"> name: mySecretGenerator +</span><span style="color:#4e9a06">name: forbiddenValues +</span><span style="color:#4e9a06">namespace: production +</span><span style="color:#4e9a06">file: myEncryptedData.yaml +</span><span style="color:#4e9a06">keys: +</span><span style="color:#4e9a06">- ROCKET +</span><span style="color:#4e9a06">- CAR +</span><span style="color:#4e9a06">EOF</span> +</code></pre></div><p>插件可以在 <code>myEncryptedData.yaml</code> 中找到更多的数据。</p> +<p>编写一个引用插件配置的 kustomization 文件：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell">cat <span style="color:#4e9a06">&lt;&lt;EOF &gt;$MYAPP/kustomization.yaml +</span><span style="color:#4e9a06">commonLabels: +</span><span style="color:#4e9a06"> app: hello +</span><span style="color:#4e9a06">generators: +</span><span style="color:#4e9a06">- secGenerator.yaml +</span><span style="color:#4e9a06">EOF</span> +</code></pre></div><p>接下来生成真实的加密数据。</p> +<h3 id="确保您已安装加密工具">确保您已安装加密工具</h3> +<p>我们将使用 <a href="https://github.com/mozilla/sops">sops</a> 对文件进行编码。选择 GPG 或 Google Cloud KMS 作为加密提供者以继续。</p> +<h4 id="gpg">GPG</h4> +<p>尝试这个命令：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell">gpg --list-keys +</code></pre></div><p>如果返回 list，则您已经成功创建了密钥。如果不是，请尝试从 sops 导入测试密钥。</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell">curl https://raw.githubusercontent.com/mozilla/sops/master/pgp/sops_functional_tests_key.asc <span style="color:#000;font-weight:bold">|</span> gpg --import +<span style="color:#000">SOPS_PGP_FP</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#4e9a06">&#34;1022470DE3F0BC54BC6AB62DE05550BC07FB1A0A&#34;</span> +</code></pre></div><h4 id="google-cloude-kms">Google Cloude KMS</h4> +<p>尝试这个命令：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell">gcloud kms keys list --location global --keyring sops +</code></pre></div><p>如果成功了，想必你已经创建了密钥，并将其放置在一个名为 sops 的钥匙圈中。如果没有，那就这样做：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell">gcloud kms keyrings create sops --location global +gcloud kms keys create sops-key --location global <span style="color:#4e9a06">\ +</span><span style="color:#4e9a06"></span> --keyring sops --purpose encryption +</code></pre></div><p>通过如下方法，获取你的 keyLocation：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">keyLocation</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#204a87;font-weight:bold">$(</span><span style="color:#4e9a06">\ +</span><span style="color:#4e9a06"></span> gcloud kms keys list --location global --keyring sops <span style="color:#000;font-weight:bold">|</span><span style="color:#4e9a06">\ +</span><span style="color:#4e9a06"></span> grep GOOGLE <span style="color:#000;font-weight:bold">|</span> cut -d <span style="color:#4e9a06">&#34; &#34;</span> -f1<span style="color:#204a87;font-weight:bold">)</span> +<span style="color:#204a87">echo</span> <span style="color:#000">$keyLocation</span> +</code></pre></div><h3 id="安装-sops">安装 <code>sops</code></h3> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">GOPATH</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#000">$tmpGoPath</span> go install go.mozilla.org/sops/cmd/sops +</code></pre></div><h3 id="用你的私钥创建加密数据">用你的私钥创建加密数据</h3> +<p>创建需要加密的原始数据：</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell">cat <span style="color:#4e9a06">&lt;&lt;EOF &gt;$MYAPP/myClearData.yaml +</span><span style="color:#4e9a06">VEGETABLE: carrot +</span><span style="color:#4e9a06">ROCKET: saturn-v +</span><span style="color:#4e9a06">FRUIT: apple +</span><span style="color:#4e9a06">CAR: dymaxion +</span><span style="color:#4e9a06">EOF</span> +</code></pre></div><p>将数据加密插入到插件要读取的文件中：</p> +<p>使用 PGP</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">$tmpGoPath</span>/bin/sops --encrypt <span style="color:#4e9a06">\ +</span><span style="color:#4e9a06"></span> --pgp <span style="color:#000">$SOPS_PGP_FP</span> <span style="color:#4e9a06">\ +</span><span style="color:#4e9a06"></span> <span style="color:#000">$MYAPP</span>/myClearData.yaml &gt;<span style="color:#000">$MYAPP</span>/myEncryptedData.yaml +</code></pre></div><p>或者使用 GCP KMS</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">$tmpGoPath</span>/bin/sops --encrypt <span style="color:#4e9a06">\ +</span><span style="color:#4e9a06"></span> --gcp-kms <span style="color:#000">$keyLocation</span> <span style="color:#4e9a06">\ +</span><span style="color:#4e9a06"></span> <span style="color:#000">$MYAPP</span>/myClearData.yaml &gt;<span style="color:#000">$MYAPP</span>/myEncryptedData.yaml +</code></pre></div><p>查看文件</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell">tree <span style="color:#000">$DEMO</span> +</code></pre></div><p>结果如下：</p> +<blockquote> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell">/tmp/tmp.0kIE9VclPt +├── kustomize +│   └── plugin +│   └── mygenerators +│   └── sopsencodedsecrets +│   ├── go.mod +│   ├── go.sum +│   ├── LICENSE +│   ├── README.md +│   ├── SopsEncodedSecrets.go +│   ├── SopsEncodedSecrets.so +│   └── SopsEncodedSecrets_test.go +└── myapp + ├── kustomization.yaml + ├── myClearData.yaml + ├── myEncryptedData.yaml + └── secGenerator.yaml +</code></pre></div></blockquote> +<h2 id="使用插件构建您的应用">使用插件构建您的应用：</h2> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-shell" data-lang="shell"><span style="color:#000">XDG_CONFIG_HOME</span><span style="color:#ce5c00;font-weight:bold">=</span><span style="color:#000">$DEMO</span> <span style="color:#000">$tmpGoPath</span>/bin/kustomize build --enable_alpha_plugins <span style="color:#000">$MYAPP</span> +</code></pre></div><p>这将生成一个 kubernetes secret，并对名称 <code>ROCKET</code> 和 <code>CAR</code> 的数据进行加密。</p> +<p>之前如果您已经设置了 <code>PLUGIN_ROOT=$HOME/.config/kustomize/plugin</code>，则无需在 <em>kustomize</em> 命令前使用 <code>XDG_CONFIG_HOME</code>。</p> + + + + + + diff --git a/docs/zh/index.html b/docs/zh/index.html new file mode 100644 index 000000000..8ad31adb6 --- /dev/null +++ b/docs/zh/index.html @@ -0,0 +1,295 @@ + + + + + + + + + + + + + + + + + + + + + + + +Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    +
    +
    + + + + + + + + + + + + +
    +
    +
    +
    +
    +

    Kustomize

    + +
    +
    +

    TKustomize 提供了一种自定义 Kubernetes 资源配置的解决方案，该方案摆脱了模板和 DSL。

    + + Get Started + + + Contribute + +
    +

    +
    +
    + +
    +
    +
    +
    +
    +
    + + + + + + +
    +
    +
    +
    +
    + +
    +

    参与贡献

    +

    欢迎在 Github 提交 RP，贡献你的力量。

    +

    +
    + +
    +
    +
    + + + + +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/index.json b/docs/zh/index.json new file mode 100644 index 000000000..4c6909fae --- /dev/null +++ b/docs/zh/index.json @@ -0,0 +1,233 @@ + + + + + + + + + + + + + + + + + + + + + + +Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    +
    +
    + + + +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/index.xml b/docs/zh/index.xml new file mode 100644 index 000000000..dc80affe5 --- /dev/null +++ b/docs/zh/index.xml @@ -0,0 +1,665 @@ + + + Kustomize – Kustomize + https://kubernetes-sigs.github.io/kustomize/zh/ + Recent content on Kustomize + Hugo -- gohugo.io + Thu, 24 Oct 2019 00:00:00 +0000 + + + + + + + + + + Blog: v3.3.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/10/24/v3.3.0/ + Thu, 24 Oct 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/10/24/v3.3.0/ + + + + <h2 id="summary-of-changes">Summary of changes</h2> +<h3 id="first-release-of-the-go-api-only-module">First release of the Go API-only module.</h3> +<p>Many of the PRs since the last vrelease were +around restructuring the <em>sigs.k8s.io/kustomize</em> +repository into three Go modules instead of just one.</p> +<p>The reasons for this are detailed in the <a href="https://kubernetes-sigs.github.io/kustomize/site/content/en/faq/versioningPolicy.md">versioning +policy documentation</a>, and what it means for releasing +is explained in the <a href="https://kubernetes-sigs.github.io/kustomize/releasing">release process documentation</a>.</p> +<p>The tl;dr is that the top level module +<code>sigs.k8s.io/kustomize</code> now defines the kustomize Go +API, and the <em>kustomize</em> CLI sits below it in an +independent module <code>sigs.k8s.io/kustomize/kustomize</code>.</p> +<p>The modules release independently, though in practice a +new release of the kustomize Go API will likely be +followed quickly by a new release of the <code>kustomize</code> +executable.</p> +<p>This is a necessary step to creating a much smaller +kustomize Go API surface that has some hope of +conforming to semantic versioning and being of some use +to clients.</p> +<p>The kustomize CLI will see the same kustomize Go API as +any other client.</p> +<p>The new semver-able API will begin with <code>v4.0.0</code> (not +yet released) and be a clean break with <code>v3</code> etc.</p> +<h3 id="change-log-since-v320">Change log since v3.2.0</h3> +<pre><code>3c9d828f - Have kustomize CLI depend on kustomize Go API v3.3.0 (Jeffrey Regan) +5d800f0b - Merge pull request #1595 from monopole/threeReleases (Jeff Regan) +4eb2d5bc - Three builders. (Jeffrey Regan) +988af1ff - Update README.md (Jeff Regan) +1617183e - Merge pull request #1590 from monopole/releaseProcessUpdate (Kubernetes Prow Robot) +ee727464 - update release process doc (jregan) +c9e7dc3b - Merge pull request #1589 from monopole/moreTestsAroundKustFileName (Jeff Regan) +07e0e46a - improve tests for alternative kustomization file names (Jeffrey Regan) +404d2d63 - Merge pull request #1587 from monopole/reducePgmconfig (Jeff Regan) +baa0296a - Reduce size of pgmconfig package (Jeffrey Regan) +0f665ac1 - Merge pull request #1544 from ptux/add-transformer-href (Jeff Regan) +14b0a650 - Merge pull request #1581 from monopole/refactorFs (Jeff Regan) +2d58f8b8 - Break the dep between fs and pgmconfig. (Jeffrey Regan) +9a43ca53 - Merge pull request #1578 from nlamirault/fix/build-plugins-doc (Jeff Regan) +5372fc6f - Merge pull request #1579 from monopole/fsPackageCleanup (Jeff Regan) +86bc3440 - Merge pull request #1513 from nimohunter/fix_empty_list_item (Kubernetes Prow Robot) +a014f7d4 - Merge pull request #1561 from beautytiger/dev-190925 (Jeff Regan) +9a94bcb8 - Improve fs package and doc in prep to officially go public (Jeffrey Regan) +07634ef0 - Merge pull request #1575 from monopole/versioning (Jeff Regan) +995f88d6 - Update versioning notes. (jregan) +334a6467 - Fix: documentation link for plugins (Nicolas Lamirault) +08963ba5 - improve test code coverage in transformers (Guangming Wang) +326fb689 - Merge pull request #1570 from bzub/1234-go_plugin_doc (Jeff Regan) +970ce67c - Update goPluginCaveats.md (Jeff Regan) +98d18930 - Update INSTALL.md (Jeff Regan) +d89b448c - Fix git tag recovery in cloud build. (Jeff Regan) +17bf9d32 - Update releasing README. (Jeff Regan) +a99aff1d - Merge pull request #1571 from monopole/updateCloudBuildProcess (Kubernetes Prow Robot) +a694ac7b - Update cloud build process for kustomize. (Jeffrey Regan) +b5b11ef6 - Fix compile kustomize example. (bzub) +fa1af6f5 - Merge pull request #1473 from richardmarshall/execpluginhash (Jeff Regan) +9288dec0 - Fix failing BashedConfigMapTest (Jeff Regan) +1a45dd0b - Merge pull request #1566 from monopole/releaseNotes3.2.1 (Kubernetes Prow Robot) +592c5acf - docs: Exec plugin generator options (Richard Marshall) +ac9424fa - tests: Add unit tests for update resource options (Richard Marshall) +79fbe7c4 - Support resource generator options in exec plugins (Richard Marshall) +f69d526f - v3.2.1 release notes (Jeff Regan) +07a95a60 - Merge pull request #1565 from monopole/tweakBinaryDepsBeforeTagging (Jeff Regan) +032b3857 - Pin the kustomize binary's dependence on kustomize libs. (jregan) +81062959 - Merge pull request #1564 from monopole/moveKustomizeBinaryToOwnModule (Kubernetes Prow Robot) +b82a8fd3 - Move the kustomize binary to its own module. (Jeffrey Regan) +2d0c22d6 - Merge pull request #1562 from keleustes/tools (Kubernetes Prow Robot) +aa342def - Pin tool versions using go modules (Ian Howell) +10786ec0 - Merge pull request #1554 from keleustes/readme (Kubernetes Prow Robot) +7c705687 - Update README.md to include Kubernetes 1.16 (Jerome Brette) +e8933d97 - Merge pull request #1560 from monopole/precommitTuneup (Jeff Regan) +9d7b6544 - Make pre-commit more portable and less tricky. (jregan) +7a0946a9 - Merge pull request #1558 from monopole/dependOnNewPluginatorModule (Jeff Regan) +def4f045 - Depend on new pluginator location. (Jeffrey Regan) +2f2408f1 - Merge pull request #1559 from monopole/compressCopyright (Jeff Regan) +3b9bcc48 - Compress copyright in the commands package. (Jeffrey Regan) +d0429ff4 - Merge pull request #1557 from monopole/pluginatorModule (Jeff Regan) +33deefc3 - Copy pluginator to its own module. (Jeffrey Regan) +9b3de82b - Merge pull request #1506 from Liujingfang1/release (Jeff Regan) +d217074f - Merge pull request #1550 from keleustes/apiversion (Kubernetes Prow Robot) +1d90ba7c - Fix typo in apiVersion yaml declaration (Jerome Brette) +eeeb4c36 - Merge pull request #1547 from keleustes/extensions (Kubernetes Prow Robot) +b1faa989 - Update Ingress apiVersion to networking.k8s.io/v1beta1 (Jerome Brette) +d8250c9e - move test case (nimohunter) +c9500466 - add transformer href (Wang(わん)) +0c32691e - Merge pull request #1537 from jaypipes/gomod-install-note (Kubernetes Prow Robot) +88b1d627 - Merge pull request #1541 from rtnpro/patch-1 (Jeff Regan) +aec82066 - Update INSTALL.md (Jeff Regan) +20c2b53a - Merge pull request #1542 from monopole/tweakFilePathsInTest (Jeff Regan) +274b5c3b - Tweak file path handling and logging in test. (Jeffrey Regan) +b1fdaa23 - Fix typo in transformerconfigs README (Ratnadeep Debnath) +b5d5e70b - empty list or map item return error (nimohunter) +2e829853 - empty list or map item return error (nimohunter) +55941f57 - add note about GO111MODULE for source install (Jay Pipes) +9e226001 - empty list or map item return error (nimohunter) +77b63f96 - add release note for v3.2.0 (jingfangliu) +</code></pre> + + + + + Blog: v3.2.1 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/26/v3.2.1/ + Thu, 26 Sep 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/26/v3.2.1/ + + + + <p>This is a patch release, with no new features from 3.2.0.</p> +<p>It reflects a change in dependence.</p> +<p>The kustomize binary is now built as a client, with no special +consideration, of the set of public packages represented by the Go +module at [https://github.com/kubernetes-sigs/kustomize].</p> +<p>kustomize the binary is now a client of the kustomize API +represented by the public package surface presented by +<code>https://github.com/kubernetes-sigs/kustomize/v{whatever}</code></p> + + + + + + Blog: v3.2.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/17/v3.2.0/ + Tue, 17 Sep 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/17/v3.2.0/ + + + + <h2 id="inline-patch">Inline Patch</h2> +<p>Since this version, Kustomize allows inline patches in all three of <code>patchesStrategicMerge</code>, <code>patchesJson6902</code> and <code>patches</code>. Take a look at <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/examples/inlinePatch.md">inline patch</a>.</p> +<h2 id="new-subcommand">New Subcommand</h2> +<p>Since this version, one can create a kustomization.yaml file in a directory through a <code>create</code> subcommand.</p> +<p>Create a new overlay from the base ../base</p> +<pre><code>kustomize create --resources ../base +</code></pre><p>Create a new kustomization detecing resources in the current directory</p> +<pre><code>kustomize create --autodetect +</code></pre><p>Once can also add all resources in the current directory recursively by</p> +<pre><code>kustomize create --autodetect --recursive +</code></pre><h3 id="new-example-generator">New Example Generator</h3> +<p>A new example generator of using go-getter to download resources is added. Take a look at <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/goGetterGeneratorPlugin.md">go-getter generator</a>.</p> + + + + + + Blog: v3.1.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/26/v3.1.0/ + Fri, 26 Jul 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/26/v3.1.0/ + + + + <h2 id="extended-patches">Extended patches</h2> +<p>Since this version, Kustomize allows applying one patch to multiple resources. This works for both Strategic Merge Patch and JSON Patch. Take a look at <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/patchMultipleObjects.md">patch multiple objects</a>.</p> +<h2 id="improved-resource-matching">Improved Resource Matching</h2> +<p>Multiple improvements have been made to allow the user to leverage &ldquo;namespace&rdquo; +instead/or with &ldquo;name suffix/prefix&rdquo; to segregate resources.</p> +<h3 id="patch-resolution-improvement">Patch resolution improvement</h3> +<p>The following example demonstrates how using the namespace field in the patch definition, +will let the user define two different patches against two different Deployment having the +same &ldquo;deploy1&rdquo; name but in different namespaces in the same Kustomize context/folder. +Unless the <code>namespace:</code> field has been specified in the kustomization.yaml, no namespace +value will be handled as Kubernetes <code>default</code> namespace.</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps/v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deploy1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>main<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">template</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">containers</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>nginx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">env</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ANOTHERENV<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>TESTVALUE<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>---<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>apps/v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Deployment<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">metadata</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>deploy1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>production<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">template</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">spec</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">containers</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>main<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">env</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>ANOTHERENV<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">value</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>PRODVALUE<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="variable-resolution-improvement">Variable resolution improvement</h3> +<p>It is possible to add namespace field to the variable declaration. In the following example, +two <code>Service</code> objects with the same <code>elasticsearch</code> name have been declared. +Specifying the namespace in the objRef of the corresponding varriables, allows Kustomize to +resovlve thoses variables. +If the namespace is not specified, Kustomize will handle it has a &ldquo;wildcard&rdquo; value.</p> +<p>Extract of kustomization.yaml:</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">vars</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch-test-protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">objref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>test<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldpath</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>spec.ports<span style="color:#000;font-weight:bold">[</span><span style="color:#0000cf;font-weight:bold">0</span><span style="color:#000;font-weight:bold">]</span>.protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- <span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch-dev-protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">objref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">kind</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>Service<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">name</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>elasticsearch<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>dev<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">apiVersion</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>v1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldref</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> </span><span style="color:#204a87;font-weight:bold">fieldpath</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>spec.ports<span style="color:#000;font-weight:bold">[</span><span style="color:#0000cf;font-weight:bold">0</span><span style="color:#000;font-weight:bold">]</span>.protocol<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="simultaneous-change-of-names-and-namespaces">Simultaneous change of names and namespaces</h3> +<p>Kustomize is now able to deal with simultaneous changes of name and namespace. +Special attention has been paid the handling of:</p> +<ul> +<li>ClusterRoleBinding/RoleBinding &ldquo;subjects&rdquo; field,</li> +<li>ValidatingWebhookConfiguration &ldquo;webhooks&rdquo; field.</li> +</ul> +<p>The user should be able to use a kustomization.yaml as shown in the example bellow +even if ClusterRoleBind,RoleBinding and ValidatingWebookConfiguration are part of the +resources he needs to declare.</p> +<p>Extract of kustomization.yaml:</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">namePrefix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>pfx-<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">nameSuffix</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>-sfx<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">namespace</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> </span>testnamespace<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span><span style="color:#204a87;font-weight:bold">resources</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>...<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h3 id="resource-and-kustomize-context-matching">Resource and Kustomize Context matching.</h3> +<p>Kustomize is now able to support more aggregation patterns.</p> +<p>If for instance, the top level of kustomization.yaml, is simply +combining sub-components, (as in the following example), Kustomize has improved +resource matching capabilities. This removes some of the constraints which were +present on the utilization of prefix/suffix and namespace transformers in the +individual components.</p> +<div class="highlight"><pre style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4"><code class="language-yaml" data-lang="yaml"><span style="color:#204a87;font-weight:bold">resources</span><span style="color:#000;font-weight:bold">:</span><span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- ../component1<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- ../component2<span style="color:#f8f8f8;text-decoration:underline"> +</span><span style="color:#f8f8f8;text-decoration:underline"></span>- ../component3<span style="color:#f8f8f8;text-decoration:underline"> +</span></code></pre></div><h2 id="other-improvements">Other improvements</h2> +<ul> +<li>Image transformation has been improved. This allows the user to update the sha256 of +an image with another sha256.</li> +<li>Multiple default transformer configuration entries have been added, removing the need for the +user to add them as part of the <code>configurations:</code> section of the kustomization.yaml.</li> +<li><code>kustomize</code> help command has been tidied up.</li> +</ul> + + + + + + Blog: v3.0.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/03/v3.0.0/ + Wed, 03 Jul 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/03/v3.0.0/ + + + + <p>This release is basically <a href="v2.1.0.md">v2.1.0</a>, +with many post-v2.1.0 bugs fixed (in about 150 +commits) and a <code>v3</code> in Go package paths.</p> +<p>The major version increment to <code>v3</code> puts a new +floor on a stable API for <a href="https://kubernetes-sigs.github.io/kustomize/docs/plugins">plugin</a> developers +(both <em>Go</em> plugin developers and <em>exec</em> plugin +developers who happen to use Go).</p> +<h3 id="why-so-soon-after-v210">Why so soon after v2.1.0?</h3> +<p>We made a mistake - v2.1.0 should have been +v3.0.0. Per the <a href="https://github.com/golang/go/wiki/Modules#releasing-modules-v2-or-higher">Go modules doc</a> (which have +improved a great deal recently), a release that&rsquo;s +already tagged v2 or higher should increment the +major version when performing their first Go +module-based release.</p> +<p>This advice applies to kustomize, since it was +already at major version 2 when it began using Go +modules to state <em>its own</em> dependencies in v2.1.0.</p> +<p>But the more important reason for <code>v3</code> is a change +to the kustomize <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/faq/versioningpolicy">versioning policy</a>, forced by +the introduction of plugins.</p> +<p>Historically, kustomize&rsquo;s <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/faq/versioningpolicy">versioning policy</a> +didn&rsquo;t involve Go modules and addressed <em>only</em> the +command line tool&rsquo;s behavior and the fields in a +kustomization file. The underlying packages were +an implementation detail, not under semantic +versioning, because they weren&rsquo;t intended for +export (and should have all been under +<code>internal</code>). Thus although the v2.1.0 CLI is +backward compatible with v2.0.3, the underlying +package APIs are not.</p> +<p>With Go modules, the <code>go</code> tool must assume that Go +packages respect <a href="https://semver.org">semantic versioning</a>, so it can +perform <a href="https://research.swtch.com/vgo-mvs">minimal version selection</a>.</p> +<p>With the introduction of alpha plugins, kustomize +sub-packages - in particular <code>loader</code> and +<code>resmap</code> - become part of an API formally exposed +to plugin authors, and so must be semantically +versioned. This allows plugins defined in other +repositories to clarify that they depend on +kustomize v3.0.0, and not see confusing errors +arising from incompatibilities between v2.1.0 and +v2.0.3. Hence, the jump to v3.</p> +<p>Aside - the set of kustomize packages outside +<code>internal</code> is too large, and over time, informed +by package use, this API surface must shrink. +Such shrinkage will trigger a major version +increment.</p> + + + + + + Blog: v2.1.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/06/18/v2.1.0/ + Tue, 18 Jun 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/06/18/v2.1.0/ + + + + <p>Go modules, resource ordering respected, generator and transformer plugins, eased +loading restrictions, the notion of inventory, eased replica count modification. +About ~90 issues closed since <a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.0.3">v2.0.3</a> in ~400 commits.</p> +<p>Download <a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.1.0">here</a>.</p> +<h2 id="go-modules">Go modules</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/goModules.png" alt="gopher with boxes"></p> +<p>Kustomize now defines its dependencies in a top +level <code>go.mod</code> file. This is the first step +towards a package structure intentially exported +as one or more <a href="https://github.com/golang/go/wiki/Modules">Go modules</a> for use in other +programs (kubectl, kubebuilder, etc.) and in +kustomize plugins (see below).</p> +<h2 id="resource-ordering">Resource ordering</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/sorted.png" alt="sort order retained"></p> +<p>Kustomize now retains the depth-first order of +resources as read, a frequently requested +feature.</p> +<p>This means resource order can be controlled +by editting kustomization files. This is +also vital to applying user-defined +transformations (plugins) in a particular +order.</p> +<p>Nothing needs to be done to activate this; +it happens automatically.</p> +<p>The <code>build</code> command now accepts a <code>--reorder</code> +flag with values <code>legacy</code> and <code>none</code>, +with a default value of <code>legacy</code>.</p> +<p><code>legacy</code> means apply an ordering based on +GVK, that currently emits <code>Namespace</code> objects +first, and <code>ValidatingWebhookConfiguration</code> +objects last. This means that despite +automatic retention of load order, your +<code>build</code> output won&rsquo;t change by default.</p> +<p><code>none</code> means <em>don&rsquo;t</em> reorder the resources before +output. Specify this to see output order +respect input order.</p> +<h2 id="generator-and-transformer-plugins">Generator and transformer plugins</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/plugins.png" alt="kid putting knife in electrical outlet"></p> +<p>Since the beginning (as <code>kinflate</code> back in Sep +2017), kustomize has read or generated resources, +applied a series of pipelined transformation to +them, and emitted the result to <code>stdout</code>.</p> +<p>At that time, the only way to change the behavior +of a generator (e.g. a secret generator), or +change the behavior of a transformer (e.g. a name +changer, or json patcher), was to modify source +code and put out a release.</p> +<p><a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9">v1.0.9</a> introduced <a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/generatorOptions.md">generator options</a> as a means +to change the behavior of the only two generators +available at the time - Secret and ConfigMap +generators. It also introduced +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs">transformer configs</a> as a way to fine tune the +targets of transformations (e.g. to which fields +<em>selectors</em> should be added). Most of the feature +requests for kustomize revolve around changing the +behavior of the builtin generators and +transformers.</p> +<p><a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.1.0">v2.1.0</a> adds an <em>alpha</em> plugin framework, that +encourages users to write their own generators or +transformers, <em>declaring them as kubernetes +objects just like everything else</em>, and apply them +as part of the <code>kustomize build</code> process.</p> +<p>To inform the API exposed to plugins, and to +confirm that the plugin framework can offer plugin +authors the same capabilities as builtin +operations, all the builtin generators and +tranformers have been converted to plugin form +(with one exceptions awaiting Go module +refinements). This means that adding, say, a +<code>secretGenerator</code> or <code>commonAnnotations</code> directive +to your kustomization will (in <a href="https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.1.0">v2.1.0</a>) trigger +execution of +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/builtin">code committed as a plugin</a>.</p> +<p>For more information, see the +<a href="plugins">kustomize plugin documentation</a>.</p> +<h2 id="remove-load-restrictions">Remove load restrictions</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/abandonedTrainingWheels.png" alt="removed training wheels"></p> +<p>The following usage:</p> +<pre><code>kustomize build --load_restrictor none $target +</code></pre><p>allows a <code>kustomization.yaml</code> file used in this +build to refer to files outside its own directory +(i.e. outside its <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#kustomization-root">root</a>).</p> +<p>This is an opt-in to suppress a security feature +that denies this precise behavior.</p> +<p>This feature should only be used to allow multiple +overlays (e.g. prod, staging and dev) to share a +patch file. To share <em>resources</em>, use a relative +path or URL to a kustomization directory in the +<code>resources</code> directive.</p> +<h2 id="inventory-generation-for-pruning">Inventory generation for pruning</h2> +<p><img src="https://kubernetes-sigs.github.io/kustomize/kustomize/images/pruning.png" alt="pruning dead branches"></p> +<p><em>Alpha</em></p> +<p>Users can add an <code>inventory</code> stanza to their +kustomization file, to add a special <em>inventory +object</em> to the <code>build</code> result.</p> +<p>This object applies to the cluster along with +everything else in the build result and can be +used by other clients to intelligently <em>prune</em> +orphaned cluster resources.</p> +<p>For more information see the +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/docs/inventory_object.md">kustomize inventory object documentation</a>.</p> +<h2 id="field-changes--deprecations">Field changes / deprecations</h2> +<h3 id="resources-expanded-bases-deprecated"><code>resources</code> expanded, <code>bases</code> deprecated</h3> +<p>The <code>resources</code> field has been generalized; it now +accepts what formerly could only be specified in +the <code>bases</code> field.</p> +<p>This change was made to allow users fine control +over resource processing order. With a distinct +<code>bases</code> field, bases had to be loaded separately +from resources as a group. Now, base loading may +be interleaved as desired with the loading of +resource files from the current +directory. <a href="#resource-ordering">Resource ordering</a> +had to be respected before this feature could be +introduced.</p> +<p>The <code>bases</code> field is now deprecated, and will be +deleted in some future major release. Manage the +deprecation simply moving the arguments of the +<code>bases</code> field to the <code>resources</code> field in the +desired order, e.g.</p> +<blockquote> +<pre><code>resources: +- someResouceFile.yaml +- someOtherResourceFile.yaml +bases: +- ../../someBaseDir +</code></pre></blockquote> +<p>could become</p> +<blockquote> +<pre><code>resources: +- someResouceFile.yaml +- ../../someBaseDir +- someOtherResourceFile.yaml +</code></pre></blockquote> +<p>The <code>kustomized edit fix</code> command will do this for +you, though it will always put the bases at the +end.</p> +<p>As an aside, the <code>resources</code>, <code>generators</code> and +<code>transformers</code> fields now all accept the same +argument format.</p> +<blockquote> +<p>Each field&rsquo;s argument is a <em>string list</em>, +where each entry is either a <em>resource</em> (a +relative path to a YAML file) or a +<a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#kustomization"><em>kustomization</em></a> (a path or URL +pointing to a directory with a kustomization +file). A kustomization directory used in this +context is called a <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#base"><em>base</em></a>.</p> +</blockquote> +<p>The fact that the <code>generators</code> and <code>transformers</code> +field accept <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/glossary#base">bases</a> and the fact that generator +and transformer configuration objects are just +normal k8s resources means that one can generate +or transform a generator or a transformer (see +<a href="https://github.com/kubernetes-sigs/kustomize/tree/master/api/internal/target/transformerplugin_test.go">TestTransformerTransformers</a>).</p> +<h3 id="replicas-field"><code>replicas</code> field</h3> +<p>The common task of patching a deployment to edit +the number of replicas is now made easier +with the new <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/api-reference/kustomization/replicas">replicas</a> field.</p> +<h3 id="envs-field"><code>envs</code> field</h3> +<p>An <code>envs</code> sub-field has been added to both +<code>configMapGenerator</code> and <code>secretGenerator</code>, +replacing the now deprecated (and singular) +<code>env</code> field. The new field accepts lists, just +like its sibling fields <code>files</code> and <code>literals</code>.</p> +<p>Optionally use <code>kustomize edit fix</code> to merge +singular <code>env</code> field into a plural field.</p> + + + + + + Blog: v2.0.0 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/02/05/v2.0.0/ + Tue, 05 Feb 2019 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/02/05/v2.0.0/ + + + + <p>After security review, a field used in secret +generation (see below) was removed from the +definition of a kustomization file with no +mechanism to convert it to a new form. Also, the +set of files accessible from a kustomization file +has been further constrained.</p> +<p>Per the <a href="https://kubernetes-sigs.github.io/kustomize/kustomize/faq/versioningpolicy">versioning policy</a>, +backward incompatible changes trigger an increment +of the major version number, hence we go +from 1.0.11 to 2.0.0. We&rsquo;re taking this major +version increment opportunity to remove some +already deprecated fields, and the code paths +associated with them.</p> +<h2 id="backward-incompatible-changes">Backward Incompatible Changes</h2> +<h3 id="kustomization-path-constraints">Kustomization Path Constraints</h3> +<p>A kustomization file can specify paths to other +files, including resources, patches, configmap +generation data, secret generation data and +bases. In the case of a base, the path can be a +git URL instead.</p> +<p>In 1.x, these paths had to be relative to the +current kustomization directory (the location of +the kustomization file used in the <code>build</code> +command).</p> +<p>In 2.0, bases can continue to specify, via +relative paths, kustomizations outside the current +kustomization directory. But non-base paths are +constrained to terminate in or below the current +kustomization directory. Further, bases specified +via a git URL may not reference files outside of +the directory used to clone the repository.</p> +<h3 id="kustomization-field-removals">Kustomization Field Removals</h3> +<h4 id="patches">patches</h4> +<p><code>patches</code> was deprecated and replaced by +<code>patchesStrategicMerge</code> when <code>patchesJson6902</code> was +introduced. In Kustomize 2.0.0, <code>patches</code> is +removed. Please use <code>patchesStrategicMerge</code> +instead.</p> +<h4 id="imagetags">imageTags</h4> +<p><code>imageTags</code> is replaced by <code>images</code> since <code>images</code> +can provide more features to change image names, +registries, tags and digests.</p> +<h4 id="secretgeneratorcommands">secretGenerator/commands</h4> +<p><code>commands</code> is removed from SecretGenerator due to +a <a href="https://docs.google.com/document/d/1FYgLVdq-siB_Cef9yuQBmit0PbrE8lsyTBdGI2eA2y8/edit">security concern</a>. One can use <code>files</code> or +<code>literals</code>, similar to ConfigMapGenerator, to +generate a secret.</p> +<pre><code>secretGenerator: +- name: app-tls + files: + - secret/tls.cert + - secret/tls.key + type: &quot;kubernetes.io/tls&quot; +</code></pre><h2 id="compatible-changes-new-features">Compatible Changes (New Features)</h2> +<p>As this release is triggered by a security change, +there are no major new features to announce. A few +things that are worth mentioning in this release +are:</p> +<ul> +<li> +<p>More than <em>40</em> issues closed since 1.0.11 +release (including many extensions to +transformation rules).</p> +</li> +<li> +<p>Users can run <code>kustomize edit fix</code> to migrate a +kustomization file working with previous +versions to one working with 2.0.0. For example, +a kustomization.yaml with following content</p> +<pre><code>patches: + - deployment-patch.yaml +imageTags: + - name: postgres + newTag: v1 +</code></pre><p>will be converted to</p> +<pre><code>apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +patchesStrategicMerge: + - deployment-patch.yaml +images: + - name: postgres + newTag: v1 +</code></pre></li> +<li> +<p>Kustomization filename</p> +<p>In previous versions, the name of a +kustomization file had to be +<code>kustomization.yaml</code>. +Kustomize allows <code>kustomization.yaml</code>, +<code>kustomization.yml</code> and +<code>Kustomization</code>. In a directory, only one of +those filenames is allowed. If there are more +than one found, Kustomize will exit with an +error. Please select the best filename for your +use cases.</p> +</li> +<li> +<p>Cancelled plans to deprecate applying prefix/suffix to namespace. +The deprecation warning</p> +<pre><code>Adding nameprefix and namesuffix to Namespace resource will be deprecated in next release. +</code></pre><p>was removed.</p> +</li> +</ul> + + + + + + Blog: v1.0.1 + https://kubernetes-sigs.github.io/kustomize/zh/blog/2018/05/21/v1.0.1/ + Mon, 21 May 2018 00:00:00 +0000 + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2018/05/21/v1.0.1/ + + + + <p>Initial release after move from github.com/kubernetes/kubectl to github.com/kubernetes-sigs/kustomize.</p> +<p>History</p> +<ul> +<li>May 2018: v1.0 after move to github.com/kubernetes-sigs/kubectl +from github.com/kubernetes/kubectl. +Has kustomization file, bases, overlays, basic transforms.</li> +<li>Apr 2018: s/kinflate/kustomize/, s/manifest/kustomization/</li> +<li>Oct 2017: s/kexpand/kinflate/</li> +<li>Sep 2017: kexpand <a href="https://github.com/kubernetes/kubectl/pull/65">starts</a> +in github.com/kubernetes/kubectl</li> +<li>Aug 2017: <a href="https://docs.google.com/document/d/1cLPGweVEYrVqQvBLJg6sxV-TrE5Rm2MNOBA_cxZP2WU">DAM</a> authored by Brian Grant</li> +</ul> + + + + + + diff --git a/docs/zh/installation/binaries/index.html b/docs/zh/installation/binaries/index.html new file mode 100644 index 000000000..b4a2d46a4 --- /dev/null +++ b/docs/zh/installation/binaries/index.html @@ -0,0 +1,474 @@ + + + + + + + + + + + + + + + + + + + + + + + +可执行文件 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + 可执行文件 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    可执行文件

    +
    下载编译好的二进制文件来安装 Kustomize。
    +

    适用于 Linux、MacOS 和 Windows 的各版本的二进制可执行文件可以在 releases 页面 上手动下载。

    +

    下面的脚本会检测你的操作系统，并下载相应的 kustomize 二进制文件到你当前的工作目录中。

    +
    curl -s "https://raw.githubusercontent.com/\
+kubernetes-sigs/kustomize/master/hack/install_kustomize.sh"  | bash
+
    +
    + + + + +
    + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/installation/binaries/index.xml b/docs/zh/installation/binaries/index.xml new file mode 100644 index 000000000..19fe76e29 --- /dev/null +++ b/docs/zh/installation/binaries/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – 可执行文件 + https://kubernetes-sigs.github.io/kustomize/zh/installation/binaries/ + Recent content in 可执行文件 on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/installation/chocolatey/index.html b/docs/zh/installation/chocolatey/index.html new file mode 100644 index 000000000..7ee876a9d --- /dev/null +++ b/docs/zh/installation/chocolatey/index.html @@ -0,0 +1,476 @@ + + + + + + + + + + + + + + + + + + + + + + + +Chocolatey | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Chocolatey | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    Chocolatey

    +
    Windows 系统可以使用 Chocolatey 安装 Kustomize。
    + 
    choco install kustomize
+

    有关软件包管理器 chocolatey 的使用以及对之前版本的支持，请参考以下链接：

    + + +
    + + + + +
    + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/installation/chocolatey/index.xml b/docs/zh/installation/chocolatey/index.xml new file mode 100644 index 000000000..c721c4c90 --- /dev/null +++ b/docs/zh/installation/chocolatey/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – Chocolatey + https://kubernetes-sigs.github.io/kustomize/zh/installation/chocolatey/ + Recent content in Chocolatey on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/installation/homebrew/index.html b/docs/zh/installation/homebrew/index.html new file mode 100644 index 000000000..b83da9462 --- /dev/null +++ b/docs/zh/installation/homebrew/index.html @@ -0,0 +1,474 @@ + + + + + + + + + + + + + + + + + + + + + + + +Homebrew / MacPorts | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Homebrew / MacPorts | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    Homebrew / MacPorts

    +
    MacOS 系统可以使用 Homebrew 或 MacPorts 来安装 Kustomize。
    +

    Homebrew 用户可以：

    +
    brew install kustomize
+

    MacPorts 用户可以：

    +
    sudo port install kustomize
+
    +
    + + + + +
    + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/installation/homebrew/index.xml b/docs/zh/installation/homebrew/index.xml new file mode 100644 index 000000000..dd7f9f6ff --- /dev/null +++ b/docs/zh/installation/homebrew/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – Homebrew / MacPorts + https://kubernetes-sigs.github.io/kustomize/zh/installation/homebrew/ + Recent content in Homebrew / MacPorts on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/installation/index.html b/docs/zh/installation/index.html new file mode 100644 index 000000000..614121cea --- /dev/null +++ b/docs/zh/installation/index.html @@ -0,0 +1,485 @@ + + + + + + + + + + + + + + + + + + + + + + + +安装 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + 安装 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + +
    +
    + + + + + + +
    +

    安装

    + + +
    + + + + +
    + + +
    +
    + Go 源码 +
    +

    使用 Go 源码安装 Kustomize。

    +
    + + + +
    +
    + Homebrew / MacPorts +
    +

    MacOS 系统可以使用 Homebrew 或 MacPorts 来安装 Kustomize。

    +
    + + + +
    +
    + 可执行文件 +
    +

    下载编译好的二进制文件来安装 Kustomize。

    +
    + + + +
    +
    + Chocolatey +
    +

    Windows 系统可以使用 Chocolatey 安装 Kustomize。

    +
    + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/installation/index.xml b/docs/zh/installation/index.xml new file mode 100644 index 000000000..024414d97 --- /dev/null +++ b/docs/zh/installation/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – 安装 + https://kubernetes-sigs.github.io/kustomize/zh/installation/ + Recent content in 安装 on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/installation/source/index.html b/docs/zh/installation/source/index.html new file mode 100644 index 000000000..d5699089a --- /dev/null +++ b/docs/zh/installation/source/index.html @@ -0,0 +1,499 @@ + + + + + + + + + + + + + + + + + + + + + + + +Go 源码 | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + Go 源码 | Kustomize + + +
    + + + +
    +
    +
    +
    +
    + + + + + +
    + +
    + + + +
    + + +
    + + + + +
    +
    + + + + + + + +
    + + + + + + 编辑此页 + 提交文档问题 + + + 提交项目问题 + +
    + + + + + + + + + + +
    +
    + + + + + + +
    +

    Go 源码

    +
    使用 Go 源码安装 Kustomize。
    +

    需要先安装 Go。

    +

    无需克隆源码库直接构建 kustomize CLI

    +
    GOBIN=$(pwd)/ GO111MODULE=on go get sigs.k8s.io/kustomize/kustomize/v3
+

    在本地克隆源码库构建 kustomize CLI

    +
    # 需要 go 1.13 或更高版本
+unset GOPATH
+# 详见 https://golang.org/doc/go1.13#modules
+unset GO111MODULES
+
+# 拉取 repo
+git clone git@github.com:kubernetes-sigs/kustomize.git
+# 进入目录
+cd kustomize
+
+# 如果您不想从 HEAD 开始构建， 则可以选择切换特定的标签
+git checkout kustomize/v3.2.3
+
+# 开始构建
+(cd kustomize; go install .)
+
+# 运行
+~/go/bin/kustomize version
+
    +
    + + + + +
    + + + + + + + + + + + + +
    + + + +
    最后修改 0001年01月01日 +
    +
    + +
    +
    +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/installation/source/index.xml b/docs/zh/installation/source/index.xml new file mode 100644 index 000000000..93c70bc9f --- /dev/null +++ b/docs/zh/installation/source/index.xml @@ -0,0 +1,17 @@ + + + Kustomize – Go 源码 + https://kubernetes-sigs.github.io/kustomize/zh/installation/source/ + Recent content in Go 源码 on Kustomize + Hugo -- gohugo.io + + + + + + + + + + + diff --git a/docs/zh/robots.txt b/docs/zh/robots.txt new file mode 100644 index 000000000..4f9540ba3 --- /dev/null +++ b/docs/zh/robots.txt @@ -0,0 +1 @@ +User-agent: * \ No newline at end of file diff --git a/docs/zh/search/index.html b/docs/zh/search/index.html new file mode 100644 index 000000000..f1aa56b36 --- /dev/null +++ b/docs/zh/search/index.html @@ -0,0 +1,239 @@ + + + + + + + + + + + + + + + + + + + + + + +Search Results | Kustomize + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + + +
    +
    +
    + +
    +
    +

    Search Results

    + +
    +
    + + +
    + +
    +
    +
    +
    + + + + + + + +
    +
    + + + + + + + +
    +
    + © 2020 Kubernetes Authors All Rights Reserved + + + + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/zh/sitemap.xml b/docs/zh/sitemap.xml new file mode 100644 index 000000000..a502bda27 --- /dev/null +++ b/docs/zh/sitemap.xml @@ -0,0 +1,828 @@ + + + + + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/builtins/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/guides/bespoke/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/execpluginguidedexample/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/installation/source/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/guides/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/guides/offtheshelf/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/goplugincaveats/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/installation/homebrew/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/installation/binaries/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/installation/chocolatey/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/gopluginguidedexample/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/contributing/bugs/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/blog/releases/ + 2019-10-24T00:00:00+00:00 + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/contributing/community/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/installation/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/contributing/features/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/contributing/docs/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/contributing/howitworks/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/contributing/mac/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/contributing/windows/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/guides/plugins/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/faq/eschewedfeatures/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/faq/versioningpolicy/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/glossary/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/ + 2019-10-24T00:00:00+00:00 + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/10/24/v3.3.0/ + 2019-10-24T00:00:00+00:00 + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/blog/ + 2019-10-24T00:00:00+00:00 + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/26/v3.2.1/ + 2019-09-26T00:00:00+00:00 + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/09/17/v3.2.0/ + 2019-09-17T00:00:00+00:00 + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/26/v3.1.0/ + 2019-07-26T00:00:00+00:00 + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/07/03/v3.0.0/ + 2019-07-03T00:00:00+00:00 + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/06/18/v2.1.0/ + 2019-06-18T00:00:00+00:00 + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2019/02/05/v2.0.0/ + 2019-02-05T00:00:00+00:00 + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/blog/2018/05/21/v1.0.1/ + 2018-05-21T00:00:00+00:00 + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/index.json + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/bases/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/commonannotations/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/commonlabels/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/components/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/configmapgenerator/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/crds/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/faq/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/generatoroptions/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/images/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/nameprefix/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/namespace/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/namesuffix/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patches/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patchesjson6902/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/patchesstrategicmerge/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/replicas/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/resources/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/search/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/secretegenerator/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/api-reference/kustomization/vars/ + + + + + + https://kubernetes-sigs.github.io/kustomize/zh/contributing/ + + + + + \ No newline at end of file diff --git a/docs/zh/workflows.md b/docs/zh/workflows.md deleted file mode 100644 index 6ed5099bc..000000000 --- a/docs/zh/workflows.md +++ /dev/null @@ -1,127 +0,0 @@ -[OTS]: ../glossary.md#off-the-shelf-configuration -[apply]: ../glossary.md#apply -[applying]: ../glossary.md#apply -[base]: ../glossary.md#base -[fork]: https://guides.github.com/activities/forking/ -[variants]: ../glossary.md#variant -[kustomization]: ../glossary.md#kustomization -[off-the-shelf]: ../glossary.md#off-the-shelf-configuration -[overlays]: ../glossary.md#overlay -[patch]: ../glossary.md#patch -[patches]: ../glossary.md#patch -[rebase]: https://git-scm.com/docs/git-rebase -[resources]: ../glossary.md#resource -[workflowBespoke]: ../images/workflowBespoke.jpg -[workflowOts]: ../images/workflowOts.jpg -[kubectl-v1.14.0]:https://kubernetes.io/blog/2019/03/25/kubernetes-1-14-release-announcement/ - -# 工作流 - -工作流是 kustomize 运行和维护配置的步骤。 - -## 配置定制（Bespoke configuration） - -在这个工作流方式中，所有的配置文件（ YAML 资源）都为用户所有，存储在用户的私有 repo 中。其他用户是无法使用的。 - -![bespoke config workflow image][workflowBespoke] - -#### 1) 创建一个目录用于版本控制 - -我们希望将一个名为 _ldap_ 的 Kubernetes 集群应用的配置保存在自己的 repo 中。 -这里使用 git 进行版本控制。 - -> ``` -> git init ~/ldap -> ``` - -#### 2) 创建一个 [base] - -> ``` -> mkdir -p ~/ldap/base -> ``` - -在这个目录中创建并提交 [kustomization] 文件及一组资源配置。 - -#### 3) 创建 [overlays] - -> ``` -> mkdir -p ~/ldap/overlays/staging -> mkdir -p ~/ldap/overlays/production -> ``` - -每个目录都包含需要一个 [kustomization] 文件以及一或多个 [patches]。 - -在 _staging_ 目录可能会有一个用于在 configmap 中打开一个实验标记的补丁。 - -在 _production_ 目录可能会有一个在 deployment 中增加副本数的补丁。 - -#### 4) 生成 [variants] - -运行 kustomize，将生成的配置用于 kubernetes 应用发布。 - -> ``` -> kustomize build ~/ldap/overlays/staging | kubectl apply -f - -> kustomize build ~/ldap/overlays/production | kubectl apply -f - -> ``` - -也可以在 [kubectl-v1.14.0] 版，使用 ```kubectl``` 命令发布你的 [variants] 。 -> ``` -> kubectl apply -k ~/ldap/overlays/staging -> kubectl apply -k ~/ldap/overlays/production -> ``` - -## 使用现成的配置（Off-the-shelf configuration） - -在这个工作流方式中，可从别人的 repo 中 fork kustomize 配置，并根据自己的需求来配置。 - - -![off-the-shelf config workflow image][workflowOts] - -#### 1) 寻找并且 [fork] 一个 [OTS] 配置 - -#### 2) 将其克隆为你自己的 [base] - -这个 [base] 目录维护在上游为 [OTS] 配置的 repo ，在这个例子使用 `ladp` 的 repo 。 - -> ``` -> mkdir ~/ldap -> git clone https://github.com/$USER/ldap ~/ldap/base -> cd ~/ldap/base -> git remote add upstream git@github.com:$USER/ldap -> ``` - -#### 3) 创建 [overlays] - -如配置定制方法一样，创建并完善 _overlays_ 目录中的内容。 - -所有的 [overlays] 都依赖于 [base] 。 - -> ``` -> mkdir -p ~/ldap/overlays/staging -> mkdir -p ~/ldap/overlays/production -> ``` - -用户可以将 `overlays` 维护在不同的 repo 中。 - -#### 4) 生成 [variants] - -> ``` -> kustomize build ~/ldap/overlays/staging | kubectl apply -f - -> kustomize build ~/ldap/overlays/production | kubectl apply -f - -> ``` - -也可以在 [kubectl-v1.14.0] 版，使用 ```kubectl``` 命令发布你的 [variants] 。 -> ``` -> kubectl apply -k ~/ldap/overlays/staging -> kubectl apply -k ~/ldap/overlays/production -> ``` - -#### 5) （可选）从上游更新 - -用户可以定期从上游 repo 中 [rebase] 他们的 [base] 以保证及时更新。 - -> ``` -> cd ~/ldap/base -> git fetch upstream -> git rebase upstream/master -> ``` diff --git a/site/config.toml b/site/config.toml index 87ee01d0e..0bf1376aa 100644 --- a/site/config.toml +++ b/site/config.toml @@ -61,6 +61,21 @@ languageName ="English" # Weight used for sorting. weight = 1 +[[menu.main]] + name = "Example" + weight = 50 + url = "https://github.com/kubernetes-sigs/kustomize/tree/master/examples" + +[languages.zh] +title = "Kustomize" +description = "自定义 Kubernetes 配置" +languageName ="简体中文" +contentDir = "content/zh" +time_format_default = "2006年01月02日" +time_format_blog = "2006年01月02日" +# Weight used for sorting. +weight = 2 + [markup] [markup.goldmark] [markup.goldmark.renderer] diff --git a/site/content/en/_index.md b/site/content/en/_index.md index ef84335db..fadfe6388 100644 --- a/site/content/en/_index.md +++ b/site/content/en/_index.md @@ -4,10 +4,27 @@ linkTitle = "Kustomize" +++ -{{% blocks/lead color="primary" %}} -Kustomize provides a solution for customizing Kubernetes resource configuration free from templates -and DSLs. -{{% /blocks/lead %}} +{{}} +
    +

    Kustomize provides a solution for customizing Kubernetes resource configuration free from templates +and DSLs.

    + + Get Started + + + Contribute + +
    + {{}} +
    +
    +{{    }} {{< blocks/section >}} @@ -18,5 +35,3 @@ New users are always welcome! {{< /blocks/section >}} - - diff --git a/site/content/en/api-reference/glossary/_index.md b/site/content/en/api-reference/glossary/_index.md index 5e1cf019f..c8ef2cf01 100644 --- a/site/content/en/api-reference/glossary/_index.md +++ b/site/content/en/api-reference/glossary/_index.md @@ -414,7 +414,7 @@ A chunk of code used by kustomize, but not necessarily compiled into kustomize, to generate and/or transform a kubernetes resource as part of a kustomization. -Details [here](plugins). +Details [here](../../guides/plugins). ## resource diff --git a/site/content/en/api-reference/kustomization/generatoroptions/_index.md b/site/content/en/api-reference/kustomization/generatoroptions/_index.md index 0229b5b04..064864f3a 100644 --- a/site/content/en/api-reference/kustomization/generatoroptions/_index.md +++ b/site/content/en/api-reference/kustomization/generatoroptions/_index.md @@ -11,7 +11,7 @@ description: > Additionally, generatorOptions can be set on a per resource level within each generator. For details on per-resource generatorOptions usage see -[field-name-configMapGenerator] and See [field-name-secretGenerator]. +[field-name-configMapGenerator](/kustomize/api-reference/kustomization/configmapgenerator) and See [field-name-secretGenerator](/kustomize/api-reference/kustomization/secretgenerator). ```yaml apiVersion: kustomize.config.k8s.io/v1beta1 diff --git a/site/content/en/guides/plugins/builtins.md b/site/content/en/guides/plugins/builtins.md index 5d18a7257..53b6e5a0d 100644 --- a/site/content/en/guides/plugins/builtins.md +++ b/site/content/en/guides/plugins/builtins.md @@ -287,11 +287,6 @@ commonLabels: Adds namespace to all resources -``` -namespace: my-namespace -``` -Adds namespace to all resources - ``` namespace: my-namespace ``` diff --git a/site/content/en/guides/plugins/execPluginGuidedExample.md b/site/content/en/guides/plugins/execPluginGuidedExample.md index 71f35ea52..4012d4e03 100644 --- a/site/content/en/guides/plugins/execPluginGuidedExample.md +++ b/site/content/en/guides/plugins/execPluginGuidedExample.md @@ -7,7 +7,7 @@ description: > --- This is a (no reading allowed!) 60 second copy/paste guided -example. Full plugin docs [here](README.md). +example. Full plugin docs [here](..). This demo writes and uses a somewhat ridiculous _exec_ plugin (written in bash) that generates a diff --git a/site/content/zh/_index.md b/site/content/zh/_index.md new file mode 100644 index 000000000..fc231c35d --- /dev/null +++ b/site/content/zh/_index.md @@ -0,0 +1,36 @@ ++++ +title = "Kustomize" +linkTitle = "Kustomize" + ++++ + + +{{}} +
    +

    TKustomize 提供了一种自定义 Kubernetes 资源配置的解决方案，该方案摆脱了模板和 DSL。

    + + Get Started + + + Contribute + +
    + {{}} +
    +
    +{{    }} + +{{< blocks/section >}} + + +{{% blocks/feature icon="fab fa-github" title="参与贡献" %}} +欢迎在 **Github** 提交 [RP](https://github.com/kubernetes-sigs/kustomize/pulls)，贡献你的力量。 +{{% /blocks/feature %}} + +{{< /blocks/section >}} diff --git a/site/content/zh/api-reference/_index.md b/site/content/zh/api-reference/_index.md new file mode 100644 index 000000000..bd8a2c631 --- /dev/null +++ b/site/content/zh/api-reference/_index.md @@ -0,0 +1,11 @@ +--- +title: "API 参考" +linkTitle: "API 参考" +type: docs +weight: 4 +menu: + main: + weight: 40 +description: > + Kustomize 客户端 API 参考。 +--- diff --git a/docs/zh/glossary.md b/site/content/zh/api-reference/glossary/_index.md similarity index 95% rename from docs/zh/glossary.md rename to site/content/zh/api-reference/glossary/_index.md index 65745543f..8737ee7bd 100644 --- a/docs/zh/glossary.md +++ b/site/content/zh/api-reference/glossary/_index.md @@ -1,8 +1,15 @@ -# 词汇表 +--- +title: "术语表" +linkTitle: "术语表" +type: docs +weight: 99 +description: > + 术语表 +--- [CRD spec]: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/ [CRD]: #custom-resource-definition -[DAM]: #声明式应用程序管理 +[DAM]: #declarative-application-management [Declarative Application Management]: https://github.com/kubernetes/community/blob/master/contributors/design-proposals/architecture/declarative-application-management.md [JSON]: https://www.json.org/ [JSONPatch]: https://tools.ietf.org/html/rfc6902 @@ -27,11 +34,11 @@ [patch]: #patch [patches]: #patch [patchJson6902]: #patchjson6902 -[patchExampleJson6902]: /examples/jsonpatch.md +[patchExampleJson6902]: https://github.com/kubernetes-sigs/kustomize/tree/master/examples/jsonpatch.md [patchesJson6902]: #patchjson6902 [proposal]: https://github.com/kubernetes/community/pull/1629 [rebase]: https://git-scm.com/docs/git-rebase -[资源]: #资源 +[resource]: #resource [resources]: #resource [root]: #kustomization-root [rpm]: https://en.wikipedia.org/wiki/Rpm_(software) @@ -40,7 +47,7 @@ [transformer]: #transformer [variant]: #variant [variants]: #variant -[workflow]: workflows.md +[workflow]: /kustomize/zh/guides ## 应用 @@ -50,7 +57,7 @@ [Kustomize] 对 Kubernetes 资源进行配置，其中描述的应用程序资源只是另一种普通的资源。 -## Apply +## apply **Apply** 这个动词在 Kubernetes 的上下文中，指的是一个 Kubernetes 命令以及能够对集群施加影响的进程内 [API 端点](https://goo.gl/UbCRuf)。 @@ -58,7 +65,7 @@ 集群把新提交的资源和之前提交的状态以及当前的实际状态进行合并，形成新的状态。这就是 Kubernetes 的状态管理过程。 -## Base +## base **Base** 指的是会被其它 [Kustomization] 引用的 [Kustomization]。 @@ -74,7 +81,7 @@ Base 和 [Overlay] 可以作为 Git 仓库中的唯一内容，用于简单的 [ 和**定制配置**关联的 [Workflow] 比关联到通用配置的 [Workflow] 要简单一些，原因是通用配置是共享的，需要周期性的跟踪他人作出的变更。 -## Custom resource definition +## custom resource definition 可以通过定制 CRD ([CRD spec]) 的方式对 Kubernetes API 进行扩展。 @@ -95,13 +102,9 @@ Kustomize 鼓励对声明式应用程序管理（[Declarative Application Manage ## 生成器 -生成器生成的资源，可以直接使用，也可以输出给转换器（[Transformer]）。 +生成器生成的资源，可以直接使用，也可以输出给转换器（[transformer]）。 -## GitOps - -一种 DevOps 或者 CICD 流程，这种流程以 Git 作为唯一的事实，并且在这种事实发生变化时采取措施（例如构建、测试和部署）。 - -## Kustomization +## gitops **Kustomization** 这个词可以指 `kustomization.yaml` 这个文件，更常见的情况是一个包含了 `kustomization.yaml` 及其所有直接引用文件的相对路径（所有不需要 URL 的本地数据）。 @@ -119,7 +122,7 @@ Kustomize 鼓励对声明式应用程序管理（[Declarative Application Manage - `transformer`：对前面提到的新旧资源进行**处理**的方式。示例字段：`namePrefix`、`nameSuffix`、`images`、`commonLabels`、`patchesJson6902` 等。在 v2.1 中还有更多的 `transformer`。 - `meta`：会对上面几种字段产生影响。示例字段：`vars`、`namespace`、`apiVersion`、`kind` 等。 -## Kustomization root +## kustomization root 直接包含 `kustomization.yaml` 文件的目录。 @@ -161,7 +164,7 @@ v2.1 中有一个特殊选项 `--load_restrictions none` 能够放宽这个限 `dev`、`prod` 以及 `staging` 是否依赖于 `base`，要根据 `kustomization.yaml` 具体判断。 -## Kubernetes +## kubernetes [Kubernetes](https://kubernetes.io) 是一个开源软件，为容器化应用提供了自动部署、伸缩和管理的能力。 @@ -173,7 +176,7 @@ v2.1 中有一个特殊选项 `--load_restrictions none` 能够放宽这个限 用 YAML 或者 JSON 文件表达一个对象，其中包含一些[必要字段]。`kind` 字段用于标识对象类型，`metadata/name` 字段用于区分实例，`apiVersion` 表示的是版本（如果有多个版本的话）。 -## Kustomize +## kustomize `kustomize` 是一个面向 Kubernetes 的命令行工具，用一种无模板、结构化的的方式为为声明式配置提供定制支持。 @@ -199,7 +202,7 @@ Kustomize 是 [DAM] 的一个实现。 用户可以用这个克隆回来的版本作为 [Base]，在此基础上定制 [Overlay] 来满足自身需求。 -## Overlay +## overlay `Overlay` 是一个 依赖于其它 Kustomization 的 Kustomization。 @@ -231,7 +234,7 @@ Overlay 可以作为其它 Overlay 的 Base。 在 Kustomize 中，`包`是没有意义的，Kustomize 并无意成为 [apt]、[rpm] 那样的传统包管理工具。 -## Patch +## patch 修改资源的通用指令。 @@ -261,7 +264,7 @@ SMP 看上去像个不完整的 Kubernetes 资源 YAML。SMP 中包含 `TypeMeta Kustomize 可以使用的一段代码，但是无需编译到 Kustomize 内部，可以作为 Kustomization 的一部分，生成或转换 Kubernetes 资源。 -[插件](../plugins)的细节。 +[插件](../../guides/plugins)的细节。 ## 资源 @@ -271,7 +274,7 @@ Kustomize 可以使用的一段代码，但是无需编译到 Kustomize 内部 或者说任何定义了[对象](https://kubernetes.io/docs/concepts/overview/working-with-objects/kubernetes-objects/#required-fields)的格式正确的 YAML 文件，其中包含了 `kind` 和 `metadata/name` 字段，都是资源。 -## Root +## root 参看 [kustomization root][root]. @@ -279,11 +282,11 @@ Kustomize 可以使用的一段代码，但是无需编译到 Kustomize 内部 不存在 `sub-xxx`，只有 [Base] 和 [Overlay]。 -## Target +## target `target` 是 `kustomize build` 的参数，例如： -> ``` +> ```bash > kustomize build $target > ``` @@ -293,7 +296,7 @@ Kustomize 可以使用的一段代码，但是无需编译到 Kustomize 内部 [Base] 或者 [Overlay] 都可以作为 `target`。 -## Transformer +## transformer 转换器能够修改资源，或者在 `kustomize build` 的过程中获取资源的信息。 diff --git a/site/content/zh/api-reference/kustomization/_index.md b/site/content/zh/api-reference/kustomization/_index.md new file mode 100644 index 000000000..29443fbff --- /dev/null +++ b/site/content/zh/api-reference/kustomization/_index.md @@ -0,0 +1,11 @@ +--- +title: "kustomization.yaml" +linkTitle: "kustomization.yaml" +type: docs +weight: 10 +description: > + kustomization.yaml fields and API +--- + + + diff --git a/site/content/zh/api-reference/kustomization/bases/_index.md b/site/content/zh/api-reference/kustomization/bases/_index.md new file mode 100644 index 000000000..eeb8abc8a --- /dev/null +++ b/site/content/zh/api-reference/kustomization/bases/_index.md @@ -0,0 +1,13 @@ +--- +title: "bases" +linkTitle: "bases" +type: docs +description: > + 在 Kustomization 目录中添加资源。 +--- + +{{% pageinfo color="warning" %}} +`bases` 字段在 v2.1.0 中已被弃用。 +{{% /pageinfo %}} + +该条目已被移动到 [resources](/kustomize/zh/api-reference/kustomization/resource) 字段中，其仍是[核心概念](/kustomize/zh/api-reference/kustomization/glossary#base)，这使得相对于其他输入资源 base 可以进行排序。 diff --git a/site/content/zh/api-reference/kustomization/commonannotations/_index.md b/site/content/zh/api-reference/kustomization/commonannotations/_index.md new file mode 100644 index 000000000..23ebe57e7 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/commonannotations/_index.md @@ -0,0 +1,56 @@ +--- +title: "commonAnnotations" +linkTitle: "commonAnnotations" +type: docs +description: > + 为所有字段添加注释。 +--- + +为所有资源添加注释，如果资源上已经存在注解键，该值将被覆盖。 + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +commonAnnotations: + oncallPager: 800-555-1212 +``` + +## Example + +### 输入文件 + +```yaml +# kustomization.yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +commonAnnotations: + oncallPager: 800-555-1212 + +resources: +- deploy.yaml +``` + +```yaml +# deploy.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: example +spec: + ... +``` + +### 构建输出 + +```yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: example + annotations: + oncallPager: 800-555-1212 +spec: + ... +``` diff --git a/site/content/zh/api-reference/kustomization/commonlabels/_index.md b/site/content/zh/api-reference/kustomization/commonlabels/_index.md new file mode 100644 index 000000000..ea20d9040 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/commonlabels/_index.md @@ -0,0 +1,99 @@ +--- +title: "commonLabels" +linkTitle: "commonLabels" +type: docs +description: > + 为所有资源和 selectors 增加标签。 +--- + +为所有资源和 selectors 增加标签。如果资源上已经存在注解键，该值将被覆盖。 + +{{% pageinfo color="warning" %}} +一旦将资源应用于集群，就不应更改诸如 Deployments 和 Services 之类的资源选择器。 + +将 commonLabels 更改为可变资源可能会导致部署失败。 +{{% /pageinfo %}} + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +commonLabels: + someName: someValue + owner: alice + app: bingo +``` + +## Example + +### 文件输入 + +```yaml +# kustomization.yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +commonLabels: + someName: someValue + owner: alice + app: bingo + +resources: +- deploy.yaml +- service.yaml +``` + +```yaml +# deploy.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: example +``` + +```yaml +# service.yaml +apiVersion: v1 +kind: Service +metadata: + name: example +``` + +### 构建输出 + +```yaml +apiVersion: v1 +kind: Service +metadata: + labels: + app: bingo + owner: alice + someName: someValue + name: example +spec: + selector: + app: bingo + owner: alice + someName: someValue +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: bingo + owner: alice + someName: someValue + name: example +spec: + selector: + matchLabels: + app: bingo + owner: alice + someName: someValue + template: + metadata: + labels: + app: bingo + owner: alice + someName: someValue +``` \ No newline at end of file diff --git a/site/content/zh/api-reference/kustomization/components/_index.md b/site/content/zh/api-reference/kustomization/components/_index.md new file mode 100644 index 000000000..7ba60f812 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/components/_index.md @@ -0,0 +1,9 @@ +--- +title: "components" +linkTitle: "components" +type: docs +description: > + Compose kustomizations. +--- + +*Coming soon* diff --git a/site/content/zh/api-reference/kustomization/configmapgenerator/_index.md b/site/content/zh/api-reference/kustomization/configmapgenerator/_index.md new file mode 100644 index 000000000..3a63beb12 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/configmapgenerator/_index.md @@ -0,0 +1,64 @@ +--- +title: "configMapGenerator" +linkTitle: "configMapGenerator" +type: docs +description: > + 生成 ConfigMap 资源. +--- + +列表中的每个条目都将生成一个 ConfigMap （合计可以生成 n 个 ConfigMap）。 + +下面的示例会生成 3 个ConfigMap：第一个带有给定文件的名称和内容，第二个将在 data 中添加 key/value，第三个通过 `options` 为单个 ConfigMap 设置注释和标签。 + +每个 configMapGenerator 项均接受的参数 `behavior: [create|replace|merge]`，这个参数允许修改或替换父级现有的 configMap。 + +此外，每个条目都有一个 `options` 字段，该字段具有与 kustomization 文件的 `generatorOptions` 字段相同的子字段。 + +`options` 字段允许用户为生成的实例添加标签和（或）注释，或者分别禁用该实例名称的哈希后缀。此处添加的标签和注释不会被 kustomization 文件 `generatorOptions` 字段关联的全局选项覆盖。但是如果全局 `generatorOptions` 字段指定 `disableNameSuffixHash: true`，其他 `options` 的设置将无法将其覆盖。 + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +# 这个标签将添加到所有的 ConfigMap 和 Secret 中。 +generatorOptions: + labels: + fruit: apple + +configMapGenerator: +- name: my-java-server-props + behavior: merge + files: + - application.properties + - more.properties +- name: my-java-server-env-vars + literals: + - JAVA_HOME=/opt/java/jdk + - JAVA_TOOL_OPTIONS=-agentlib:hprof + options: + disableNameSuffixHash: true + labels: + pet: dog +- name: dashboards + files: + - mydashboard.json + options: + annotations: + dashboard: "1" + labels: + app.kubernetes.io/name: "app1" +``` + +这里也可以[定义一个 key](https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-configmap/#define-the-key-to-use-when-creating-a-configmap-from-a-file) 来为文件设置不同名称。 + +下面这个示例会创建一个 ConfigMap，并将 `whatever.ini` 重命名为 `myFileName.ini`： + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +configMapGenerator: +- name: app-whatever + files: + - myFileName.ini=whatever.ini +``` \ No newline at end of file diff --git a/site/content/zh/api-reference/kustomization/crds/_index.md b/site/content/zh/api-reference/kustomization/crds/_index.md new file mode 100644 index 000000000..dad91a53f --- /dev/null +++ b/site/content/zh/api-reference/kustomization/crds/_index.md @@ -0,0 +1,34 @@ +--- +title: "crds" +linkTitle: "crds" +type: docs +description: > + 增加对 CRD 的支持。 +--- + +此列表中的每个条目都应该是自定义资源定义（CRD）文件的相对路径。 + +该字段的存在是为了让 kustomize 识别用户自定义的 CRD ，并对这些类型中的对象应用适当的转换。 + +典型用例：CRD 引用 ConfigMap 对象 + +在 kustomization 中，ConfigMap 对象名称可能会通过 `namePrefix` 、`nameSuffix` 或 `hashing` 来更改 CRD 对象中该 ConfigMap 对象的名称， +引用时需要以相同的方式使用 `namePrefix` 、 `nameSuffix` 或 `hashing` 来进行更新。 + +Annotations 可以放入 openAPI 的定义中： + +- "x-kubernetes-annotation": "" +- "x-kubernetes-label-selector": "" +- "x-kubernetes-identity": "" +- "x-kubernetes-object-ref-api-version": "v1", +- "x-kubernetes-object-ref-kind": "Secret", +- "x-kubernetes-object-ref-name-key": "name", + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +crds: +- crds/typeA.yaml +- crds/typeB.yaml +``` diff --git a/site/content/zh/api-reference/kustomization/generatoroptions/_index.md b/site/content/zh/api-reference/kustomization/generatoroptions/_index.md new file mode 100644 index 000000000..dbf487911 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/generatoroptions/_index.md @@ -0,0 +1,26 @@ +--- +title: "generatorOptions" +linkTitle: "generatorOptions" +type: docs +description: > + 控制生成 [ConfigMap](/kustomize/zh/api-reference/kustomization/configmapgenerator) 和 [Secret](/kustomize/zh/api-reference/kustomization/secretgenerator) 的行为。 +--- + +此外，在每个生成器中，还可以按每个资源级别设置 generatorOptions，具体使用方法请参见[configMapGenerator](/kustomize/zh/api-reference/kustomization/configmapgenerator)和[secretGenerator](/kustomize/zh/api-reference/kustomization/secretgenerator)。 + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +generatorOptions: + # labels to add to all generated resources + labels: + kustomize.generated.resources: somevalue + # annotations to add to all generated resources + annotations: + kustomize.generated.resource: somevalue + # disableNameSuffixHash is true disables the default behavior of adding a + # suffix to the names of generated resources that is a hash of + # the resource contents. + disableNameSuffixHash: true +``` diff --git a/site/content/zh/api-reference/kustomization/images/_index.md b/site/content/zh/api-reference/kustomization/images/_index.md new file mode 100644 index 000000000..e52a58b8d --- /dev/null +++ b/site/content/zh/api-reference/kustomization/images/_index.md @@ -0,0 +1,51 @@ +--- +title: "images" +linkTitle: "images" +type: docs +description: > + 修改镜像的名称、tag 或 image digest。 +--- + +修改镜像的名称、tag 或 image digest ，而无需使用 patches 。例如，对于这种 kubernetes Deployment 片段： + +```yaml +kind: Deployment +... +spec: + template: + spec: + containers: + - name: mypostgresdb + image: postgres:8 + - name: nginxapp + image: nginx:1.7.9 + - name: myapp + image: my-demo-app:latest + - name: alpine-app + image: alpine:3.7 +``` + +想要将 `image` 做如下更改： + + - 将 `postgres:8` 改为 `my-registry/my-postgres:v1` + - 将 nginx tag 从 `1.7.9` 改为 `1.8.0` + - 将镜像名称 `my-demo-app` 改为 `my-app` + - 将 alpine 的 tag `3.7` 改为 digest 值 + +只需在 *kustomization* 中添加以下内容： + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +images: +- name: postgres + newName: my-registry/my-postgres + newTag: v1 +- name: nginx + newTag: 1.8.0 +- name: my-demo-app + newName: my-app +- name: alpine + digest: sha256:24a0c4b4a4c0eb97a1aabb8e29f18e917d05abfe1b7a7c07857230879ce7d3d3 +``` diff --git a/site/content/zh/api-reference/kustomization/nameprefix/_index.md b/site/content/zh/api-reference/kustomization/nameprefix/_index.md new file mode 100644 index 000000000..eec58a800 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/nameprefix/_index.md @@ -0,0 +1,16 @@ +--- +title: "namePrefix" +linkTitle: "namePrefix" +type: docs +description: > + 为所有资源和引用的名称添加前缀。 +--- + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +namePrefix: alices- +``` + +deployment 名称从 `wordpress` 变为 `alices-wordpress`。 diff --git a/site/content/zh/api-reference/kustomization/namespace/_index.md b/site/content/zh/api-reference/kustomization/namespace/_index.md new file mode 100644 index 000000000..758084639 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/namespace/_index.md @@ -0,0 +1,16 @@ +--- +title: "namespace" +linkTitle: "namespace" +type: docs +description: > + 为所有资源添加 namespace。 +--- + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +namespace: my-namespace +``` + +如果在资源上设置了现有 namespace，则将覆盖现有 namespace；如果在资源上未设置现有 namespace，则使用现有 namespace。 diff --git a/site/content/zh/api-reference/kustomization/namesuffix/_index.md b/site/content/zh/api-reference/kustomization/namesuffix/_index.md new file mode 100644 index 000000000..a01bec474 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/namesuffix/_index.md @@ -0,0 +1,18 @@ +--- +title: "nameSuffix" +linkTitle: "nameSuffix" +type: docs +description: > + 为所有资源和引用的名称添加后缀。 +--- + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +nameSuffix: -v2 +``` + +deployment 名称从 `wordpress` 变为 `wordpress-v2`。 + +**注意:** 如果资源类型是 ConfigMap 或 Secret，则在哈希值之前添加后缀。 diff --git a/site/content/zh/api-reference/kustomization/patches/_index.md b/site/content/zh/api-reference/kustomization/patches/_index.md new file mode 100644 index 000000000..d434fdf94 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/patches/_index.md @@ -0,0 +1,47 @@ +--- +title: "patches" +linkTitle: "patches" +type: docs +description: > + Patch resources +--- + +[strategic merge]: /kustomize/zh/api-reference/glossary#patchstrategicmerge +[JSON]: /kustomize/zh/api-reference/glossary#patchjson6902 + + +Patches 在资源上添加或覆盖字段，Kustomization 使用 `patches` 字段来提供该功能。 + +`patches` 字段包含要按指定顺序应用的 patch 列表。 + +patch 可以: + +- 是一个 [strategic merge] patch，或者是一个 [JSON] patch。 +- 也可以是 patch 文件或 inline string +- 针对单个资源或多个资源 + +目标选择器可以通过 group、version、kind、name、namespace、标签选择器和注释选择器来选择资源，选择一个或多个匹配所有**指定**字段的资源来应用 patch。 + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +patches: +- path: patch.yaml + target: + group: apps + version: v1 + kind: Deployment + name: deploy.* + labelSelector: "env=dev" + annotationSelector: "zone=west" +- patch: |- + - op: replace + path: /some/existing/path + value: new value + target: + kind: MyKind + labelSelector: "env=dev" +``` + +patch 目标选择器的 `name` 和 `namespace` 字段是自动锚定的正则表达式。这意味着 `myapp` 的值相当于 `^myapp$`。 diff --git a/site/content/zh/api-reference/kustomization/patchesStrategicMerge/_index.md b/site/content/zh/api-reference/kustomization/patchesStrategicMerge/_index.md new file mode 100644 index 000000000..6586b6fb5 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/patchesStrategicMerge/_index.md @@ -0,0 +1,44 @@ +--- +title: "patchesStrategicMerge" +linkTitle: "patchesStrategicMerge" +type: docs +description: > + 使用 strategic merge patch 标准 Patch resources. +--- + +此列表中的每个条目都应可以解析为 [StrategicMergePatch](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-api-machinery/strategic-merge-patch.md). + +这些（也可能是部分的）资源文件中的 name 必须与已经通过 `resources` 加载的 name 字段匹配，或者通过 `bases` 中的 name 字段匹配。这些条目将用于 _patch_（修改）已知资源。 + +推荐使用小的 patches，例如：修改内存的 request/limit，更改 ConfigMap 中的 env 变量等。小的 patches 易于维护和查看，并且易于在 overlays 中混合使用。 + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +patchesStrategicMerge: +- service_port_8888.yaml +- deployment_increase_replicas.yaml +- deployment_increase_memory.yaml +``` + +patch 内容也可以是一个inline string： +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +patchesStrategicMerge: +- |- + apiVersion: apps/v1 + kind: Deployment + metadata: + name: nginx + spec: + template: + spec: + containers: + - name: nginx + image: nignx:latest +``` + +请注意，kustomize 不支持同一个 patch 对象中包含多个 _删除_ 指令。要从一个对象中删除多个字段或切片元素，需要创建一个单独的 patch，以执行所有需要的删除。 diff --git a/site/content/zh/api-reference/kustomization/patchesjson6902/_index.md b/site/content/zh/api-reference/kustomization/patchesjson6902/_index.md new file mode 100644 index 000000000..650d4477f --- /dev/null +++ b/site/content/zh/api-reference/kustomization/patchesjson6902/_index.md @@ -0,0 +1,68 @@ +--- +title: "patchesJson6902" +linkTitle: "patchesJson6902" +type: docs +description: > + 使用 [json 6902 标准](https://tools.ietf.org/html/rfc6902) Patch resources +--- + +patchesJson6902 列表中的每个条目都应可以解析为 kubernetes 对象和将应用于该对象的 [JSON patch](https://tools.ietf.org/html/rfc6902)。 + +目标字段指向的 kubernetes 对象的 group、 version、 kind、 name 和 namespace 在同一 kustomization 内 path 字段内容是 JSON patch 文件的相对路径。 + +patch 文件中的内容可以如下这种 JSON 格式： + +```json + [ + {"op": "add", "path": "/some/new/path", "value": "value"}, + {"op": "replace", "path": "/some/existing/path", "value": "new value"} + ] + ``` + +也可以使用 YAML 格式表示： + +```yaml +- op: add + path: /some/new/path + value: value +- op: replace + path: /some/existing/path + value: new value +``` + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +patchesJson6902: +- target: + version: v1 + kind: Deployment + name: my-deployment + path: add_init_container.yaml +- target: + version: v1 + kind: Service + name: my-service + path: add_service_annotation.yaml +``` + +patch 内容也可以是一个inline string： + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +patchesJson6902: +- target: + version: v1 + kind: Deployment + name: my-deployment + patch: |- + - op: add + path: /some/new/path + value: value + - op: replace + path: /some/existing/path + value: "new value" +``` diff --git a/site/content/zh/api-reference/kustomization/replicas/_index.md b/site/content/zh/api-reference/kustomization/replicas/_index.md new file mode 100644 index 000000000..a403f3c84 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/replicas/_index.md @@ -0,0 +1,39 @@ +--- +title: "replicas" +linkTitle: "replicas" +type: docs +description: > + 修改资源的副本数。 +--- + +对于如下 kubernetes Deployment 片段： + +```yaml +# deployment.yaml +kind: Deployment +metadata: + name: deployment-name +spec: + replicas: 3 +``` + +在 kustomization 中添加以下内容，将副本数更改为 5： + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +replicas: +- name: deployment-name + count: 5 +``` + +该字段内容为列表，所以可以同时修改许多资源。 + +由于这个声明无法设置 `kind:` 或 `group:`，所以他只能匹配如下资源中的一种： +- `Deployment` +- `ReplicationController` +- `ReplicaSet` +- `StatefulSet` + +对于更复杂的用例，请使用 patch 。 \ No newline at end of file diff --git a/site/content/zh/api-reference/kustomization/resources/_index.md b/site/content/zh/api-reference/kustomization/resources/_index.md new file mode 100644 index 000000000..d39077172 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/resources/_index.md @@ -0,0 +1,30 @@ +--- +title: "resources" +linkTitle: "resources" +type: docs +description: > + 包含的资源。 +--- + +该条目可以是指向本地目录的相对路径，也可以是指向远程仓库中的目录的 URL，例如： +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: +- myNamespace.yaml +- sub-dir/some-deployment.yaml +- ../../commonbase +- github.com/kubernetes-sigs/kustomize/examples/multibases?ref=v1.0.6 +- deployment.yaml +- github.com/kubernets-sigs/kustomize/examples/helloWorld?ref=test-branch +``` + +将以深度优先的顺序读取和处理资源。 + +文件应包含 YAML 格式的 k8s 资源。一个资源描述文件可以含有多个由（`---`）分隔的资源。 +应该包含 `resources` 字段的 kustomization 文件的指定文件目录的相对路径。 + +[hashicorp URL]: https://github.com/hashicorp/go-getter#url-format + +目录规范可以是相对、绝对或部分的 URL。URL 规范应遵循 [hashicorp URL] 格式。该目录必须包含 `kustomization.yaml` 文件。 diff --git a/site/content/zh/api-reference/kustomization/secretegenerator/_index.md b/site/content/zh/api-reference/kustomization/secretegenerator/_index.md new file mode 100644 index 000000000..8b1961607 --- /dev/null +++ b/site/content/zh/api-reference/kustomization/secretegenerator/_index.md @@ -0,0 +1,44 @@ +--- +title: "secretGenerator" +linkTitle: "secretGenerator" +type: docs +description: > + 生成 Secret 资源。 +--- + +列表中的每个条目都将生成一个 Secret（合计可以生成 n 个 Secrets）。 + +功能与之前描述的 [configMapGenerator](/kustomize/zh/api-reference/kustomization/configmapgenerator) 字段类似。 + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +secretGenerator: +- name: app-tls + files: + - secret/tls.cert + - secret/tls.key + type: "kubernetes.io/tls" +- name: app-tls-namespaced + # you can define a namespace to generate + # a secret in, defaults to: "default" + namespace: apps + files: + - tls.crt=catsecret/tls.cert + - tls.key=secret/tls.key + type: "kubernetes.io/tls" +- name: env_file_secret + envs: + - env.txt + type: Opaque +- name: secret-with-annotation + files: + - app-config.yaml + type: Opaque + options: + annotations: + app_config: "true" + labels: + app.kubernetes.io/name: "app2" +``` diff --git a/site/content/zh/api-reference/kustomization/vars/_index.md b/site/content/zh/api-reference/kustomization/vars/_index.md new file mode 100644 index 000000000..de6d17e8d --- /dev/null +++ b/site/content/zh/api-reference/kustomization/vars/_index.md @@ -0,0 +1,65 @@ +--- +title: "vars" +linkTitle: "vars" +type: docs +description: > + Substitute name references. +--- + +Vars 用于从一个 resource 字段中获取值，并将该值插入指定位置 - 反射功能。 + +例如，假设需要在容器的 command 中指定了 Service 对象的名称，并在容器的 env 中指定了 Secret 对象的名称来确保以下内容可以正常工作： + +```yaml + +containers: + - image: myimage + command: ["start", "--host", "$(MY_SERVICE_NAME)"] + env: + - name: SECRET_TOKEN + value: $(SOME_SECRET_NAME) +``` + +则可以在 `vars：` 中添加如下内容： + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +vars: +- name: SOME_SECRET_NAME + objref: + kind: Secret + name: my-secret + apiVersion: v1 +- name: MY_SERVICE_NAME + objref: + kind: Service + name: my-service + apiVersion: v1 + fieldref: + fieldpath: metadata.name +- name: ANOTHER_DEPLOYMENTS_POD_RESTART_POLICY + objref: + kind: Deployment + name: my-deployment + apiVersion: apps/v1 + fieldref: + fieldpath: spec.template.spec.restartPolicy +``` + +var 是包含该对象的变量名、对象引用和字段引用的元组。 + +字段引用是可选的，默认为 `metadata.name`，这是正常的默认值，因为 kustomize 用于生成或修改 resources 的名称。 + +在撰写本文档时，仅支持字符串类型字段，不支持 ints，bools，arrays 等。例如，在某些pod模板的容器编号2中提取镜像的名称是不可能的。 + +变量引用，即字符串 '$(FOO)' ，只能放在 kustomize 配置指定的特定对象的特定字段中。 + +关于 vars 的默认配置数据可以查看： +[/api/konfig/builtinpluginconsts/varreference.go](/api/konfig/builtinpluginconsts/varreference.go) + +默认目标是所有容器 command args 和 env 字段。 + +Vars _不应该_ 被用于 kustomize 已经处理过的配置中插入 names 。 +例如， Deployment 可以通过 name 引用 ConfigMap ，如果 kustomize 更改 ConfigMap 的名称，则知道更改 Deployment 中的引用的 name 。 diff --git a/site/content/zh/blog/_index.md b/site/content/zh/blog/_index.md new file mode 100644 index 000000000..0feb14e98 --- /dev/null +++ b/site/content/zh/blog/_index.md @@ -0,0 +1,7 @@ +--- +title: "Kustomize 博客" +linkTitle: "博客" +menu: + main: + weight: 80 +--- diff --git a/site/content/zh/blog/releases/_index.md b/site/content/zh/blog/releases/_index.md new file mode 100644 index 000000000..ffae15b86 --- /dev/null +++ b/site/content/zh/blog/releases/_index.md @@ -0,0 +1,6 @@ +--- +title: "New Releases" +linkTitle: "Releases" +weight: 20 +--- + diff --git a/site/content/zh/blog/releases/v1.0.1.md b/site/content/zh/blog/releases/v1.0.1.md new file mode 100644 index 000000000..5db89d72d --- /dev/null +++ b/site/content/zh/blog/releases/v1.0.1.md @@ -0,0 +1,22 @@ +--- +title: "v1.0.1" +linkTitle: "v1.0.1" +date: 2018-05-21 +description: > + Kustomize v1.0.1 +--- + +Initial release after move from github.com/kubernetes/kubectl to github.com/kubernetes-sigs/kustomize. + +History + + * May 2018: v1.0 after move to github.com/kubernetes-sigs/kubectl + from github.com/kubernetes/kubectl. + Has kustomization file, bases, overlays, basic transforms. + * Apr 2018: s/kinflate/kustomize/, s/manifest/kustomization/ + * Oct 2017: s/kexpand/kinflate/ + * Sep 2017: kexpand [starts](https://github.com/kubernetes/kubectl/pull/65) + in github.com/kubernetes/kubectl + * Aug 2017: [DAM] authored by Brian Grant + +[DAM]: https://docs.google.com/document/d/1cLPGweVEYrVqQvBLJg6sxV-TrE5Rm2MNOBA_cxZP2WU diff --git a/site/content/zh/blog/releases/v2.0.0.md b/site/content/zh/blog/releases/v2.0.0.md new file mode 100644 index 000000000..bc4bd4780 --- /dev/null +++ b/site/content/zh/blog/releases/v2.0.0.md @@ -0,0 +1,137 @@ +--- +title: "v2.0.0" +linkTitle: "v2.0.0" +date: 2019-02-05 +description: > + Kustomize v2.0.0 +--- + +[security concern]: https://docs.google.com/document/d/1FYgLVdq-siB_Cef9yuQBmit0PbrE8lsyTBdGI2eA2y8/edit + +After security review, a field used in secret +generation (see below) was removed from the +definition of a kustomization file with no +mechanism to convert it to a new form. Also, the +set of files accessible from a kustomization file +has been further constrained. + +Per the [versioning policy](/kustomize/faq/versioningpolicy), +backward incompatible changes trigger an increment +of the major version number, hence we go +from 1.0.11 to 2.0.0. We're taking this major +version increment opportunity to remove some +already deprecated fields, and the code paths +associated with them. + +## Backward Incompatible Changes + +### Kustomization Path Constraints + +A kustomization file can specify paths to other +files, including resources, patches, configmap +generation data, secret generation data and +bases. In the case of a base, the path can be a +git URL instead. + +In 1.x, these paths had to be relative to the +current kustomization directory (the location of +the kustomization file used in the `build` +command). + +In 2.0, bases can continue to specify, via +relative paths, kustomizations outside the current +kustomization directory. But non-base paths are +constrained to terminate in or below the current +kustomization directory. Further, bases specified +via a git URL may not reference files outside of +the directory used to clone the repository. + +### Kustomization Field Removals + +#### patches + +`patches` was deprecated and replaced by +`patchesStrategicMerge` when `patchesJson6902` was +introduced. In Kustomize 2.0.0, `patches` is +removed. Please use `patchesStrategicMerge` +instead. + +#### imageTags + +`imageTags` is replaced by `images` since `images` +can provide more features to change image names, +registries, tags and digests. + +#### secretGenerator/commands + +`commands` is removed from SecretGenerator due to +a [security concern]. One can use `files` or +`literals`, similar to ConfigMapGenerator, to +generate a secret. + +``` +secretGenerator: +- name: app-tls + files: + - secret/tls.cert + - secret/tls.key + type: "kubernetes.io/tls" +``` + +## Compatible Changes (New Features) + +As this release is triggered by a security change, +there are no major new features to announce. A few +things that are worth mentioning in this release +are: + +* More than _40_ issues closed since 1.0.11 + release (including many extensions to + transformation rules). + +* Users can run `kustomize edit fix` to migrate a + kustomization file working with previous + versions to one working with 2.0.0. For example, + a kustomization.yaml with following content + + ``` + patches: + - deployment-patch.yaml + imageTags: + - name: postgres + newTag: v1 + ``` + + will be converted to + + ``` + apiVersion: kustomize.config.k8s.io/v1beta1 + kind: Kustomization + patchesStrategicMerge: + - deployment-patch.yaml + images: + - name: postgres + newTag: v1 + ``` + +* Kustomization filename + + In previous versions, the name of a + kustomization file had to be + `kustomization.yaml`. + Kustomize allows `kustomization.yaml`, + `kustomization.yml` and + `Kustomization`. In a directory, only one of + those filenames is allowed. If there are more + than one found, Kustomize will exit with an + error. Please select the best filename for your + use cases. + +* Cancelled plans to deprecate applying prefix/suffix to namespace. + The deprecation warning + + ``` + Adding nameprefix and namesuffix to Namespace resource will be deprecated in next release. + ``` + + was removed. diff --git a/site/content/zh/blog/releases/v2.1.0.md b/site/content/zh/blog/releases/v2.1.0.md new file mode 100644 index 000000000..5133ac3ca --- /dev/null +++ b/site/content/zh/blog/releases/v2.1.0.md @@ -0,0 +1,249 @@ +--- +title: "v2.1.0" +linkTitle: "v2.1.0" +date: 2019-06-18 +description: > + Kustomize v2.1.0 +--- + +[Go modules]: https://github.com/golang/go/wiki/Modules +[generator options]: https://github.com/kubernetes-sigs/kustomize/tree/master/examples/generatorOptions.md +[imgModules]: /kustomize/images/goModules.png +[imgPlugins]: /kustomize/images/plugins.png +[imgPruning]: /kustomize/images/pruning.png +[imgSorted]: /kustomize/images/sorted.png +[imgWheels]: /kustomize/images/abandonedTrainingWheels.png +[kustomization]: glossary#kustomization +[_kustomization_]: /kustomize/api-reference/glossary#kustomization +[base]: /kustomize/api-reference/glossary#base +[bases]: /kustomize/api-reference/glossary#base +[_base_]: /kustomize/api-reference/glossary#base +[kustomize inventory object documentation]: https://github.com/kubernetes-sigs/kustomize/tree/master/docs/inventory_object.md +[kustomize plugin documentation]: plugins +[root]: /kustomize/api-reference/glossary#kustomization-root +[transformer configs]: https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs +[v1.0.9]: https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9 +[v2.0.3]: https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.0.3 +[v2.1.0]: https://github.com/kubernetes-sigs/kustomize/releases/tag/v1.0.9releases/tag/v2.1.0 +[versioning policy]: /kustomize/faq/versioningpolicy + +Go modules, resource ordering respected, generator and transformer plugins, eased +loading restrictions, the notion of inventory, eased replica count modification. +About ~90 issues closed since [v2.0.3] in ~400 commits. + +Download [here][v2.1.0]. + +## Go modules + +![gopher with boxes][imgModules] + +Kustomize now defines its dependencies in a top +level `go.mod` file. This is the first step +towards a package structure intentially exported +as one or more [Go modules] for use in other +programs (kubectl, kubebuilder, etc.) and in +kustomize plugins (see below). + +## Resource ordering + +![sort order retained][imgSorted] + +Kustomize now retains the depth-first order of +resources as read, a frequently requested +feature. + +This means resource order can be controlled +by editting kustomization files. This is +also vital to applying user-defined +transformations (plugins) in a particular +order. + +Nothing needs to be done to activate this; +it happens automatically. + +The `build` command now accepts a `--reorder` +flag with values `legacy` and `none`, +with a default value of `legacy`. + +`legacy` means apply an ordering based on +GVK, that currently emits `Namespace` objects +first, and `ValidatingWebhookConfiguration` +objects last. This means that despite +automatic retention of load order, your +`build` output won't change by default. + +`none` means _don't_ reorder the resources before +output. Specify this to see output order +respect input order. + +## Generator and transformer plugins + +![kid putting knife in electrical outlet][imgPlugins] + +Since the beginning (as `kinflate` back in Sep +2017), kustomize has read or generated resources, +applied a series of pipelined transformation to +them, and emitted the result to `stdout`. + +At that time, the only way to change the behavior +of a generator (e.g. a secret generator), or +change the behavior of a transformer (e.g. a name +changer, or json patcher), was to modify source +code and put out a release. + +[v1.0.9] introduced [generator options] as a means +to change the behavior of the only two generators +available at the time - Secret and ConfigMap +generators. It also introduced +[transformer configs] as a way to fine tune the +targets of transformations (e.g. to which fields +_selectors_ should be added). Most of the feature +requests for kustomize revolve around changing the +behavior of the builtin generators and +transformers. + +[v2.1.0] adds an _alpha_ plugin framework, that +encourages users to write their own generators or +transformers, _declaring them as kubernetes +objects just like everything else_, and apply them +as part of the `kustomize build` process. + +To inform the API exposed to plugins, and to +confirm that the plugin framework can offer plugin +authors the same capabilities as builtin +operations, all the builtin generators and +tranformers have been converted to plugin form +(with one exceptions awaiting Go module +refinements). This means that adding, say, a +`secretGenerator` or `commonAnnotations` directive +to your kustomization will (in [v2.1.0]) trigger +execution of +[code committed as a plugin](https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/builtin). + +For more information, see the +[kustomize plugin documentation]. + +## Remove load restrictions + +![removed training wheels][imgWheels] + +The following usage: + +``` +kustomize build --load_restrictor none $target +``` + +allows a `kustomization.yaml` file used in this +build to refer to files outside its own directory +(i.e. outside its [root]). + +This is an opt-in to suppress a security feature +that denies this precise behavior. + +This feature should only be used to allow multiple +overlays (e.g. prod, staging and dev) to share a +patch file. To share _resources_, use a relative +path or URL to a kustomization directory in the +`resources` directive. + +## Inventory generation for pruning + +![pruning dead branches][imgPruning] + +_Alpha_ + +Users can add an `inventory` stanza to their +kustomization file, to add a special _inventory +object_ to the `build` result. + +This object applies to the cluster along with +everything else in the build result and can be +used by other clients to intelligently _prune_ +orphaned cluster resources. + +For more information see the +[kustomize inventory object documentation]. + + +## Field changes / deprecations + +### `resources` expanded, `bases` deprecated + +The `resources` field has been generalized; it now +accepts what formerly could only be specified in +the `bases` field. + +This change was made to allow users fine control +over resource processing order. With a distinct +`bases` field, bases had to be loaded separately +from resources as a group. Now, base loading may +be interleaved as desired with the loading of +resource files from the current +directory. [Resource ordering](#resource-ordering) +had to be respected before this feature could be +introduced. + +The `bases` field is now deprecated, and will be +deleted in some future major release. Manage the +deprecation simply moving the arguments of the +`bases` field to the `resources` field in the +desired order, e.g. + +> ``` +> resources: +> - someResouceFile.yaml +> - someOtherResourceFile.yaml +> bases: +> - ../../someBaseDir +> ``` + +could become + +> ``` +> resources: +> - someResouceFile.yaml +> - ../../someBaseDir +> - someOtherResourceFile.yaml +> ``` + +The `kustomized edit fix` command will do this for +you, though it will always put the bases at the +end. + +As an aside, the `resources`, `generators` and +`transformers` fields now all accept the same +argument format. + +> Each field's argument is a _string list_, +> where each entry is either a _resource_ (a +> relative path to a YAML file) or a +> [_kustomization_] (a path or URL +> pointing to a directory with a kustomization +> file). A kustomization directory used in this +> context is called a [_base_]. + +The fact that the `generators` and `transformers` +field accept [bases] and the fact that generator +and transformer configuration objects are just +normal k8s resources means that one can generate +or transform a generator or a transformer (see +[TestTransformerTransformers]). + +[TestTransformerTransformers]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/internal/target/transformerplugin_test.go + +### `replicas` field + +The common task of patching a deployment to edit +the number of replicas is now made easier +with the new [replicas](/kustomize/api-reference/kustomization/replicas) field. + +### `envs` field + +An `envs` sub-field has been added to both +`configMapGenerator` and `secretGenerator`, +replacing the now deprecated (and singular) +`env` field. The new field accepts lists, just +like its sibling fields `files` and `literals`. + +Optionally use `kustomize edit fix` to merge +singular `env` field into a plural field. diff --git a/site/content/zh/blog/releases/v3.0.0.md b/site/content/zh/blog/releases/v3.0.0.md new file mode 100644 index 000000000..fe5bd783f --- /dev/null +++ b/site/content/zh/blog/releases/v3.0.0.md @@ -0,0 +1,75 @@ +--- +title: "v3.0.0" +linkTitle: "v3.0.0" +date: 2019-07-03 +description: > + Kustomize v3.0.0 +--- + +This release is basically [v2.1.0](v2.1.0.md), +with many post-v2.1.0 bugs fixed (in about 150 +commits) and a `v3` in Go package paths. + +[plugin]: /docs/plugins + +The major version increment to `v3` puts a new +floor on a stable API for [plugin] developers +(both _Go_ plugin developers and _exec_ plugin +developers who happen to use Go). + +### Why so soon after v2.1.0? + +[semantic versioning]: https://semver.org +[Go modules doc]: https://github.com/golang/go/wiki/Modules#releasing-modules-v2-or-higher +[versioning policy]: /kustomize/faq/versioningpolicy + +We made a mistake - v2.1.0 should have been +v3.0.0. Per the [Go modules doc] (which have +improved a great deal recently), a release that's +already tagged v2 or higher should increment the +major version when performing their first Go +module-based release. + +This advice applies to kustomize, since it was +already at major version 2 when it began using Go +modules to state _its own_ dependencies in v2.1.0. + +But the more important reason for `v3` is a change +to the kustomize [versioning policy], forced by +the introduction of plugins. + +Historically, kustomize's [versioning policy] +didn't involve Go modules and addressed _only_ the +command line tool's behavior and the fields in a +kustomization file. The underlying packages were +an implementation detail, not under semantic +versioning, because they weren't intended for +export (and should have all been under +`internal`). Thus although the v2.1.0 CLI is +backward compatible with v2.0.3, the underlying +package APIs are not. + +[minimal version selection]: https://research.swtch.com/vgo-mvs + +With Go modules, the `go` tool must assume that Go +packages respect [semantic versioning], so it can +perform [minimal version selection]. + +With the introduction of alpha plugins, kustomize +sub-packages - in particular `loader` and +`resmap` - become part of an API formally exposed +to plugin authors, and so must be semantically +versioned. This allows plugins defined in other +repositories to clarify that they depend on +kustomize v3.0.0, and not see confusing errors +arising from incompatibilities between v2.1.0 and +v2.0.3. Hence, the jump to v3. + +Aside - the set of kustomize packages outside +`internal` is too large, and over time, informed +by package use, this API surface must shrink. +Such shrinkage will trigger a major version +increment. + + + diff --git a/site/content/zh/blog/releases/v3.1.0.md b/site/content/zh/blog/releases/v3.1.0.md new file mode 100644 index 000000000..626b6f9f1 --- /dev/null +++ b/site/content/zh/blog/releases/v3.1.0.md @@ -0,0 +1,132 @@ +--- +title: "v3.1.0" +linkTitle: "v3.1.0" +date: 2019-07-26 +description: > + Kustomize v3.1.0 +--- + +## Extended patches +Since this version, Kustomize allows applying one patch to multiple resources. This works for both Strategic Merge Patch and JSON Patch. Take a look at [patch multiple objects](https://github.com/kubernetes-sigs/kustomize/tree/master/examples/patchMultipleObjects.md). + +## Improved Resource Matching + +Multiple improvements have been made to allow the user to leverage "namespace" +instead/or with "name suffix/prefix" to segregate resources. + +### Patch resolution improvement + +The following example demonstrates how using the namespace field in the patch definition, +will let the user define two different patches against two different Deployment having the +same "deploy1" name but in different namespaces in the same Kustomize context/folder. +Unless the `namespace:` field has been specified in the kustomization.yaml, no namespace +value will be handled as Kubernetes `default` namespace. + +```yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 + namespace: main +spec: + template: + spec: + containers: + - name: nginx + env: + - name: ANOTHERENV + value: TESTVALUE +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 + namespace: production +spec: + template: + spec: + containers: + - name: main + env: + - name: ANOTHERENV + value: PRODVALUE +``` + + +### Variable resolution improvement + +It is possible to add namespace field to the variable declaration. In the following example, +two `Service` objects with the same `elasticsearch` name have been declared. +Specifying the namespace in the objRef of the corresponding varriables, allows Kustomize to +resovlve thoses variables. +If the namespace is not specified, Kustomize will handle it has a "wildcard" value. + +Extract of kustomization.yaml: + +```yaml +vars: +- name: elasticsearch-test-protocol + objref: + kind: Service + name: elasticsearch + namespace: test + apiVersion: v1 + fieldref: + fieldpath: spec.ports[0].protocol +- name: elasticsearch-dev-protocol + objref: + kind: Service + name: elasticsearch + namespace: dev + apiVersion: v1 + fieldref: + fieldpath: spec.ports[0].protocol + +``` + +### Simultaneous change of names and namespaces + +Kustomize is now able to deal with simultaneous changes of name and namespace. +Special attention has been paid the handling of: +- ClusterRoleBinding/RoleBinding "subjects" field, +- ValidatingWebhookConfiguration "webhooks" field. + +The user should be able to use a kustomization.yaml as shown in the example bellow +even if ClusterRoleBind,RoleBinding and ValidatingWebookConfiguration are part of the +resources he needs to declare. + +Extract of kustomization.yaml: + +```yaml +namePrefix: pfx- +nameSuffix: -sfx +namespace: testnamespace + +resources: +... +``` + +### Resource and Kustomize Context matching. + +Kustomize is now able to support more aggregation patterns. + +If for instance, the top level of kustomization.yaml, is simply +combining sub-components, (as in the following example), Kustomize has improved +resource matching capabilities. This removes some of the constraints which were +present on the utilization of prefix/suffix and namespace transformers in the +individual components. + +```yaml +resources: +- ../component1 +- ../component2 +- ../component3 +``` + +## Other improvements + +- Image transformation has been improved. This allows the user to update the sha256 of + an image with another sha256. +- Multiple default transformer configuration entries have been added, removing the need for the + user to add them as part of the `configurations:` section of the kustomization.yaml. +- `kustomize` help command has been tidied up. diff --git a/site/content/zh/blog/releases/v3.2.0.md b/site/content/zh/blog/releases/v3.2.0.md new file mode 100644 index 000000000..805276b43 --- /dev/null +++ b/site/content/zh/blog/releases/v3.2.0.md @@ -0,0 +1,34 @@ +--- +title: "v3.2.0" +linkTitle: "v3.2.0" +date: 2019-09-17 +description: > + Kustomize v3.2.0 +--- + +## Inline Patch +Since this version, Kustomize allows inline patches in all three of `patchesStrategicMerge`, `patchesJson6902` and `patches`. Take a look at [inline patch](https://github.com/kubernetes-sigs/kustomize/tree/master/examples/examples/inlinePatch.md). + +## New Subcommand + +Since this version, one can create a kustomization.yaml file in a directory through a `create` subcommand. + +Create a new overlay from the base ../base +``` +kustomize create --resources ../base +``` + +Create a new kustomization detecing resources in the current directory +``` +kustomize create --autodetect +``` + +Once can also add all resources in the current directory recursively by + +``` +kustomize create --autodetect --recursive +``` + +### New Example Generator +A new example generator of using go-getter to download resources is added. Take a look at [go-getter generator](https://github.com/kubernetes-sigs/kustomize/tree/master/examples/goGetterGeneratorPlugin.md). + diff --git a/site/content/zh/blog/releases/v3.2.1.md b/site/content/zh/blog/releases/v3.2.1.md new file mode 100644 index 000000000..3daa2b2d3 --- /dev/null +++ b/site/content/zh/blog/releases/v3.2.1.md @@ -0,0 +1,19 @@ +--- +title: "v3.2.1" +linkTitle: "v3.2.1" +date: 2019-09-26 +description: > + Kustomize v3.2.1 +--- + +This is a patch release, with no new features from 3.2.0. + +It reflects a change in dependence. + +The kustomize binary is now built as a client, with no special +consideration, of the set of public packages represented by the Go +module at [https://github.com/kubernetes-sigs/kustomize]. + +kustomize the binary is now a client of the kustomize API +represented by the public package surface presented by +`https://github.com/kubernetes-sigs/kustomize/v{whatever}` diff --git a/site/content/zh/blog/releases/v3.3.0.md b/site/content/zh/blog/releases/v3.3.0.md new file mode 100644 index 000000000..f997ee337 --- /dev/null +++ b/site/content/zh/blog/releases/v3.3.0.md @@ -0,0 +1,121 @@ +--- +title: "v3.3.0" +linkTitle: "v3.3.0" +date: 2019-10-24 +description: > + Kustomize v3.3.0 +--- + + +[versioning policy documentation]: /site/content/en/faq/versioningPolicy.md +[release process documentation]: /releasing + +## Summary of changes + +### First release of the Go API-only module. + +Many of the PRs since the last vrelease were +around restructuring the _sigs.k8s.io/kustomize_ +repository into three Go modules instead of just one. + +The reasons for this are detailed in the [versioning +policy documentation], and what it means for releasing +is explained in the [release process documentation]. + +The tl;dr is that the top level module +`sigs.k8s.io/kustomize` now defines the kustomize Go +API, and the _kustomize_ CLI sits below it in an +independent module `sigs.k8s.io/kustomize/kustomize`. + +The modules release independently, though in practice a +new release of the kustomize Go API will likely be +followed quickly by a new release of the `kustomize` +executable. + +This is a necessary step to creating a much smaller +kustomize Go API surface that has some hope of +conforming to semantic versioning and being of some use +to clients. + +The kustomize CLI will see the same kustomize Go API as +any other client. + +The new semver-able API will begin with `v4.0.0` (not +yet released) and be a clean break with `v3` etc. + + +### Change log since v3.2.0 + +``` +3c9d828f - Have kustomize CLI depend on kustomize Go API v3.3.0 (Jeffrey Regan) +5d800f0b - Merge pull request #1595 from monopole/threeReleases (Jeff Regan) +4eb2d5bc - Three builders. (Jeffrey Regan) +988af1ff - Update README.md (Jeff Regan) +1617183e - Merge pull request #1590 from monopole/releaseProcessUpdate (Kubernetes Prow Robot) +ee727464 - update release process doc (jregan) +c9e7dc3b - Merge pull request #1589 from monopole/moreTestsAroundKustFileName (Jeff Regan) +07e0e46a - improve tests for alternative kustomization file names (Jeffrey Regan) +404d2d63 - Merge pull request #1587 from monopole/reducePgmconfig (Jeff Regan) +baa0296a - Reduce size of pgmconfig package (Jeffrey Regan) +0f665ac1 - Merge pull request #1544 from ptux/add-transformer-href (Jeff Regan) +14b0a650 - Merge pull request #1581 from monopole/refactorFs (Jeff Regan) +2d58f8b8 - Break the dep between fs and pgmconfig. (Jeffrey Regan) +9a43ca53 - Merge pull request #1578 from nlamirault/fix/build-plugins-doc (Jeff Regan) +5372fc6f - Merge pull request #1579 from monopole/fsPackageCleanup (Jeff Regan) +86bc3440 - Merge pull request #1513 from nimohunter/fix_empty_list_item (Kubernetes Prow Robot) +a014f7d4 - Merge pull request #1561 from beautytiger/dev-190925 (Jeff Regan) +9a94bcb8 - Improve fs package and doc in prep to officially go public (Jeffrey Regan) +07634ef0 - Merge pull request #1575 from monopole/versioning (Jeff Regan) +995f88d6 - Update versioning notes. (jregan) +334a6467 - Fix: documentation link for plugins (Nicolas Lamirault) +08963ba5 - improve test code coverage in transformers (Guangming Wang) +326fb689 - Merge pull request #1570 from bzub/1234-go_plugin_doc (Jeff Regan) +970ce67c - Update goPluginCaveats.md (Jeff Regan) +98d18930 - Update INSTALL.md (Jeff Regan) +d89b448c - Fix git tag recovery in cloud build. (Jeff Regan) +17bf9d32 - Update releasing README. (Jeff Regan) +a99aff1d - Merge pull request #1571 from monopole/updateCloudBuildProcess (Kubernetes Prow Robot) +a694ac7b - Update cloud build process for kustomize. (Jeffrey Regan) +b5b11ef6 - Fix compile kustomize example. (bzub) +fa1af6f5 - Merge pull request #1473 from richardmarshall/execpluginhash (Jeff Regan) +9288dec0 - Fix failing BashedConfigMapTest (Jeff Regan) +1a45dd0b - Merge pull request #1566 from monopole/releaseNotes3.2.1 (Kubernetes Prow Robot) +592c5acf - docs: Exec plugin generator options (Richard Marshall) +ac9424fa - tests: Add unit tests for update resource options (Richard Marshall) +79fbe7c4 - Support resource generator options in exec plugins (Richard Marshall) +f69d526f - v3.2.1 release notes (Jeff Regan) +07a95a60 - Merge pull request #1565 from monopole/tweakBinaryDepsBeforeTagging (Jeff Regan) +032b3857 - Pin the kustomize binary's dependence on kustomize libs. (jregan) +81062959 - Merge pull request #1564 from monopole/moveKustomizeBinaryToOwnModule (Kubernetes Prow Robot) +b82a8fd3 - Move the kustomize binary to its own module. (Jeffrey Regan) +2d0c22d6 - Merge pull request #1562 from keleustes/tools (Kubernetes Prow Robot) +aa342def - Pin tool versions using go modules (Ian Howell) +10786ec0 - Merge pull request #1554 from keleustes/readme (Kubernetes Prow Robot) +7c705687 - Update README.md to include Kubernetes 1.16 (Jerome Brette) +e8933d97 - Merge pull request #1560 from monopole/precommitTuneup (Jeff Regan) +9d7b6544 - Make pre-commit more portable and less tricky. (jregan) +7a0946a9 - Merge pull request #1558 from monopole/dependOnNewPluginatorModule (Jeff Regan) +def4f045 - Depend on new pluginator location. (Jeffrey Regan) +2f2408f1 - Merge pull request #1559 from monopole/compressCopyright (Jeff Regan) +3b9bcc48 - Compress copyright in the commands package. (Jeffrey Regan) +d0429ff4 - Merge pull request #1557 from monopole/pluginatorModule (Jeff Regan) +33deefc3 - Copy pluginator to its own module. (Jeffrey Regan) +9b3de82b - Merge pull request #1506 from Liujingfang1/release (Jeff Regan) +d217074f - Merge pull request #1550 from keleustes/apiversion (Kubernetes Prow Robot) +1d90ba7c - Fix typo in apiVersion yaml declaration (Jerome Brette) +eeeb4c36 - Merge pull request #1547 from keleustes/extensions (Kubernetes Prow Robot) +b1faa989 - Update Ingress apiVersion to networking.k8s.io/v1beta1 (Jerome Brette) +d8250c9e - move test case (nimohunter) +c9500466 - add transformer href (Wang(わん)) +0c32691e - Merge pull request #1537 from jaypipes/gomod-install-note (Kubernetes Prow Robot) +88b1d627 - Merge pull request #1541 from rtnpro/patch-1 (Jeff Regan) +aec82066 - Update INSTALL.md (Jeff Regan) +20c2b53a - Merge pull request #1542 from monopole/tweakFilePathsInTest (Jeff Regan) +274b5c3b - Tweak file path handling and logging in test. (Jeffrey Regan) +b1fdaa23 - Fix typo in transformerconfigs README (Ratnadeep Debnath) +b5d5e70b - empty list or map item return error (nimohunter) +2e829853 - empty list or map item return error (nimohunter) +55941f57 - add note about GO111MODULE for source install (Jay Pipes) +9e226001 - empty list or map item return error (nimohunter) +77b63f96 - add release note for v3.2.0 (jingfangliu) +``` diff --git a/site/content/zh/contributing/_index.md b/site/content/zh/contributing/_index.md new file mode 100644 index 000000000..26efdce47 --- /dev/null +++ b/site/content/zh/contributing/_index.md @@ -0,0 +1,10 @@ +--- +title: "贡献指南" +linkTitle: "贡献指南" +type: docs +menu: + main: + weight: 99 +--- + +以下是 Kustomize 贡献指南。 diff --git a/site/content/zh/contributing/bugs/_index.md b/site/content/zh/contributing/bugs/_index.md new file mode 100644 index 000000000..5e913cc25 --- /dev/null +++ b/site/content/zh/contributing/bugs/_index.md @@ -0,0 +1,57 @@ +--- +title: "Filing Bugs" +linkTitle: "Filing Bugs" +type: docs +weight: 10 +description: > + How to file bugs and fix Kustomize bugs +--- + + +[krusty package]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/krusty +[reusable custom transformer test]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/krusty/customconfigreusable_test.go + +File issues as desired, but if you've found a problem +with how `kustomize build` works, please report + + * the output of `kustomize version`, + * the input (the content of `kustomization.yaml` + and any files it refers to), + * the expected YAML output. + +## If you have `go` installed + +kustomize has a simple test harness in the [krusty +package] for specifying a kustomization's input and the +expected output. + +Copy one of those tests, e.g. this [reusable custom +transformer test], to a new test file in the +krusty package. + +Insert the inputs you want to use, and run it as +you'd run the reusable custom transformer test: + +``` +(cd api; go test -run TestReusableCustomTransformers ./krusty) +``` + +The output will demonstrate the bug or missing feature. + +Record this output in the test file in a call to +`AssertActualEqualsExpected`, per all the other tests +in the [krusty package]. This makes the test pass, +albeit with output demonstrating behavior you +presumably want to change. + +Send the new test in a PR, along with commentary (in +the test) on what you'd prefer to see. + +The person who fixes the bug then has a clear bug +reproduction and a test to modify when the bug is +fixed. + +Any bug fix first requires a test demonstrating the bug +(so we have permanent regression coverage), so if the +_bug reporter_ does this, it saves time and avoids +misunderstandings. diff --git a/site/content/zh/contributing/community/_index.md b/site/content/zh/contributing/community/_index.md new file mode 100644 index 000000000..da814e1d0 --- /dev/null +++ b/site/content/zh/contributing/community/_index.md @@ -0,0 +1,25 @@ +--- +title: "Community Engagment" +linkTitle: "Community" +type: docs +weight: 20 +description: > + Joining SIG-CLI and the Kubernetes community +--- + +[CLI special interest group]: https://github.com/kubernetes/community/tree/master/sig-cli#cli-special-interest-group +[contributor roles]: https://github.com/kubernetes/community/blob/master/community-membership.md#community-membership +[mailing list]: https://groups.google.com/forum/#!forum/kubernetes-sig-cli +[bi-weekly meetings]: https://docs.google.com/document/d/1r0YElcXt6G5mOWxwZiXgGu_X6he3F--wKwg-9UBc29I/edit?usp=sharing +[slack channel]: https://kubernetes.slack.com/messages/sig-cli + +Kustomize is a sub project of the Kubernetes [CLI special interest group] and follows the Kubernetes +project [contributor roles]. + +If you are interested in contributing towards Kustomize or getting more involved with the community: + +- join the [mailing list] and reach out +- join the [slack channel] and reach out +- attend one of the [bi-weekly meetings] (alternating Wednesdays at 9:00am Pacific Time) + + diff --git a/site/content/zh/contributing/docs/_index.md b/site/content/zh/contributing/docs/_index.md new file mode 100644 index 000000000..5dc23ec3d --- /dev/null +++ b/site/content/zh/contributing/docs/_index.md @@ -0,0 +1,82 @@ +--- +title: "Writing Docs" +linkTitle: "Writing Docs" +type: docs +weight: 30 +description: > + How to make Kustomize docs contributions +--- + +Kustomize uses [Docsy](https://www.docsy.dev) for the site, and was +forked from the [docsy-example](https://github.com/google/docsy-example) + +## Prerequisites + +- [Install hugo](https://gohugo.io/getting-started/installing/#fetch-from-github) +- Clone kustomize + - `git clone git@github.com:kubernetes-sigs/kustomize && cd kustomize/` + +## Development + +The doc input files are in the `site` directory. The site can be hosted locally using +`hugo serve`. + +```shell script +cd site/ +hugo serve +``` + +```shell script +... +Running in Fast Render Mode. For full rebuilds on change: hugo server --disableFastRender +Web Server is available at http://localhost:1313/kustomize/ (bind address 127.0.0.1) +``` + +## Publishing + +Hugo compiles the files under `site` Hugo into html which it puts in the `docs` folder: + +```shell script +cd site/ +hugo +``` + +```shell script + | EN +-------------------+----- + Pages | 99 + Paginator pages | 0 + Non-page files | 0 + Static files | 47 + Processed images | 0 + Aliases | 2 + Sitemaps | 1 + Cleaned | 0 +``` + +Add the `site/` and `docs/` folders to a commit, then create a PR. + +## Publishing docs to your kustomize fork + +It is possible to have the kustomize docs published to your forks github pages. + +### Setup GitHub Pages for the fork + +1. Go to the *forked repo's* **Settings** tab + - e.g. [https://github.com/pwittrock/kustomize](https://github.com/pwittrock/kustomize) +2. Go to the **GitHub Pages** section +3. Set the source to master branch **/docs folder** + +### Publish to the fork's GitHub Pages + +{{% pageinfo color="info" %}} +Changes must be pushed to the fork's **master branch** to be served as the fork's GitHub Page. +{{% /pageinfo %}} + +1. Make a change to a file under `site/content` +2. Run `hugo` from the `site/` directory +3. Add the `site` and `docs` directories to the **master branch** +4. Commit and push the changes to the *remote fork's* **master branch** +5. After a few minutes, the docs should be served from the fork's GitHub Page + - e.g. [https://pwittrock.github.io/kustomize/](https://pwittrock.github.io/kustomize/) + diff --git a/site/content/zh/contributing/features/_index.md b/site/content/zh/contributing/features/_index.md new file mode 100644 index 000000000..d1bdd8654 --- /dev/null +++ b/site/content/zh/contributing/features/_index.md @@ -0,0 +1,38 @@ +--- +title: "Contributing Features" +linkTitle: "Contributing Features" +type: docs +weight: 21 +description: > + How to contribute features +--- + +[issue]: https://github.com/kubernetes-sigs/kustomize/issues +[sig-cli]: /kustomize/contributing/community/ +[meeting agenda]: https://docs.google.com/document/d/1r0YElcXt6G5mOWxwZiXgGu_X6he3F--wKwg-9UBc29I/edit#heading=h.himo1st0tqyy +[KEP]: https://github.com/kubernetes/enhancements/tree/master/keps/sig-cli +[table-driven]: https://github.com/kubernetes-sigs/kustomize/blob/a8b9741866cf8e0c43e643ab7a9f40a3bd7e2a4d/api/filters/imagetag/imagetag_test.go#L15 +[eschewed feature list]: https://kubernetes-sigs.github.io/kustomize/faq/eschewedfeatures/ +[kind/feature]: https://github.com/kubernetes-sigs/kustomize/labels/kind%2Ffeature + + +Following is the process for proposing a new Kustomize feature: + +1. Check the [eschewed feature list] to see if the feature has already been proposed +2. File an [issue] describing the desired feature + - label it [kind/feature] + - the motivation for the feature + - example of how you would accomplish the motivating task *without* the feature + - example of how you would accomplish the motivating task *with* the feature +3. Email the [sig-cli] mailing list with the issue +4. Present the issue at [sig-cli] bi-weekly meeting on Zoom + - add it to the [meeting agenda] doc + - be present to discuss the feature + - response may be -- move forward with a PoC, not to move forward, defer and come back later, + or more information is needed. +5. Address the feedback on the issue + - Possibly write a KEP for tracking the feature +6. Implement the feature and send a PR + - Add [table-driven] tests + - Expect comments on the PR within 2 weeks +7. Kustomize team will release the kustomize `api` and `kustomize` modules diff --git a/site/content/zh/contributing/howitworks/_index.md b/site/content/zh/contributing/howitworks/_index.md new file mode 100644 index 000000000..941ac8ebc --- /dev/null +++ b/site/content/zh/contributing/howitworks/_index.md @@ -0,0 +1,65 @@ +--- +title: "Writing Code" +linkTitle: "Writing Code" +type: docs +weight: 40 +description: > + How to modify Kustomize +--- + +{{% pageinfo color="info" %}} +To build kustomize using the locally modified modules, `replace` statements must be added to +the `kustomize/go.mod`. + +e.g. if code in `api` was modified, a `replace` statement would need to be added for the +`kustomize/api` module. +{{% /pageinfo %}} + +Call stack when running `kustomize build`, with links to code. + +## Run build + +* [RunBuild](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/kustomize/internal/commands/build/build.go#L121) + * [MakeKustomizer](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/krusty/kustomizer.go#L32) + * [Run](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/krusty/kustomizer.go#L47): performs a kustomization. It uses its internal filesystem reference to read the file at the given path argument, interpret it as a kustomization.yaml file, perform the kustomization it represents, and return the resulting resources. + * Create factories + * [tranformer.NewFactoryImpl](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/k8sdeps/transformer/factory.go#L17) + * [resmap.NewFactory](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/resmap/factory.go#L21) + * [resource.NewFactory](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/resource/factory.go#L23) + * [kustruct.NewKunstructuredFactoryImpl](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/k8sdeps/kunstruct/factory.go#L28) + * [loader.NewLoader](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/loader/loader.go#L19) + * [validator.NewKustValidator](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/k8sdeps/validator/validators.go#L23) + * [NewKustTarget](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget.go#L38) + * [Load](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget.go#L54) + * [MakeCustomizeResMap](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget.go#L109): details in next section + * [emitResources](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/kustomize/internal/commands/build/build.go#L143) + +## Make resource map + +* [makeCustomizeResMap](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget.go#L117) + * [AccumulateTarget](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget.go#L196): returns a new ResAccumulator, holding customized resources and the data/rules used to do so. The name back references and vars are not yet fixed. + * [accummulateResources](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget.go#L302): fills the given resourceAccumulator with resources read from the given list of paths. + * Merge config from builtin and CRDs + * [runGenerators](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget.go#L239) + * [configureBuiltinGenerators](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget_configplugin.go#L28) + * ConfigMapGenerator + * SecretGenerator + * [configureExternalGenerators]() + * Iterate all generators + * [runTransfomers](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget.go#L274) + * [configureBuiltinTransformers](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget_configplugin.go#L44) + * PatchStrategicMergeTransformer + * PatchTransformer + * NamespaceTransformer + * PrefixSuffixTransformer + * LabelTransformer + * AnnotationsTransformer + * PatchJson6902Transformer + * ReplicaCountTransformer + * ImageTagTransformer + * [configureExternalTransformers](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget.go#L291) + * [MergeVars](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/accumulator/resaccumulator.go#L64) + * The following steps must be done last, not as part of the recursion implicit in AccumulateTarget. + * [addHashesToNames](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/target/kusttarget.go#L153) + * [FixBackReferences](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/accumulator/resaccumulator.go#L160): Given that names have changed (prefixs/suffixes added), fix all the back references to those names. + * [ResolveVars](https://github.com/kubernetes-sigs/kustomize/blob/c7d78970fb86782dbdded3a93944b774f826071f/api/internal/accumulator/resaccumulator.go#L141) \ No newline at end of file diff --git a/site/content/zh/contributing/mac/_index.md b/site/content/zh/contributing/mac/_index.md new file mode 100644 index 000000000..0960c30ae --- /dev/null +++ b/site/content/zh/contributing/mac/_index.md @@ -0,0 +1,46 @@ +--- +title: "MacOS Dev Guide" +linkTitle: "MacOS Dev Guide" +type: docs +weight: 50 +description: > + How to develop on MacOS +--- + +First install the tools to build and run tests + +### Install go 1.13 + +[Instructions](https://golang.org/doc/install) + +Add `go` to your PATH + +### Install kubeval + +[Instructions](https://github.com/instrumenta/kubeval) + +```sh +go get github.com/instrumenta/kubeval +``` + +Add `kubeval` to your PATH + +### Install gnu tools + +[Instructions](https://www.topbug.net/blog/2013/04/14/install-and-use-gnu-command-line-tools-in-mac-os-x/) + +```sh +brew install coreutils wget gnu-sed tree +``` + +Add the new tools to your PATH + +## Make everything + +Verify your install by running `make`: + +```sh +make +``` + +Be default, this runs all tests needed to qualify a pull request. diff --git a/site/content/zh/contributing/windows/_index.md b/site/content/zh/contributing/windows/_index.md new file mode 100644 index 000000000..6ce8826fd --- /dev/null +++ b/site/content/zh/contributing/windows/_index.md @@ -0,0 +1,61 @@ +--- +title: "Windows Dev Guide" +linkTitle: "Windows Dev Guide" +type: docs +weight: 60 +description: > + How to develop on Windows +--- + +This is the PowerShell script to run all go tests for Kustomize on a windows based platform which mimics /build/pre-commit.sh + +## Pre-Reqs: + - PowerShell installed + - PowerShell Core is supported + - go installed + - golangci-lint installed + - mdrip installed + +This script should output to the current console and return an exit code if all tests are successful(0) or any failed(1). + +### If you are tryin to run these tests locally you can follow these instructions. + +Assume: + - Running a stock Windows 10 system + - Local Admin rights. + - You can open [PowerShell as administrator](http://lmgtfy.com/?iie=1&q=How+to+open+powershell+as+administrator) + - You should be knowledgeable enough to pull source for packages into your GO ```src``` directory + - Yes, this means you also need to know a bit about **git** usually + + +#### Step 1 - Install Go + - [Install Go](https://golang.org/dl/) - please use the msi + - If you use chocolatey - it's using the zip not msi and assumptions on where go is located are made for you. +#### Step 2 - Install Go Packages + - Open new PowerShell Administrative window + - Install golangci-lint + - ```go get -u github.com/golangci/golangci-lint/cmd/golangci-lint``` + - Install mdrip + - ```go get github.com/monopole/mdrip``` + +You should now be able to issue these commands and see comparable responses + +``` +C:\...> golangci-lint --help +Smart, fast linters runner. Run it in cloud for every GitHub pull request on https://golangci.com +... + +C:\...> mdrip --help +Usage: C:\_go\bin\mdrip.exe {fileName}... +... +``` + +#### Step 3 - Get Source and Test +- In your GoRoot src + - ```Example: C:\_go\src``` +- Navigate to the Kustomize `travis` directory + - ```Example: C:\_go\src\sigs.k8s.io\kustomize\travis``` +- Now Execute: + - ```.\Invoke-PreCommit.ps1``` + +This should run all pre-commit tests thus defined in the script. diff --git a/site/content/zh/faq/_index.md b/site/content/zh/faq/_index.md new file mode 100644 index 000000000..563996ca1 --- /dev/null +++ b/site/content/zh/faq/_index.md @@ -0,0 +1,65 @@ +--- +title: "FAQ" +linkTitle: "FAQ" +type: docs +menu: + main: + weight: 70 +--- + +## security: file 'foo' is not in or below 'bar' + +v2.0 added a security check that prevents +kustomizations from reading files outside their own +directory root. + +This was meant to help protect the person inclined to +download kustomization directories from the web and use +them without inspection to control their production +cluster +(see [#693](https://github.com/kubernetes-sigs/kustomize/issues/693), +[#700](https://github.com/kubernetes-sigs/kustomize/pull/700), +[#995](https://github.com/kubernetes-sigs/kustomize/pull/995) and +[#998](https://github.com/kubernetes-sigs/kustomize/pull/998)) + +Resources (including configmap and secret generators) +can _still be shared_ via the recommended best practice +of placing them in a directory with their own +kustomization file, and referring to this directory as a +[`base`](/kustomize/api-reference/glossary#base) from any kustomization that +wants to use it. This encourages modularity and +relocatability. + +To disable this, use v3, and the `load_restrictor` flag: + +``` +kustomize build --load_restrictor none $target +``` + +## Some field is not transformed by kustomize + +Example: [#1319](https://github.com/kubernetes-sigs/kustomize/issues/1319), [#1322](https://github.com/kubernetes-sigs/kustomize/issues/1322), [#1347](https://github.com/kubernetes-sigs/kustomize/issues/1347) and etc. + +The fields transformed by kustomize is configured explicitly in [defaultconfig](https://github.com/kubernetes-sigs/kustomize/tree/master/api/konfig/builtinpluginconsts/defaultconfig.go). The configuration itself can be customized by including `configurations` in `kustomization.yaml`, e.g. + +```yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +configurations: +- kustomizeconfig.yaml +``` + +The configuration directive allows customization of the following transformers: + +```yaml +commonAnnotations: [] +commonLabels: [] +nameprefix: [] +namespace: [] +varreference: [] +namereference: [] +images: [] +replicas: [] +``` + +To persist the changes to default configuration, submit a PR like [#1338](https://github.com/kubernetes-sigs/kustomize/pull/1338), [#1348](https://github.com/kubernetes-sigs/kustomize/pull/1348) and etc. diff --git a/site/content/zh/faq/eschewedfeatures/_index.md b/site/content/zh/faq/eschewedfeatures/_index.md new file mode 100644 index 000000000..1112ef794 --- /dev/null +++ b/site/content/zh/faq/eschewedfeatures/_index.md @@ -0,0 +1,163 @@ +--- +title: "Eschewed Features" +linkTitle: "Eschewed Features" +type: docs +weight: 99 +description: > + Eschewed Features +--- + +The maintainers established this list to +place bounds on the kustomize feature +set. The bounds can be changed with +a consensus on the risks. + +For a bigger picture about why kustomize +does some things and not others, see the +glossary entry for [DAM]. + +## Removal directives + +`kustomize` supports configurations that can be reasoned about as +_compositions_ or _mixins_ - concepts that are widely accepted as +a best practice in various programming languages. + +To this end, `kustomize` offers various _addition_ directives. +One may add labels, annotations, patches, resources, bases, etc. +Corresponding _removal_ directives are not offered. + +Removal semantics would introduce many possibilities for +inconsistency, and the need to add code to detect, report and +reject it. It would also allow, and possibly encourage, +unnecessarily complex configuration layouts. + +When faced with a situation where removal is desirable, it's +always possible to remove things from a base like labels and +annotations, and/or split multi-resource manifests into individual +resource files - then add things back as desired via the +[kustomization]. + +If the underlying base is outside of one's control, an [OTS +workflow] is the recommended best practice. Fork the base, remove +what you don't want and commit it to your private fork, then use +kustomize on your fork. As often as desired, use _git rebase_ to +capture improvements from the upstream base. + +## Unstructured edits + +_Structured edits_ are changes controlled by +knowledge of the k8s API, and YAML or JSON syntax. + +Most edits performed by kustomize can be expressed as +[JSON patches] or [SMP patches]. +Those can be verbose, so common patches, +like adding labels or annotatations, get dedicated +transformer plugins - `LabelTransformer`, +`AnnotationsTransformer`, etc. +These accept relatively simple YAML configuration +allowing easy targeting of any number of resources. + +Another class of edits take data from one specific +object's field and use it in another (e.g. a service +object's name found and copied into a container's +command line). These reflection-style edits +are called _replacements_. + +The above edits create valid output given valid input, +and can provide syntactically and semantically +informed error messages if inputs are invalid. + +_Unstructured edits_, edits that don't limit +themselves to a syntax or object structure, +come in many forms. A common one in the +configuration domain is the template or +parameterization approach. + +In this technique, the source +material is sprinkled with strings of the +form `${VAR}`. A scanner replaces them +with a value taken from a map using `VAR` +as the map key. It's trivial to implement. + +kustomize eschews parameterization, because + +- The source yaml gets polluted with `$VARs` + and can no longed be applied as is + to the cluster (it _must_ be processed). +- The source material is no longer structured, + making it unusable with any YAML processor. + It's no longer _data_, it's now logic that + must be compiled. +- Errors in the output are disconnected from + the edit that caused it. +- The input becomes [unintelligible] as the project + scales in any number of dimensions (resource + count, cluster count, environment count, etc.) + +Kustomizations are meant to be sharable and stackable. +Imagine tracing down a problem rooted in a +clever set of stacked regexp replacements +performed by various overlays on some remote base. +We've used such systems, and never want to again. + +Other tools (sed, jinja, erb, envsubst, kafka, helm, ksonnet, +etc.) provide varying degrees of unstructured editting +and/or embedded languages, and can be used instead +of, or in a pipe with, kustomize. If you want to +go all-in on _configuration as a language_, consider [cue]. + +kustomize is going to stick to YAML in / YAML out. + +## Build-time side effects from CLI args or env variables + +`kustomize` supports the best practice of storing one's +entire configuration in a version control system. + +Changing `kustomize build` configuration output as a result +of additional arguments or flags to `build`, or by +consulting shell environment variable values in `build` +code, would frustrate that goal. + +`kustomize` insteads offers [kustomization] file `edit` +commands. Like any shell command, they can accept +environment variable arguments. + +For example, to set the tag used on an image to match an +environment variable, run + +``` +kustomize edit set image nginx:$MY_NGINX_VERSION +``` + +as part of some encapsulating work flow executed before +`kustomize build`. + + +## Globs in kustomization files + +`kustomize` supports the best practice of storing one's +entire configuration in a version control system. + +Globbing the local file system for files not explicitly +declared in the [kustomization] file at `kustomize build` time +would violate that goal. + +Allowing globbing in a kustomization file would also introduce +the same problems as allowing globbing in [java import] +declarations or BUILD/Makefile dependency rules. + +`kustomize` will instead provide kustomization file editting +commands that accept globbed arguments, expand them at _edit +time_ relative to the local file system, and store the resulting +explicit names into the kustomization file. + +[base]: /kustomize/api-reference/glossary#base +[DAM]: /kustomize/api-reference/glossary#declarative-application-management +[java import]: https://www.codebyamir.com/blog/pitfalls-java-import-wildcards +[JSON patches]: /kustomize/api-reference/glossary#patchjson6902 +[kustomization]: /kustomize/api-reference/glossary#kustomization +[OTS workflow]: /kustomize/api-reference/glossary#off-the-shelf-configuration +[SMP patches]: /kustomize/api-reference/glossary#patchstrategicmerge +[parameterization pitfall discussion]: https://github.com/kubernetes/community/blob/master/contributors/design-proposals/architecture/declarative-application-management.md#parameterization-pitfalls +[unintelligible]: https://github.com/helm/charts/blob/e002378c13e91bef4a3b0ba718c191ec791ce3f9/stable/artifactory/templates/artifactory-deployment.yaml +[cue]: https://cuelang.org/ diff --git a/site/content/zh/faq/versioningPolicy.md b/site/content/zh/faq/versioningPolicy.md new file mode 100644 index 000000000..ce61117d4 --- /dev/null +++ b/site/content/zh/faq/versioningPolicy.md @@ -0,0 +1,272 @@ +--- +title: "Versioning Policy" +linkTitle: "Versioning Policy" +weight: 99 +type: docs +--- + +Running `kustomize` means one is running a +particular version of a program (a CLI), using a +particular version of underlying packages (a Go +API), and reading a particular version of a +[kustomization] file. + +> If you're having trouble with `go get`, please +> read [Go API Versioning](#go-api-versioning) +> and be patient. + +## CLI Program Versioning + +The command `kustomize version` prints a three +field version tag (e.g. `v3.0.0`) that aspires to +[semantic versioning]. + +This notion of semver applies only to the CLI; +the command names, their arguments and their flags. + +The major version changes when some backward +incompatibility appears in how the commands +behave. + +### Installation + +See the [installation docs](INSTALL.md). + +## Go API Versioning + +The public methods in the public packages +of module `sigs.k8s.io/kustomize/api` constitute +the _kustomize Go API_. + +#### Version sigs.k8s.io/kustomize/v3 and earlier + +[import path]: https://github.com/golang/go/wiki/Modules#releasing-modules-v2-or-higher + +In `kustomize/v3` (and preceding major versions), the +kustomize program and the API live the same Go +module at `sigs.k8s.io/kustomize`, at [import path] +`sigs.k8s.io/kustomize/v3`. + +This has been fine for the CLI, but it presents a +problem for the Go API. + +[minimal version selection]: https://research.swtch.com/vgo-mvs + +The process around Go modules, in particular the +notion of [minimal version selection], demands +that the module respect semver. + +Almost all the code in module +`sigs.k8s.io/kustomize/v3` is exposed (not in a +directory named `internal`). Even a minor +refactor changing a method name or argument type +in some deeply buried (but still public) method is +a backward incompatible change. As a result, Go +API semver hasn't been followed. This was a mistake. + +Some options are + +- continue to ignore Go API semver and stick to + CLI semver (eliminating the usefullness of + minimal version selection), + +- obey semver, and increment the module's major + version number with every release (drastically + reducing the usefullness of minimal version + selection - since virtually all releases will + be major), + +- slow down change in the huge API in favor of + stability, yet somehow continue to deliver + features, + +- drastically reduce the API surface, stabilize on + semver there, and refactor as needed inside + `internal`. + +The last option seems the most appealing. + +#### The first stable API version is coming + +The first stable API version will launch +as the Go module + +``` +sigs.k8s.io/kustomize/api +``` + +The _kustomize_ program itself (`main.go` +and CLI specific code) will have moved out of +`sigs.k8s.io/kustomize` and into the new module +`sigs.k8s.io/kustomize/kustomize`. This is a +submodule in the same repo, and it will retain its +current notion of semver (e.g. a backward +incompatible change in command behavior will +trigger a major version bump). This module will +not export packages; it's just home to a `main` +package. + +The `sigs.k8s.io/kustomize/api` module will +obey semver with a sustainable public +surface, informed by current usage. Clients +should import packages from this module, i.e. +from import paths prefixed by +`sigs.k8s.io/kustomize/api/` at first, +and later by `sigs.k8s.io/kustomize/api/v2/`. +The kustomize binary +itself is an API client requiring this module. + +The clients and API will evolve independently. + + +## Kustomization File Versioning + + +The kustomization file is a struct that is part of +the kustomize Go API (the `sigs.k8s.io/kustomize` +module), but it also evolves as a k8s API object - +it has an `apiVersion` field containing its +own version number. + +### Field Change Policy + +- A field's meaning cannot be changed. +- A field may be deprecated, then removed. +- Deprecation means triggering a _minor_ (semver) + version bump in the kustomize Go API, and + defining a migration path in a non-fatal error + message. +- Removal means triggering a _major_ (semver) + version bump in the kustomize Go API, and fatal + error if field encountered (as with any unknown + field). Likewise a change in `apiVersion`. + +### The `edit fix` Command + +This `kustomize` command reads a Kustomization +file, converts deprecated fields to new +fields, and writes it out again in the latest +format. + +This is a type version upgrade mechanism that +works within _major_ API revisions. There is no +downgrade capability, as there's no use case for +it (see discussion below). + +### Examples + +With the 2.0.0 release, there were three field +removals: + +- `imageTag` was deprecated when `images` was + introduced, because the latter offers more + general features for image data manipulation. + `imageTag` was removed in v2.0.0. +- `patches` was deprecated and replaced by + `patchesStrategicMerge` when `patchesJson6902` + was introduced, to make a clearer + distinction between patch specification formats. + `patches` was removed in v2.0.0. +- `secretGenerator/commands` was removed + due to security concerns in v2.0.0 + with no deprecation period. + +The `edit fix` command in a v2.0.x binary +will no longer recognize these fields. + +## Relationship to the k8s API + +### Review of k8s API versioning + +The k8s API has specific [conventions] and a +process for making [changes]. + +The presence of an `apiVersion` field in a k8s +native type signals: + +- its reliability level (alpha vs beta vs + generally available), +- the existence of code to provide default values + to fields not present in a serialization, +- the existence of code to provide both forward + and backward conversion between different + versions of types. + +The k8s API promises a lossless _conversion_ +between versions over a specific range. This +means that a recent client can write an object +bearing the newest possible value for its version, +the server will accept it and store it in +"versionless" JSON form in storage, and can +convert it to a range of older versions should +an older client request data. + +For native k8s types, this all requires writing Go +code in the kubernetes core repo, to provide +defaulting and conversions. + +For CRDs, there's a [proposal] on how to manage +versioning (e.g. a remote service can offer type +defaulting and conversions). + +### Differences + +- A k8s API server is able to go _forward_ and + _backward_ in versioning, to work with older + clients, over [some range]. +- The `kustomize edit fix` command only moves + _forward_ within a _major_ API + version. + +At the time of writing, the YAML in a +kustomization file does not represent a [k8s API] +object, and the kustomize command and associated +library is neither a server of, nor a client to, +the k8s API. + +### Additional Kustomization file rules + +In addition to the [field change policy] described +above, kustomization files conform to +the following rules. + +#### Eschew classic k8s fields + +Field names with dedicated meaning in k8s +(`metadata`, `spec`, `status`, etc.) aren't used. +This is enforced via code review. + +#### Default values for k8s `kind` and `apiVersion` + +In `v3` or below, the two [special] k8s +resource fields [`kind`] and [`apiVersion`] may +be omitted from the kustomization file. + +If either field is present, they both must be. +If present, the value of `kind` must be: + +> ``` +> kind: Kustomization +> ``` + +If missing, the value of `apiVersion` defaults to + +> ``` +> apiVersion: kustomize.config.k8s.io/v1beta1 +> ``` + +[field change policy]: #field-change-policy +[some range]: https://kubernetes.io/docs/reference/using-api/deprecation-policy +[proposal]: https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/customresources-versioning.md +[beta-level rules]: https://github.com/kubernetes/community/blob/master/contributors/devel/api_changes.md#alpha-beta-and-stable-versions +[changes]: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api_changes.md +[adapt]: /types/kustomization.go#L166 +[special]: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#resources +[k8s API]: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md +[conventions]: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md +[release page]: https://github.com/kubernetes-sigs/kustomize/releases +[release process]: https://github.com/kubernetes-sigs/kustomize/tree/master/releasing/README.md +[kustomization]: /kustomize/api-reference/glossary#kustomization +[`kind`]: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#types-kinds +[`apiVersion`]: https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-versioning +[semantic versioning]: https://semver.org diff --git a/site/content/zh/guides/_index.md b/site/content/zh/guides/_index.md new file mode 100644 index 000000000..50d94d93c --- /dev/null +++ b/site/content/zh/guides/_index.md @@ -0,0 +1,11 @@ +--- +title: "指南" +linkTitle: "指南" +type: docs +weight: 2 +menu: + main: + weight: 20 +description: > + Kustomize CLI 命令参考。 +--- diff --git a/site/content/zh/guides/bespoke/_index.md b/site/content/zh/guides/bespoke/_index.md new file mode 100644 index 000000000..cc384d1bf --- /dev/null +++ b/site/content/zh/guides/bespoke/_index.md @@ -0,0 +1,74 @@ +--- +title: "配置定制（Bespoke configuration）" +linkTitle: "配置定制（Bespoke configuration）" +type: docs +weight: 1 +description: > + 自定义配置的工作流。 +--- + +在这个工作流方式中，所有的配置文件（ YAML 资源）都为用户所有，存储在用户的私有 repo 中。其他用户是无法使用的。 + +![bespoke config workflow image][workflowBespoke] + +#### 1) 创建一个目录用于版本控制 + +我们希望将一个名为 _ldap_ 的 Kubernetes 集群应用的配置保存在自己的 repo 中。 +这里使用 git 进行版本控制。 + +> ``` +> git init ~/ldap +> ``` + +#### 2) 创建一个 [base] + +> ``` +> mkdir -p ~/ldap/base +> ``` + +在这个目录中创建并提交 [kustomization] 文件及一组资源 [resources] 配置。 + +#### 3) 创建 [overlays] + +> ``` +> mkdir -p ~/ldap/overlays/staging +> mkdir -p ~/ldap/overlays/production +> ``` + +每个目录都包含需要一个 [kustomization] 文件以及一或多个 [patches]。 + +在 _staging_ 目录可能会有一个用于在 configmap 中打开一个实验标记的补丁。 + +在 _production_ 目录可能会有一个在 deployment 中增加副本数的补丁。 + +#### 4) 生成 [variants] + +运行 kustomize，将生成的配置用于 kubernetes 应用发布。 + +> ``` +> kustomize build ~/ldap/overlays/staging | kubectl apply -f - +> kustomize build ~/ldap/overlays/production | kubectl apply -f - +> ``` + +也可以在 [kubectl-v1.14.0] 版，使用 ```kubectl``` 命令发布你的 [variants] 。 +> ``` +> kubectl apply -k ~/ldap/overlays/staging +> kubectl apply -k ~/ldap/overlays/production +> ``` + +[OTS]: /kustomize/api-reference/glossary#off-the-shelf-configuration +[apply]: /kustomize/api-reference/glossary#apply +[applying]: /kustomize/api-reference/glossary#apply +[base]: /kustomize/api-reference/glossary#base +[fork]: https://guides.github.com/activities/forking/ +[variants]: /kustomize/api-reference/glossary#variant +[kustomization]: /kustomize/api-reference/glossary#kustomization +[off-the-shelf]: /kustomize/api-reference/glossary#off-the-shelf-configuration +[overlays]: /kustomize/api-reference/glossary#overlay +[patch]: /kustomize/api-reference/glossary#patch +[patches]: /kustomize/api-reference/glossary#patch +[rebase]: https://git-scm.com/docs/git-rebase +[resources]: /kustomize/api-reference/glossary#resource +[workflowBespoke]: /kustomize/images/workflowBespoke.jpg +[workflowOts]: /kustomize/images/workflowOts.jpg +[kubectl-v1.14.0]:https://kubernetes.io/blog/2019/03/25/kubernetes-1-14-release-announcement/ diff --git a/site/content/zh/guides/offtheshelf/_index.md b/site/content/zh/guides/offtheshelf/_index.md new file mode 100644 index 000000000..9541ba341 --- /dev/null +++ b/site/content/zh/guides/offtheshelf/_index.md @@ -0,0 +1,78 @@ +--- +title: "通用配置（Off-the-shelf configuration）" +linkTitle: "通用配置（Off-the-shelf configuration）" +type: docs +weight: 2 +description: > + 使用通用配置的工作流。 +--- + +在这个工作流程中，所有文件都由用户拥有，并维护在他们控制的存储库中，但它们是基于一个现成的（[off-the-shelf]）配置，定期查询更新。 + +![off-the-shelf config workflow image][workflowOts] + +#### 1) 寻找并且 [fork] 一个 [OTS] 配置 + +#### 2) 将其克隆为你自己的 [base] + +这个 [base] 目录维护在上游为 [OTS] 配置的 repo ，在这个示例中使用 `ladp` 的 repo 。 + +> ```bash +> mkdir ~/ldap +> git clone https://github.com/$USER/ldap ~/ldap/base +> cd ~/ldap/base +> git remote add upstream git@github.com:$USER/ldap +> ``` + +#### 3) 创建 [overlays] + +如配置定制方法一样，创建并完善 _overlays_ 目录中的内容。 + +所有的 [overlays] 都依赖于 [base] 。 + +> ```bash +> mkdir -p ~/ldap/overlays/staging +> mkdir -p ~/ldap/overlays/production +> ``` + +用户可以将 `overlays` 维护在不同的 repo 中。 + +#### 4) 生成 [variants] + +> ```bash +> kustomize build ~/ldap/overlays/staging | kubectl apply -f - +> kustomize build ~/ldap/overlays/production | kubectl apply -f - +> ``` + +也可以在 [kubectl-v1.14.0] 版，使用 ```kubectl``` 命令发布你的 [variants] 。 +> ```bash +> kubectl apply -k ~/ldap/overlays/staging +> kubectl apply -k ~/ldap/overlays/production +> ``` + +#### 5) （可选）从上游更新 + +用户可以定期从上游 repo 中 [rebase] 他们的 [base] 以保证及时更新。 + +> ```bash +> cd ~/ldap/base +> git fetch upstream +> git rebase upstream/master +> ``` + +[OTS]: /kustomize/api-reference/glossary#off-the-shelf-configuration +[apply]: /kustomize/api-reference/glossary#apply +[applying]: /kustomize/api-reference/glossary#apply +[base]: /kustomize/api-reference/glossary#base +[fork]: https://guides.github.com/activities/forking/ +[variants]: /kustomize/api-reference/glossary#variant +[kustomization]: /kustomize/api-reference/glossary#kustomization +[off-the-shelf]: /kustomize/api-reference/glossary#off-the-shelf-configuration +[overlays]: /kustomize/api-reference/glossary#overlay +[patch]: /kustomize/api-reference/glossary#patch +[patches]: /kustomize/api-reference/glossary#patch +[rebase]: https://git-scm.com/docs/git-rebase +[resources]: /kustomize/api-reference/glossary#resource +[workflowBespoke]: /kustomize/images/workflowBespoke.jpg +[workflowOts]: /kustomize/images/workflowOts.jpg +[kubectl-v1.14.0]:https://kubernetes.io/blog/2019/03/25/kubernetes-1-14-release-announcement/ diff --git a/docs/zh/plugins.md b/site/content/zh/guides/plugins/_index.md similarity index 80% rename from docs/zh/plugins.md rename to site/content/zh/guides/plugins/_index.md index ee2fb416f..54dc642d0 100644 --- a/docs/zh/plugins.md +++ b/site/content/zh/guides/plugins/_index.md @@ -1,14 +1,16 @@ -# kustomize 插件 - -快速开始： - -* [60 秒构建一个 exec 插件](execPluginGuidedExample.md) -* [60 秒构建一个 Go 插件](goPluginGuidedExample.md) +--- +title: "Kustomize 插件" +linkTitle: "Kustomize 插件" +type: docs +weight: 98 +description: > + Kustomize 插件指南 +--- Kustomize 提供一个插件框架，允许用户开发自己的 _生成器_ 和 _转化器_。 -[generatorOptions]: ../../examples/generatorOptions.md -[transformerconfigs]: ../../examples/transformerconfigs +[generator options]: https://github.com/kubernetes-sigs/kustomize/tree/master/examples/generatorOptions.md +[transformer configs]: https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs 通过插件，实现 [generatorOptions] 和 [transformerconfigs] 无法满足的需求。 @@ -23,7 +25,7 @@ Kustomize 提供一个插件框架，允许用户开发自己的 _生成器_ 和 字段内容为一个 string list： -> ``` +> ```yaml > generators: > - relative/path/to/some/file.yaml > - relative/path/to/some/kustomization @@ -31,20 +33,21 @@ Kustomize 提供一个插件框架，允许用户开发自己的 _生成器_ 和 > - https://github.com/org/repo/some/kustomization > > transformers: -> - {同上} +> - {as above} > ``` 格式要求与 `resources` 字段相同，`generators` 或 `transformers` 列表的每一列内容都必须是一个 YAML 文件的相对路径或者指向 [kustomization] 的 URL。 -[kustomization]: glossary.md#kustomization +[kustomization]: /kustomize/zh/api-reference/glossary#kustomization 从磁盘上读取 YAML 文件，kustomization 的路径或 URL 会触发 kustomization 的运行。由此产生的每个的对象都会被 kustomize 进一步解析为 _plugin configuration_ 对象。 + ## 配置 kustomization 文件可以包含如下内容： -``` +```yaml generators: - chartInflator.yaml ``` @@ -53,7 +56,7 @@ generators: `chartInflator.yaml` 为插件配置文件，该文件包含 YAML 配置对象，内容如下： -``` +```yaml apiVersion: someteam.example.com/v1 kind: ChartInflator metadata: @@ -63,15 +66,15 @@ chartName: minecraft __`apiVersion` 和 `kind` 字段用于定位插件。__ -[k8s 对象]: glossary.md#Kubernetes-风格的对象 +[k8s 对象]: /kustomize/zh/api-reference/glossary#Kubernetes-风格的对象 同时由于 kustomize 插件配置对象也是一个 [k8s 对象]，因此这些字段是必要的。 为了让插件准备好生成或转换，它包含了配置文件的全部内容。 -[NameTransformer]: ../../plugin/builtin/prefixsuffixtransformer/PrefixSuffixTransformer_test.go -[ChartInflator]: ../../plugin/someteam.example.com/v1/chartinflator/ChartInflator_test.go -[plugins]: ../../plugin/builtin +[NameTransformer]: https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/builtin/prefixsuffixtransformer/PrefixSuffixTransformer_test.go +[ChartInflator]: https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/someteam.example.com/v1/chartinflator/ChartInflator_test.go +[plugins]: https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/builtin 更多关于插件配置 YAML 的例子，请浏览根目录下 [plugins] 中的单元测试，例如 [ChartInflator] 或 [NameTransformer]。 @@ -81,11 +84,14 @@ __`apiVersion` 和 `kind` 字段用于定位插件。__ [`XDG_CONFIG_HOME`]: https://specifications.freedesktop.org/basedir-spec/basedir-spec-latest.html -``` +```bash $XDG_CONFIG_HOME/kustomize/plugin /${apiVersion}/LOWERCASE(${kind}) ``` +The default value of [`XDG_CONFIG_HOME`] is +`$HOME/.config`. + [`XDG_CONFIG_HOME`] 的默认值为 `$HOME/.config`。 为了便于插件包（源码、测试、插件数据文件等）的共享，要求每个目录存放一个插件。 @@ -94,7 +100,7 @@ $XDG_CONFIG_HOME/kustomize/plugin 加载时，kustomize 首先会寻找一个 _可执行_ 文件，名为： -``` +```bash $XDG_CONFIG_HOME/kustomize/plugin /${apiVersion}/LOWERCASE(${kind})/${kind} ``` @@ -136,10 +142,10 @@ _exec 插件_ 是一个可以在命令行中接收参数可执行文件，该参 > - 第一个参数可以是固定的字符串 `generate` 或 `transform`，（配置文件的名称移动到第2个参数） > - 默认情况下，exec plugin 会作为一个转化器,除非提供了标志 `-g`，将 exec 插件切换为生成器。 -[helm chart inflator]: ../../plugin/someteam.example.com/v1/chartinflator -[bashed config map]: ../../plugin/someteam.example.com/v1/bashedconfigmap -[sed transformer]: ../../plugin/someteam.example.com/v1/sedtransformer -[hashicorp go-getter]: ../../plugin/someteam.example.com/v1/gogetter +[helm chart inflator]: https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/someteam.example.com/v1/chartinflator +[bashed config map]: https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/someteam.example.com/v1/bashedconfigmap +[sed transformer]: https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/someteam.example.com/v1/sedtransformer +[hashicorp go-getter]: https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/someteam.example.com/v1/gogetter #### 示例 @@ -175,7 +181,7 @@ metadata: annotations: kustomize.config.k8s.io/needs-hash: "true" data: - foo: bar + foo: bar ``` **`kustomize.config.k8s.io/behavior`** @@ -191,12 +197,12 @@ metadata: annotations: kustomize.config.k8s.io/behavior: "merge" data: - foo: bar + foo: bar ``` ### Go 插件 -请务必阅读 [Go plugin 注意事项](goPluginCaveats.md)。 +请务必阅读 [Go 插件注意事项](goPluginCaveats.md)。 [Go 插件]: https://golang.org/pkg/plugin/ @@ -206,7 +212,7 @@ data: kustomize 的一个 Go 插件看起来是这样的： -> ``` +> ```go > package main > > import ( @@ -233,10 +239,10 @@ kustomize 的一个 Go 插件看起来是这样的： 实现 `Generatoror` 或 `Transformer` 方法允许（分别）将插件的配置文件添加到 kustomization 文件的 `generatorsor` 或 `transformers` 字段中，并根据需要执行。 -[secret generator]: ../../plugin/someteam.example.com/v1/secretsfromdatabase -[service generator]: ../../plugin/someteam.example.com/v1/someservicegenerator -[string prefixer]: ../../plugin/someteam.example.com/v1/stringprefixer -[date prefixer]: ../../plugin/someteam.example.com/v1/dateprefixer +[secret generator]: https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/someteam.example.com/v1/secretsfromdatabase +[service generator]: https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/someteam.example.com/v1/someservicegenerator +[string prefixer]: https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/someteam.example.com/v1/stringprefixer +[date prefixer]: https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/someteam.example.com/v1/dateprefixer [sops encoded secrets]: https://github.com/monopole/sopsencodedsecrets #### 示例 @@ -246,14 +252,14 @@ kustomize 的一个 Go 插件看起来是这样的： * [date prefixer] - 将当前日期作为前缀添加到资源名称上，这是一个用于修改刚才提到的字符串前缀插件的简单示例。 * [secret generator] - 从 toy 数据库生成 secret。 * [sops encoded secrets] - 一个更复杂的 secret 生成器。 - * [All the builtin plugins](../../plugin/builtin). + * [All the builtin plugins](https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/builtin). 用户自制的插件与内置插件是一样的。 Go 插件既可以是生成器，也可以是转化器。`Generate` 方法将在 `Transform` 方法运行之前与所有其他生成器一起运行。 如下的构建命令，假设插件源代码位于 kustomize 期望查找 `.so` 文件的目录中： -``` +```bash d=$XDG_CONFIG_HOME/kustomize/plugin\ /${apiVersion}/LOWERCASE(${kind}) diff --git a/docs/zh/plugins-builtins.md b/site/content/zh/guides/plugins/builtins.md similarity index 90% rename from docs/zh/plugins-builtins.md rename to site/content/zh/guides/plugins/builtins.md index 3afb2fa06..9e214812f 100644 --- a/docs/zh/plugins-builtins.md +++ b/site/content/zh/guides/plugins/builtins.md @@ -1,16 +1,11 @@ - - -# 内置插件 +--- +title: "内置插件" +linkTitle: "内置插件" +type: docs +weight: 1 +description: > + 内置插件 +--- 内置插件包括生成器和转化器。 @@ -22,16 +17,16 @@ 直接使用 `kustomization.yaml` 文件中的字段比如 `commonLables`、`commonAnnotation` 他们可以修改一些默认的字段，如果用户想要添加或减少能被 `commonLabel` 所修改的字段，则不是很容易做到；而使用 `transformers` 的话，用户可以指定哪些字段能被修改，而不受默认值的影响。 -[types.GeneratorOptions]: ../../api/types/generatoroptions.go -[types.SecretArgs]: ../../api/types/secretargs.go -[types.ConfigMapArgs]: ../../api/types/configmapargs.go -[config.FieldSpec]: ../../api/types/fieldspec.go -[types.ObjectMeta]: ../../api/types/objectmeta.go -[types.Selector]: ../../api/types/selector.go -[types.Replica]: ../../api/types/replica.go -[types.PatchStrategicMerge]: ../../api/types/patchstrategicmerge.go -[types.PatchTarget]: ../../api/types/patchtarget.go -[image.Image]: ../../api/types/image.go +[types.GeneratorOptions]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/generatoroptions.go +[types.SecretArgs]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/secretargs.go +[types.ConfigMapArgs]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/configmapargs.go +[config.FieldSpec]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/fieldspec.go +[types.ObjectMeta]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/objectmeta.go +[types.Selector]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/selector.go +[types.Replica]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/replica.go +[types.PatchStrategicMerge]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/patchstrategicmerge.go +[types.PatchTarget]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/patchtarget.go +[image.Image]: https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/image.go ## _AnnotationTransformer_ @@ -41,7 +36,7 @@ 为所有资源添加注释，和标签一样以 key: value 的形式。 -``` +```yaml commonAnnotations: oncallPager: 800-555-1212 ``` @@ -55,7 +50,7 @@ commonAnnotations: > FieldSpecs \[\][config.FieldSpec] #### Example -> ``` +> ```yaml > apiVersion: builtin > kind: AnnotationsTransformer > metadata: @@ -86,8 +81,8 @@ commonAnnotations: `options` 字段允许用户为生成的实例添加标签和（或）注释，或者分别禁用该实例名称的哈希后缀。此处添加的标签和注释不会被 kustomization 文件 `generatorOptions` 字段关联的全局选项覆盖。但是如果全局 `generatorOptions` 字段指定 `disableNameSuffixHash: true`，其他 `options` 的设置将无法将其覆盖。 -``` -# 这个标签将添加到所有的 ConfigMap 和 Secret 中。 +```yaml +# These labels are added to all configmaps and secrets. generatorOptions: labels: fruit: apple @@ -120,7 +115,7 @@ configMapGenerator: 下面这个示例会创建一个 ConfigMap，并将 `whatever.ini` 重命名为 `myFileName.ini`： -``` +```yaml configMapGenerator: - name: app-whatever files: @@ -134,7 +129,7 @@ configMapGenerator: > [types.ConfigMapArgs] #### Example -> ``` +> ```yaml > apiVersion: builtin > kind: ConfigMapGenerator > metadata: @@ -156,7 +151,7 @@ configMapGenerator: 修改镜像的名称、tag 或 image digest ，而无需使用 patches 。例如，对于这种 kubernetes Deployment 片段： -``` +```yaml containers: - name: mypostgresdb image: postgres:8 @@ -177,7 +172,7 @@ containers: 只需在 *kustomization* 中添加以下内容： -``` +```yaml images: - name: postgres newName: my-registry/my-postgres @@ -199,7 +194,7 @@ images: > FieldSpecs \[\][config.FieldSpec] #### Example -> ``` +> ```yaml > apiVersion: builtin > kind: ImageTagTransformer > metadata: @@ -209,6 +204,8 @@ images: > newTag: v2 > ``` + + ## _LabelTransformer_ ### 使用 `kustomization.yaml` @@ -217,7 +214,7 @@ images: 为所有资源和 selectors 增加标签。 -``` +```yaml commonLabels: someName: someValue owner: alice @@ -233,7 +230,7 @@ commonLabels: > FieldSpecs \[\][config.FieldSpec] #### Example -> ``` +> ```yaml > apiVersion: builtin > kind: LabelTransformer > metadata: @@ -246,7 +243,6 @@ commonLabels: > create: true > ``` - ## _NamespaceTransformer_ ### 使用 `kustomization.yaml` @@ -255,7 +251,7 @@ commonLabels: 为所有资源添加 namespace。 -``` +```yaml namespace: my-namespace ``` @@ -268,7 +264,7 @@ namespace: my-namespace > FieldSpecs \[\][config.FieldSpec] #### Example -> ``` +> ```yaml > apiVersion: builtin > kind: NamespaceTransformer > metadata: @@ -297,7 +293,7 @@ patchesJson6902 列表中的每个条目都应可以解析为 kubernetes 对象 patch 文件中的内容可以如下这种 JSON 格式： -``` +```json [ {"op": "add", "path": "/some/new/path", "value": "value"}, {"op": "replace", "path": "/some/existing/path", "value": "new value"} @@ -306,7 +302,7 @@ patch 文件中的内容可以如下这种 JSON 格式： 也可以使用 YAML 格式表示： -``` +```yaml - op: add path: /some/new/path value: value @@ -315,7 +311,7 @@ patch 文件中的内容可以如下这种 JSON 格式： value: new value ``` -``` +```yaml patchesJson6902: - target: version: v1 @@ -331,7 +327,7 @@ patchesJson6902: patch 内容也可以是一个inline string： -``` +```yaml patchesJson6902: - target: version: v1 @@ -356,7 +352,7 @@ patchesJson6902: > JsonOp string #### Example -> ``` +> ```yaml > apiVersion: builtin > kind: PatchJson6902Transformer > metadata: @@ -369,7 +365,6 @@ patchesJson6902: > path: jsonpatch.json > ``` - ## _PatchesStrategicMerge_ ### 使用 `kustomization.yaml` @@ -382,7 +377,7 @@ patchesJson6902: 推荐使用小的 patches，例如：修改内存的 request/limit，更改 ConfigMap 中的 env 变量等。小的 patches 易于维护和查看，并且易于在 overlays 中混合使用。 -``` +```yaml patchesStrategicMerge: - service_port_8888.yaml - deployment_increase_replicas.yaml @@ -390,8 +385,7 @@ patchesStrategicMerge: ``` patch 内容也可以是一个inline string： - -``` +```yaml patchesStrategicMerge: - |- apiVersion: apps/v1 @@ -416,9 +410,8 @@ patchesStrategicMerge: > > Patches string - #### Example -> ``` +> ```yaml > apiVersion: builtin > kind: PatchStrategicMergeTransformer > metadata: @@ -436,7 +429,7 @@ patchesStrategicMerge: 这个列表中的每个条目应该解析到一个 Patch 对象，其中包括一个 patch 和一个目标选择器。patch 可以是 Strategic Merge Patch 或 JSON patch，也可以是 patch 文件或 inline string。目标选择器可以通过 group、version、kind、name、namespace、标签选择器和注释选择器来选择资源，选择一个或多个匹配所有指定字段的资源来应用 patch。 -``` +```yaml patches: - path: patch.yaml target: @@ -457,7 +450,7 @@ patches: The `name` and `namespace` fields of the patch target selector are automatically anchored regular expressions. This means that the value `myapp` -is equivalent to `^myapp$`. +is equivalent to `^myapp$`。 ### 使用插件 @@ -470,7 +463,7 @@ is equivalent to `^myapp$`. > Target \*[types.Selector] #### Example -> ``` +> ```yaml > apiVersion: builtin > kind: PatchTransformer > metadata: @@ -491,7 +484,7 @@ is equivalent to `^myapp$`. 例如：将 deployment 名称从 `wordpress` 变为 `alices-wordpress` 或 `wordpress-v2` 或 `alices-wordpress-v2`。 -``` +```yaml namePrefix: alices- nameSuffix: -v2 ``` @@ -509,8 +502,7 @@ nameSuffix: -v2 > FieldSpecs \[\][config.FieldSpec] #### Example - -> ``` +> ```yaml > apiVersion: builtin > kind: PrefixSuffixTransformer > metadata: @@ -521,7 +513,6 @@ nameSuffix: -v2 > - path: metadata/name > ``` - ## _ReplicaCountTransformer_ ### 使用 `kustomization.yaml` @@ -532,7 +523,7 @@ nameSuffix: -v2 例如：对于如下 kubernetes Deployment 片段： -``` +```yaml kind: Deployment metadata: name: deployment-name @@ -542,7 +533,7 @@ spec: 在 kustomization 中添加以下内容，将副本数更改为 5： -``` +```yaml replicas: - name: deployment-name count: 5 @@ -567,8 +558,7 @@ replicas: > FieldSpecs \[\][config.FieldSpec] #### Example - -> ``` +> ```yaml > apiVersion: builtin > kind: ReplicaCountTransformer > metadata: @@ -595,7 +585,7 @@ replicas: 功能与之前描述的 `configMapGenerator` 字段类似。 -``` +```yaml secretGenerator: - name: app-tls files: @@ -635,7 +625,7 @@ secretGenerator: #### Example -> ``` +> ```yaml > apiVersion: builtin > kind: SecretGenerator > metadata: diff --git a/docs/zh/execPluginGuidedExample.md b/site/content/zh/guides/plugins/execPluginGuidedExample.md similarity index 91% rename from docs/zh/execPluginGuidedExample.md rename to site/content/zh/guides/plugins/execPluginGuidedExample.md index d7fce2dd3..2faa26c7b 100644 --- a/docs/zh/execPluginGuidedExample.md +++ b/site/content/zh/guides/plugins/execPluginGuidedExample.md @@ -1,6 +1,13 @@ -# 60 秒构建一个 Exec 插件 +--- +title: "Exec 插件示例" +linkTitle: "Exec 插件示例" +type: docs +weight: 2 +description: > + 60 秒在 Linux 构建一个 Exec 插件 +--- -本教程只是一个快速开始的示例，完整的插件文档请看：[kustomize 插件](plugins.md) +本教程只是一个快速开始的示例，完整的插件文档请看：[kustomize 插件](..) 本示例将使用 bash 编写了一个简单的 _exec_ 插件，用来生成一个 `ConfigMap`。 @@ -15,7 +22,7 @@ ## 创建一个工作空间/目录 -``` +```bash DEMO=$(mktemp -d) ``` @@ -23,14 +30,14 @@ DEMO=$(mktemp -d) 新建一个目录来保存所有的配置： -``` +```bash MYAPP=$DEMO/myapp mkdir -p $MYAPP ``` 编写一个 Deployment 配置： -``` +```bash cat <<'EOF' >$MYAPP/deployment.yaml apiVersion: apps/v1 kind: Deployment @@ -70,7 +77,7 @@ EOF 编写一个 service 配置： -``` +```bash cat <$MYAPP/service.yaml kind: Service apiVersion: v1 @@ -89,7 +96,7 @@ EOF 这个配置文件的内容也是 k8s 资源对象。其中 `apiVersion` 和 `kind` 字段的值用于在文件系统中查找插件代码（稍后会对此进行更多介绍）。 -``` +```bash cat <<'EOF' >$MYAPP/cmGenerator.yaml apiVersion: myDevOpsTeam kind: SillyConfigMapGenerator @@ -101,7 +108,7 @@ EOF 最后在 kustomization 文件中引用以上所有内容： -``` +```bash cat <$MYAPP/kustomization.yaml commonLabels: app: hello @@ -115,7 +122,7 @@ EOF 检查这些文件 -``` +```bash ls -C1 $MYAPP ``` @@ -125,20 +132,20 @@ ls -C1 $MYAPP 该示例将使用临时目录： -``` +```bash PLUGIN_ROOT=$DEMO/kustomize/plugin ``` 在上面定义的插件配置 `$MYAPP/cmGenerator.yaml` 中指定： -> ``` +> ```yaml > apiVersion: myDevOpsTeam > kind: SillyConfigMapGenerator > ``` 这意味着该插件必须位于以下目录中： -``` +```bash MY_PLUGIN_DIR=$PLUGIN_ROOT/myDevOpsTeam/sillyconfigmapgenerator mkdir -p $MY_PLUGIN_DIR @@ -154,7 +161,7 @@ mkdir -p $MY_PLUGIN_DIR 编写一个 _exec_ 插件，将其安装到正确的目录，文件名必须与插件的类型匹配（在本例中为 `SillyConfigMapGenerator`）： -``` +```bash cat <<'EOF' >$MY_PLUGIN_DIR/SillyConfigMapGenerator #!/bin/bash # Skip the config file name argument. @@ -175,15 +182,15 @@ EOF 根据定义，_exec_ 插件必须是可执行的： -``` +```bash chmod a+x $MY_PLUGIN_DIR/SillyConfigMapGenerator ``` ## 安装 kustomize -根据[文档](INSTALL.md)安装 kustomize: +根据[文档](/kustomize/zh/installation)安装 kustomize: -``` +```bash curl -s "https://raw.githubusercontent.com/\ kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash mkdir -p $DEMO/bin @@ -192,13 +199,13 @@ mv kustomize $DEMO/bin ## 检查目录结构 -``` +```bash tree $DEMO ``` ## 使用插件构建 APP: -``` +```bash XDG_CONFIG_HOME=$DEMO $DEMO/bin/kustomize build --enable_alpha_plugins $MYAPP ``` diff --git a/docs/zh/goPluginCaveats.md b/site/content/zh/guides/plugins/goPluginCaveats.md similarity index 95% rename from docs/zh/goPluginCaveats.md rename to site/content/zh/guides/plugins/goPluginCaveats.md index 56a031dcc..66a3c1625 100644 --- a/docs/zh/goPluginCaveats.md +++ b/site/content/zh/guides/plugins/goPluginCaveats.md @@ -1,10 +1,17 @@ +--- +title: "Go 插件注意事项" +linkTitle: "Go 插件注意事项" +type: docs +weight: 3 +description: > + Go 插件注意事项 +--- + [plugin package]: https://golang.org/pkg/plugin [Go modules]: https://github.com/golang/go/wiki/Modules [ELF]: https://en.wikipedia.org/wiki/Executable_and_Linkable_Format [tensorflow plugin]: https://www.tensorflow.org/guide/extend/op -# Go plugin 注意事项 - _Go 插件_ 是一个编译产品/组件，其定义见 [plugin package]，需要特殊的构建标志，不能单独运行，必须加载到正在运行的 Go 程序中。 > 用 Go 编写的普通程序可以作为 _exec 插件_，但是不能作为 _Go 插件_。 @@ -27,14 +34,14 @@ Exec 插件也会缺乏来源，但不会因编译不正确而失败。 这意味着一次性运行 -``` +```bash # Or whatever is appropriate at time of reading GOPATH=${whatever} GO111MODULE=on go get sigs.k8s.io/kustomize/api ``` 然后使用一个正常的开发周期 -``` +```bash go build -buildmode plugin \ -o ${wherever}/${kind}.so ${wherever}/${kind}.go ``` diff --git a/docs/zh/goPluginGuidedExample.md b/site/content/zh/guides/plugins/goPluginGuidedExample.md similarity index 96% rename from docs/zh/goPluginGuidedExample.md rename to site/content/zh/guides/plugins/goPluginGuidedExample.md index a65d26fa6..737bfa290 100644 --- a/docs/zh/goPluginGuidedExample.md +++ b/site/content/zh/guides/plugins/goPluginGuidedExample.md @@ -1,12 +1,19 @@ -# 60 秒构建一个 Go 插件 +--- +title: "Go 插件示例" +linkTitle: "Go 插件示例" +type: docs +weight: 4 +description: > + Go 插件示例 +--- [SopsEncodedSecrets repository]: https://github.com/monopole/sopsencodedsecrets [Go plugin]: https://golang.org/pkg/plugin -[Go plugin caveats]: goPluginCaveats.md +[Go plugin caveats]: ../goplugincaveats -本教程只是一个快速开始的示例，完整的插件文档请看：[kustomize 插件](plugins.md) +本教程只是一个快速开始的示例，完整的插件文档请看：[kustomize 插件](..) -请务必阅读 [Go plugin 注意事项](goPluginCaveats.md)。 +请务必阅读 [Go 插件注意事项](../goplugincaveats)。 该示例使用 Go 插件 `SopsEncodedSecrets`，该插件位于 [sopsencodedsecrets repository]中。这是一个进程内的 Go 插件，而不是恰巧用 Go 编写的 exec 插件（这是 Go 作者的另一种选择）。 diff --git a/site/content/zh/installation/_index.md b/site/content/zh/installation/_index.md new file mode 100644 index 000000000..96cf02418 --- /dev/null +++ b/site/content/zh/installation/_index.md @@ -0,0 +1,9 @@ +--- +title: "安装" +linkTitle: "安装" +weight: 20 +type: docs +menu: + main: + weight: 10 +--- diff --git a/site/content/zh/installation/binaries/_index.md b/site/content/zh/installation/binaries/_index.md new file mode 100644 index 000000000..01d698d7c --- /dev/null +++ b/site/content/zh/installation/binaries/_index.md @@ -0,0 +1,20 @@ +--- +title: "可执行文件" +linkTitle: "可执行文件" +weight: 3 +type: docs +description: > + 下载编译好的二进制文件来安装 Kustomize。 +--- + +适用于 Linux、MacOS 和 Windows 的各版本的二进制可执行文件可以在 [releases 页面] 上手动下载。 + +下面的[脚本]会检测你的操作系统，并下载相应的 kustomize 二进制文件到你当前的工作目录中。 + +```bash +curl -s "https://raw.githubusercontent.com/\ +kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash +``` + +[releases 页面]: https://github.com/kubernetes-sigs/kustomize/releases +[脚本]: https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh diff --git a/site/content/zh/installation/chocolatey/_index.md b/site/content/zh/installation/chocolatey/_index.md new file mode 100644 index 000000000..d84af6ee4 --- /dev/null +++ b/site/content/zh/installation/chocolatey/_index.md @@ -0,0 +1,16 @@ +--- +title: "Chocolatey" +linkTitle: "Chocolatey" +weight: 4 +type: docs +description: > + Windows 系统可以使用 Chocolatey 安装 Kustomize。 +--- + +``` +choco install kustomize +``` + +有关软件包管理器 chocolatey 的使用以及对之前版本的支持，请参考以下链接： +- [Choco Package](https://chocolatey.org/packages/kustomize) +- [Package Source](https://github.com/kenmaglio/choco-kustomize) \ No newline at end of file diff --git a/site/content/zh/installation/homebrew/_index.md b/site/content/zh/installation/homebrew/_index.md new file mode 100644 index 000000000..90fd8a6ae --- /dev/null +++ b/site/content/zh/installation/homebrew/_index.md @@ -0,0 +1,20 @@ +--- +title: "Homebrew / MacPorts" +linkTitle: "Homebrew / MacPorts" +weight: 3 +type: docs +description: > + MacOS 系统可以使用 Homebrew 或 MacPorts 来安装 Kustomize。 +--- + +[Homebrew](https://brew.sh) 用户可以： + +``` +brew install kustomize +``` + +[MacPorts](https://www.macports.org) 用户可以： + +``` +sudo port install kustomize +``` diff --git a/site/content/zh/installation/source/_index.md b/site/content/zh/installation/source/_index.md new file mode 100644 index 000000000..af544a0bc --- /dev/null +++ b/site/content/zh/installation/source/_index.md @@ -0,0 +1,41 @@ +--- +title: "Go 源码" +linkTitle: "Go 源码" +weight: 2 +type: docs +description: > + 使用 Go 源码安装 Kustomize。 +--- + +需要先安装 [Go]。 + +## 无需克隆源码库直接构建 kustomize CLI + +```bash +GOBIN=$(pwd)/ GO111MODULE=on go get sigs.k8s.io/kustomize/kustomize/v3 +``` + +## 在本地克隆源码库构建 kustomize CLI + +```bash +# 需要 go 1.13 或更高版本 +unset GOPATH +# 详见 https://golang.org/doc/go1.13#modules +unset GO111MODULES + +# 拉取 repo +git clone git@github.com:kubernetes-sigs/kustomize.git +# 进入目录 +cd kustomize + +# 如果您不想从 HEAD 开始构建， 则可以选择切换特定的标签 +git checkout kustomize/v3.2.3 + +# 开始构建 +(cd kustomize; go install .) + +# 运行 +~/go/bin/kustomize version +``` + +[Go]: https://golang.org diff --git a/site/content/zh/search-index.md b/site/content/zh/search-index.md new file mode 100644 index 000000000..62e6329ab --- /dev/null +++ b/site/content/zh/search-index.md @@ -0,0 +1,4 @@ +--- +type: "search-index" +url: "index.json" +--- diff --git a/site/content/zh/search.md b/site/content/zh/search.md new file mode 100644 index 000000000..e3690fd5a --- /dev/null +++ b/site/content/zh/search.md @@ -0,0 +1,6 @@ +--- +title: Search Results +layout: search + +--- + diff --git a/site/static/images/header_templates.png b/site/static/images/header_templates.png new file mode 100644 index 0000000000000000000000000000000000000000..6324b050263c091d045cb87ca15e40c61128d3f5 GIT binary patch literal 218551 zcmeFZXIPWj_C72KC^CSGz(_}=H${qsuF|FV5fx%e?U?zyPDeOzYY8ViHN3qkkGCoDSOSQBo3`kg`h#V5Kr#(R{;_trGF z{K3H1>EOH-3}RNUsVO`l!1*8$+cqq^k{gOS&}G{Hn!OUIe^L1i8O1+;J>w>`{SEiD zmMiKEIlE1FSA=mT+k$Tk!nNz!LiI?OO`>?v_{#2KO~*3`XOeDfe$pq5@KO*>ZMWe0 z(@XyQ>*9NI&6^7{&=}G?_e{FCx};Rnj*i)O1}U#~zTWeV`f-$jZ&MHJq{Sb`T`xTv zkvSY~WeVK*lAEPk8L{|n_pV;^jY)Nj)&uGl{o?sR7O&V7$pG7e-uZ%f>&w3yJ*Uf6 zu$fuvM4AUz1jUiIgmb@opm@4aMiIEe`yO0wulM*zM({W+N zcCtnNXn|cp^=~ftrX3{+-odr6ijvGW@4jk+`?`2i)>ED*UA89F1+u-L+<83dV~74NwChZC-g>sbBjgwbPiit4$OtD|QrF1o6dov2@poHQ^&dTTNZ zRfVOV!zK@}h3X=*L}l}Q|FH`1Xm0S{Xr~Fiq@2%i{)f^4w6&y1=)30qZT^74$~UlY zN*%gr3hRYyf4ch*$6u5pQ!`gh$fV(pQWl~9ksgQ^`^dbE*jK(Of@`;R<149PIHzkU6hxN^4; zwzT=#8S)*jF9*QO72bU7dgI<1sb!HrMi49aDs|>m{&oeR=?q!b@X=mdAO)Zz>g4r? zCp%DzI~jtMDl&vWIPBu+mv*E1bzLv6R+DSy;6BN{4<`_heQ}DM<4*c6Z*4J`zMmK_Z0n!QGQ7##FHYT`k#1_Txlaf?a`lS4>i?%N!M87#k18&&W2N#&4&2%H(#5Wg zKA`yh!Q=xDry15m2!_|3F)b!1$1=Z?>l*|FCl?;1DQFYPizi%p*O*XYXr0OBHeN#bPz5p1 zJ$vCNFqGM7wh6{;O7c(y_vzfZIe28iXUK<`w)=U86w7iMu<;DpcBy({gXc{rAAj)v zIq}oQ$iGSga3)yQgyQ1rZSqdRr@pFTyVoA6&+qfWhUC$;+s}Un{2vG$^&ulS6@`4i zPjT^CAUI{I&dfx!%I4}@VSY_)d^Tsvxm$)3n3sW<@h|^&-G^urILw1C?2(aC%&B(E z+zixCy&hKEIAAuLOt-YeJJ1?FSyUydx-irm7Cc{&*8E=f*Dxd9x`$+Ew8G4tGhki5 zS7G)&M;*bMD_2slOUk;Ml&CS4&(+^5u^e0p-F{N#!?Et@w;=Y@L8q3CI+M3c)egDN zcRfJ3j~$OhaeR2$-K)1RTN>)TmK6>&+aK0wd1bt4SOKG7=I>7=Y8qOa?tX`_5Qx-f z5hu=hTT|QoPbI(GDhZj;VcIMM4`^g3Y_dX&)w?3`i8K1{?B#H!yvPnV+wI~+E}9Uu zYp8!3`r4m#Id=KWL4~WPFFVCMnv3-pw#K>lv1eQF%By)_izBbf<(T;X&|t@FP4L)5 zV!YDOFqxQKuEaYi9A;?9=kr#;;7IBLYo4CzniUx+GsI*#d)aU7L}jYxnn{=Uu&kG@ z%vWjT1o>t1K0&x25=YL^e*O6V!JZ01}YAM&$GVp~gR=<(UduL|$A^?45K#DhUmA zM{f_w=E0m|kkbtEGqHFHb#EDY4QPKqFDcY*Mb64wNdC*Ge|}F{@-#|~vOKu|^zfgb zkj9b}QtqxaxF+;-%wImcXA~7>BH7Z$^uGozB4Lc>|8DqyF8v2`{tq<&e}{!;!c;yf z?msj~A-6`x>Gs|7Uq>hejIQjWr1Z<+9EM$pkX@kr8Lde-7o(ed3mld*u+oT42um7a(^B-EHRkH8s4kl&~F+~V)XU3%8uE$!t~S7wog33wv*T#6u~AD$=HhY4pH~ zT%(`JS>DW*l2y9wNytoE4_t1TK0N7~$|xsv_*@t2ouOR{ARcYM%yj)oKRq3%2w8Q>cP0AzJGc%d>fzw)z}i7g z=x?Ja2Ot8z%e2Z*`Ohi*U>LQHc&v4_NT%Q&7p1r~T8u{02j)(NPVYXgx6{a9J-!dL z!LiXp@VS`ZLRbsD^UAazy&aGun4-%l-J|0$S+#@Cz;~%SP+#j&YOl8i)9yFcpd2Sp z#Y~`2(q^IG^>TCM+7~B?%&Uf9WI3Rgm2$Oovb}SD@hwE#K%ONyK6^tU-T!BT1NU8c zazq?F?n#e6%~2Pr$s)Sd?%dp;A6;Q%smFIipRrTJ?5XoM4Xi>Fu*?}TCnXp1Yp;&;e_iTmm%XO>_FaRcpgOfk#SPX^x zgSrPiU>&8k5flRsnBcI#aC^^&Ya3FVnc8OyW;#vxxwb@4h)%^v#`ALT9#=guZ!+I}_KRQaTq(fHatpyo8S=a_S?mQ{KC z*~ig^qw%g;4E2q5s$emsuYq59y%=&|WEOLiFhP_S>JtTD--Lb-33M4+(ZOdd=T@O# z`)61-`PI3hS)rS0BYwO+HMYJ-A_w^qbE`#Ti0@ygT67D=G;ty-o727#;bc`FEjpkI z2Db6X9tw=@WL5G0T^=E&2T*8a)C!vwu^`lXx`RxZ^?_6H2Xa+Nlb>vLywx$=?Y>_M z@q3gDT@TyxE_r2tB30G~;9@loeNw^uO{cpwu48SjnKG#q?UN{`;MYHaiXc7?tl`^g zy|xf)>uqVb!wbX$7A`*t zWoQX4J2Y9}If3KxmjnXBwdZmR<7@KD2LV79p|k~Jb%@YHB>_~mV(tLzAgfFb;RKI4 zF)cXgw>h> zz~8E*i__#7@ytiz41OGB6wwrl6WyP>9`8SsF9s)OKtZ)GCzMcc6D5_yx)-2qpepF&y5%1~GW7_*TQvm*Oj^)t zVQp4i=P~tXUR#NjGuLkX1~J;2EhBVQ#3wk)sWH!cd(Rq-P+Q3paw^hty-feMmjcsq zlj^?HnwlKUN8Mh~BC;*?rJ}vsH#V{QOohi@HZ#RW*UZJ_S zb|{XHL45=mrMp3A1cU;Ga)D^U8sC_yaP?_=^tUt}Xk+(c`HHWv0-*y&BD1`}SeK6O zCd9&I_nx}K%~y|wij!Wv@(SDyg!(kW3i3SsZ+;)~YZwD@uG<&&u?XpU*WF+=R3Lat zvizO!Rv(h;O~3*VD(2#O@q99#L24B7q@DFio7Tv~$0q0e!jq>K*INr$7S?M+mHfLX ztrxl{ghLW3YemjD7Zr9^3~oZNPl=?jmQhxluG#azsy9Y`Yin)14kKF<1}!539=mvN zv$5A5q?S$#?QAqn7Ts;#JRU+(jU0#WwX-gIDR?_0R=#jtAT}pie2oiCnfvsRaVGZH zV*LCESQKHEK*hA1_ z>zH}#(U?N%$`%|&w|G3USeDnB>Cfu4l*Z7kSF}h=nAo&|w$}}^08P;n6QS}0=w12g zrs5ssfhUXyE{4TaS#TERAq@0KVka^R=XDNeJwOb8YCUZ$=vKj%=e9YCt-K%v>f5?<)XNi%f){lh?KxWiALQGE^FFLa(jl$@kV^NXd88E1(O@ z)->6jq6j?b+^N%m)NuAgXIKeh(;pE&D{0*V0*gD9Fe4@UHS9C7ebbISw7rTDzV`P&gq?xyoS#I}QCjj#2~euYF@`LNDhI^8XAmWk(Wy__gIFdF4!zrU%v)`EqRM zuOxR;9U=ty#doa(gtYNKX)%z(4P@2O)ZAvrPRrVM*OIDqTIoI!NA$%J8=i!!}UNYkMq z{|4OUc?%=&y0k~byHwSm1*U7RVBNfcYq`C@Shz%a=lB@)@`%y(5-D}B7Ly-EZL-nZ z#tyx4)dF>(su11W0wvY z97;vyI+L->ZAAd-(BDLv1PJM3Y1Ilss&yu$lm^J}ja`+nO_u;J*sHXo{cg%Yg3g*s zQ|?-vQl+T2zeA;1T~I*hI-(pyve%O+0BkQB-e|@_gUTqOWxIdL78g~>2=VEVd-ZOa zB=Lan{M%rsO#M`$9X>lH>yGfL_B-+*@$+aEa=d?o<5%@{d+Heoy3wFZLMMbKCpW7a zr@kto&pbHNtesAqkW;rZ8|d>!tjMo_>|^cKHv#4IH;tO>_NO|(`!yWbOhuSVPsu9u z`ovh|idDgMM=G|wVswoxBU@`f`$*qgb|vn5b(FG)N>{OX6fIjT{sm%7!TiW`-w!HG zS$s}8_o8WcM0bexjMm1zGvGIuMo+q^66)hJ62~t63H*G93qg_TjW}J6Zc(1mT5_FW zBNJG_tN4G`pr<9NpBPEA$w3GELVno@|96X{{F&wzTws~gU{LONfTxKsa=YDXxIg23 zb6eDLWI(2kqw>(xfVC4Rq}Oh|&tK&lxSsq-kumLQ&iQ*fQD@X9%8MeoNu?1oTllZ~ zgQTVPUL@%bi92j<@jn>twCs))-TJ|ptj z75<^0o)QkA_*A$!G;b69a~=MYK)E7FgMQp!Iedu)H&{uj5czB)}2OAe^gzp(P>EAS6SQo-Lfl9>BH7M(#1c8lqxGwLjG}+s1d3PMp79_JsMzoI-3g-4Zi_s3JGx z3XRgc(2Nz!vrYTKu=KS0N^sB0ZmLWNnR|fRDbjW-d`H+#^UEh94OA)?YRD>+hVx2~ zlI9-dNy+@8^(Zf#H$FLwcO~K+n~nP!@p6M|#6{Gn7skllN51ralIx`1(+hws^F1ys zIiOOgApgS&VL&K&INBtsi(K?qoSh-Rba@nMu@T5jVE+`6{#?IG65eyFO7(CEK;W{J z7qn5j?D=61EA62emS3Ix&7eCXb`0rMeI&_2(94@QjnZ(Q$BzTZy~OO`XQ)kEWN$J5 zwHPE$mcCezblM2aly=SJ`)*Bgaki2&6xl{8(i2i*>uYN8=i2;n6Yy=udZgP%VAkzT z#YJx(l54yuw42V~yW5SR(ipCE)$pbL6-KVN$cEfng7X&Ip5&WkUFvmsPf`7Cr((>7 z!kr?_gr&al@2bQju~(~AQ0_>l!^}frp*I}AuZ&0-F7n$k3Tn=&?AZ5j*Z^rrgtDnN;{eRN_y_6m*VO@-03 zuJ6JBYj$}67fUSXS^ zr`|0z%*nO*&k)W3e!=)s{rX#aNRJ$k-6R+NxqpwuP8oD7MD818rG(nNrA%@9@8=$* z1q9;=F4mCI z2>rJ)%Ec5@n^;2DM4H}(u!z|b|MX{iHos5m*=!$%p>zQ0S~vN-&sV((z3zAZAL~L! zktzBmT_nLXVG4DD_K`xzgO}B__0y3CP4i!$ygAiJ7+!*P{~kxA`zv3klysG9tTfEE zg3OCm5oiXiOI;~$-4*y$M09Cq}`rEC|aq76aG%Lr{1cjE-vMxf*PBkx^~3H zmuI9w^uLvV7{0($ZNFkM%J474UGIX6DQxx8OwINob{922dy+DGhPsOSzk-5mj@;z9 z5~lfq!wdJRPQAPG5s&-7eX7nlnr-Sdzi&HZ01~&^ijOjBSCqvk{DEWT?DMO_#Xrxf zl|5;Ggi%!6Z%`-sDSYBMzo?SWL(L}tiib0NyOXVNR{YioOgUtKeKEraj?i=R zJ{Gf(^eJ`x;m)97$zwa;rf=wne1EodYJPb-KrFfW$-Ut6lavtjhjDNWMkWnE%Mm^c z71qlQ3NGL4;Ej$%}4fPr2L1 zJ6>m2ntjWw*!qS;^L0L|mBeSb(1OVSVr^8Af-f)*_M#~3x*elBeSGb;i{j)c6iVV` zbK3Dev_%TIudS-8+V0n-gSRj?;eL92p`y8fkGretKwB%li^EzRa-gV2b-ir5?RXh` zC-`_6_Y^Y%SIy12mw{B~zjD zhUYLrt_5sj0;zJK+X{v{fX!;8kN#Gj;jn^JN=lkZUo`Lh66Z*Sklg;#Abr;W@*Gc` zj>Dh!hmdteDx+Boo@$)dZ^e9G+)+_H`o_irau84|gI;bekKkog2PMcqB!ht0OVirX zws&pTauVB+Fh6UGb`0pzZ7U^|15Cv^5nnf8%IJ^UZmSXBQ5@G6M;49@Em{NW!ie9f zlasT#=#K;4ip9qY_XniPjcp7fzf`LxtZO1+_J*SsW;Q|1VJlN+sFnkn0p43LQ^4Vk z(TPo@)6xIf*<2QN+$0ex>o#)k;_@6t^}GCfQZQNaze=4{?F>UnC1+=gcuZG&0v)`< z0-jPOr7?0QCpb|i7r(bj)Y;jJr`e6Uwl7?ZgsiiMU#!SA$KVK6|FkV z)#TJ9w%dp%E2umcw#zHZYv2jB_SG6Lu(xOuREIj2_9gLz$a+l#M&wd`np#^ez05u- z>1?jI2EWDQX#$Il{w5(few?(LyoWV)1^l$cHM7XJ*23<<3ICPvfd`)3hQ1^s$nl(sy8rc{SeZ2(Cvav zf1KCPL3_{X`gK{d3<}Lx^LRF%=>s+flH`jG?DK~yCHGS0h$t-*p0kw;r20gr#>5|C zcWu-MhdR)@(}bbpRBRBUR9P-uN}%QIvypSHi;M)5lW4KWOG$TGKax8rTsB&`+XyMV zr#PBF?$1qZxG+BupM7M;$;|o6m=>GjzU|_tWfp8rxNUmYqX3ojuEXbJ;(=q&b`xqO z1bH$z&r}1Sv}ps4Pm8)jt^HGOiK^4 zQ(uXQ(`ASmjiYlN__s{oe-G>wowWoJzhopEgIvWPR;ZaViOzq0@e2Q5Z)D<(;kJKX ztN_4N38(*J? zDW(wcI%yWbb6RdDsbQhh=X}(MFSt0uXDx`)_d(O$(|RE<{r8C>TRtxL^z|u6Vt`v) zu~Tx-XY2Ynm~LYmbr~jXcXQkxgL9zvJnzNk_7hWFyO%-4vH{gaszF`$G5^E;K$HY9 z?S;JAWAm?PuLrJFr{MsWYh&QdZ8=_TrnS`yZ5SO+x~`{As4c7)2FMh=%k=V%po8QY zXP$ZyjWk0&*iaj?W^Q<;btruYQ0R^sy*gapN(&g+)Y4IoJZ=rf_V?{N*4xN6&ouY* zvgC()_f@b=tn-2xH^xFE^f2S0ApzUXqwB)~t%~yvEPbqR-Y_NErAh(92lRt~L=HM4 zVy(~=)ywG4A~hTxtNw-g9;$%O-LKLa@|}4MM~#;>IcpX~1Ko!!V8@;M$6(DWpgzmG#)u{Mw^gCwSZyavXx7qBy4h-@VJ%^O2fT~6YA~>`5Y&|L zd3b=Ytmpitj8o@20^Ry@n)P#(yGxP4Ij?7a(@`FK_YI8CE*F?ex@>)6>2A zmhAw-H|=83wnT0G+04g6&3n39{-rc?DLrBUXjy@ej~Zw#HHB}Ita2_ht!p4!O?q;~ zieqq51U*29?yKFgClkw3lhJytr-YF;ZB1cb?W@I?Wm{Z6n3mM=)12<{v9=66w0Su; zZleAsc#w~l1BG_2^ay49`eI6glg6BOvU6`bB1V|BfJjvJ6;^g!ekX1;C)$k|sew#! z<@t!2=@MGt&8|oS(JC3~8i=zBN*O&)Q1=-1NYH&=UH4|_-7y@Mp@{2x+R*8Xo=2LL zE$igmP(~1gU^4;&kQw9l90C^g`E?8oW{H#a(P-_|++I@NM*r9$qVDIILLL#gEn2ww zM*~vnfcWWn;XR!&3+&^%`)S-nn3jFCo|wXlh6~a`d@?69Yf;LCYIUNkdE%anWLgbO z`|X(BBCJIA5EA1yDx^|2GS`}bSg+`*X<_vsTwXQqi_1l|CgYq ze;S8ChJ8{c$j@~9F3DlDMex3Nso%$=&#H$@3P@?~0>UjXD|R#1COjmFTqPV@oJHxd z-!v{JV-;>oMK$I>%+qCN+n|VVU+E|-DomFAoR;(I8i)x)Epqia)2AKT;I?*L2Raa^ zAniI=aPS7^eOQe5c(|@h%eGk8^Ogvplt^|0>*_T_cw%&c@~yxTdp zm@Xe><*PvCTjBy_wa=;tAM#@RGv_+zo>fV*t4MCX?YrIwVY84X4qJWV9GjnAC{_`M zZ1fAJ5YN%%jM?N>&+=&d&*j2iu#E%hP;QD+Lkg2jPTyuaGe;_STD>am;}C<>;uO(7c4qerRH?hWtfo5QNG|a8 zYvuONCtr2k(BwHxKU^_t!FL~@TCb@o9Gha?=o3E%<|L9)92v3P7FPM0gDG`HKJ`}*iZhLD@lw#Z0of)>p|>-&eBPv*@E;j~`( zZ|U+zoEdKHZ&JgspjOv(GndlV%nsEmvQ)4mO`1Q;6vcv47M!SA# zSqt@xC1ov(oORNRqguM&kG`}9cti*aZ;3B*(ESk?fkYA4WWv8wtfiS`71acrl}VG=FqDr* z()5W|hx0fGI7fHh$oKd9M3_x8!zf48XimSNpcPR+sHI!SK{jeqvfG6O>-MxqYN^My z)056#OL}wzaFA@fkv@)H?~=K`wmP*T!utCDAFYV4HOeU`8tz_!vZsXdEW4XFGz}13 zq}#tyBwIx_cs?gNtrXrnJdY2!_0Htm3rxe9ZrYD_DJLi&!^qSVw75rfAgLZJ&Xb<& zBUdfp1tQa2cwlMnwUw}zElN*@;4$40zZ^6|3@AXy`>k*P3qes;OO{sbwP9;(BKhqWPfEgq5Jg~J2Y z;k^&7>sB4iE6NKOmKgCRh0ahf_hh}sajTPEyA`lj8+z?M+3PGZw9s8bGiD_qzu`9U z=87#57NCU-93Dw7ij`uEN}Q;{C|UD1F*6VLq6c%LB3)tOP~L$T&ntY^e?UQjUh!M% ztGKKt;&`EbaHKzOWSKiWdC4VxGMwk3?_ALz&2`Ex%A3f5OQ*gEBz2eZ#%9}1wk)a- zDiHaoFbg?&Q)Hc5!S`BEf`ZPJcW`Mmzc*#3CpIp@J+lN(F4_>3yZo|o4Q$)b!O^;S z6W|0Y(4~)tl~YkU{NGxH<%AiizpUjTn@rxnGeS-5oZWHC z+w`rRohM(EFh@?fI4w>+_F}3J*=ut$G&baZd9)w4mITb|_3TU(+MQ&umbW(NgCHQv ze2Hj&Ghon*d7$DYSK}`|W)~dMhzn&1O$Q^Cu**dFCFP<7eQsw;PvgnF+`;sP=(#aq zLC#{jnV{Z~_&6Zq@QAua$+wyV`BGoBm83|469q@-kad943xOm(nBB%M+^y61C4Z=z z_^fSKWDV$ivmw&9K(y>NB&-lzcQ&=e$2*-2u_$WOrK}!;GFcZtoO@{>`E*9I=OOBw z*j+y@yVM0!IP#(YoITPY^UK1(*AO*zDO~1$+Q;`MPWYI2UmO>;C1;8Dv>$Siyhq_O zEyU4~kD1J$qaBjO(iXz@>T~g}?Fo$M1|OrEq+ zXN_2`Hlp~J)(GY*_Ip*S!ilFB(&(-RpO1{MVkJ4^F{+)i5P417j99rsah8Ax2L{bxUJjDgb^8N$$`(2Hv80_75ID(Y+{YkTscaGUD`zvVEwg06)97*$)#c(dM4D{c*g zON655$zlhUd}K5V_K9;Cbq&t&P~_bB`^HL1v(8L~J0WX(@1{~_wUA5J`>ppv=N}Xg zaI@D)KUm2cm*X~3WVy|=@vLRadJu8`NB3*(Yy&ly+}qWN(tQuQikDJXp{bKnph>HC z&oWO$MpaifZ{O7i!$TT+X|~8NWw9Jt(@%-3YfCRJ3(2Z>_2lk|XrM%q9rlgZ2e4^W z3=EM1aRek|aNwTEw&YLz(ibCO6ubcD`!GxCl zcrjq(%&e}aX2SER$xE4a>$wrV{UeeEKTKF88@MKe0b1(?Wc+5(sAb6Dt^VsN*A=wvQ3?uGUmU!eQw zreF<-*I>)x#d2;VguRu|&guD>Z6C6>f0bT4c*u%obMtXiGpK7zZcK9kV_pCBWUZj5 zIWQ(q6gktP(b@jJLs^*LotzN4daKX-yIUfdM$OI%N)^lzvCME)rV+A-F*s>1(UJ2( zb@nPxdZsP{nbS=m0ZVL4F8*M9^ig$TXg_S)%=%N5x}KR z+icO3t%jFNn8=8HSXJzOe{?b*T=G&FsmrBbo&MGLUiw#MHWs3KpKaEzCo8F`dpu18 zS%;DO2joddtmA1MvujwMp^Vfz__2tcljfImtLH@^B6z>pCj3hmCI3K5MHjbjlJ*$I zvutMSRdfFOGRK0jK@3hi<>hqh;3ow}AM@95=rK70JOuv!OJ~t19;kg{Dz^WVkL<&@ zh8HAN{4L}3pf0?9ZwvbEc?>0;(J8!h-Ub=ABF|f__LoctqEq*Y%(4&e$5E**@?1;P z2!Bd-D`43;4ppwDxv!b$P3^OANpQR?^g9E!mfx3QQU-He)Xj+~fBzfdKqKXOkzp|? z;QNaARQ_Ns@(yvj&k>g01 z_N;ovKG%!Mq*$nS;9hN-+$j(54CpFAX%Ka1nr70i6cE8#5s}rB2ZXVSE#N9{v#n;< zMr_~h`D)F}-m1fZMT8|hox>f_$%jl2kKAXg#CR|dL8Ko!;?gHNd-pp62b+rwv$whw z4ruWUo0?MlIUe4&3m!YC^|&7ecy6ba{j2xeST3?IrY*Xmo9{@E4){g+6XW$qZ(+_r zuHdY0=fk&JQyBZ+HhYhcvL17cLC)Af2s{>2>%J2Ac1+ zWJ%q`Kj=trnB$}gQLUVjg!;2I3r(Jxs$Z&>?oapECv+I(fq9caRbkfByf-X>cXpjr z2P$gj8&1kVV@c*6ej&j0&!0{hyUcxcyru=i6r{=>wT-lFR5DUlL8FKT^MVx%CC?A0 znTa#&)4~!ebE6*h?4jiJpT%CKvRrADaJZAX#AMQMNQ-@v_PV!ZfLRYd%@-6wVUdq2 zFr#tAwa(ej-5qJNn{HWg)-;XLiy+QCn5}DzUl$IvPGt`|JC8YQg6%^;Who!GGs^h} z|Dw|vwt0Uj)(p-`lM?j0_T)>n7&e)Y7~t#Frc>-bie7KJ#Y&5*p0XPyiccnzX5$=U%K9KKlgE)V&5N$rfspRuO}z=e zkS*jbgHCB4qnH?K>!%21qb|-NA|kkMcdnNgJ6?F12p9iRXWr|^)s#+k*LM25=_fkf zG)`-MqI_NuOu%y-H@dYT-Z^1%41npM?d}<=>D;o`#((Qzp0X0(UL?>{N@2SXtYqHF zm*13rcR^%~`Q{Vhv!TJqE!V7{I%Be6L6I}JB7z=qM!3)k!xiPwCuQ~fYxHKPk4zN` zjT))r_a@fBL!uq84L_!t3+$JzpJ)BbSYTj-2yHy`k`gu7IOAHyAsR$Av}Sa-r*F9# zZsWh1#~MRlIm|hgqF7wU>*igv99{==DtRVK%ZTo+2YV61U03mJq*^x6Gz9>PYtD5< zpBJPFdRuh3A?gOWWn2rW3Ml^i-q+)-^uF`ZC6?^QOBSK@CREYptp3IQ*}S|yhZSqO zStbB|UNd!X6DWw9Bw?i`$~P81Vk_I2Op*y)XFVAZ_IP{&=y&}^0;2Nx0MHfIT>Ci# zOQfY$d@6i0A+JTrYXSiDoB8Vc*BH`XQ|QRoK&DNL-e3`0ICMD2uL=1~(GTymY)Fzs zT)O`eV7Sr5-qO>|;Fp<|ssoTfZ`EC)^69c*b%?#Los1|%xdW=nRA2|al3Y$aL7pFU zU4!)>KjWR#yH$fdnxEuj$L&}3?q(-}0(4h9M3L5fG}G7P6R14u#`V-YO(Fv;7X#+! zS@UE?I&d{n>XR?tHjRZ~G;V^FHrq?Xlrjk&zI6|fTg$R9ZwQz3b^r&X+GU=2{)UEdMpBndvwkS%H9DP3x^!am&7~oo^^6n*t zN}i_+my9{rnp=GN%AQm5dIC~(`27Z}E8Ki)IeZ7-`_klaMS0cvtJ$qd!s9E|s~2$h zBkY#o*V$(;*_(Mms7PVHzBwP3O3+G9Cf=~B z=;4=HO{)geu@*Rdq%NMM$dE8(SemL^?VHI2pDoiXPe#hGB`S_zs+|{hOisK)Bg*u9 z`*OQT#*J$hk0VX6)9EyhkwdP+S*5dGp@m^aFXt!JvY39n>hvF@#mpK*_J1>jUJW|f{%uA@w>RMpRI;sY}p1fpMmZ+C1=)OTEl!Ya__8$z_+Sb}mnn^uePXjBw z-XkOlDoENn@w6WA>L!KNw@xT56poZetQ3x=GcBIsKRsMCU@9k+1*XV#qy9SI`gXUw zv@(1*d)+P-cUyRfA344j<_5Sh5T{dQnO|gFZR~pHi%-tAA0OcoIZpVoo+85z9#@gR z(Fyyu$_2r=fMFE;7CF4XT8TOLjTq2>A~_+Z0o9cAwJiO<5}%H`0k519mFNv8ur#QG zLt%N*C~y(sy28Y2(DLaPZU?T@GOb{GR@+VLai$u2m3w+AYsHx=+GHwm`a|n(e3d%) zEEMvlq{VHWiA^5&W-h|KVo6E*u_MJ@q*_!G842vb4l^SXF`LY4+Pt!nY(yPoH^NAtdLA z#|^@21a*kRszu^8ZS=!`&c5 zjP(_k7TiV?o_?c2I+r`|soy%)oQTzaTi<9xeCImbg=p^>yI) z;Oo@|HL+O%9#BK~XpWhTqQC!JDxG$xXMCauOj%+x<_-Cy^_`l!4?nJpO}c@l6Gqhf zs^=_O>j4iuy_EZP`n+(W7ajWN>Dg+N7taZ!-m~15o6>KfKqHdbFKaX`{UH5K>F!wT z;RLZ_@Zp*1gXBVA2dV|vBs{bpei64;n4j)a$MxN29db6}_DVre>DYK1v3Gp*d7+Tc z(-#q@$-IRLnYO}rG`W>}_m3Nd7Ra`UFwYqPSn8yTsx$F9@oKgUp{UbdjAu@yZh(d( zzg1S!BM~p6h*|E@yP(;da9+S^TlzgPYwaVQ|ba2FUn7+N*Bl!Gc6o~K=8vqOAOs41Ilryi|g#@Et@S`|W? zC;H~qtZL>{U~s=DZ$wk^lNNO#nJ|!(n;oF- zH*9hLJ&M8ir4*{E0@>!eS0YF(p(CBnk)ECCi418C1ie-K*;k?b`9ex?a(1Ykg#kl$ zL%60?gD|V?Zmi30&h>AtNVU7{vH})Vu8M+#^o~4nHo(i-U*^`OOc%n`Oh<+WCuU^7 zCdN_)zngR$=ZPQX}C9@Gzqy$*bX< z#O8aLK*b!+zVOKuv^p$N$Eq6Sp53uo+kl-ox~5}n%l;W%Bikyb*tV}z%49C*qo3UL z`IyVV=CFL9@PK+FG{HmOB22q0FzpB-n)XA{TGslCJYLv3CuUy?C&!%7DLJ7>+R2_F zZ@5P4J2TCtApUGPvbXM*V;`BH1ZJ8Ih<5CGflQfd1ZgO$Hbf(pVAb(^+b>>a>^|6( z#kA=hvaM!doWb;ik&FN=>NzA{@_C^D=-1n{0y%)r9c6W+TJ~Dq(!|e=kh61EOV#Fv z{-8urP_8hm%H9-z%kz$r>^DqT>Kh(D>!1`*i$~q?&}mp9A;{E~1lMrP6F<#b_Izg7 zIkl1wtbtuqKhGK|z|m`m-gB4`D^Brwu1-89dgyO`$hS+KY?0ZODq$Nm^f( zSE^%w_#+TuIhHG;^ZOZNd>&G-79E%usJI-$LM$Sd^q_c zwxCmROwH1w;m9;?Wk57ksw-U%HM-9(SGX@fk0?B>7Wo>aF6R7=DNEYz`Q*@yl}PD@RyyPfrkuM&qN@LJ{^||#$jBDuVSt#9$j*Ux`1ge@fPEirqhm2&-(IH7 zRPZiPR|_Zh=l=q*NG#J~d2zMi`LLJqL}-;(j=Y|jR%(aOu#tqJds&*-Xto-ChvDi{ zbmJ4mtc9YiRo#{@f0#*G0%O__r;S(FX>S7_1GfVdzzV%(< zmoZct@oS$e@@kS+DLV*0YnnDafVFy>COo;+AFPV)SEFgQ(Em`^Bb3zB@p?%ce#^YYFy(V{&FQ>w`Ht;L% zH}+->1czNaHVMKdu*6l?F>%er(WH_WGl(?Wl86~^<3A}3cxi{c~MC< z%U9ap!BTk_V0;4C*AWl5w1>X;tDPm!d@H$nRR%_;`yZ0bzXU$#%uJE|>?LQK2vR|5 zQ1*Mh?&kb!E5WmSn*q}9rJeSN&-Ps(4kGHEjlSXiv|WA3y$E-QO9>{fiABcj)k}$p z3ms`KUWYB76h>Pc_cW{IJjC}>o`I|i{hNFS1D&1v$5@&x>)u94Lo4(4+qmE3=T^@X zHVF@c%jr03lgV}Zyp0q^&&-K79dD(CB5A`<>-8pi%e=`K>rMNy?zJ_w+(`61hmuGr zP7Z`>rgrn0ZJv{11IY30<(aQ*Kk*jy&N{>pW25oM-3PF9UQL&R!Mx}y_2HOS`Fb;= zlHOgkv{NYN8}UIEar>KM!pSyuD4*Q?ov2HuUIkh|kD!##F|SsVJ*~}1I5CkhFrug3 z$SBv|RoQ^VRNp8{xntGXeP{Z`C&J|r8xP3zR`uuy45NKd(t(tCx|Iks+<;}lqg-;b zu0R^_?j|9^{31MU`82pmdr@BW^vWalL(`nt`;HS)j)!9(EdZKL(3z%y$0n^V$%*gW zt1fGYyH$l215X)WkbLaqb%$U_AqnCiTDs??gq_gK35_5mhoFeSt6Cte|LqRL(i;bU z%{zB?Pwvby{SLuc3DR>|@`LEIxW5}UWraU~Ez>1drHyqYzM&~LyE9KL@pp2o&2B?^ zky?TT+B!yV4q;rh^?rO;2pnLo>-d(Po04+ zXu2n6`L!QmhLxJ3K$cV3SPI!0eR_x51-STR&h!at9i5-~4)70i{}SvyV1_y{(?c<-A`Ym+|9Ig4#LpFO=J3fnrW`5bW=+_s!$n`&lj%O#B! z%0z`KwR1mggX?CnnY-|s=T{m&uJB^hpzXY7#ZIbiKg;;v_dioA82l6fjXgL{gu6Wm zZ)7O8KG}58ue&$YG0|{xe;X014($5!L^9*i{mQWR&iiF&+-+*ch59FCY%RSd2ft34 zp>e@Fj^}rvA~( zqtJM!4)Mh%*kF=FZ~vTB6)IucHdQek-}l*9iGOxBiN?Lwyx~3~@_>B>3op&#Q)dST zx}(-jgi+mKwv2#vw}Qo#v$C>{?kJzDMZ}GH2tHWcYXAAI4%})Hf1mFOp|0s<$qk<4 zdvdV%I{D2T5oVx|TTZKI@04g3Y7=6UPM#ws=kUqm0l@*+u6T}~BSn@)MBZ=pRkknY zP$J}Wk|}TbjKa)GmzK7+{}YEckvAs+Uw+&K66&hk4CnjsNuZ6yj~j|NLrBjIu$x46f&C`<2gA89I*?(B$_D0C~CpgM2VD8iQv&PGv(Ll-DORw7-(kClimpAI8Mg!|Q2Br(-`lGD^@*?rOkNvT* zjFBj^$Bx(?Qq{(MyfS0%FhblCJnYv4CG9Fj8tBhMjp|H8oAvRa@N(G zUGbN8`e(f0)daVM5?HA?sR;H5cZ3G4U1@Y&n}q32)Gemah>0n38A*2tIUQ>S`>$U0 zc?9A1*9~v4ZZ4%bX7+ZL0d=4iCSBHoG)&hF(tea41YcDh*6kwoflWi}RH`1B;jlRrqBSJbB{`5mx#-{Mu7`paD1 z|Hs~2hQ-x1-NHeFI{|{by9Jj7cOTq?ySr=9-~^Wd!QI{6-QC?Cz9F|h&-;GYb^f38 zkG*Hp)4RI5WL2%62qtW)?f8lcruq}e*$@xUlS_=j!O{^sP;SSk1isgAJDml%Kzgu# zx|`!^^pXJNb{gNa&`xWuV9CP+t9-t~f~VuA!-^@bnvN>61B&*Zz+4V+PFd5yz zUUVK>*&k>>hg)&^6t?nRC1kkP*v#^HIX>upURNCEGW^Wo#9_8m?{H8F_E*XQtSYO# zweSzh1ho*3eFhI&S9igFN+>gu3vNo*A`v~-b>cmH;g2@xti0QGuuU7oMG zeHGR+5}h_yRSTv$?eTL6mr0;!zy9V^2M~zitZkA7`?_MA5Ybn0G4x#_wL#ONVI9|l ztnZqqm-CUf-OXb=Qww!_Y;3e2UK1NXTuB>ycz!k8h@RY7&j+V=$z#?kr>SY^N6Af0 zvgJ6NfTIH__a~2GP<5}S-Pfgp&*>&6CKp{^+TSuYPyS?S?Q41B zQ(rpb_`vsEg?UoaW~8T=_0;-^Z)@vLN=C-9ddz29HUO&bcx3IVl~ID(^fX~7y;ADM za~?K#)gBxBq5d)Qmg8}WjR`{fm#U2i-Al)|^mAd$3oX2GPXBsSXQq-t9a&DTyMBLv zzw0xJ(Q=JNzLlC`s_@+3EyX}L83qMxd5(ho%!ahr2O7%a6i2$pyS}y0=#(sjvp}Lf zUoLA0$mts(9!Zd+T)(8PuG&<#$40k5C@OjxxoIDW&Ul8T5+@PMOHBQaheN~FI>?`w zCdC&Pr{{xCy&|VT9q)A@S$|lPU5fWO%Lgi9DD_e>I#YtM_^j3Z04_CLDc*~#%u{UB zFM{vSlSj$5I^nJY=#ZjLQHc?JDQ44xH9crj#bEcT1I7{OZJx;$M%&4=?(}7&n&q|R zYW)2n9=UmWT%So7KV=WV40mWK#G8!(ffhqzxOC^EbP)W?fs>U^vFH}vWh2Y$w!Hf~ zm&&Eon&VsL`s9BR`3Zm|yFTDyRBxO&{v)WPxfUf}^-A%PB$t*;SdXKtq6YHF9Sd8) zgoB_sVrsixq!Ti|XqA5qn4oD^Ty z8;E_s9M&%~J1EZBjlQr^;K#TX<)<&!SU41To^(hYq+Ha)(xGFIR~blLS2|I@Y>sZLq9%g3a!)ujqU~Fdt?X*9k-|#T-cRsWkO5&K+{{%4Z20)(+clHhx@*t5}n%JmoskFB*kr(F6JSb3@)$xULX<=OsY;2}Ul9ltC|F{W%e zS6cpG^XJd70cOkL*m6L7mqe+fkgt{cobuJsA&Pl~v-F2it<1Gc=jaUET~5E(MNQu_ zWXG<$>0ny8^znwjrQt3lq`PO6(>J^Mz~~b7fa4^v!s5{8^^4=Lepjd_O z)$>ZXexH1{zovMaBd2M1&h^U|-=~dTwgD^4W}%%?H-(b>9_8(^Og|>`J19(!g7sRw zougHHMBXzaqxr&BHmh>G$Yd5F7?_J~GiCSBG;@Z7XbIXB^_)^?ca-FuR>W6nntmvRx9ovmXx9+dCRd&9wTVfey-;6Es^rwkKZnL{@eN>VSsLxg@pDBk|PJx`wS<~aN%lQy*zQ^ z;(HC*Oq9NQb3W?pilqPi;No$I$>ec)XnTFq&7`>ck)5(xM6ux$b7lI{gjv%Qol(G( zZK)LYrI^fdq?B@#?JQ9$%U-BB-xvCdt?Yvo#eGanY0tbxPq&0AHl@?^S8gB$Xdgng zX^*G=GD00pYCbqU9DBy(ot?2xdLxrg8^I5Tb9NVlo6w6LY`fHDkH_nTR-UIs^_-Pa zKS;#Bx9HDq2~^Q2)x%PDneX|&^ddCbi|CXtaTk1X$uDn|UBdEtIQ7IZb=1n^@sa8D znC+*;tflSLc<&U)$^SfE-c4@!5 z)kvI7Je>_XEX>WxWUVxhTz%FRP*Qh4;+Kw?B!{gE$Futyx@fW|h&}B{ahoA|)-+t6`GE5`WpP1Wr~l!i zO!MO$b%m8!+FNz|@CgW-JdNN0ay=X`7#4bYsFX={(9m`qo1s7o9k+Kkia(q|6sgTC z3d*!Tm}$ortAFZ0w4yg>sY4rwo&5M$?P09{jWK>f&);{JIBRs7NC?vo3P!^mAh zoPW@G(QR~%;I_B%bd%biMH~WCrN8*Z>%ucmk9d2!p^jFQo%)sB3;UD=F=_Fw4u^dtd@KY|;x8 zOL;p6|Agl1)qy{7DP!JaVBxBRae-X{RR5}7FiRcCv-a0BuWgTQoAczoD$(_cjz%&1 zfJ*!W%W;DO^q5jsHb1+-mr1Y2$g1wsA0kPWZ6mir9E!E$(jTMBMCG-##C)@C1Q6gr z&z0zi0XFJGMt(l}4Y^Evug2kK}%CE2!kLIl=hLf*K39p%f|n=_CjY!QIj1uRE9r zVNbnWDoU8j3+33aA>+F1TRin1%&yBYrb@1vaF3NFOoQ{(pvFCJUT(E>^x<1^4e z3g_-$#{VWT5|DuhD|dJ40}p8Zy+OdiURVW@AQj90u!UkSMWF;Q@5AOZfU;K+uchAsqaoelr z$vygcO2CTWCCwi6U%~-S_|GTDetAdKayE{O+i3axK|ufe1^?d1sZwohKeJbD8P zy+X(w;;;>A{)_xM*8g@^06?VGKv>1$ihSsqa0~(T{rh`)0Dx>WGL0f8g70&5Ow9K3 zy;UC&>Z%g3TDXlK6t~S8T`<}{?r4@f?AxgTy|3Dm?JBvA!-d^mD!wF|!Gr%#LTWfP zLq`E4VFa-^f93n02re~qo53wg@_xHfZo)!k+L&)KdE&Dr%S!^dFO}k})k;UDV{9&6 zr(Ct-&vEhxyQH_cFM|W{|C%-J#b+Vqt!bQfAK{%XIG_PQZ!oE)v``L^O&BRmjwH|i6oWRrKpB4E3LuN z^M{s^*!kyqIW3Z2lVv$qneaFsG}4MJ7Udho4}&@uk3X-pqO)%C)Er|mB(#)%Y$+>= zM$uWm7N^Y{+@T1_*wiF1wA^mNqXk57OGJBq%U@Y8`Zog{7(@WW2{C-`+Hn4=_m0O4 zg!}uLKu_0Ztlcnj%{%Tr#sQ2#TM-heYLA{35diT6l$ah{kY&=0MD((g6_u7H=3NvyHx5#qGnLtK2{sXg^jy8oAjA55peMARcRlola1o7V9o6| zr_Tna5t18R!QfQJ?bMv6HL0I&-lbYeIDV-p!sk|q_UAS#flvQyPrdcX0f2#H>UF=} zDwN>ojHV_HNAp#x$=9&Pk3qQIoBb zv7GTAeT_xt3Q28Yx?jqr(7t-PI)`NV2{xK{8|45Cfo^#@${4@Fc2t>&N zsG>&dVT)BBdi7I>B8XuKvRvdMTe-X6uI0~yN(}7Oi{o@ZVVwuC?VzbGCX$E7ZkL-L zd!{&URNLM~R;#d2yZD|~YxYu<9Ll~RqNL)YIW5~EL?ckL5Sr$AhSJW`MG{N}NU#Dj zDtiaf<~vC=MO5am8u4#&3MZdow$7V|EtPheRYjn~B}Z%*DsjQ0CsHjIXZa{;f0Z=a zNZrcWn$!}GC<;EVyC>ZY-Y5avvU50(N7dsGeiZ;oKHC)~0$b4~ex!1xMw4*(xXxM9 z#7B6a^Z|U$CswQ~4zUo$MV{KrE%~?X`=z%}KGLCZv>q&b2G7G&{Ax)nrNxb*Qt5EC zZ(>-b!MI7M8@>8*aI*0qM_zE&^DnQmb8>?iS9i&dI2IfZOw46GlexEjyZES5btc`_jW zviWb;zbl*n&V};anfwaqYW1Yo`pP%E;|mI?T=Y){FM7->b6&kaNB@|1);lv^3B#^; z^5cePrA8079VC;=u!Np1oiXvt?7mP9fQbEa$l~B;GY;aSb}3vu4t^Z}YdQB=^*ku- zM+J^5U};=;L>ToYMp=nYX3H|FyZdpwa>AWldxmg$ep={KL@2Au;W28D*y3+*1Ke)> zN5FH9L!ONU5s`!4KnB%WxBV4TGysRZ>a?ijQr{Zg#AllnvgI54#35NgnI4j!i&w{Rn*^-ihMg!#|3cp!KV&gRJ;VQT>${#(W6+g zG?X;OQ2jLtil`LN#gR+2{3^pr9{0Ymzlb=eXxO4C|{9KV&s&3SYP&^QhfA9yM(% zpgO{wmRjU7pBh)q^nhxxre3IZq|r`n{ucFDwDZTz65kOQ-QfY3tLyzr>TB-TuckVJ zehNYX?=R*TlqxI^4KcItivr zGEg!pnfuVF#oA73t+NA1>*=TUsgwxWO1JP@z{HK?Nshz9cU9u-#)5=hWq8rsu= zqip9l(O!gl45oZNK1Dl@@xoj9`Fu!(Z<$}8>+L=w-J|igaZaIOi`JA2 zQ_>wvf$z<*5rQ-%FnVA3p`btr3Bdimk&r-v7aGUlf@KX0s~}8XgbeS%4-OBl_w}d{ z@RzcyPPVqf_L+ByY~&~2U43$vYC-;l)&ze&NMO?RoX_K{oN z9cz%OmU?4Skc}_Q;e1^J3tKu(hCV>LrxaFZZDr|Myxy$2<9zgNKQa1+)>i$1)nGbR zSs+Gse8L|iWR#+mA7$(XhZ~x!|IpOTqD4)z(u3ETi0*sd6m`ySobs=1>=}O7#0W}GM2@;jOr#S~wp0=A$F^Zn%dHH4OCp%5 zZu;GvZXd7p4XunQp0qU#w`&GAb_j^Bw>P$y6&{k1OU=-1ONQRU6V-;Nq2z-?gy|*gq{tL5mzQwlMTh+uJLEDBJ(ma1}}rt3BU!I(%eyY*OXf+WETK5pZcZ9Vh;KFf;P8 zl@$aoE-th5z%cDU%>;ibbg<5}nWDTb@P-}K(PA@LJ7K1=sVP%l!&Es4=p_anMC%-{ z_G>x(kZ3N@uC&Rb{-U66-zR>Ql~W6w9|W}16BzdeDgrcuv)yWRPePK{4t5ZpH(TI} zY8qhjB2Pp-XAGuhr#pt1!B$#c5;?svo7~+WC$2JPigSaM7eBdsm(NP}2HW5wGC(-I zGqkVq*c36gumH*TKfAaI(AHrf3W5*HtBu4gzHT1)p${3A>>@TPYu`Z;mSi2iqvH76 z($$FagHx+F6*7?%>JWlgFwqk;6XVvppVA#Iwe)`xo__5VwI~S8OC=^sS(2Tc@%6hV z{bg*?Az4e{KUrT=l#v6HhfOUzCLc*bj!1C7U6#$qD19=gt{nCb5+ls< z9FVjm(2HPik?WQ*P8Xt%WmA+1=fILnQu|I&0h?#OJ6_FzE^}&BR!u?zb|g*gvz#u7 za5!dYU*9jhAO$sfUx|bXSv56ZBos07@5%|;+3UR;hK3MJ`yvLi)(jz`A>VB|F?m~B zLUt1h3(X>*Mc=k$U3W>r>`xuQ}$wH{hzHUpc)?%Y!O z^t7V><-_gR%t~PJ9y@rDNT!cqp)Jb(5>Io3x#MX({g{e&q)?&dX~mF^wlO*VVSM}! zVXJcPP~%Su{1d!1D40+|*5%csD_C|RB9n=f?qF<=nb_QioT7wMeBWd)Uf9u8Zr`@= zXPzdrGg#$ax2?sD@%Kc26+cCKUjh(%#OZ81?A$~^Dj~pgaUtP+FNS0M0Q3U%LbN?uu zK5O?dSOakv*N2#AIo#o*s}XH~$`QNen`-baHPhK=gTRSdjHzDG1NFrf3W-hyp?>3B zo4PrUG3SLd!Lg6rnCu7*(JDs8?kHoqTPNQ1;as$)m^fl^*f9F*`{yFcn|f+g8X6ko zb93HirRo9bo)Z>b6_u4|w+Y%E>jIE#TU&yBA!-!h)o6^2ooBPkEBrd&OLn`73-P_!4hr1)d&r_34xp@8_RbGs^{&e1muH1Z8cm9}=;=bELhHZO&rGH? zrecgQj5zbGv~D6kZf^L2*$l>3U<7JM=7IJSSLefwCj8vP=*@hPcjjc@aPFwKCOY3w zTY83auUQ(qe4z#s-}52oLTjPLp>jO4vQ|;U9dxGU5#*EA zYUnj~OLydn7u1if_1YV4v#^=<8W`A%^Oc}<{lN&2*uG~pVBK_c-pEtGsww3I=$AGo zs4}DR0xtZvy>AMl8ICoV-0GVNSF&q6| zj|YWZ^epHgmlRtJ&+Z``xHAePVrlqpbvBDB%AuX;mzB(Io70~xMUK;J-J8oZKQ{)C zcq(zYfX~iQ?9RnREN*#D*>MI`Be-(m6;l}=H`LWrZV;}<#6UX5P|TTDr3OB5!YoUO z%;YErgpYr*mv?L77NHwmaamq2ELk`>;a*KYx?czO_O7aj+pB!H`Vu3??E;|_&e zc{{l7$~c9H%BD}3H{e4-&x&R%J#Vq|*JiBv zpXa#`N^2BN3O3NAXnAW|tL)WvBQxP$WzV{o_9O5&pAYWs*gcOJ02*#!=rn3s_W0=N z5k_gxsCb@dA{10qEFb0hbqMgD_DzRfUcKKvowYokclTV2*QM|H&WxNP6Q3Vl(o^B7 zy1Vua&8xKNk$$qgiv16z%1vy)ahNsfFep4YbB z#Qm_4d&r}vDHoyt=t!Z5W@q4&pW0;8{0v$G#hjM((A1gLeqzO^%)PX<#6y{f9x8G4 zZE+-l(Pie#ovh|GyStnloV({ilY!_*=FhZQmCG;PB2b}tfk;V*>!&rcl^;&T(yAj! zBr6hBGvX=w(4=r9rHu^n81lwra;efh>M=1`@nlTxj_&RCUg^3AXMONk%73xanLv<9 z{>VWeH+N|{;@I6f@`a`B?KcbM@lU2?`+<*M)KolLUr~3uY40^TlH%X&(c6l7!;2@) z(M2|@!T%b@`HE|xEv>Lqb+yw7$6lGYx}W`M{fx^OSScaW;NAHl-pt6VH0*q1USZ(T z5V?7lJ}*s9i{>j`)5|BY@@Ylh+$MZUk5@BG|07^bq%#goDk}CCiTzMPXT;Xde0anY zl{S8o9Hw|$n+7sxEqEE{FzY1RZiC%+A{gbY(w>p4Hr=e z4nl~$nQ3)N8`NGK>z3ua_sD!#6Hi4$M^sGGgU#b;n2&PPbK5)Xpu*(pZV$xefd#*V^uPn zOL{jIdQ9$+s&5^&hcEU4P5vkIyN^P~gFnyrVEr&njN-Vp9>iWkVQtqX zLUD_p+F#cW5odkvL`cV$?(Yf_R{$%G3zu&xT_eDeX`BjI-4JMK&MtglTE~1{Mn!TEtQp(b?$07 zAw&d?T!}vCtOW=^IVY~I_lhmdhq>5LVrOv@e=*s!b45fe%Zxjk;bqW-b(#a z7IKuyxsLwL5a4kTh-|=UAtLDTD#%3(nUDjy(ey|z*4-G<1?S$hOS0utynm0xt|&N3 z`Dmg}w_UP8p+ zp+?ar0qrEi&o;U5MTmk(DTpSwRAE`_d&EOwV*M}m$z^7%GEdkQBKo^b?E2gW(^f85 z#GNT%bKO@}i@rw5v)bJ!UU)KGKbJ;G)c_*}l~2GNgXZz2Z_giiZUMXCiqcazH9a}3 zOZ|M(xt%A3BmU~;vSU|to}{9E(ayqjja?c5O(U&b6Z*I@x#QCEEJP4I;GtQ`206Ll z^1iUEXZ8mG{Vv1WHMPS(-L_yC&V`Y3(8vzV=s^q<~arl9%L#WYx_b~41SaZYk1=9`bd!` zv`s1$vKQsoA-p-I;j)IQk}F5eSdnI~QfO5}6wZuRei<;Gt;&l0=&L5n8SV&C&TChw{fz--RAL zaiCF4L(H5eP%Wb(CLGgfFJR{rfu4j74^v8>HowOybyoS3^^=O?qPs3?GuGzfPL<;8 zAVDc3LcijBwe79AR_FIZO6(5JO!Vl5bIxfC^>str`U8*a17%-{fk9(9GE)0MkL52( z5hyrT5Urfy1OV8;tVG?sWIg>|s3b4xE*#uJDiY(A9pbUI042X$C^6abMVHOpyC z0S%8A<)la(HGBnbA$_HII~7Y2vCVnD0y!fMofahjV;nanC;7h4uvuwFO$|D}oUP-C zQO?4RMXdhjK!VYAN(1Z6%(qS4d!sJ`TruQ@+Xg@k!y8E!+PWkU>q19&)BmtjIBeQK zC~l1L^-Q_5n_JX+0)u4AQF8tQ@z!N_rHDkBukKR4J2^-oZQ#fA_&RE*GRYHKR;)J2)md+3di%O5kFurbG1m*TRVlq)q)1jO~LR z5Cqt-?IF!s?E4;yOTl>Ea?hh`yfeIc5qW%f_Sc?k9Kml1xf^(x7wFsyw}CKFtKd*T z5Z<#G;y1rWL^JR0ES|79-WPBt2p59%aJU@=EA?Uzm{hmY$PO&>mP6Uvx0~PUG--N5 z^PS^M_s=?{@7zo|d$>^-3mPM`iU4G`A0Ih)Q#a_ddn56B3b45@Z9^-fPTg*&Ay zDw&Xxk@JZGHWxRzBq|Qo3)4u9nejdZD1^3sGrJx*_|@;SndhO3aTVWR4B=o5FaUMsp`#I01Qx1 zOM_}G{W=d}Xs2GYiMF)VUS(HxB@N)Wl_vAFAv$G@H40TW$AQ5vIFC(m+>)O{FH-rg zm)v3JYy2fF9>yi)zBhd0xK@di&EdiEQ?xdRYTF-wrUGA6KATJaw4NTj1;>W=qF=L)Ci*hJQKC!`n|e?xuxYh*UIh3soXYj+LljY9n$*7-K`47KXd9d zuPzFmWz!@18nB#JJn(zMlf8!(U)x@INTQcvv&LHqtr3l#oQO;$$rN zqqDpx6)VY*%DoRSo8soW-~kR9hV*@|;w9Or?Wd9Zt~Bjt)*HQv+Kwff?O3ku0H#@X zA1-wukaG9n{FNiL=^Pzam5;Zli}0T1ⅅ$!eLX-wy%4eGMPyzxviBq=>wqx zl3pzj%IvONNC^16It)YUyiXEeP2_)cRR@qI?zL$6=abcHy{q zGM!Z&Hzyb0rYT<>hTKy(r5IuDBb>VECO80y!rzUnSq(Fzsi~{WVb)1P0=OJVSd<6% zte%YnI;Q$^#6>fjU%EXxSDHMmB564$4`jVu&#frvsRe|D>d6w&+_W&6`MkV}Tn;rg zq+12~2#nL#k(2bOOPaMROItf<<4aY(T}fcXHJS4AHb44gu14Sh5d;QjaQ0FeJQvTh zeCqk_Xf`OfaO;v^FDj{}wUz5nQk>AU_v}AkZP&{4P)qlEI(!pK`BeJWNaj-Z+&8Z3 zH4$QXynw-~-(*#Vj^q9`67eA^|Dr?V-0)cEE{>9Aoe($7H|RVO<2*WkTurITi2$mtpG?N3g7Mj7 zJl=0`UYQmI-M^;+u8Ds`h|pWi5;qg3*=IRHwri!zN*ohC>uwrbKQgH9&VS{@G-c=Y z25R78N(|UrHlOgWG`{y+YxVKax!*u0>hm2wO?wDWs51>P{-^LL?4>chN+@Sj0#a6^ z9m#$q9i7E)qd~a@@Z-0Z2qbi7Z&H{z;>btfwE=-z(Yv#sWhE4Tx>89T_(ui~5w?2g zp@UM|WnYk0RmuuVi^rWKZMO3-kPJ79R1-BSB(^+XUitCPp*z3$tZ>%1Z80?pr(XUk4S;$n*L&Dl)zdql+ zr0(@;8i)`EWJj?q-gQz~)VRbNg=w2Fl~#tH_w=;5vp9I_%` zwtHS%zRgQmWe7fjUGnF#xj%58ue7{AE<{dYfci=4XuB3mC)AR=E?il;pO;P4FWUk$ znSa-KXo9>^1H>SckWKf#5KcTD^k2o;VpEUmi3_PR21E}t)(vSXUprKj81C=Duu#lJ zlG9jlKPYU*-Boo8U6*2W-DJBPgXz-9-rqR^*+i?m^P53!X-b+d(fbK(yK^|axi^!G zx2^fd;x0fHgh=p)0{9K8y8?p|pbPOKBs)8QC=H|$J42GuY`}QCnJDCaspjH*zc$x` z`>Qx#9>vaXg<<3{RzlaLiAk#?G2%?Ll9Qo4Iw!ohYh7K#W+b3{#TiF0(P1BSr?@U( zM203b*&j|6=%13`s!>uafFFNWqwIzFxxQH|8*DZGQJu0!S@XYMl5T`7yh2YB($QklJ4OS zeKO7*O^M#nD*JHV!)(tUw3G_^GEwSa3LDdU? zFCXBH^M!IyoVx3LhO?jF#KgRgxDh`^CDv zG_#;7h-w_jaE;4Gyn{@5F_+IP_Q7kFHu~?K0~~DcJ#b)G5U~)Tm~`-b`o$)Z(eZS( z45$knP+b(yLyw0mSg5gFdS#0}o&b;<5Hvu!&x22l<`J-6q5v~$S#5PN87q8}FtM&a z=-D=O{NO}*aVjAC_*xOdB_q5l+wij)ZwfyXh4yQix ziyDyv*Q955);)?;r@E(O+gqW3mXR!I#YJ_iV%!o8hU>?q<3`v3>w+Gb9jVKVOZ~9O z(w57g9LjUh(;Oq9aQP$4Eg=ao-Xd*NP*S0LV+)gZYm|I7wWKJQb8cyzxqyNYCduU1 zp@Lm9zuz16w`SM_6)I;?AOa{0Bv3GEg5rD#nGblqHA$dC8K#z2|I}TGmxA{ueI1{y z+HIPY(jb&k+_4tak)()bA*ebYHxRxy|-#iX*23XR(w0MV^2sw$D088 z6TovvG_&kzZ5D9cuh-QyIGteh$)x-eB1=acIQ~+20`Q^)er>N>mD3@EEuaFzvHN6o zxNER`p#%B6#+H_NXD>xLVDxSxVK(ROK6M5ZI1aFMaIJVU?;}J^70}Y?#TYrmWvD8@ zFKdKup3i0mAGl+&VvrVx*ReUZe!l;&`i1PhkuTX=zy|Z3j8Ma87X_In`RI^pG>miO zHsi11bz;c*Fv2Uo9-Z-ylmHw2Kgt^#(V^+VO1WPWE`Zas7bCFTV&7JC5tBD_q0*#VmMCW_)!PEJb zO`QfSJ!OyjrT6H$s^$U(VLHxu#O#!$0eH|_pXwIv^m&Tz52KGKSD3lZ8pnB@%*$YL z8^v4CSC1Q$!NA&Cp{^K~Re|>Vhz>5agfk5rn3L=9Ny~+;=dB(laIS{^BLBY3Z>Yv$ z%RjJPT#pfxXEl-Q$${bQt&IMY#CeRAkj<&+2w5|B19IB^B%m^Sy+HGK$1!Tt-bgHm#`sBN*s@saF zsZrBRX_RFM{hG>b_gK4m-f@}2mPsAP?HvSt8A#}^uYAy}T=tU_JYI^bM0^ybF*}sd zmsftX8Dk=#qyaA0*7m;II@b8=(FcE+#J9ajij0IvEzy9@gifd<0M5} zdVKw}D9>-LmI22)IFwCH4oLKus}R?bDcfrJOADxpfgUeznE|r|sSE(xxe?T9nandF z9v;-Bde}6Cd3&F0N;5i#fUx=(wC119wUX5&3xw8Om%mbOm+4*pOi?MYnZsR7URSUw zbgFV~SgnnOjOd{U6V_95?f!iIc;ff z2a8RTF3o+!=OBMu>$jvU30hP%gLRb$vk|F`2$XeN$v7|WKtpr6$ao5jc`6S!Ms9f~ zi$w61c)LPR*92la&g-(bWYE>nt$3k=W~tzwZTC?$Rei#Z*fjq zri#GEM{*~tOm3!EibfzFEY|sZ!7M=EbNmpM;qm)9AG)?dmQK51{`Ifk1aDd-UJ{JwcQxfG1#OEO9v-lB)}wK8`p}W*Y!ftl(>{yzlYFs7pu^o z&Z2NQuL*#lvV~m0fxoo}I>LDEcuz{29=Fr+?$kP1m*84+dS=Q3cs_Ws@xETfG9Whe z_k3tUr{mD(YOf{2Qn{s|A*UKh8vjwOaHPF3;_@iyeiop#KDvVD?~Y_NG@yKL&pbOj z6SR~@mrmslJPS4k7QY?$Alci9Mf1M5(id=DhzygS_sxE0qgRSnf5%%i)MgbL%{WR7 z?sgb*c6wnC=XBGt{(w^UD?9KeU*J0TlV$%(_-l@AlSv7PipX{C%+@Bz0CqP~T+MSh z05T<}m3m1k2XoPsePG|P@c zINBY30GMsX?JLGyc~jHpZ2PQ~3&(%@#-@sNjEjm=e#d$CLK*p)AdM}mkz;)-B+@Y{ z!J0PFmw(BiC>0nJ&Uiu^Jbh^cg^rDjBe>RpIiSR(OU4a|2**tb-mff)z#&dHy=bGa z;pvRm%koRFD1Etp!yZJZHhykD!8q6}bQ}y&>~q2bT&h5|n-q*DTuXYXp++vCI;>!1 z-&lVluH!pJN686&ye4)Qey^MI0H{RorTvoHxEt1wkn00zO#CUrb|DA|<2=$CuM!4f> z)LG|S#%?R?5YN!kdp*LUNZ<=jtaS;Ax4qTzF@y0o#WB!<@P}1YDljCXI4-Gtx^!AG)o*${g;lI zr?*Y-=#mzKFTA*^8B+W?)bD`x%{u>O{|bqK_D^Y<4zuX5J8u^A?~j2O=IKCXtMQ67 z2>fg4|M(bqQAYJvcbYzqZvSUZ|MS_l8(`35@OZ28f6qiB0IX`ig$fWNU?Yd^CyyZF zqla{KbUZ_Z>e^#OWw5~ zO>a)#JKgIYnI<#*@$oSQC7mGGGcqdZ0(e$dmRvHs7{~Q_&>@52k@N9j^UCOOe@_7H zuA8P7%s)#8CXkVzkA{G7b5((zh*07S*e_(}IctU?qf+<)x(svz1=#GiVnDBd3B|(7 zsykS#O+dl|N3FaptPQ{!G7~k`L<8TU*MRdZ2e#yF7V3>Ki2>DTi1>SYs!ym4AD0eeGMLX!4`9x{awzW{*1(7C zVJGTy@s4tt=;eOofub@F)5`K#lrNs_n3em*`w()qqR4Q!LPzqjV8rwUUc(|=+C9%w z_6-zw(VwJ$ON7$SK7KJ6#)FH5Zwnvn{n%`|Pws?U7lumdQWvWfI4}SK4(Y11UgS)Z z&iAE@PomX@sRe|Pz<1hPCr&t^ZCYyWX?_wI(RLJZzzP)|bgF0mM~~VA2nw)Ct#isR zUuycS%1+Qf2HQ6I(B@YQ_)7#`;sN?QCoX~Vv8js%g}OQU!Yj0cwJZ?l$7w?5Wfd*y^rjm4y@D0xj{rU^5wmjT85kvNAn>U6GW1!wf1YAHQ(da z`?s@Nn$fN;iXn)xPB(&L;0@+vQ|EJZs#~bQjIah7N4oDKJ^X}&?gX7KaW^u>ZkLhf z8Xk$DY10zfb5He@1oUB7Twf^=a0ca@!sql`>+6dLSLlu6ItT66TCnp$_;EZ-OjLHy|mSOR=5cj8$0l_(7t`xXBRqV>ifCACKu_C`gGtlW`#@YhKsO%@$~ za51hDgRk63I~Q`pmyl?&R@Lex#*lyN8OkdTa&Tawt?A|N5C{v`9PtTrP3 z-SY4(nN=CQWI<-;dpAU*jd-)(8wqxG0|#Pxx(^!>*r@x=OL(WAwo615<-ewuCaSFs zPY7OjZ_MlqRy;eMxo?(g=jvZk0Cac(WjZpchrsEXr+U8_{U{z)-T?-fZ3Mu!Rf?eW z^wtRl0RgaqzU-Xp=`)iv0=RCf#j8@Y$n-7#oF8<<>Jo8qa99n0X^K-sd5u-<=g7}*$HQ-ah^q$ z7@_nZxVM6|M&`-Vh_Nuir~E2HN?_5W=xdFB2{vTa!FU}Xy(>?e&lagFZNOX>Nx4#iWAwCdz@;qH1|S`vobU5ZQAdIqf3aJrC#@iz}N$a)l_wf z`&DcMdQ5Hi7e-qFR+)3#eF^*;Ew-s~w9)tErn#73dfz~a-|cKh zcf|g%WPhZ}*7Yb%bxX`}P7hrh$04EY8rlW^kfvBH+1#@Z*=HTVrnRbM%&X_A%U$cI zIo+bV8weVeDnTHBmIh~(`;nacX)O}?6OzUZx!!I3+;@}HNtZ7mAb0B?x0|8ihjG?? z!|#hz*NKHU=6AKHnv{)(Qo^^X0eYK(GA5)QlUG_NS7&1dWN#@29EcB*+P9g2PG^Cj zp2sMmFeC8@edXd3WphyICw##nk;Lp0<)hpGkGHpsimThUMFWB05ZocSOCY$0;8u9y zPH=Y*?(SBE5Fk*vySpa1ySux*BHun|pMCGSe_v~>RjaC{b4?qgk3RZza51d)gm3QG zx>_2PFPp_X5BJU zi*XOcMGL$z)e5|>X0y`7XyrKZMLt?iL@Np}CQMQAKVuzm`ex;OOO&FM0vLSL*z`)r zg^iwc&Jdb`?&$KLTu|{TgfthAGQO?A%8z?77kRV3xRc}z3b_3^rA@LbxT}qyNy9wL z4zbjJJNbiG3#WS9)CbAd!_CpZ_sF<=NUlJH1r0IW;xro&Lvg1Kl}U6ofRx%?WG;`M zv+Q=hbFl{SkE#{8*_V$b#E0hMqOn@adS^-_@reV%|kQ(#dixUS%{Tg3nN~!cGqruHri<$F(uImj5}+5IhJi{>)n>NHSd9b zT#C|3b`)vPe>G7j>VVWVFz>S8M5tP6r0s>03L?q?f2Z&wcC9z7(G>uGw6;c%F0tOe ztvV+;GJ8bYgBt~2ZqBAwNF>v%70#G8z|r|n4Fo&9?HHUqx5)U?BH+1Q%?5)yH^Dh7 z#$lz-A081=4RCD|G8uF_oNJjdORKMkiBiwQk<8@QKrd$g3Bv4<4kFhgV-B90sn z`V(vKy*zxdDjMlw|BT7eb9-~Vy{|o-b81hDp=>(p_wwGpe=dr9}(9qgwM6BnHu*0ChUq#b_jzDswLq8d9UJsRd~Wq|bD_ zwJGDuZ-~R9ga#KPfPZekq$S@vD*!NSWMU($9`k_qn@JJS5b z7Y{A^+LM;hCfhWa>qCRH(3S+m@FGtv@Mu0ZMM`|`%jL28Vu{~~ba+SOSbW8aWWJw% z&5Idzn84>JjPtLoE9`e}Nw>|7E<(?@mP^{Mp5}~(BH!q_ z@|H0muQ)Qa!~mna77~Hr{8ogv+w8P-_j_e`Z}y$%{W|+K2ZYRlCPvP2z)L(N5}ZK; zaneRs4AZ{9$J2%;AtBPTl`x!=WYqC#$-gig#J$`K20#+ZiZIA`Nxwh9NGmJ2U_mEY zkEjFV`~t3eB(00pFv=X^;f3N(N=7I8YwhVhK(cp3XD0H0Gx4+dWe{0YiY13Jscy1 z)e93$;DK`GTh^gsvbbRBP?p-=e;-yI{Jkn;TqXDe9M@xNH|x~mUTdL| z@>rpk^7hcOHKSU|hp|deuZ=0{Q;O`h)%X3*5DfO)iDdV_dx;pI$NEP9o%FFpX?5sr z44GPCR8l(UrR(gFo8>Uu(}cI+^_7e2IeQ_>*+}widh~YdaQ)2=4qV_n=f{OZi{b4>y`x%g zl`|_%^n5^cyef1}NB^_x7kx7lF&z#!lOH0h`xNbf`XwotUuEoAQo%iFz;B7EtFVq& z=rE(oJ_+3sdK&<4`%SYv*oBWYy z=8gS%bb<~Zu!kk1!jk(#l$+_15V|b*?Xve+%;_VNZx4iAlK4ArxiSrbd zba(=MfJ7Tad!oLz1iWosxa47D0iC?a-~T3mLC*f7TLD>2g^$3zo56+GUA!VIU-j|c zkU_G19ZrG>`qw-c7WuAlhxZV_a~E|L?TrCR$unbWRuP;AZmyJ% z8QVCEx#~SvU+c%i!IPs;n^8UBS%R@)gQ&Ku-Yict1s9BjFnh~T)d(Kp2k-EhjBe?0rQ-^IU7$2an`rbAM+k}1NHaoNPIml zNk{bYK=)onEC0;zW5X4F(sO8mWA6_f)7O1XumE~R=ez~+e8 z4h0K$+fL_n^o3&P?o7c6{Vw-jQ1XiE`S;;b=gQo6$Ay07$H!$Zz9$J11S9q?Bysi1XJbad;1JPuD z5ZsuKRPvRtsC1kl?~|?aCw}y@FSUk{rzHc#TqUM_>))EDsoVCfKpYYrM5mL@>x|L0 z&YPWoF;Lpw%u&|j4~dF+i4M&1WG7iH)LG{j6pFVy|A9~zC6XZS3bB#G!e7pJ0N{ho zB=;#eN)UK${S>dOM@GvSPm=0%a>S}YVUn}4QG`rH1+_))*%L3^g)k~`B^q~pzoQ^n z+pO!+<1(ej9rV8PO--1{8`3-?6{`$MNDqnxVocT|OM^yx{imrZ$ab3dt(c=iTKX?b z>PXszerhWnay*LPxtkERCU)(AEyG)s(N(a=f|zB>eL^YSpS?3A{IRuogGjD>Go!v9 z?8}X`rWAs0dtF1=`g4o$GAUb%D?#xwTpc5-K$U}18q@+K1|}{q2p+2o+)5diQ^3gf zt$E^)Rv=*jpy3XKFmmA)mr4}sj8>@bZ+42^pz#j?0)07=haElSQ{5kP63f6@4k9Ly z#41%HK`w>-(YizFPLJb)^7@S@-&BS|cU)5uq%}S?yjJ)G=Z4!LR*9THkBkI8(@#0D>jy&qt1Gzn{~Hg7m(Klr5v1j8VYYB|iQwzZmq1yT9w(QTFoFQuu$(i&TE!iu(JmQ4L5b)x~qXRByU1!956gTlG)W@{Jx@U(WL8de)Y0|&=5EzG0}rO z3=z(L^S9t;LTb6=0=0Cv4?Y5gc*nv*f!;$^O)n&nZwERzd#t6!*P=r|WbY}kGn#gl z{4QG0ahW(jJHFFw@rP-y>5OG?#=bEJx-F+M!}8pYYYS&h_1)FTPT73_qA z>o{7KU)5r!)#0;E!TI{4GDMFXE3ii<#b{>K`u1kQcHQBg%4+Ts#pgcZVRhSPSE|=p zB8E65GSaEo{YkZa_i~Kmr9C%>Ke8W^0XsD{UO7puXIS%ac6!+j0bcSc4-V)~GzoNH z`i3A#Ct7LC@w-#{07FPSQAdT6=tE^m+@|jG9SZn3xMS|zqIn*^L{bF}P-bSp@yS;p zwYHAY%6Dtsq1CL)f&q`FZ<_Bvjve6?p$(8GyAoe0 zV$=-7+v2|gi7CrIa1T+yx6$#3A=3AOtm^K&S6K{#!4&qy%0u8MY41ue@N zgKkNkvTqWkzKBzatXYmqXG1e%q(XX63`7DB@F8fVta$4H(r2o$Jp5b8!qI~f0*|1_ zqZ3694L^3e0tFGskoHz)VK#xme%!eEdSB06=bofdb>mw{zXaAgfkWckiWx6R6z1a2Y#%Xh!2v89Wl zf3end!j#lg$(jbhdA&MbTSw2_o+ZN8AnS`S#Ogq~HWDU?c|UZH2!1ac*7W4XdjjxK zYrvrHTXX0=gbym$X*0$mFN0^+4t8YW;o;SX4kNn%YT^EL-};G@1%Ru$H+TDFXiF#m zNV027o4i-o(}!M7VCW_LrX<)6fq&)z_rPbA5NtHaV{{?l%}F{cj|z#wZOAziu=C?B z&~`jkx_6=fr22X_nH`c*6~79yRm5%lF&_VJ;&eDytX|Z$NE4oq7TXCCDtitclkIPmy*QijZT_> z^>&>(dzN{@*tUpo&pDXCxO1;h`kQVk##4BH@=Y$wb77oJQf#}Q!`M=@ciA&5N^}+- z+3~TO2-rJ3wnA#T>;XLMb;!HXcXKO9=?J&v16EF!4gD91wL>>R zP;edp*O+8gn3qM*$MTDQq#WkL?E$X_X%YHkB=N?hZ#rFO^3JB zzeVyr9TXBCW3^cZ-&U>1+0~M|7~hO*ZrUX@{62M&z~@TizqArr3#+T3Y2i zX$%>Afd~TJ=H_Odj;&jp17cC4>ftMxazu7rFBBv4X2!=!<%~RoPoQ?_JTrme&dSe0 z;A*fatgoM)fuT+WK`4`bq`dUm>xO8!T?(T(SxLl=MRN_XaNHz-0C;jo0{NH|9yhv^ zi+9831b4zYo-?e;hOHLJu{}SV`q`YsA$wgP;SZ-0MGYkmxBM)|0VnU5I+^W1J@xUy z*{6v%FWBP6EPb-EjzGNVuxnf~6j`-^1Q4gDoa#(UMfBm}?R?_CuReP=^1vwL#WQQX zCy)W-rCDg(Hd~I#0KiA-nz}C%Df6QWRvMw}K-DW=F3-egV!E=$?mfqk^dHS7d%LoplSM%hiL;(4RMt1L$ zBsJJgY(CjBhGgLTP0HOdB@mtb=%{Wcm=^tx)V~QQSvG66Cb4fHf?4DpMJK(Ds$4-u!z(wfzV*}iAQG2Udxy~Ewth{y%~@OW9rjE07d$4f?tVQz&ZT_95(2C&d3gNkqb$AdiC&Cc-j6^?^V|2im=kr7pkPKmU%=*mjp{~= zFcjqw2x0gd5vIn=b|6C|nCt0(42rdz)wdmMVu&#}l|E*mdRjpkDX-ivQGM4x-swKtwuI0&5P}a(Pw54K;K-(1}ir z&7eF}5?%KeS*HK~J-cYlokMq1$K@@Z2F_@2z0@Rr10fI-yz~_+4|RSEQE=dx=j@*}a}aOE?TMa-YXI|l(EP$C!n!J@9P z?PP0D_O2x|BFI9+@uW;suNKl>sb9OR*Nw?B#P*tn@pJ4dgL_fmFGN{)bio35EWP3!uLX4`IqW9p;(7{w3V@p4GXA9OCs4eJJ^bE+KJeR{djv>dSwy zTgw%pIf+lqa&L-fCgO?ITEtCiV5vfqrj~i}>tDGB?LQFIJy01Uf@iu`)9Gd~9_+4X z=p6-|Xi}^rg)J@l4tG(E$LznhutIM0LyC?Z61sYi5lf`@1zxZ5ucE@gX>hf&!p+*& zcgLuYi$p{oG%AG@A8VR50k6rF@K7=zK1lI0t}*xH{hz#rfAbkXLFl>T-(!jYyS)Dw zPXclk|0JqKSp0z3XaB!;|2;7nLX?24Tl<K_*_rD>5cIg0- ze*{(j*BdeVeaodn7U_jl#J8jOkmz)83ZdY!iwHw$6N1h0@ltZ!KP0OEER5Y1#`})_ z{gxXxM>5tAFo#D+Ydg65)km3`vJhREjt<4=gO7-k^8cm-{QKS_!af{>gr6Z~XdkN8 z)zxpX5h;Y#10djw#=|=d@koD20JX#U-)t2XXwzs?5u0AI+gmup`A3s{wUd-{q2Yyq zfl{c~*ha!a(|<(#^&PyG>6Nf+WaoZY5>2 ztKQ_Sp?ljbWWE!;JJBTKDVI=op7y6wcU~Y)H=0BLr&fj_(fg#WMI`*N_vPjgYM9dR z$;nWJuo?A5e(=0zd08o*b2ahWVUQaxOZ@`RZe&$)4Z)-Q^0z%_iyLZZh0XK`j_omKENw*OS z>4wA^^`hP573Xx}f_#Xkl9Jq>lekI@>e<90m2Q;?X@{I1Mkbmf?c?y7@`9!O8Ysw! zwW&Erg-pG+5efG3-88NbsD4HHCHO+ugwbum^3(V`!TUsy}^zF6Y~`J5e?CO)XBD*6ctJmKj+Z%o+P+jkV-MZjG>+d~vr^n9Ps zzF%9*WmTB+d-jGw@Gpo+PdudLU!?TzaiD<+e#OH>zkbnnP2%^$rsTB$mhAj<#N+w? z^RhhLMzR5=yL<(lvYI1t<^Z^m!85k|XIlvM8t)1Gr*Y*cxC_*^7^(vMs0^WGkKlck zhjO-r?vjn$99w>pYf`_p&4w#!DS96Xat#O@^p(R)mp!i%)q}r)%~DESA;UU1g2t$x zWm)W>t26Vg`btSYI*fvc1EPbSLI?dIEu&WY1Iq#1IorgmE`Xic4s}H4S9uxYqCGN6 zM)$QwbN3_8iGb(`IaOXGRA;+@?0_@7yNJuVRhyGgI|;7Ic$!mm!~?LEWv9x_hrmBP zkj5Y(A8%^Q97Xo0htz&_$rBoEtxavKbIj1~v)b(3;_ZEQ_|g&$*XsLrS>u8}e>5GA zhK9x&KHb_xjE6asFQ7NrqX&teR`iBljVU!D4GO5)A4D3OgoV52CC%3C?UlsKTv}>T zA!r+ccy7Pf>7JJr7?*2c#ZM&`^sA)g^KiLaz%zGjKZf>11^q@sN;UR>PX=XgZB2J@*1m?-n>nA@l3zsmaNCTJA3luO*2VPW3kSC2UU z$~kcUgvOj5=cA|`{Dt=+p)lXzpZ@LiSr`V)+}>{vsqFihcDnoVt-Y3YK;Z~)~JYuw25{jtjL34TudLonEB2& zABXqe)WC(#)GTjY<~s(chZ++vuqWU)jypS^+PlyzVOpmvrIou&#BTH$rq41 zlz$Z;e?fNET^X7SgT!J}k4XF>f=lsZ)_m>5$%cEtl!!*oA=Iyhl5n7}<)+npsVKC4$-bR#@|nJaVZt_}E<;@f&o{(Ros zM41{jK|;;xbx9)Vwj)=pQTLfb{b{2|s2$WQ6Brm|bTC8sXMSFU%bWD$trv`7#rfGD|O3Fh|h2a7&GL;=f9`@YKgf=`-s zs$M!*R*sc~C$QrG&d|a_809B@wLj_p&TvqE=jUw36A7pG8#MS{1D|O5LuoMj7w96p z3tvT#NGUn(L50h+#z5aJ!;Wa?)mT)Y_!4XU#1;AwUFF5M<+-(Q7OHi_N_}X5k}|?# z4Hjsk2ym=uX$3ZUhnRQMU!}iFYe44f?+NWeiI~4A&|xkW1crTulY9Oxv%~k0D7hPUpSGrfr|kriq2(NPU{L+yzb}`YOyfJer^8^_=Ik>dYF*ExaWhf7hMVdV}3K zf+WQEw0R{+3>ZmTo>x#mAC8UjLtT4$90_In19g|Hj3VUS9dC&it1wAlZmb`Vd)hWO zMm*0hv-QN3jVJ`4$J(6cw*yGae6Va=+t4woA`nFp^5-Tls{g4r>pRF{H-kcJvk_X- z9?)`iJmqi3WR+_gfLcI9KmpE=j*U!Tb}T!-ct^DSAU`|J1<ajb}S4 z8o2DmSK`D?n$dQPeAmE}&dKxBcE7kGyuW){u_!M~2uzu&*S!AjD)H+O$u47mkeDdF zL9mU@@ok5<5EPOY6xMcsXNJZ0xdF)6{fRhIE)!-u?UOf-;lP2w#W_`t`N;Ilm>zya zL`FuuQDk3Ut8tPk3iazqtRD+6DY^Q=FWDxreM<6s9B4Ujd|#MCJlfAvXgh9~C7B4Z zp6)BuEaCppzIL--njh&7ad#buyBn9Gcv(}Sm32Pp`)lcVr<(ZmvQ0TevgRp1O@XB? zwULY-z;Mq$=5sr@AH@4#l_k^5#o%jpj7%YTtjc8H&v|@1tD6$y8#2}*g1B}7AUs;n z4cs@cqAw`|oB>%iO*6Uf zP;P5?_AFsIMooD$Q;m_n;_eQP7Njr;^<=_Kic>JztYM*bMj>vnQfj@Q^Up|wBLz`W zjA(|e5lE&_2s0X=!MEd%2hby6nls$nyBMRR<833M;|}&s((6|Kyus=(@^mS;auXhN zGmT9*uu!9;CZUAk^qTk4f>9jIAhmL2_p=oX?UstxdF!tz4HL6*O^WQu3C{^rxd(;3AX~TEfhUrEPn%D<{o!k-r8LLX zLU<4zs?h}3C_q(PUH^mnUdqPCM@(wE0-mt?hWu#L@x;A%a=&&Q9G$)}(Eu_K^xED~ z!C@n*9b)&8MKrVJ5K@JljH(xpbD|FiUc>zrkS=%#P|NhsiMa&J^LA@~0H}Pl*g`-|FtV%|_2qU-Z+C zNFwWoSo|=Xs%WRP8pbD1RF~s!>)DXd;_NunK$#haSBc+d!sb^MFh9NyJl~iwBn7J_ z(2Ec+DisoE_B2$0z_*_FFDJX8qtMVO33Zjj?||&C<7MQGpb#X~)sP0yQW{^yhx8uut(&?=BK-GY@ zazgRUjBD^I*t!tB#dCllbV$tMyH_I}f887W&P25}{9FkS2~K5U|EN~z?y?p@_ct#H zPa1k273vEQ>Yf(Ft0km}^`S$7WCo?Oo)JW3&FM*xt~m~VOj^(eAXr$Qk_5p#=j?t8 zPHU_KsC=#{AWNRm`kKjNj8^=r{eiyKJNQ!p8K-_) z)tL5aKjlTH-}si7du@I=%Ppa~S;?I4;^Oi?P?Qm;va!-ZlhfOH6i0SwNeV3SkMV7l z@FpbI{oy{BQV6%_jwc<+Q1YP<3_9bH?-j)2OmdKk%FR@I$uZt#ayc5L_g201z0lX{ zPD-+gnM}cR8UZ6|#+UfM=un|)U~FY5F|kpr&9&GaM|u#cWqex-si_yp8K$ z%V-xxNmS=?q<7GInEGCn)Yms)6S+3RA2&@-0+Up(Jp~1JI>&7Q*MF^wTG4M`prYm= zIqq+9s*;zz3Mz&IJeY&|OQwTIdvA83I%6)b*IN4Bb$md`-R;|rAxb}-JrDD`4_qId ze4f85{aVG*H2)n`>SBs=>AuU|zT8Meelwa5Oj=YDdK|Do%s$Zep6Q!G+n}MQTb9b4 z<)I!ddQp0T)Zs50leipbF8|LLqiQ&m|cXLzfyjRx$sKCegC$skF zs|JHeyEY^(Buz$s|CO7-(;p zUyNU^d7?)>Oi{E}*56gry&{d#_pJOb^sS>bLicNNG)D>%*Qzt!>y>BL5EwOENO@%N z0R-+q`&80818u>B-M$!@l21j8@qL+mEb_hO7&c0@F<;!}9teC)Sy zL!Gx z$_JM&Lk%eqVd;I7fP}b$f~>yE1KZxB6a4T$wTTqM4yM$6rKw$x!opNM8f zdD}3N;P$0}$u`m9{5^`G*A3IKMmbi>E(lw38Imp0IF`BnuS#Kjt&|`+`d1ky1{m%g z%n12>f}LM%R28MTRO@mM2VUWe%D&8(u&$X18%jW`!$O^gf2mi$1+0pf?Y=<7GTZx9 zbu}J;-7JGkwwLX@U~!Q-SM}Q|tv*o3QpHLmA_N99`n3nYPfm`FHK9XT>dt`>z3RV3 zSubX28*5F)7cZMQo1b`(hvJ)4j`Z*I&a@S{Z-HO@(%g5JJcW!Uf8AkH^}VOi1>V5O zAHT>ic(^e-aSo>MpE;e`8zDJ3^p$=2YS(CiTZzwH-Ixb6is5yWm8M zPAj78@)JAQJ2iW;&XUhb*>gW=CI`Hewjj4s|CU5o*X=53r`)_tC{l(#bLk2q+cdwvXncMlUwTv@2NrIyk1M-HN~7cv)l^)CPa>d`-UWb;lAPqtdAxVwVm_ zSkPlgDGc2eDeQ`N6f&p6y%-JC9W+D!U2oC-&c`+I({K!fCF9D5fuM>?2Jp?lv;eZm z1Rhfc$4|c?9Pxo}sk&>o;PJ=bZm&vygOOY%hfn0v6*W;K#(+W0*f&;;)r@q#I+&K3 z@hX3dj$yW}2YBGXWnR_(%Ihy8f{sOGSaWO5Rop475p@zGB(IilkA=&@>Gc#xAIRwAvy9noI769RWqGArle;i9q{#ohb!7{O29_UujcMR> z%H9|R)!zRo4k@7Nm8)Ljlgl3IrJ}qNo5`A2@T31~rCo5LlXd%G$wDZi1q2!EOjYeP zw|E_zFQ`nj?D$3Q0cJ5H&?>-MX#{8zF5Dcrw5{r*UO^Pk%F zTH*PB9D!E}L#vK5R~P)2;_rL;_o@H<{Qu{~7rBR>gzXqS-0&H}3$QSx{k1 z*u>5=Y>q=`_rbi$)M!sy@iITU`*p&>+)LsRvL-S+X7 zb&V_$D;JE3C@W*i7i6~IJC_+8$<>jwvYKK2!MiP_Zt%z*XYbyF zGE?$I|M;lcqR1l%)t};+iBkLYmhI%ACs&%QrY$kE0z7tBD%elpOPu*( z5P9T-f|^DMMZx*m2w{HLR1f-Cn|G}7Yts)Cb~b@^dG-vLTE;EWehXl+1<$xu-oSvE zc*5S+h}~Llt}k_SDULQZX@frR#>f0v)SR7lIf!G`qXgrA>R9y6d# zfC;2`pe4E+-F}qj;V%?jtnIIwxpCcbYrgzqvMNr<_=a)z)uP+#%zwObnlY~xV;OZc z)Zt86{tL?WBo^84ITXjd=z@TR8hV#3OJOAW8CCVkFuQBv?+M_ZhG;lB@fPXKUko7; z!_GxbLcNV{&UDUO9MkLSI{4=VmhUOHaNJ-BBYA5rd2Qmdl-WwZa8QLhU5Um=#B{Vf zEzKXy^;!g|)+c1t47Kp$ZtnP{km#Ve0%^RO8CrnWX$+nul~q3Rq))0t2NJ?$IozsF&?(6jc%HXB)tF^=67J;wBY*`n#nZG< zp4)ui<{qAlfG-Xg=UIy_+{|16-e+or1WQqNHFt^iEWDwDQ`3F0o!;|jtI|Psn4))d z3yd$2fW>;iY+fi9+2|sH7<|*t<7Y30q$qOqD-qF5WqSY-aiYCdfZu zb1}XOvkta}dovH7^?Tb-_v`ewx~-O83&$+&9}V^iXP60ZgR~eL-W9 zbw&HM@61>L4bc3O_a{b|Z$=?1K}ljnhQzSjtL{S=+agbY zn$@IA6@H~uE7kIJ<~5fxF%~S_d^Ou_)n)Yh9$Q9TECbWBOYoXs3&)kHbZiDJ$ILal z^U{3G`E{3!4U8bx39a(%_k>0GJ-iZ)`YJvW^ol`a1Bc>eW0s@>!?7UpiM{I?3TG<# zq*&35B$O7SEY^~UYdP$zucp9mj0rNm*9lf%7@i3GvzhfZ4nIC88X7LKcv@hS&OSPQ zwr9%fJ03meA5%mz@0$r*77h95$PvA@IyX>fa0o#~`|gP!emo$pAw|JKZwFP0eQzYc zKmyD@AYIq#>F%Nj*X5?vl4iI(Yp46aBrvrVz9TtLD&j4+$;sK;z7FM2y!%dH^^|z$ z^^ES_;1#1$N^WKQkRNww_uP7Ao|S)(Yt64PjWxSFW<{Q zkox*Qs3s=k7!8~!)f;Z5DCp_MxGvulLS|WU#*iRT&QiE4?-_E#-fzMf9?<7mdZBZ! z4C{%dx3MgM?;JDA63S>)3F;<|wdK}S?OoofTHTW_z_NSe$EtnkMfx9^QpNj4R<1i! zXqF9|dVdHbqH86&_Y>|js$2~V;5DahlX$1sKSBmeGjauOJCeNu!1q%xR02YR;O@z6 zdY)+C9&NuD2>yJW4()aFXyZlHgu!*+YoI5Wv*v6`@XJGRDgJ^ke3Si@4!toRv$XH} zV+p9VE^FlvoiVc-f0j#R%R3fPMz(Y}a;sAN;vG;}s;$NJ`qY=eXT6|dVTVT)Nh$S+ zI!e$Ma3O(>mpU+=eADmvcZeBW)WsNOwzi{^Ys9H8oRy zddA$Ex_Y1!GEqxgl& zNOrD>mESup^r=52m7z?n=}p#u>Qe#a10tuE%ldnR!yy1AhtO0*Fp@&qPmtB;4E-dg zEx19Y`S_}sl;47$#mx;+Who}Bjt%BAh2T#ZWhvn^elgfzUEfiLhlsod(Fq2jB+ZdW zHmouD7})`ZF8MkMQrOi$DP3HDy^TZDv}KMPxX7~9$gZYJJyuEig1P}&}R z+C?9^ebJ_+?zEmT=65#8LFMUn(*rpFwo?#F(gx`}xlT*$!dVuB zIASJI!69d5vXa`K!oIVGh1NnL*R$FsENRI5NBigf+ffU5Sa7#_67eA*e}>+1tWtE$ zAxPL^w!#HFrOG=bpl5TFJlq_M<}u0~Zy05-euOEQ2a}~aI6YE1l=3^r9H|oKOQ$1= zjwp+k`myQUDac(^&sr2v-b~UDxaY0K)=B%6T6+J8%BaVs%(OQ$DV_Ryi~2Y4-bGejYw|jRbXY$Gs8=$8|)`?9{ZZjPj{V; zhs5YVs!K{`Z4*EJX|}oHlI=L0j5+O#pKzlZ^thD)9-Z<-I!ZtJ>fTk5siIXU_osnQ zlBPPZQ1(7FqkH}#RcSb*?R)^o1lVXH`ff)jm{I|V{^IH0#D}5?)IFl5b*4Ao2zxr$ zc(O5}mY4CrmPL5W826}Y!E`>h_$jO@-6Leq2z&jkrj-2cgC&x^T8k-_Uh?+gdF{G@ zC7>z4@(HpkBeJQcI=N#-n0i;C->Up)f~8&NzYQKeTAHnf*tF(@H&RdbtP= zjHfzJV4}Mi2b!i5%;m9AoIm1%QKgqlt{@6^jh~u=CEp=6g>#lwmflZJHEJ72rb~jv zAw85AzPp=h&GGJ~wfLta-n;_UDjBH4zEm*2ZokNfaGeDaE!=emkN)6#fLQzs12 zQ(h(+nw_UT)j0kgRaD4`;?F+%^hEn;=uI(o(#)8>+^A2I>nHLo{R z>vX-7lk1U(b-{l;+usl;#lozWg$Nq~Sqs|7=Q)+tp8i!w32j*?WI$Q-LW>9>=zo5$ zB%93x*BHKPR$E}~+}>kOYUJMg^^wylcu_VG56}XbOeS3WFca}%@{gAZ&t=U{?FJ17 zJ=d53ysetCp|UFT^Mnw3NvThtWgA*X&=E$FtMfJ| zKNjz+H5{3dZN!n+djNc7{6cIxgcxj_WV-6-Pf=bHi3 za~K4uPj#gvj1Y4YW@=raiNS`Wlgc+~U^#*EXnWZ>|Khs!+V$Z&I%Mk~wBQ{G0%-V| zj*>{}cVntII|Y$R6Z2G)^30|6dSw}Nr5V&nKDrKWN&WmP z<%3DsP?*ENrhcZ#kK++Gf^sW8%1~2vp4K>7 zWqC5M(oo7d#y;ydC3G+Kv@)KpDS-wa`pHBScPEt4eXu>S%n^BNG$64>4dm0b_yXGt zY5NW8c>@b8W&6vXY8NiVv6&jYpyOnQ6YB?F`4QZ0S=)tZTl|>6mf`FxDsZ^WhMEc! zEC^+4YC5cEmqw=Nef< z@wsDVti$D-PI4o3A)j-xT0y%h7VNQkLKCsp8A`8G@#aLE3jmwof&9=-N8vr&V@TjE ztma)LDMNPlSv=BN)VYeRBNA(1!BdTx_;F#{u^yx3s|HW^2MK-+uf_Ml)iG@{rG>m_ zq7%j^V#M*K2N2lwA^M{lyH_U%KG-C$-T2JL`{yZZGo@EWMP6<? zjk{$l9_zMXg9OQg)Qadh`|G5?TK5X&1n-9r17XBzpyVn^u=qVLROil1A40!DGK5^| zyJekk>hkuW=r*WDrm(n%PSGui59( zf@U(@rXlJcj%g5jL{OPlZ|&>y70>kJfDSViY)8}x*Y4Uid$kW(-@^wFKJM1~#+){eY!PqR_oa2P5qhY&XDya_? zbq7H#k$TM8G&SpwK^gg;H(Y;J8BLU~j>Il;F7c{&L^`E)hE!%fd9ZB|HqY(Q6V=B=*nt&bsGM+&FS+ue^p$4 zxAa#K>VMhv?Ot0v(J>?z{=e*nobvq@=WBe^HSvEw+kZW3z!wNgylQ7!_WwFS=lys6 zDOfzvUvT_CQO$qw0V2p9-i7daQoZ_}d3h$2!%3L`vy%S7m3IlDN4+PIwaETIx~>8$ zs;=z{f`Cdl2q+98-5?T5cSy|8-Q7bABB`WwgXGXicQ=T1cXv1Z7k%IV``+*WzqMGi z7Q-Fp-gD1A=Xv(t&wd_0Bn3aY&RXKOo(&jU`G$r*s4aAw(=%-xzROxksmcq;OF|t#`f~u@NQ7sPArb z3CCSUli5Igq?|piFw>>$i~nQbiU~*%j_gW-)>NK2$%B5MK0UsH{}j$_OSIG}M@sUD zyVnVRzwQd_Yqz zggG%vc9w5sN1`ak+MmTh5n43sa<6(^ha1M;Xo5|@bc=Mbj?R+l8(N@|Jc*i>|8%tG zs?@{lSlDTZMip#-x@R{Khl+1gRWU-tGtBpHZPzq!Y?Grr?J1)TdruBcMF9`lmL+E= z1v3AvuTZjOzF*}hww9zBp7L&NV1fapkCh6KlZ88a1Kj&qc6-t`M|{9Dxnuhvg~V8g z$-65SBAu6Ps^sQ1yG0VW(%2)*D2zfBr zm+I?FBnb1*8RazH#h+xpr>Cbjj*jJ3{4?lIO886OEfm}uicjS_RlM`^s^R9Jinl~A zmhs3iN%gBub|NV4aJ;KDH-}wsdLM=?G2cB)x1<=yl0{XG zV(}NI8rzO11WjE)9s?Uxq$H$Nlz4az$M%*qu~pqdoXtdRYMAyhfZDNV_;E#kerD6o z2%rbF@Rzo6nrthoej=Z(^#LgV0T(6@%M}Uea%8pTNaX1@X}auC>+7C;>LrGs7^sS3 zOlSB-^uixl3?W!1Vf&$j{CAJu>taGGu6k|kO7Gt3Kx9Kc?csWVmIA-yDo3B!9EWj2 z0)I~u9TO}dmSLaA4+%o>V}Jt$<@!6DxyH<1&4zf#$N;l)IRkVoRVJ4gL=X$gJs*^r ze2YOT*t32}$D)NmeJcK8NSx1yM=b-&qR9j=T@aw;6&UNkeXAEnK`O^9!BW4 zhn{d)o_EHV&Ui@XDu=sWI>dsb2l*?4D1rBgV&~5Z`A{i5Mlue)QPoTLGn}Gd z;>PGo!D8DDQ{=6!j)iW>J>O)Z+9!v!0a83^99*?302h54r7}yo?fFk zlu`T=U1AB2l#oQ9NH3-c;FP+;<~cKuh{(|wsALjQjMoP$KTO6E+MJ&V z+lbQu5S)#q9rWtzk~mo#DAv%d7<~3;`AtG`xcj!N;b;7?nl~B2TUl9&6A7Rg1MShS zE4=it^557v+O}8cKTnLdHyfppE|!E9Mf|LKGJ_jyut>s@6>L)p?)_z3(*W-klIWjs z+d(9aMfqhfIW@3q`-ZemB{}5&M2>mjd`-@J>Rw^a6WT4)=3gR(xiPYJy9R3c>41Xr z!zgXQ3i)%wh%MG)KMD%t+*lCd`oL2%Tv*}hSFF%7rnOVcL;mSkmsMJ{GVSM|Iw-WP za(LohQ*T-H7#oJD>>TUn4kv`_DxE~=H=*&Jz=cuxzH{xdy+HDN`I6hgw=ZYi)Sc3e zI2!s{KOFGM?wx09$YschK_b;!lDHBb!O|et3$NaE{`E-&=}^Kk`IS6JSF69#Weknr z2!M_<2p6WT?tk(e>+CVUNLV#3O%-Ds6JhF{r(ZiGhH$g?r-^rcILD9?1kQAc@lBs8n3?ZzW)YtrVqI-Z|`^1*Nj)*8Phakj*=Px(k@^&@)Tfa-{6^mTdo<@ZO+!a=9Sy;Q>>A^t!~K zoqiiZbWAhj^vw}HfIvOMmS=(~k8AkrUD{?Pz+U(Rl}48v?=SS!3WD&c}Yf@;`rx91B+7{Ud8zj4ryuze?6Abp_S#p$n!zHa@u_MM zVUXw9g0=1Zc|%}2yu{pmGyEqX+v&=ED*+gcbpGV)+v3Adr`)d>J;&(zO?f@<4wiR= z2m7iWFry39zJA@m*94ly`k?@Q6$s|kw0XrI)F2db0KyS|vu9@o0$ON{$jr?sH{|D! z926d%9TKjDpL(3f(|9b$8g_-bza*x$KM-|!(hzn1hCi>TT|0xZeB-B(O0m>8Tm*E< z!n`|X0FPgt{FQxrt6OMU$sX^Pnc?#E83#E0^mjhnVQXtEEZhlCVwtL?SrTjCbHh$P{so;&tS1Kdz{JS%*1hE5Qp_tw1H>jK z;hIA%!78a1c&P*;P_yN{+vAC8&xml)9NaZXdnBpUOj}#sXJ!4vv__PFx81OzRSkJs zeD0S^j=hI8<>MPTbf#PSaCa$`Ws%sc57(Jp6WkWF2WX`q6u)4+zkjza(K1cBNE(iZuSZAFUR2<_*=Rc1oBB}y-ya4c&j zvAZ7XtL-$O3@FbM*0GdFskQa>9+qs`118&3c0htTZPcykrrs}y^%#5QSr# z>kGe?Cr{iyz2hIDF+0P)9z%sT#_D0n5rHrvvSx6Eu>o_ML<1I$1uPo}2Vei}m_>yh{zMW|@Y=s-Cw*;j+mW=9jA7ak1vK zV=%Dhgy3%OK{aHVWE#f#q%5M=Z96Zh<|4Ro$v8Oo-RW`d{=2dj$>Eiq7_AD8Ex$!= zfN}Mxb)NX;s~~!<#P+qBdx7jvKy3Ap65ydT0ZHVE-@7aj+vtq)t2AAc@X^45fa~i` z#ZDIIJ3SM|fN+yWCLUAY%l=d37DP-iyEq;)@X0M$4aerN`I>8t?UNkV{ z=P#H|2>&6N-BlW^X?q(C!jIulUnTLbq`WySNneI+6Pts+jE9A%Jdv|tD(rUidclnu zDmfQPmN;*npOu53LdX9#RHV(7*?>sUV6?fR_`@M>Y;qalt5SojhMZN+AQO)v{OJcq z8VZlOBopPb2HFCe2*9rKb&dN=C6nTV^CjO-?JB6&%Lx@bw-<<3shZ5WMX8e9WbROB z(xK*&6uu^m_E9#0`m)?bilOU&@df7SomPnvlfeCRvpm>g%QP{)XRC?cX(4Y%LAm43 zPtT0YunHE)cJTV2?3(^T8@AF+0bs%WFXh8h{3-m;($W~_0~mMfHcES0l#jT+2*aX? zGtWVxT@sjy4uRGjsOeQ5K!ulozb}>HzKK^zY_LRWP~=lS>%fJKHPBHI75}*K3LlC} zJekxk?LJL@u&TjM!hK1l2X4bzTTzP~=*!_;olr-f=TveiRG`+oQk45RU#+CdA3v=g+|M^fN;yD0wilTWR zDjL7HS4rY6MIT;guu7S@v?naxe{`Q3c4nX9NL`)=uMfhR*2w4i01i5bl|C!3aOU~J z&Xt$B?C!Fy%X`rbn!FLTpvnNMQOC%Nnlds8ms!`+xgSM;P}f6q@j$;()4hTLyJ`IT z>!6Jv{6;K61~el4JM$ju1l;j^{8YnABPv#kqT`1Mc{T0 z+O>>(z~=qny+1C z^)P%wiYW*C9AWYs>(om2gW{|1WKDCGvGNQ##u(26rO~WvNngW0$9by2s zs<7324Lk>07zCSw%3`2+Hq#IO-w9e7n(XtYFERKZViqAFnny^!OzF1={(O%h0z(g%j zA;ka`;6jwiOninGy0WBDT8l#Z69sEz6_>9Z0g?W+_2nR!u#(qjk~50M=+5iA;YMmg zoA9e?o#k3Anom{gcL(QOuR+FHR%UYb2Rv9EGQ}oKwF0-4v~+X_V|4fC7M^$BRm(`{ z3kP?6@=Q4)PS?&}zB~EPZQEue`}Mf_BBwCs!9k*Mqdo$sjna;^5zM-J}01*JXZzypiYa zU8+W0zy^mJm`vk>bv<22N$;NJmfAmCRawAlV*lBbeuE4HdDeo(W9=;`|4?)~p5YHI z4Z(=^H>7{C%?a6$ulX&E+avyr(EojX{0_h(AH6fe|G$6w^G*e}j(F;BJ|yBl(asvs zf!Frk>tOhw)TvVM>VDq=CjhuKM54$0Pb|{A5Sjb!@mU@n=bw<`3@i1M64`~MvCu^y0EO-g#WA9nAfwgi%kARi~7BS3jx);C%n$O`o%gO8kr0U;K ztBD^NwVmbmU%(j|A^aL1SSs69mseJOWlXZLJ6pe@q^0F|et#Ifp@bI8ZpfpirWR(m z#XYBfPgSUXtsJCcWPzl2E^Y~QWJ=p8h!uhC;f@(=;<1nFY0F@4sl{7bDfY_Q9+y?u z)gz*hMw54S_s^Me#>m;7ie?%IDBL~hbSahqsrNrlD)sz9j+jhh9?_IT9Tx3M+EbrSW!(4&-d))_kzDJ00nL*83sncM9Cqy{S^q0Uh4@yeoS-n zSn8QqS|-Zosd4~zXwuXg)lQAPFYer;jkArgf+8P(!2rH>jtv60CmQ@v zt6J`92&y%bvF~|CC#3T6f(RA?2p%mYa$Y za-90XdY8+E;hioZxeV;W4x(;lYL2pNkVeRm5;?hq0&FC=oD{*7J>_dZo8{N=5l`tu zj`q`jnqDaUga((!k;?;m+X>IT&h_)keWt_btpc6&mI9o+Bf(v#wdvRwWZk19Ab!=k z5XKxctFT_Q3xl1f8stk5F}jEnFD_>${(AXG#;>y*G`2pUROTR(1W$Rmi?&rjs5u&{%@jSp+pU*cf{rU3`~^F)CF^t@69P&y=_j9BS~qLh@H{tNZ(#X4jMd%KDj z?TeH^Ra2XCm5_CD9T1j{on6a~VbU=uZ+*1Z>zYjuo4Toe)Da|`WKaHwW%E{eC?d#l zpMC=f*P-yEqXl!kSu0zaldYs4njqpolirThpXrg+%N<0 zRHFT+?VR+%Gm>)KqrQ; z6$kMj_6u4A#}}ZMZ>+lSo)3x)w6|2;NF|f6K+5*lcROoJrEhqltb5O;g;Sx_tHIE8 zmtrF|OxTaF+ok;Nnjg+GbEHI)O`AiH&=zKc?71-@dddr>W7gnxcj0ddpgB!|s0l%_ zYVg}QwlgInW#FMwXH5={9nRf)yQ*6Cp>7n7O5>BT?t$&7i#wljO!4gJB-`l496)li zq=nhmu$ZC)l9R)-E;SDNaIoD%5ny-LW_fp*G*!9oTXFhfQk55v6PxS0osiUibV(tG zcFu%W%hB-eXigSKfw8AMNlzIZ2K5}l6qk|^74jgVlCCun@2~$r`eG;dbsHjPCw7|~ z>)a?3DY<8YdM>YTmw8_JAV`~{Xj!4V(pk2S#<&WJd?2$d%t{MP_VfiFx;*M`@+PUT z$)&~CK>Uh5q~2U{t9OyS^cuwFCG=x|V4Fj;BOU#H%Zu7OjjcjCt-ne=yn|oq+zzbh zsTpWKF{PX!jYrmlo8T0Wc6afq$w0unrC;jG@a zT1iCMKH}HNFfKWIJY5My*fAEoF(YJ_Fw6wbEO%ts-Z^F7{}Yy#5$W1G`3&}oXimBW z-}jFID8D?B4p;UVxADi|wNMsdC6#*{RQM-OY>3+SV;v zjqoW!rDI)|Cj%yT=ag!E7U>Lgq2HM=(-C10;$YmpH98bClO=XSedjE$+FJ5x2e9wB zxDIef-Z){r!W=?IMkB$ppZ7?^2*n|5X2DG1oe~UzwNspK-$`8ThpFP}-^ka|dubJ; zdj&!Q063FSs~mNyKbQQT&s*_uIhBduzMrlE;`AgGN7eP?oqW$7=w}Vm#!$_NnaD~o zzgO?`&>^ZrN#&yP2f}{5t9?zTa(}%Wo(K^2wt#tg&_#b{l#x7l{;RQz%09L#O@eL9gnTjhjPM7RkG5Bm*`v^L$S^g|B&2D2a6b$QF8Sg-HVVsXhb|>K zZ1CGNoACX{!kx}bw?pWLMgB>MV3ND`9iSn-%U&VK3eJvNV_>g5jfx|;BKd{{k5bj@ z^#ZHSe%l2F#Ys~4XusZQ5@{_{aH&>I`Bcb@%d}asDzaXk)0LK_rI%e~ zUKR~>_pi4jt8Cq>P?1^<;-s`ZIplc;e1kTo_fFwQ5QWANJKlp#(LwIz>INLpO^BR| zKlj?_u>*(V(YC2)<8*t1r2ST$G@n6jS$50X5)ojx7T~|K<;rV;W|XzM&|W%>=Mx3Y zMOncV{r1Nv&g3?64HOMz+;G-P-v~v=F>v4kZd*z@@xRV6(qOjL z!D8!K@~#d}?f&b3HsPz3ruJEnllzN_#{dk5{Ayt`IyngF$8kjUE*q@C6!)2Q zy2>@;-h_11H);29aL!78P`JkHxd_M%3fS1HUcCCL=m+~#A_7S#N!}+ah8E!n2Mkrp zf~ZBOft+?y^)Fr0I91lBct`ZQ;WCUGex<$c?9&ESj(=^qtwe6BZ^r)Wdy%4qzd(ko zD!Q?5j^$eYKB8%GkDMvCA6x%D76Bpxt)!IAod%ClpEkU|74PRKSR#olwa@VP^Rk0N zrL1zPW)|3VE^Y zk{1q++kEPS76GOKf%=ws(Jd%!AV=R#Ak&&~%Ll?2eP@zc%Inf|s=N3*Geh6k;@xO9 zt-dWy31aVBqz?w)gYPg+1eaIZMgy3i^}C7r0;a3RJRkAsURDG{z8gKQ9`T3-x50Ja zj;8oTovqT|&zh4m&+b{r`b_4MJy=&AN{+bKO9M;(hF?>zKGMR@j*oBPaLsFu;uv40?gJ7S>P>9_JJ`E@YVMAwzcF}G8vaO{%$k_r+k+_cOQ`s~8e6bhw-I)CcqwEn= zw@3MqHR1A z_g1A>SFYc)Q`#r05TH;eGFIKZRD)EIA@umUu5-8T} zmHngZUlH1}+_hb0z?;J_6q%y4h|;3gRJNw$2;m<6I zt7YRdb%ruVScS>P?UwN9LlJhF7s4TP{s)U1hd9l3T7r+YR{M@?}FE7@wy*kD2-N%tpEW*DR`J?T4 z&q4d@43cvRw0A+wLM@#yR_DF&Nw|DzH3e_KmOdYmB1oCr!Ep+A;M1zhJjuQ8Ej^lj zF3|#G9ZZfV-{|pOdu6Iu_6BB;1f^s}B9N+T?@6LDLYJk>h8 zZ%FQi`ywe9v}3OBqkWH@CFf{xbNhB*tCHB*PIW?(O9&fLle{k@w)2ErkREiw)jEae zmi-+1TAl6!GJ<#lITrn1nY_1|*7nm3Ff7t+l1ugN2dgpeGXms4wRahHNNR2g+;Y|cQRySSRkkx(iJ-#i+s{ZV_lIQ{ zrnfj060V)^d&kp0Z!Q9bCc@%-bjSCD*weh3Xu(JuMEl7?(b(VXT$4!i89KOhHfJq{ zUZMY$FzO&bXebcoanJ%0{GNF~zIMvUVQ%!O0+b~e4%<}A(8ZBsy$P|G0L_<-obowkovg+3P3`mWEwdEy8|xMKK8b7O zH(v|V)5}%7@OUKzRYG(P*YGmto`*h?jvhVXnJN;>(({?QxcPvPZq8a+uIa>#K<*Jg zkMA?esQOf^GQ_D7nVSR=CMF`x!;l_E#W2n=Gx>N>Y9JR&qNdPCxv=le`v|Orgu<6q zKk3>IaOl`nXdRklJoOLXmN82zUZRkb?|x~-nt$7f?!2-WK3w1&*}R09Noov0(LiQT zsgcbQGZs=s$I{yU!A2^&?Lw}*>bQT7xSqvB&9^k+wlm(Z84SdZbOkmuMn|U;TRajdY?^H8=ZkvU6X*Tbb*nnMF&Jla-M5V05Bz9W-qK3%y4T zrF~jk-Pb=DjTq)_MOgMUe!a(_NFpRJ1%D^RFMx4(Yfl+$dU=$EB1LB{H;kPY6!IU!=RlQV=MMLt9|rj zzjjhxKLjrgVV2vQMlCyY)iPGhalGG}S_i9V8DiNSqJP-g$1*y`YULs^05W*DB-Osu z)5V?YKiUN)d-Dv7zzG2;Urymfuk}V>ghL9vz#0i2T|H5^N(ZS_jN2Q zd^%-kEXdXksfZ6n)?0fOQ88AQndnFE^jvHwSF2OLGr8xO2jvSp{Obsd+39gF@gU`L ztf1Sp{1In0!9-$V4VB?AprkkBz@|(3SxL{0hs$fb@bJ{znjHqa8WEKf`&M&>7)LDF zj}Sk8>!5n9^MId@&U5&rsoqD`?ge0J>SjsoVwn7ylmx=PPV*}i67ZxJSj@4Rc7KBr zkuC${{x3wX=_MAyklD;jI}$9-;Z`&8I@DX9fW;l%(ITCR-!=DPO(K{CJ)|o593^mh z`Ohd4afc-BQ95|soO|?*iTt`-w~nirUa8gP2erd!8>>|Wi*M=ez;Qj!?gd!r@|wPa zt?3Vd?Un&=yw^`;0{BB~Uw`~UqL!dd&kXAu+9{XdxGZzS`C8jebHU#{i>rvEo^ujZvqnKrN0QSde^p&S0_ z|Eg0(5dmHxW65$2^uLG=@G(CkI8;ZQ9hTEed18)EfX@ECH9i*l_{#fnYh3+*`|b&G zfCl=S3iykhHl*!vzN>?> zohu{f@?7CAH}pYg5#S%NxCU7b9u!XYZRt% zOa@Oa3CJWUfiu=jUql3Gsbpk&jk*_mdwYDi=8c7mX{Yg6clNnIt^ftkStfzJOviU4u950omjbL3VIz)d+nF<>7WD%CBGTCkB8^ z%M;wa6(djArt{I^{kB5`oRxLmmhasGAt9T#&)Y>r#AWzC>7m%7K6}>5ez;}lw0Bb; z9~TEFhc4&q>z7`f`l!1zq-k(|{@|u`{XT^hsSSt|pCW&Y!dYDQszU>FIe$svc_t$x z)5YxppD@s9PIjzPo3TX{L9ccHs(qrXVAQZ5E&K#2Q{G z-xxQKh$y~TPnUdai@4-k2T#lEoZ0S}?yw-i7`v(_SG1K zV6tBCT~$tB2LuH*W6KHncXj17$8uhSymciOCK{6b#LJgzids4c=VOItF1jyFX6d*~ zosk&T9cPOZ$888t%=QU3vd-)#32Xh5Hnu*k_--$-i>I7Ap*nqhdcQ6c137URE>}D( z6XS2G(9DI@>%o%?)-x0y|6cb1t@S|Ym>4nKK+NxFgBy-a%vc)m2-v%b>Pjib%Z_aD z)qWx;BI$uh%22wuc_!%ruGG9dEcLs32_|RO)94^M@ir+h5A1{rcfZqp z4`1uKLlOg{tmVvmw+2NQzBJ3#^`uU7>-yl(%Do4{TdFu73G|{_8^SOc3Eb{66eZ18g2oHt8_X^T&7MA&qcLCIu7o@Q$FGJ3f&s~op`wjUv@UGB6GJ7t2PWYz-7)oon0? z{9Ue4lapz{WL;yR>t?@N?qvxkFfA2?K9c^m{s4;+owtp#GcOiTy~mZVox64ys7@(4 zhz~z#YA|76+WEZGeCXNY7#=I2vw^R?_}UIgSV}6hCXmtVVvp3ug<76Di_o)J8#SFP z$|kinKX$Vn9Ua%3Tm=){iU|uZHT!!7?|WP)(9oFlhwJkfr!MHYU)MTUraXQAw1vy6 z@iAFl;~et2d81B6B)b(asppApD}|Jtc8w0Eie@>{e&e~bYTy9@mE5ML9<+?HN(w&1 z=bf|$mMqC^=v565$}zi?9Z&&tF$MONzUb@AjrP&q#o7op7Rq));++K8*hyET2y!| z%4;?spcceJ!fUpRsPU3~0ymDBA&(D_2TA)lxRTr0)8VW$ zJg7~Z0zUy?Bp!+(0CB)bQBrrspzdi6<1)O#9Ec`u`%3P{CvSsspEn>Xp-hcddnIV;)U5xW|S z$-%5$wZvsMZ*_&yR=6P+OnMw2D8=v@U7Y$Q>l0PKDr1RuwjH?K`Q?>KS8}x}V;;~8 z6$cM5Hf7JrYasD*qQoO%l=bj1a91xXx9Nni?0NH+LyyE$6)GBcN^eqRkZf{@&y4-V z&0IpPd$&8gg!ta!rxXfqdMt@Z;}dze3oS;h=9Pitx3*=-d_)m3OoCw<^smQR>a08r zsenSvfTAnP1vCl2n{nqyGE$*TxJ8m|-q zU2Dx*-LM&nbS^oO_y_9z(BI(@P2%kiyf8$0ygx9qyj^3jp6WAu2V5S9vIHD-)x70Gg%030y zfN?FHmOgjaQVjT3BS~>s<7c>`=%{Y#jjUoeiCU2Mns2nM(p_%%wDXh~WmqxcO>e_W zg|f2p#6=ORpI8(iz>7X;2nu=%bx~bA-?Hk9|E}2|j}LY}g#sxz8=Nyrw`R?isKxXF z+Jo7UH#s}&6R9HAXJVZpcS02YBa2gdH~bET$O;9EdSgaex(VU=yE9fUg~uj@QE5Akm`EVV7`lVXpGycr7lf!gzqd~S!ErA z<(VU)^ZA$!X1}T-Eccybugv&jRLmWIS}D&$f%ZKWsmG3lhG)Cvk667o7AAco*{07q zm2@$&2u=|spB|TN?iZ!kDG5f#^fiQ~@OOxI2PZ zt~$b40=zfPc$vu0GMyz}*aS#?O$xI^IOl@IcHKkAkZ?Ldyw<7tYIb%Wo@tM`E<4JD zmFqXv`2z5Rk!-!As@J%ZkVo|u z-#355(cF@Rr)oZjh;)wUiQ-##K(A3On_7|vm*QSUI>5+Sbrx++Sfs|PcBE!`b3I>t zJ{($Nw>zE>CS5bOJoM`iTiG$Y&+F+BrCXe*ZJN#>;V*wX>R+?quukRJIRWomA9P(~Q=Z><1I3jQ$kqc?hAgjQ8N$uMKbs^m_nXCL=OV;-ILd498N3j1@lYM^0oUw%&4QM%4mu9vy=~WsQlM zaPrt^`jLNOmNSnnY9s-X3o$ga(j*ts6wG2_)iT7 z{6mq-QBhqzl3a!BN!BuFN#UM&?d_j!B3@uEQ_FG|9?H#Q#qMJIR`#$N7=Hf)P_`*P zxHP#0?NZR);S%=7Bv?5}^Ibncl-0WzfxhSikp~f6bgU)0wD|Y0<+2^4nnR4NT?({m z<*KvSEkpw{h|feAtOqN9mFx!d4Rk*gWLUAq53Ov?&1v(BprfHQ2ho9bhsEyOdYSGJ zrD6)2;)Y*e4BN}K0)|L3GD+5nRI-Q)0Kk8fk(R5m`@83!95U3vR(`*@> zvQ}1%_DbuYNAU08Zq8P%j!m-|_OM$-T-7@7HpOpSeY=CjKY(v}aDfD?_O#bT-1@Nu}k z0{JU!TF7dTnIej%gsqI`_EVo{^@0b%H?1_0c3~-ZTvuP4_bH6xf*^HM>T~IK0%SW= z)g(2!^#{MU3Aj9cL_!7X&tr1F`EJHXN^${}Z8r;hZpB{nq&u^<)9Lx7?&od-g3&7_ zuE(cq5rpVZx#dK ze>n<`GP86nehCLhm}Wb)%OPDLm9J@)R&h(B`B2vFe&}{Q{YwdZU^$KF{SyOl_>c}8 zJ!`liFKc2ZG!QbQ4O8x`$VCHomMlx}EdbskyiR=|?6~`W zrleoq1sR)WhgSWhw$L1g8>(YWm_Ze>PY1I$Y1vPi_kQUm=f1vef1RgV@f$m#@OwA! zu@pi8qA(_pxEWtci(64yyyml;)6%Dk;)vcqL{1>h9`;9Im)|wetS-6wpn=ZC^1HCR zT0%iVYMZ2pLFhZLA-b7*N$zs-4uiFpwh%nW^Y2X7kNT!7jT?V_M=&(ZOtMo|H5U@l z8Xo=th?u;)x@gQrrUqw=jd0fn>Tv|_S3ijc=&Eh0BKZ5Z3=S661BA6s4knHD3o{Bc zlEL+9PQmuvgB%v|#F-kNnYd-Ku$0I^l;L%qF`rB!`vrWKJi0ReXd5oMI;`rPP8D|H zJ=)j%40OA<;I8L=w&NYT?*~J%o0KwZG z*pAnup9wScvzDILjGn;Zjw}7i^LDR`4&rtE0LU8kT(zdE>@s4X)ci}!f$$3TZ3lXo z#3Iw+Ou$vN(F_?cYA|2Rm(;^$a>32escp)U!5PokO0kXvZ|mTN3VG5W?u^O0MKRg0 z=Gw)0%Y$sF4n^afVdqI>)70puXyZ`?$0Mwr+r0-)E;RuLgn%fOv|;D%Sl#8>E$bn& z)^DvYW*tNRKCe%TyDl{vbxNnqxa?>DTFTm3WC2k7@Z-u`nFXMj;N$xTj1@5usC5tB zaC3KssMgK$K7e%I;S%q#@noZ;Qg=8CxJGBM?3Tu+N-OIwzxtM+Jvq{Nr}NUGtX=6o zRIZr8puLW-ASNu-nkjR@U_*bK)Du@NVY-_XYJ9maNA#p*lgtQTn7 z)aPy@`xz_a(w_3$Mg zdMOJZ6eFQSZ3g21rGxhHg_GD1D8}^C>NMFa@2tav-v#*=fDIU(xL=znAH71X(JN?n2z_9R>mNG)J~v$L)I*F|qp0 z^uO@Ezm=&Ik^rn)@cmCYxhM);4C7;_{Kv(Wb*Cz#d#c99o}(c%&M|EN4tZ`c!QbG{ zY8y;4{_`?);oX*Yk8?;`6c>N~!DU5X0tg(%fz0Z+f8n$Mev(QJe-gGEh*9*%2jMvt z9Mvd+^wrKkQRRPqBo!O@H%Va!2>vbCH30qcyjn#0Cy4sL z2)K9igVPc7W|{SWJ3toL_8bL&Pq{zC{U5KNB$`~9-x|*YZv#c`_V#SDAhKrLNkO63 z5{vdcMry|`16I~yMFsgV|E)aQi>oVLpc_Ig=Q0*I&j*2hEDZr|z$63&bmgu%FCF80 zGXLzwxMv^9f1VA232+@x;<>LWyfKAe^6k>|Pd6YcN8z&4ApySi4sUCLDk`Aq2*}A zu(z<7n`Qr3J9N7|#^$I^p)ZjS9q^388~2}nuPKEMh;;p@i*4(nN}E|{F%fLHoOg>o z+4CQZb^m#l-i#0BOIWB(!2LZD)&XeM3$L>Q1pd6Oo%=xpqf%?%d|wZ-_Xu#9!WifE zdj(@-6;34;ck0vNZI$VU^3!sU>8VO(_3c7O*!7d3oR{RV)Ez10uy-$C8E8|p-Ot+_ zTiF@2qC^@*NJq>sudgJ#?M?2TYYDA!4Z6r$SnQPKmAiQW@a@rLHkp*f;UYgB1ebkG zvby#??JQ&N`za0WIrqVgg?b$8GOiSLw)R3-RWR7>M;u&H*5Uwk+mIq<9)dd0k?^Id zT+S@Wu$WJjsvSf;9=$vhVs5`Qd^=@no%2mNLC7x2_Cr8*K^{XmyV#e$76Qxu_M%T1 zazPr7M}{78IMrr`v25?x+A^hn6rBDV*jvHo9@Q)~Tb?Ux4*XMf@%yQNn1(-{A4aTp zFoccTTZ{Uqa*3pM)AAv~dHA;#TwT}OEFKo`S~Tl#F?45~m5E7}Id2-FZG;5~l=T-F zym5QNwW3hN_IE$cJ{pf%5_Wd)Zbr7#Ud}k^eC4*_B;1t#M%{b#U1H{FAmH=SeyO`l zAuriFsf+%F`y0MjFqgh(XPz|AY?5EBeiIAX`vwUBJCeqH5hN=Lg?!W(w4WU?aN<oc3}?&KMGk8HyBEJl)c&uzWfz738g^gl0< z3k4#8f7<_cAs@)HuGqbWM3CARZ6sYqjZ*4EugkK!{Yvn=>MrQxu-ke7;6_zRp89sR&eG@bTK<( z_e)f{{=lay!%vV3f#SeAr3SgP*0<)jvCmeRue?krOw)Y^DxZQY@}`G;zSH=>z>g%S z6HB4+|9Ku_i{G8Jsc7IP^m#_TG*{Vqw!iZQ^XT3;35(L&3%He-KkwG;pqv z(;=iz)5v#TFXh!0DLx}!8|+jCdbq|kNz+&Mej|_wC~b}GX4GHk9*NEs8z~BIWarJg zi)YK2OxQBs#9j?7ojsZc-1$AWOd8i{+h!tJ+7FC~)&jWd^7i^-Edp4#`W-N&j^HiL zEb@5S92n~=>*l2r6JjaG1z)=Tu!za`dz97t_^tV52;|aoZDegtl^eWY+}Y#Yn-?Fk zX2&)>>)vO(^m5H3o^76Y^`ECNo{EkQR5AFIk!H)ndn7gW$O-s4M+q4Xl5mrM>iACk zu7=gnm%f1U$jw)AG3nHG)w9hv4;%Nhbgyk2N2gzpk8u>E16xdOE<|bDiWSC5Hu|^+ z2iDh8J%J*R2t#!gs|7*gZdF5hvOga%yTS5)s?99A8(%m;F*yH?uzXlL0-(U6NPdTD z>jU~JfP%9#PY2YNMVAd!%P%e6=#!ofzCD{$CS4N9t=Cd`X|3`D&zXI0LOibvliQ*^FD^DeGKFqy_ zm2>(50{OQe;RoBE@MC&zY%Bt1gr45sm0J<(o)bdq-ibqOq&|=BuUn-Y>XOb7)Ou@>I>#FDu-9-uE+w z(W5UoJ4pAwaD^n@9`*_mXa3rakkM!Q_M-QH*!s$_IJTzSgC#(MyE_DTcX!vpgS)#E zf+e^N7Tn$4gAeZR7CgAaog9D9cmFj!&-6_1-MeJfs#Q~cNi;XEUF)=WKluBo?taky zr#&VN9dd<&NhJe%Ulzx%0~)y@vvaiBv#bgXArMf4O%NiRFuLMTIn1a!`v`(*$OPp zI`A4gQ(G~fi$Jv16&7pm-;uF%ut}MkieGvj z#Ll($(F2}<_yTI=J(3Y|wmO{b^Roh95Z!F40ptPG>31?|hr1ndqcsHIXTR<~?nG1Q z=*XXpFAyl1rU&24?gU@7*I+T{3xsauGH2@tPoN{p_K$r^Iy0br{XQ0CFqb$)5XuSK zDuHs+1AUkjIynIl?!8EuX2*h3adp(w0}0+Vf@PZZeq8!OM|Bq7y}Ji>M4Q^U#Ho=q zBz}?TE^EEV?^{5FUyF}_CupO|_MU?i_@6LL3=@I@E~0F|doe~RleEfiREC;bV1{r1 z;eqGg+2j)SZHKGp1I=Y(xcv*K=$OWR*g;A4x){`+do>*lA$a8a@8=RTdC z+rBj7_kBZPa=peaGs^d|FO%lO@^9w{5#DNSw#?H~6NpTiO84wc?PQlPxzq`{AE%|o zkhtS75u3t>Fld#z!?;mCiH=fY~ z5y`sw*ygUb;rI@-AZ+s-13dn4a)ENn0m%P&^e|Fna*(vxXmtDmBm~mP(#o6K4A%8q zu+-Rt;C6?<GjV`1BYsdf@%-w>{zTAi(hbo;>+xW$mLykRuX zo*paMEe(YJxITxJn^p{cjdNv09E|V2+5;yF0*9-+b>iVm6CQzHO|sR64a+f4XCQ`h8(<b9)9${ z+#vCH*o9&(@ddO^mp|_Kh9|IQsQ@B0z(4AJljIoQKMxgn1J~;yZ}=GC@t3xlS3-a! zqB`5nkFZ!KY?x9h5BP6j67pXwE`}WV0aj!3iI(|O25h0oAN0!@IQ%jPY5CmOIH9yr zjoI~-pNg?BFP}aA|FxBHkdAk>lM0HZ3NglLf36KIQD99A<&fYMa-QgT2XXLo$>3z= zX$U8pRMu}WqQ1eYg|R{la80Xri#3+HHWHwb5#aPVU*jnA&Dk*LAt9gEhig~YxHuju z%1kEts7yZfp9sQfCmz}U$W5IlrDYZLv9Isb<^}D-+<#eFp&Y%uIr=HXW4Ye-X{e3Z zOUys`Go&E_k~6h3eI?)taNog=PhlxmobsPPsdENK#@Ka+dOl5aVvSBq5tl)OZA6?R z(3cpT8~m833=fw+xiL^zr$#_PVDSX8&0G$yJ@ElvCLf*h?y5!%JltAsJ(-`NJM@1R z<6D*_xl4W{d>IS6YAVc@;g}&naLRWU=jVSN8;vWM$~r?+QY@uR8himsNJrMnM)Xj+ z>9PJr`Gr7*r46L~pxT0$^+szxSv_$0x3ssliz{xe+Xkci&upUIC7A+R?erdHZC`t; z{CvK))$3EnGwD`@9U9%UH5%Xu1#@SL7y~PiU2t8Bqn7f(x-8P>TsxJot(aS zh7S-DE1g-!c_HaiJrrGE-`^@9f4ljOA_m(Q%{^XHfU$@m3)*A(&;3N^hW@EHC8~)} zRLkvTHp9=FZ8*!XyGRT79v0GhpFUw>VS!=w=nigRC_4u#BncCSHukCC>aJwbG^%KgyZ6Vl-S43DmZr&Ukbvliz<5hvOJz%Jl$i1`}DYa%vYNGc(*b!2@sZH<)Tt&2%4t0i}3_HqM@047cL}s%?*8l5iP>$imW+3bjR9EI3qU z!F(nh7CGsp+Or>XO)Aw!wM882cg~9K5~5;&62 z;8{FC=r6l7QuJsh(p~bnP-Bkz;}*JwMuR#F>McAu1A~5zv(qDgrIOvx0x0X=Ko5Pg z^zaK4Kn7d5&Kgd&(u*FDaXfKp@X^onks`quVtYA-R__pze6aubOg&}8rJc>bV0!fM!z>7nZ#m zp%AX^)Maal;KJb>#(2i+Cq_&o#q3&zGsc6CjClkg4jVg3{Caq5;9=SU_TagVK zski3x@vW>>!_i1(i7X!4{QNEom!{=J7ShUy+zgcBFTBnra-SPD;rN;f1yiYRfj;4N z(k~gT)0IQ+@PhHS*BBRKr}+0W7fOprjHSGYwlR&gNKzrW^@S>uk7uX%X`Jy^?jZ6o zr{){2FY1)&gm3vEFv_FGBY-Hy3X7U+A0$iC@-VA8bh~r95k0h_|1#-%WC2Wq>UW^sS}Z)AeO2_1PW9_{W|W-RPAIaT*|V-I!P0FQh^fq1ue(=bWKN4F)_=+dFq zHI52feDA1r2#-tkzUsThZEoO0|<>*Ay|JT%T7MBVE=nuERf-vq-fbGWkA zMQoR@6&Le~i!n@whcYgU=`_aSJPFhUxij>s{A~9oXEjvp31|fY(~Jm0R{dkQRywao z^~HMQ<$ygDk4x^Tro9Cvz?jxhUmUM9w>FRrQ)h&eopUl-6Gn=4`|a@5At}H}TGjaN z5J_*^6ouC&$8(a;M;{TdYnBZqX1Kk*#Vd=i9LeZ~K{| z-@+xw%MBiPNIDXhjxb;@%)~#IhFiU-){9F*$S$STIJHYKN0B_LT{2qKH?V}(7lc16 zBky&uS<(+Pw<_#2*Zvxvf>i%%>^372e0tg$`4J%ZC!_LD6F4FL3;TkL8U-(Ci-OR$ z#%QW<3Cgh5zzsdiNgj~GMDNVk@Ctc;-_8nfh|I!likbP{;A$0WZ9#w zyle@ZGD(oz5NU6IjW#4S3;Sv?ljc)UwayXXlHg!{iDAaa{g&vEPwU^#9lU|WF5oX0 zG4J~|W@uHYYxBzM2OHaryXe_-r|fF6qOG2-Wh0zMCtsa17+hIoyAc_x_ONPKt7hz4 zmo?F<9f#Z|JYq+Jv5CPSKg0y9Wr9jO z-*+{n&KHd&f80iwBHdrNymj_&tzpV)Xq1tBXmnd5xNN+s^hD4;gXcNwO6B{H z001l%IHM1ar+g$0gpl}^rWBW!vY)n8XA6UcB}|6*7$Yu^k4eB${A%>zMKn;#2l6vg zm}-mc#*J;7>G~Q!3&eR@NHq4YW)f94+MV;*`;?^H47w2m(#~-{WwQZuDNEIMn_}9e zyAPqdsrb6@`8b&+^*@X!J<4zl?`kPDRo@gH2UT5NUP=1}jfdgUjpu@8+BtE%X9SD6 z>7t27;~giZYj88vXbzKQ(L#xZp45xUcA9JWo$N;_o7pUrZOUlld6Dd6phx;JOpJ%4 zuI$sb+(*{I!hpResoG6qEICFd@~0x51lZ-*$^U)!UsAc7<{+>zc^9%)qgj3edZWkG z%>4Y&fGif?t)Tnbca2Z#wziRAmaCqIf5S@Awu{8@F?Zq6j3w)v_qC@@li|ow8W93I zc05fIc3f5Pq8>?W`NsEarpOUXsAXdc_@t?)jBBKwjBDh8g>(mfkt4%{TM_7G2*t9u zQ8uh99Ebc7$$)%VaI?cK#IYDx{~{{WYvm$q-pDNRErvZu+}O51OW{!H&la!F2k?+X zf|K>*tkymIn{l##g2rFbqtF>jl^w^dckRX?_^nMRRRZAk>gB8QU)$tPO_3SZE|Rmm z#yB1?PCnjR;96UG`v$)cEXrF`$ku}UTu9@A7U@D+2hdAGuq(gyvWc`R%%~6Qsqmt< zEQyz9ruO5-(>_YRAG@+|IH|a|em&&h1E(z8$?k?@AzE-D!F>FG)OkC6g}L6?plaqkkD$O{@$u& z%x(Tx*T(;x+~1&GlDckVDeo-syC?mLywEp-+!zoui6g~WPB2U=I264u!tUR9drWpP zm;TJ|%%d7O>(%NMO~dm!ncH00*2xJ>kuVs$7!^i(>@FX2T03&C8_Dl9t93MPrRQ`< zxv&R}rThof_+y2B3p8ec`#h1oCM+8xL7H-d%VH3`vB~nz>#k_~>^%SVV6*!1(4kN# znVJ{l`FFv%zgO(<3uH&=nVu5)Ag%o2->}H!>(soU?n{X^VAk!YRALv+AP?2q2i?uC zt1K&!AyPV+24K5-ssCQqe_yz826DjAhN+)pKiTG40;PXkkgrTHZK!!dp_t^#i7u5s57YzbdV3d4>6PfR!H}Kw>Pmq#*wdUQb-t z($RMx<{w+3Eor7q@|^M*V}ZGAxcJZSuhEno((`{>?y%oXYsM&uI+2x2cp;udZxx-l zEA(yZk`ovU#*JyVPoyHa?rodIRc2w&8_e;6I-`R|HP_ZYVl4UCl?OC{uHf@xr4FPL zrFc5LdVK>PLf+yZM)us}NO`?#v?9*SC|6;)3Q7q4z%NHok~B_F4|jo#>o;Bs$>TGS zB;xU_&8}deXm4v4+CkZI&EPTjt>lwRi+u@d;B~N>pIEn1z8H?L;6)O2gD?RGmplWFOvzx8Eo1j4fZP;oM2+|v;!w~|UkvYv zb=o~2`GD}U<*W#DZ&vCdia{78QKQYSFeceKT!-xYro#YhGxeo&+Oo9l8v9JEkk?T3 zUncQ)+ZcunY3mW$JwC!qAEuam!J(ntB`fYSOob=B?=bP2ju>eE zBBN0)!>?x*E2j!!iL!@0*wt1sz!@t+)_m1#R7l*3HiTXp;YdHvDDk2LymT;Amtzyh zNuPJhdmDpEmcoIR(&|e^nJJ`56mJ^7Sd_jk=pf&Rd)fH;1ydPfpl)-p?HzDG1x7fE zD946eg}78K;hAV@$n0bCEV4~1ls@6r~lolSwKVfr3zcz zj0P0Yyo?}zcsF0{)m5aGr4h}B_kBSzc7|-PRQpFQ&fSC{?rtGjq{yPgC1ez%RSF}) zRbpuu>h^GHl@n@3X;#daD>Cxy2<7R=hrrl(FQSi1=L*p@-%cc0=-=X8mvJLX!*E`s zmx{8S(6LUBoqOm``;{M@20XBH`5O%TeELGIVL4gpU{FZ%3@truFeQ?Svz@D(bVOZi zpN8c#z^xs1^);lQ7s@Z+JOuTpy=d{7w&kC22oI2+Us zj@F@bg{no$c`22$%d>5|GZcc+D=9pW)Rj8hS~42G4hQ;7l-*d$7v&iZqys@TQ$M02 zj(ki(dz5*2zS3uXRvHp>Tn2MI1f#DrQ-%n8Il~{+#Z)uyxrz$oy$FjV#Z&?rlb;E$ z*F~(v9-uM&u#}`>s*D%of$%hl0CC}?riT$4A6LQN$(?+<+3k@!7S?UvhCVr%G5f3& zl02)OGf|eu`2swp7s>VzwNIA@*4ceg_Y7KxEZ_lQf4jTCE}$|34m?p|jiBHUW7IyV z;DuZOqts5@u|VyVTctba`}D9n->g(&61rEsUHGE;9!$t_mfFl-%gF>5c>?EFHwcRwP6KDL~FKlj7XR=7&hwvD`ozP}2%)F{NZ zrtQ~`d{^s(RoQ!Pn@~JI*WAIv&-PBo;_?e1%8ObGWQ`s-rrKU9Qq6azYNa7Yxaxtp z#kZ(Ax8|Lt&U3|Z_i)VmwsDzWhr>2uR4OH9(di*&PIB_aw#=Ya=Hm7^uCC4n;Ly)~ zqPaJ#fc6W`qbsqxzjpP!U}~ne^(lOOXXCN^vdcndSG5AHKrGyBJk9XGGan)RcS{`D znY74sp?@iR_6dw`p3a*OpPypiJ@}~ zV{zl8-%K-%>+5!_Us({mU;%+pE9GUcQyskQp)dyowUW!k;qF6^QJ`-zu~~f-to7)L zgTJUl4XmY-bM~M;)2$@kz67T00I4(9lxB=d#CIT3L7}RwG?o*#Z056+ES82H(8$9^&)__MuV|5K*a{Df*$nD1ln*phigVO_5A!GkP`hJ%v=rW(z_JUW}ax z4}|nMuT|h#U_)cayN{koJUqoxMV(akNj^2lP{k!>T`o3p$wj49qO}(nEPz_8;Gzxj zBYnv29JG8EfgbFg*C?B$6y&7umYMSeiQR6O{<{u0$0wz&`$R7|wf~Nj!A>Et0u>e= zZf01@eTVl`9h#?g86kmeka6^s951FEG;7~yjZvm3cxAF!28jpSIC#l9#i|~M7ry@V zXyXrN7+7-E^i_I>&Gqtzt9JYYzQsvnyi&LWLv;gPyM&j$d^r_!fT+B+k2D&VWd)5f zr=lwM+3O_1(`rg3wJz9$qirVi_FwbWH<*`Q_wM*`587tlkQ6t0rDWV4<5bml2;SyA zWlE{Ws+EBw7LkqdSOqaFp&ZvZp|w+j5ce6dlrmMgboN(uo|P}AvJ|YeI#X|mrkg9` zYmHgsyYhb)J)Di8MWEZhd#bme`?6wekm$Db!3VJu9P}62`nxIvqm&AGsU))W zLt0hGT^v}d!t4z7fT}OJa}*{WW-K!!TG2nKaQF8Lsjk_{vSluiLSe}s#-&17B~nlYLAFKfBx`{LAdfo@4BX=F8_efFdT`DJ`B{?3`03iD7MDQl21!{>mH7S?n`q5>$USUMFtwThcNRtAAz zj9(QmExfTq*RxMdxia!hnbK}24)?OW zU`Gq!D%p@YA`cu3Q*VL(IlW5+`Yb(wN2rmGpE}wS+cg$K(|j`F1yE5pfmMqnL|V~b zWg+1KtYLQug+QbD>MnS10&}h}1}D=|-*p#`ZO3gQH|vY~>P=x;ASIqAfMJ9L3B~x{ zh2yCW$KgL|C9O|_`D450Z|8^c)L~R0mFap=$Y`R9cOzSSxsbj^XApfB;;eNj&XeFa z1@l0Vbtj)@QOh`n|9RPor(ivL_3tydK~^7C4Ji?sP0$TmNGn&y3|Qu zsCbG5rSn$b?~6i?c8@KKK|mN{L4RIW-h`0NZ&hx2k7vmSqP0)LP#vYyLhBf9o zI%!0n9{Po(;Aiglm|3W|h5Tmg{Za-<*tS?>>P7E90C8861cH2l@2GOus6QBlZzCtH z2e?G-w)Di!mnEiT2!^=HI;eG@TGCte_yt{5l2D7v4^N!FI*drFoL`tr6|{$S2rw(Q zIH)nUf2BKlT?T(lKo(=PCZ;U&LuPOD?2V3MOeci%E9Af%a*WNolKCHhX#qeUl@8#Q zr@`4gY&jQ~lq7srWPY7L+k;s24TU2Y=iX^bMyDhBMuTP?hcLN+p6lskKa?buwsXeK zs&jp>axcKm%d9gO-7M5ElI2x-nB|lEQ?;4UvahK2`B2cHL(?vp_-1s5S>ordBeV2{ z(2(1``nklAYwz%Naqjb>`<2+ESD8)HN)o$#g)|O~J!7F-Ynq9>sA-x}VpQxGuXtk6 z?vgRJhATSH(cg2Bu4o{c!}&1XL0or>|rnq#s2 zjDZU$#tMuJg^} z4~4|A#U$<{IcV-DnledWmgMq>8md!_VHSia9&{)^`~J*TB6Z`P2h;I6=&37-%|4aE z@(E_I5>momOCm;i`2o7}Ht*ByS1Cae6^%@=z7N=X$;kWyl|R~|NbJ^ERoVCz>QTibFJ3*U!`Mbylg3B8`G zbq3Tyw_cDviAD-A*!kMetIVgdtc05R>vNQ-cx>r3nj?F*^JFw^_k8$hfldd$4{rNc=*$7|AWeqOYi;3=OS4&#V-8i zS}qSSF!QIgou=(yd@NhEE=g9&gK5;=sk6EBY)pOm3SnV^Etr{ib05=eb<}T!iXQUC zuwIL26AfWF6m!LhJhgJ7I_MCL*HPWe9^faWh*{t~1OfQQc6S?V2@w2 z-&C>tp!uS~-3+(_=gkYlqb*$ z?}By2xlWx~7EsAKEW)32VqL@wV~L_-EY!;K?P!5U|4j{I5$@cyCX|;q+V;^Srp0{r z1_rrr=xoB*4uedx^iOr@Lv?d@WP2EdJtBtJpj}inG+Na{_RiFg2TAEJf)LL{=D(K? z0R9+_5v7EH0xeVE*!79ro%pkIt<(ixY5s4PW>1CyZ9Q^XI!mi#V(!l#09@WuS~oC# z246yO9=$9E19|u=N#I|4r7dYfSDS(|Hk+fUzCZNI`c7XPxS~2HtQNYw%zTfk%NqjI z`_Ny=O{zglbDIpnAGXfDu2-Vg%$MZI%Fy_CF@nqqINADyhZGI!So5>02V5R?I~!aO z(x$t%9~$9dK3s6>YE~a{)CDQ#L`ZH;Q}miDw&F9h<;3HOaz>*a)CBvv^1u_O zwk@zPcus>-l^CHU5#CqKH*RT9D2jey>~($C#hh_?rqH!Gd!TQs7#g2AZT&DYWAj0E zQeHLm{Ygg8bJ0MmK%))0-c1AEE@k1(-YxTC#^)Q5Z1cf>6Dm0dfzGJ%uzZiJ@5_F6 zIhy2k%~bXEJ?7Q|NT~xe*mg`DFH6CuG-T}}b1SQu|D8*s2aA?zL^kQ%ZgOKs5|90L z#ZsV?DltFNe);?P=swZ)!mN-6n!JV<_XOHfja^~hgV11#zED#z7{7CT$$;6qx`uRC z<-e-(i}6K2obx+Xih&3MUc*Fg-yN00&jqX;N;1Vd9#~q>U!!rHS;tEt9wFJ7?J187(tBCh_0#j|h#*8Qn zAzF(2d;W%W>#d0Ac?=4;R=q$kXvb_!^}|=Y?8VpuuUsQiBcqgp;nSHHW)q-pEZ+(p z;^X<;mGnh?H`-3_Vb6t3pMYlxoni*{GMPQ1K>z{V^mhS5-hVhPfgvNAUzcNDM<@aV zuRq1|?!|Q#u!M7aC{`5^(0p~}7>cFWl0Teq}3){HDXS3H%w zg!0Am>M&0KD==w;wwc_*eM&dJ#j$F4^Kt_6(KQqpq9`v}&h+OWCpay(?3v*-6Ehvk z;2~(qLGp`%k$I%RJ*HKWEZBB|H`Ss^ep962CIguFW{gjdaLUX_HMEroZYieiLWbs| z!4drm{u|9`~=UMQXbC?SV z`CD{4GC2^t=XHANY8Bk^UBf@}^jA2fl@0_N8)FpH5uj9GO7(VMs~m3U zWR2R@b!|335&=O40QlHjJe9h*C`xWyOEX_fpeesXcdOdxCz#L6EycI%Mw^C#0TmIWp3S$B^v0M^iExzPqrR3PhW*2yo5XQw?7zq0Rj7meJ1gxsuG}AlOq{@|1?+>%f27Ay9GhkJ0Vb|4$8NK z$R0v{ATYl#idu`n`X%jfcy~Ox@s!I#JBn5R1v2|Mbtcvf$p!k2G>cc;CirJA zp<*sim5t)EZ3S(-F07d4%@1SLX)VC=5v>WVST%{lY8RW2#&JnfTR)A5M<2*xget+* zPZt$i;N|#_>2%;4MwU0M*lbzso!-0eOP+v4y@r#oKsYR0WOI?nwbPFTTv@gCyspue zbHKFIPSPyb$f!iR2f15QYg2E7i}k#K-WTj9{Btd|ce;ljWe;r%e<54Q_t0wqRYv>Diojc?opJUA9K@)| zc)@Y_e6t^}xVrl3du!%yL!12>;mo)X$1S;L4%E=R)3@=BdA!NjTA47|2i{sAuPgi- z{v28H@4^mP?wx!hvzNwK$n+YZGLNpWTnrxkrPaK0{(M2OA%9H`dAN0(FqZsDJ=4qX z8+ZcMUj(*4FN7pvuQ)SPD5FI?KJd4b!A1dYE%G&Si`*KIPklxt%D{zn$u6xLVK4>g zw_5Z6;^p8<7c6gJ^w$bRoy^2~WfdJF3Q1kG{Iz)W2ERoVIG4bHYBScm@1qP?pn`w= z)L$?kIdU;H;Zy7@;!rHl_|3j+O49`)isWp~O=+-$>pF?O(4{n$J`Iw>sUAl=feV3S zJhlt}XZHf$66mi)5=f<|#G?ZLfw_L!%q%>(8KlQhHtBgI0Ko@GDO34`h1|D88|R!Z z+ct~ra4z4#BDYbj#_#?=5A#DEl5pRl81K5KY2`*?G&gUB;Stfhy|kua4Pmlmn^(-; z%8-LJ5E;%v+Au6j>tFHH-`1K(w9D}dCfsU)z)7`{Ojg%&K71i(*>+nxl`65vASrn@ zNybOcxYc#^tDOlvv0AZvqW02)z4TJDJ+|iyaiA1fc!?%1A<9CMTh zLAfR%I0bIsk9F?}K41pn9n0V=9{EkQeOnKS0ly7cQI2nkt zIDBZr$Y$u=%-;`#E&@hkkSD`BziPnK!_&FQ%NGaqw6jouwxZyr8X zRI_#d#_(gF*)3WevJT^M$atsz1m=!RkqYrwZpx5WG7bPelz$<;3hJ$ zzQ#zl{d^?EoM#71)Ad#3Chdj|lzXOL|CrG$v1}rhs%Iu25j#!U*oj`U8r8D7HHC0} zak`|PyRX)k*4dhI?$-k0+<833{==%cC*9Rb+VE}ILawUmp!BWub}x~vXE&aTqhUCk z+HQF1O_dn;76lKt4(gP-^wh*9IraYgEBt0i$G3KA>W|D2+r|l+Wi%3M zR&Q8-V{!dy2%>euvFxdM(~Po}6L0YJK7eZd)m~Y=G=s%lq#{qT2|SaNopOLA@RZol zL#5apLqJ!!?9b-D&+%P*qmdU^(`)v|J&TNwe~GtuC=kfWUi>(cn1yuqNa|D9}+{2x>x@IKcT^nsqxjGj&%-?kmU z+$+@2%y=8?wKrBMjB!(I;JbBN@qyO@Y^bn*gT}`-Z09zc{jKTa8tE@fc=aaGU@ejA za*q>~?mmWIIQ@#ZvzClB@IJk(>SIs7*CAVO_t$Yj+5rMVimQHLD!7HlbRfzWh-xNH zTmxsbb`(dJs6T0_)uJb1wrsi@C9xQ}tBo;hhXeeW#LSI|leB!}MUPPPe1H08(RqSm z7uM(0&6`|+Lq@`E(G>Kd@O?;V08SnVy2Y*Nym@wzO$ z3Qp%0scx_*4QKWVpW-N?({7|N*T{VJsUo6)T7`hpYsd9X${_m}609ciA+5H3sz~cX z;UfmEKTI3)8_2tNP^}PuR=ishg`8wU_%5&B)_7~C@ZH=2(92sA-8^^=s(#8%=G`0) zGln!e-$+2B$Zc#h9;HGhGJeCQC9-iDen_Vm8QpJfkI(ehjqq_5_MwfnAcM3Ke9^CG zyK~E_T{}EHA!YP8inmsXPEw^5AJz{u9QRkVEjQX(zZ+@I^Fr)rf}vgAJWOYIy_^d@9);|Iu#s<)(3vyqN{J(;S; zqg=kj+3r)3$90!=BC>fKWYXfmW9Iyjd{gC3uXwE;IX;y8I;|w}3w}825wGXmmDZwx zQ4*HGcjv3VjdVc@u*$X+nw|gT5)T=BN=f$G0^!+eKE>?Ts%*@5NF%1sb-R~yB7>-n zCnwOCy2dM1l|^;QletarlIr&$KnNSo@CXBku>WNNI%7xZ(D<AFtDvr3Vs8C@r8hzI(D{H1JrufMtwA2j&eele6pIx*cXa~ zmvnWv`SuL&`sfgQp8}f^7#!L)U@*t|RlS8b)zzGO)$;TJ$?EA1D9G><7U-H{qz-R{ zHkyG>R!B%hHuO_VS(QY1xmZ$(%`F7)n+azdpp4)^OFIL59@XO+04qj2E40#{#oX|xs6#3@>=zgl&h9mM>+F8Dp!Xe@9u0@w)C(8EYpV!UQMN{ zj=rn~v;TnUlJUn&6v7wY)?)q+Ja^o)#*@;f>d#yU4p z9ob>9vTn}Ssa|iB1aXZLrw`aZ(=@h9OGIE(_mn?r4HQOkB6U(*7$RYG8l_@z|2~ldmu8!{T&Uih;vMro1 zjQ$EN-Rr|^9WU>iYM=iH4b)NP+g-oOHOv@nRI~XtBgL+$J ztXT;YBW`kNVGR0d)tm^5gv@TJu{u^1s-y4m=TRG(AN96M&a2f-)VvAT0PY59HoB#K zr=QRK*QOZUtDx50;QDK3->CVUikH&`&6E7$gR}Nw#l||d_}#~UQQE-~L}Gwn>Ff7* zyxy*edN_P=Tg#5j)HP05+)fr-yEVou;!frd=! z^?aY7FGlSvpsnpK)2rm_i-q{{p)DkV*dzmQ%?{t5$Qt)E@OUHxq{fm;n5FsboS=)5 z%Sw>9tR`{HBb17Y3SDROepJ>qKnhZiB8!lc({LyS=Pfn!+#BW(D2@Sb8H$ISweR({ z3JxyXD;cDirVx-L!KV*AE~d^y_P~=u?2D2-ltbDYBX^ki)$F}~wal_LUoNX+MBtqv zs|q3TxSsCN3P-ro;A?)^P}l+b+wlt4!oESK-b$8od_wI3miACIiN;>GDK5PNOSycb zUR4&`IkCz+3`EMGrE&Hd2fm0jQ|VB#OqjQZOA{`kj)GqD?NbcN7}okMQR0$1d%Nx= zy=d1HR=ZJ{-+AA@ausAhyx9|~EpO@I)$+6v%E_5jh(JiU{xpYh(SO7^ zT)@c5k)*@A-LDw4zTz!tl)b4+eVo8u2x{Kf`%u|=Lv$>5mya*l>>RjRZp@?zsR4=m zIM_m`SXm6qj-#)9h>~lDAzBc5-jSwVkwJU->;gT!hX~{#!BqO%lsnIBgiE|yhhwbc zEnFOsTg*Q!@r??jq^v-n=e{FZ?T{byOZq3%Kr^|@_Rw~SL-mcjl`TDXp5@8oNpwWY zL*azqswb?dwTuAs8@oAyKg-SZ-W2Zcp~_pQD_wfNP1}iP)T{$McM~C4U22;%a2<0r z!)7Q?FT=W>e*Wn(MD1AKOJ}|DVhLM8Xn|{Jz@4J6@t{yba6!OcX;gGTU$kE!-{<|j z)&g{&pxghW4H}GCfO}2|D~^9}Mq8p#^2nmVwr|CF929@Pt78(7T`Qq^&trT&$kIns z`+eo^y=c{vl6zgE;q2rCxM|&Yr3NR~6WqHwZiN^sDiMiG*4MYTpgL!5yK6r74Gcv4 zVqabSm^4oN_30V3LcCA2Q71aoS}95%@9_eKC00u2RuL5JP^6*^n^R_8_8X!*i;_f+ zC(N#stLF}+^r0+ujKzz8PT;7XRSC(;TTow?o4hZZI@E=7qax!-I!!LRxv!Au88#Qq zFy$uRas!l?%56cmP1l`$co$-kIgrL(0F~hwYts@jen_&{OBH`C>_+DCB(2qeBge*a zCV2$&#XVB1rSN-^Wl-Fwb${Ho{pY?l?Uv=d)cSONB(q|VHMZZg_rMG?a1-IamhhwimL30(7DQGqF!UoXcqoG3w#)|R>)oCTc^NHckb4BX8k;`V_ai4?O8)rLm zua^%Cd56DN$tl_{UEvVm7L=68V3I7fc&S+`U6X08X(}s|z`>PopViHt!>JbHBz^L9 zte*|pB}b+Sd}B~n(DlI3E6p-GnWINip+ewRVZAt{&=*|IjX2cnIK>pYa%*JjJo2H| z_k-lD!ALQi+tg$q&Cky)W;(8H`j10sIlIr-YfTbI?(Bo%Kf9>u&if^uzKj0ItETTn zYyB#%bNSA_nLt}Uhtbf_aJ}0!yGy%#d^{6}_EPaD*0uILync=>4-~>W0=DCjT9XQE z^ja-26L)=>O%*z#5jF)^hc=nLPMNTb;meT2CP~!Vk6>3CKP9&4LS%HRkguqqFT*|`2Dtf37 zQ40$~h`9*WW)BwOv_N1%aW4JH&WLl5ct(~*`Z z8vedgtzxQ~x0&AJ__o=?mF!V5mNXbmI^PUOwu}kYnUpt6e}-vBet>16(rdU0VT5gV z^OzP74+(G_8RG?fP=697 z0fEPdD_Zn9|17L|rLwE$^USxP4*$3G)oo5n2J}$F^zzfU+Azw6;-6=&gMp?&W_pB= zZy@vtOL@aeU>Fil@Z7rqaa~>H$V-Kv1BXJ~!E%>i3wVh&>LSRl@oh(1q?e3Or8 zhV=RjQCv|0#6te2w+%?S>5l93Tb@hX^?E-yzkf83t6o#v?p!qo?o(=!5!!yT=|}V% zh_<+&Ru-JG??Lo0u$*wN7e$5|S-re^>J8u$xeqhPI3}2D2`mt{!-z>U$SllouMvt(xY&uA4%Pwt5P%TjlukG z8Sda}oysv&(Bk@8 zS@oQ0Qgv$;ovYM4;T#Es3ceVsi57DYdtdkbcq3zXs`RVfrjaq&aM!K}VRsuzkjag- z?xx;rR;IW93oxbDOy_F~RbUm0$IdE^r?+dm4aokprgA&qPi^(upXfwrvu$;>6W$;D zfL@an8i%HN-Se5+TSPtMrsoYT{Ba}Ff|tUPe6PxpWlMY4gKZ8P_*;vx&!+Sbelfl zXs)fP40F6=5}EY%NhVP%2{nWRZ|(~^Bu&HX=>s|$Aox})g$OLEK#u%PXt*=4yRtUn z&n~hj*paR%zwxB~VQ}*f=;<@vJ#>c3pWQnP=aph=Y*Pe}Wk4Hu(C%Z>5dA^?&abkF zZl69t*Hx$^o=3wasaxpC!q?Ux-Ld|ks)ka_5njsoPtP^S+ener)(+Rby}f$}h2|!M zDdw59;I>;?LjNnGnvE+~)BUKEi;eYHQpfZ2{+iA`P{&B#Hr25A*EL`$(Nif(nQzbj z(az|+LF~sKNyC9o#=MRWeIq07j@@}PIPA;0%yqhX{agAJzI$ju#0{;W9z&APF8rk4 z8%uIzJ4jsJ_JT2l?h*=yL~aT6IWs+oaWdz9evEX=Xa`V1yZ*Vw?wl8(xn7vmv4BNT*DgJ;?izWj+6)iQcO}v-Og(3>HokK|_ANBehwQEWYexLs;lep=eICUJ z1|mq92xzS1uz>YpYLrlVJRY-r{z&Vz`+Y+O>lSe!TyXM zh*t<0tIpUQQT_!lgJlGoI4{K(1GzMi@E6VUepPe$On?cbKU&~5-XaJ1M%0S;PU6iI zK<`tU3=)KLNZ}m90TK0MSwvo9SouFBMa>~CNpoWOwHT#XsCe&Go0~p;4)-H_ewyRW zM}?Tq^f=CxkReE*6zsS+uW=it0knJN8|d-hZ^{eC`i2=_uhc5yg5$T46~Fn){I<3c z0ne*;m=1WpNE|?&|0oihOGQ}N!!RP@1 zY`>Zi+s)1sBg)|)zEbUSj?2XO`)iS9o@q?V^id)8(!_qmLA+mj^6>PQrw3wt!O)lf zmL+><*T$r*AM%?C!x4O2xFxKO02@CbL-dswsp;u+jtMl3puYxPFO7dJXH~RA#!*Gk z_C|hfdDqseDFD$TY8F6g=1nL{#e{L*bJ{|=_;YMof8#X@do4iKXot_k2*3$HvF1#Y zyyj*aw;5djXei5D*h6W+O`+hT*)yZfNc2M;Z(P4UC!Xz_osBq35r(x z1AFIitDC`@`&yF1RqKBF^)4#WZjAESjj?dV>V3$!lo;DE?Ik;By_EODD<$1G8*515 zlzX>eO;155fs1(Ks)2x>KCz}Ix7-K-la|DQ0iNHdW3;_xG8nUBsGd5^(7L0W!hVE) z-TZYCM>>yF1Z!4@{2_&LUZWO7fd#|w**i24fQR{1l0(FK#IulT!Ou_r zRY%!412W>x%asaN&Jh(%mbI$-7V!ZcWTC?=DiD>$bZtS!;o0pZ4=*RQAp=Y=#USb0 zN6(RZZtP#uS}rMFOX>7mo%OXVS3ru^xr?zqEME=$x`WXq(~uikQVVNLx8UFYA9ruT z71z3SjV1&Q4grFD2=1=Io!~A3n#SE4hv4o6cXxLP?(XjH?r=MMpYy$YzxTU;;Eusy zH1z7#>+z~tvu3>#+)m}0gY)RRnkKpbBYT7J8KP|lgTK2Zz&AL4xvXiTT2zz z7bepVM!khLFs5*CXN$PHgec1UXJ}Locy{ryv_jeU=KtP(Wd+tyZ&0SEQK#W$lr0YMT+%fJ=pE=Su4-$SErecb^eu?vqI5b{IH%;rbv%=6E30Ke@3DH`5NU<&67^p814Vh%)V4`Uz9N$BLA~5{`vX` zSQ(Ehlwsj-2=af$CjVqh&ixS|`~UwVtiu}Ux|bC*j|GBBL)<6I#W=Yo%Ts%&-ss>- zvfmDQ%|2Q8`0=5oPRU=mZ-@gJz0I|yv2uRvFDX&O8EWPiR$En6Cp?MA$V6>f(Y@r> zzO7M+)YPOBO?bDw5f&Vl0&!i9l!Zr{gyd1B)fU=7OB#Ed10&WU660}y!d>E~B!Qat5pk;mbcLHi(I+_4qE#1tO0 zG({oBFt;>z6h0URqcXJn$dv67(??2YGt?L)w4M9oO5>&+3P#(3=?~#oU*|74(=oR+ zL%SjpoHZ^8yY30HVGU}y0461`or&}-Zm|4yz`mh!cr;XtSsoU{Gy8;J%`m-Sm8+J1 zMC;)jUT-b<`Y^XnwzR90DnpOFYUZPCUeX`o@tOWg)*-kJO^rcN=({uFV+ zsvXCA#^#GO{ceq zEGYb;crz^eC@|qjQS50(6}gNV?9p8?4piB1t26OhMi%JRVyx;SrSG53{dS5D2FV4> z#%sCKfOTHH)I=fNeFc6><-qA<{GVWU#u6Oa=GgHT!=TN5^!{$wPFes{^bRJ+B8&Y~ zKPrbn1^uL}VNxMVa9-MaBt=?Lj3=+g5~+a(3?B@?Zw!rsY0ZgqxS9dnuY7 zso3`2;YbOT%;~EGuo_)h)f%SNA0anSg&NE)?(LHectaztqaxo>^N708#>uDN7{=x$-jj{uy;Y_dRQ?JN`xBX2wVVfVb63M?TZf~p0 zVkhB}C#uWazOz$r&y=sTM0~{niapIGOG;G_D64i4-rG1noSYTs*09_!|Af#Z2Ctub zR1Q`?MV-=ldN6I%%b4|>ELbI`NqUUSdy5FKM?ko05sdzTKBZ~kR;0*nsTc0Bt4O_{ zjH4tqG;xTk<$^5ub_o{8qwG{@GlyB$`=K0Ybt7@}qY-p2EKx1iduG}$0mk9QGnQZr zfEWpH4!Amw{}p&3M*W?C?bm~GNul&AFOK*qpR0pjg7fo8pw-`T7a>0s_lQ9lFU-v0 zP%G-vw%+aJQ0>99UWqLPEG@>?cytRn&>x64vUIWv2(7KP3<|0oxLGTVtYY%q0B#(} zKHT2eL`RM*5PmFFQgY78V^gtg&z6*osH;hI%o1vI5=zO*7eWw9&(pTG2{m8ah;BZ+ zh^U>JcpZ85u#?L|z}Icr+@y3K$!(~wci>B>(lP+zK3_`$) zFxp~3=A9wq0BP>b3Ku*qkszsSeR`92gF%SOqOUi>5TNR;ipJ$(;f3mM!eMSnUe;;YRVzSdW&^K^9xD3UfS8 zGSK{l5gQ0krCX>imiQu5)zv&eXJfWWH&V=TMQAqp~pOO~XQ|m!-4mAoR*6(eMf>OrCrNg)D?0Mb`y$ zc2qC~YVH1!)6?6G-4zjhMF~u>n$<)Fxw#_P1bTL|HiP-pt-;{Z?e$fYJCR)hu3H<@ zshz4FgZ?12eG7>CJh|v}gft?;j^=~7VE0QU^)w#EI+<@4SeKSp1yXO*hbTfJ;C0Pl4QuS>@P86P1-elxKs;r0X=?V@9rr&9>$M!7e+Qb( zTvC3~PZK(m&Uv4Hl;&I{x(b?mdOsFEX7Bk#T^C8HpTJyUc#$fCD5`gRXeyq}U&iu9 z9kOz;CfO5@0!SAch5m&bMPRi#BwS~T+-pKjWXpPfyiD-pM~%f$JXAp7cW%eJXXX2s zvmRpDR+yWl?KEA3#I&)i!yt;I?M9#i86~A;SsRn6N~tAF+rzQ(+pgQq{n_3j;L?yH z9=mC~5U3%{W`_SK)aDZ56)b`yu03@U76a%#b=tAY<=zfjUMT&tV`9^5-d0z#TM_xQyhq@_*R?^#1J?Q^7ON12f;_*j72panR3S#7cEiW>#Hq@jdG1c~vOzqPk zMQg)?-Kqde=~uOf)%NFBnGyXs%tH2Qc>37^@X?7yu?nyK3Opq%5R7wCEL4j{DlbXW zh`{68ei@Q&%`fp$2ITeyzO9R*1U8?FNA3)v2ADQWIi6WYyFaZ&x7Y8`3tF(deeT5W zS}ER-6e|;Uqb$b2Y8Ek27BNW7I5jVDcgpcJ(@o+JeYLz#b83`ZXH5eqM}SoUwX+h! z@gb3aB zSqtO?LOUYIg3hFlpHjj(RPigp0*f3I0nm>5f6h64h*0err!)*8xWE9|Vq{=|?G|-a z<#Xl!{7)H$+z?j)z?H;a9^$`VO<(soy-5&lxYU&alC#4_*`d2Vz6g#80!vGkPJ zk%c;m{tr&~1nx;s&6mm)@R45yTT((9b>ombA7#a$uR=b6bpyC$iT_|)aos#c0h4OZ zjWpe7Cs^4akSE1Xj%NfyYQ3^k=;4zuJX8(m`2ZYFzPT zp38!QD&56A;<*B>lFF0Nti8H_ZqVM@%Xg1dkPnS`f2Th=iS8@`Yq)AILcNOBD4_%U z;B+T>G%5zEnJpFpv$dO@kkS9LwVq))+%Bra1S3v*DKM4!>|Yusl3%E9s?k5HobZh2 z2s=Z0eb-JEw@79G`be42vF&f=`k_Ge2S^Vwx)(G~bZm-~!!jPGW1s=1#S&EmxdFZQ z`D9;$3ija6+qN$g5q7>zD%rvo3ZnLn z80b>`h)(QN`q{m1+1@&A*;)^y%+)hJM`*r@#zc*}L$bA5C5%til2U`B9@Cx9@;N{L z(@rcrv1Ki}8g|@0SS#_Lb|=v=Bo7MFGJD2Ux_{$V;9OZ$Qf|}FhSnHETIaNBjO@Y9KN8!gOyLwR^Y4yNs%lz z7YoA3$A5LT2aLwKL}-G=fN+MMYa(tj9}#^rYTfr2L{~81CfEYj!36~WA}IamxA%8A z=Vf4kMs4}*77%tVMoK{XYjGHXMM4N&DC4Gti5pcIMy?S7ZiPfTrOJUq`&7lYoQ#2* zIxS|>bh$_3S7u<1@z2~`0?_W7gM!WmM#piR6b`$Tfk~mZJ0PV}F|)Q@se9t_#0ssV zT6f6ckLXbw3%{*l?6Q+pR?EHCM}1)JHMUyB9(dul3JGke|e23=w8)Q z=M8u#>_>{K;Di8zG)I>vnLN2GX#FIX32wx&B^KKpZF`C3N#sn}8!wX#yV^`xM-Te$ z475OrL~J%}_F3b-8Yq~mSMS`;uP~{LxAYOnMX2FQ**{@fQ!mOi@`?5`QDpM ztnORhB1(^Amk;uH`~g=|Erz>w5s>emjyBBD<9>h{8Kvj!&D~pl^|! zoKw>BsT`8?`#c#8>NYR>*3Ryth)D61XFA#1vt#3Q*Zbn^7j|UdVR}oMNMg=a+S7Iy zhmz&DKAa=KUzCl1&fdRXlSIDjL?stpuj%CaV?K#~`}H`1tXZcq*UaS9Q!J`gkV_aJ za3i{OXuc(yKrBE`zF_!KU$T&u6(qd({axjLl$e=_6BNq{;af>u0E$x)#HxHu#N8~t zkaQufrWTU{^rqsEM!n9jxGmXuq7^s%yx&RRUXCCoa6bV8ZL&pciRK)a>KeC4>RDGq z=Ps{SvKR|3n;1s}?N~uoieH}eY0N4dF@|5y+h_dMa%s61+pRutRd~2(8>Sv9A6HfF z{{R5Gc>V={fWe(-uwwd$wjk=G&A#~U)n-I!1L-q8SaM%kqE=wc3R#ZRWQ@$yBzx;= zo+Vprq#zm*6q?IfYqK5#TW_nX#OtZMzM({Xn1$9w>jRvL(Q3=xE`P8E{)%fF3JQc^ z#tCdgil@Ae#Z+!xvRrcLFt*HuwsuGHH56nM5$jASPiK{bCI&!uCJoJ1R3>$>`1K%C ztQh`u!9Xcd@q+Xkmh4ASRu&Gm%4|x1@5zV9qnV$6#LT4_BP8?jrJ`hCIN4Q@KiYOg zcDPuZkc4Qr=x?;Se>q-O7QxoIwKJ7`TmBGYf46+%*DXxy@zRRc)06sIs)wvn=PSUB zKHqSG)l7gMW3*tw?vNcUJ*93tJ9G4PW_opphnNVGi`2Wyf5F&Ml*M*LPyiP8J@|i% zp})_LE>C*XSYseVr^t#Z&FOpmgdnLk$u2eiTrqA7sUcZm+K4SR2L6b>3IvIo!z?%b z94(};7q~l45(R+hB{@hXyzRIE%m3c=uebj3$G$J5aK)i7yEdKr-{1PbFZgpKFIbh6 zhtvM$|Mz=;-)S5UE>Ld<&Zd!d*=lTD2^&<0o)RM)km8eFzKW+Qhdw>6tfsTgK zQG~u~-)Q)Mzd!)C1_*9r?Orpf9s2+MTYLp5$cTKDDOwI}2mY^*0sboEF>s4b$DG7= zzx@3e`NBknMW1cpt}f(tHYsmNDd7Lt6OK3i`Goc=Q_|n9OCdUs$Oh-HomXM*{3t0C zOL1?aU0lu?olN`-ro;m&4pS}z?PY{xSW+R-8X_&=uYQ@L`TaNZcq2W zdPCp}%^1rk4&FUHgT8|tM_ljsJNzcciNe{$L?iPhOY`+a){)V)Q==8N_RNn^P_`dR z1h)N9IAq{{eGmJIAu_Ki|L$i9H8cp4sCQjEKi00H=+n~B)u*r@1m62b=eCl&0svGu zt?PaLbK%N`z#G6qKfAJi3Gi!{ak>FsDV30SBbvx`T`YmCF`ve@^_6!*$j)AJot*0^ zL%e~i2p>}@ATSRUaf9HEs~upVRCq*FvxHxGCmdO}yO(y-(L1Wk%|4{&O}o>0h_lK2 z^Ju&4q>*Lfo$8FgNE3j(Z)RC+64X{U>WOhBxATJGH?I;O@|B(bn(3aZckzBS4Lywf zP)B%wITb(N{og~F(S>3SE~P^)?Rof#Jv4NVlukAxLjVhp-?F!ppSp5=?&Gf<+w4(p zl=U+otn|BDg7TuGUfw&bjr|FKAZ3bE8Lnkx;qK49hDzo8_I#-l_d$5@M3d!*SQ2+` z;&mqt5_+(v_|`AHhW7bKFGBj)XB6JmQ=cJ;?;tV*T)qK0vL8}nx?j~6S3i9YNazfh zc(^5*XjGbIpW%i;Z|!1ynm4LoP?1HEgoALM#1EyXSwm?sBB^YzO)?6 zA>F4^hj`Y)BkH?)s93mF&*mlq`K8i?+wiq6Av^!@8Czxi*Z6Nfzbw+1`<9|eZG;49 z+DkCPQu&?EJuD#z@{bC#jttY{hG}Z}2@tWxtCUXGFZ+yJu?Ub3BH$HOGa@0m!^P3w z-}R&d6W$w7w;SnqHlFXq6!JeqG-PW&`s ziT)dD-jWrIVhh|ZvNjH|n8kcUa=o~y7Y$!B0=OR4JJFo6q_QYBCiOQ^onFZ)S!`!PsI&L6RRK?(l)!&s5f=OLE3tuqrd25JUOtS8Z}&w$`YG|xU; zk<*YKK}?wP+cR&0)c54u9dW{UQ9Z>?BwmX*q^RW~qe9(9O+*78|J>fZk%TfvAdBz# zYp`0!U2&He6_u{@*1s49FDN&_k55 z?j1Ttym?Cltl*FRl*tqC$>`ynpzglW#BDE#hIYWTJEX&U4xVmsEKw-L;hk1f-c2nA zMD3$NJ0-;+?aXjp=hz*EfSu+vib}~4>&0F3Jh_k26`3rWOBU|C!z870?D-F}vw5>v zh^hR*2;P`lFsS2xE^F9Qdj}&JDl6{)UoC(~w0bh0^x9_G4pVqIm$x815y1oz$Qq>6 zbA2%py3PXMs2&E|Uo(0XcT(J=V`;GmwQRONCv>3yoNoV}sa!PPj=3r{>KZ}nb0Ctu zW?9H$BM&K%>r}v0hl{Xq0}0JAhM(VzwVmZ&mS}ibE^-vFJ#22>=``I#BwR8(uDpUq zOxR3$Inqj#dW+Hhs*R(TbSRQgz`nc|LJlGGkB8vFF92`Ws~ssP!Hg+1J-NaeGL{jf zQ!|X>!=IIPG*WR(GFfQ+eZP*;y&puxD$B^=E8pMx%m@s6O?FeAv=DE*-q>xRT2!m2 zbJCkvsWuEAn}&zua=pbCq2cBB?Yyp3){u2s8n>;2M8x_Hit%WwID0wDD`J9`-9{6q z!yC2T?Gb}i+!_3tW>ey@xo+u~{@e7w&zg06lJPP~>JdzGZn3K3q$?RVqnh_~uU#MB zzt@5Q+e2U97nPKtrq^6N50D-OiM68Q9DejDol+n48ypI_}7yyz@-`V{=G@O?axczh5N>H7kq7$H@znK+rEKSrP7 zWwvc7C53QFP7z6;kZgS_b{4nAyjLpJE|ptqx}ZOp8z|6wVcwD^)_dAU!PJB^E|Q(h zk=))3)Y*`y`6^vJlMj?RR(QC zNEKb+{<(C(77#XU4RuG6t}bs7-i){`=G@ILxSU=_XucTXh5v$d-hh&9gL?ofCmF1N zWW_YCMnDEp2vKfWpM}fqbY`Gise*#^wgbRFAOPOwZZb*_O3OVCX4Q2~VYE?SnOroS z;VU5xU!OD==|YL#%dBKv4+en|=U!TK>-qjxPZe4Yw0fGK05#gUaDwe?diDFvxbe8} zM)3yDQJ=duM9ZW~v7ZK-O`t*6Hk_-h+sF>yR;oJ~H@cS~4Yk zZapUM(?+C6LxLoIf}-QHoL}L+&mc?tAipn^(k%8F_O$+%WZ%DsJ);%HnB4~hc!hvh z&{xD7S0$;(+{%4z?*v=}s4MVM)Z;|(%9p4ZOgDMHtt25(TIj+hHm%vzle?1q?53hM zT003Uj9Fp)bs9xIlUKoU^N5?P)Op}7MR)oA&ipE#s^!t8kgIo(*E${ROUjPFHB$f~ zk9Y(=x0&a=*~bJRcpNnR1?UG$^s}#Jw$r;4xhX=@D43j`McUpg?E-OII*9^idvDdG z+FskYxW5ZSELv*F&`;(~pTeNo-Y;q}I|Bs6X#tJ2RB9KWY1m}J1?@d}G+0qCBs|yo z8(}Wg6DHi$1pjT3rp!VvhUq!*f>g1Ki!Kg;JNN|m?P+)N9(b0J;_z8Jf|pcc zH6OpyFm07OnRZk0-M%32eCFg1uVTAb_0TsYR}QZ9X7=^OcLQQ}7J=e?Jsb^K6rp{(QSUH|I-jj2yD67*EIZ{kVRZHXZCvnlU?I3bu zNMC^^6lYd94iyEH1qgL!IB)j()DqhYlb`@vK}wRN!cO8B-?6SkJ;M&=oIVX2 z#{VUtzi>Dy?Us}fs$NCARVvlk8_w6JqaP2pN zAa|@70cWbpa238~jkJ&``xP7eFmB4~6DcYf!|FQ8K+kaf5e=H$m3dlvRir^fYv;e~E&gFEf3R4GV?haeiDd+tt{cCc5I$))z=TThG z!Hp7)kPmu@gfgNqw^1ko`^q|;j&jAX!4FagKgf=7*?#O5k4(w_4)CX&T|*z zKtYuzLrp|JNZ=BWtHWA5j{47IH}D(46O7L1sl4Ad19n|riECA2lsLcf3q5to0e>^A zb6dmNSciqls6&l*@0$JnVE-UrX zZ9Rm)HzW58Q6)&vsaHr+e7H^XpJgUJlOmZ+nm=f`n*XvK+vdG%_V9oym_mOM)?4^d zrJ4HU`4{aynv%5s&)zDft49`<2?-32u~TO|>>eAJjc!#Xa=|=QYHpo!x2|uU1P@E2 z6Sy^eexUHp8=`Z_kAvowxUVuX=N)>0$82;C)gP=H%y=dHW-3Aw zc~3M#j15k%Cl+5x6{P(cU{4#880=2AZQZDkoXphXdEYlZ)4E6~BPb`|PJLuC75l*4 z+}kO6`w9ps68h64%` z*y>4YJ?hrLuzXz64g!_Y&ZQv_{t!c_Hy!LZ8_A78&3HH z{_yk>PAF87hvDMtB&wi}%5wqzeSTavoSXZJ=Fu;DIAhvcQ^Eutwz}skRw+`=kjhZf zf6jn$PPm#xy_@wHo&5#H0Qz>izHNzHLL~)7nR!nECfh?-sokAKd68U4msV;5&uQGF zS=B5jdR_?dWTHC>}8ii+Jb8Z!$;QDG4*WM0Z9gFV#RJv}j z>Q*iH3WZFn5uxMWFXgW{E$md3^5*vpKhfG6YQ}z|!LGWkz>M)|>SNS2kkWCw-I`e8 z@tXSckNo)h5Dkh7RMs-jYm6d;@kR_d$AQ>zac zzdZ|g*|Ev}sgucA~jbMORzaZA1 zfQAPEOpb~*@9ua0NwtK_)9+PAX6Sw|kG<+S=hZ1#tvo$Q&tPz-L%LZ=n*cT`GD<=` zT+jwgLo4U6O!rYf@Y0al8DRm(D%lqOY5Mb03F)aK)kfAVz62CgZ+q9S`Q{@4iE5! z-xOmRTrOZuttshPFIyhY!#z1|tiPttPOU8SehuM;b$>*ZADjJP@vOgBchk?47GB6q zXR?*Z;&$KJ>GsU{rinnnhVufAV0Is5F>kw3zSd#LGU+2pcYXt(ap(5A>1H2FSNDxA z5o7I+G=LVq`W({b`Z(nEr)bT9mf?5s%$L=Lu=t{u+9s}fH#i$9&=V2kM?O^O$PJ`s zj*ohK@zFI)?zLLfy89ULMFTMsishfiWX&gUs!JlZW?NJw@)LeWVOGGextBW$sgbU_ zwa{zQuQdIN`WR>Y@$shh7E5)Ez+JqRLA3A2uJp($jZ^ULES{bvb&>)NI#Ih_9BBy>p1|ALS8s#N~sHI4)Y% z4M4_M$~wW`%Bvf2?HJ=nL6x8QxOR%4jDkZjBmcebkSF=_)qDnSP){%;6&;L}rLGYr z{snvfAGpm=KwTXUPA~w~vlp`A(0;zbQ6f2efP|QsjAoK6;+W>i;>i0;+hqw!8rMt$Bf-{eWG^RXx3cB&&(-cUqN)^^#_74O(`m}1UTFPH(s)tgl^c8GN z{P*Pbjwf3`ISG*}Z}L;2Wh1)yeHxEf)Ztz&fHCKqQOgStWUI6oo(aQ zR8~<`N;q{~u`5ibE`>hYIuc6+ejz`ttiZy=gyLni!|W09n?)#GkF<6ut9EP|lTMUy zb0_cdgC)Q4m6|#X_IcK7lCwO&ysb1-&`^*Lxlx)`pHbPJ z2qb^6m9^M(Y$Rd8M!Dsdlvx==hiO2pFA zmdaRvSgPCTH5lWJ<+AYMrD)Dsoz8i2 zSPVb0eb3v7>I#|-rLe#obz7|QXw>iLc}Ti%Wu);)neBcYz5>3V4qMfw2{gT%AEQT^ z8f{%JG&bgKd{2+lb!9E-GnmG6m*qLVS?9XV9m1bql%d-Ef?|hBlTMSp(%4* z;47j8oNJ`Bbwm@^)Bz42)N1dg$?%KC@l*AC*xVqL{n$Ssdu)B{16`8T+uL(--J0@M z7!mJ3x7HVwb0UKq8!~(AiiLX}v?9@TP8qDCCHv!WVckfj?Sd6mh{@(O z{CKOFm37|mF5*yBQZ%fQZBYj{U;EgTC_tz3J1QDZrmw%-V9F)}cHd`KM<)L;9z{@6 zB?G(nZY~sXjRP8}s4YkWBZkfRV9-$?E^}OmI}{*il0Id;i`l$BLnTqP^#AQZcqC;LNUqK!1?xghA>&em|OVD=F{VS6NlLdV{-&^Cxpp` zUr2ciYP;K8P!hZD6M4V>UCT;3#bFKMk{S91k5>{V1}f%LKo2RU>e}}kR~f0xi6@txxF>_bW=tJRll%Q zvL;L7hJ3tY@KtfLN6-BAfXaq zpD2Y^@Ory@G?-HrnT4KM-Xz^!R1Sx-95Kp#ovH%We4s(982esZmmM^A4A(7)4SX@y zS4M9(ji16962oQr1xYAVGI?7GtMpArg%%_Jm>H{ihG}7IV3Qfsk7e+(%H7&XN8N;x zSJG65GLR{jrBaf+pcJxSUtTerl4k)c97}z@(X2yV{x~ErC~wijV;AGo!%Kfh$S3E? zx-a%17Z-N;^ty)jL!WIz;_)Cjaerlswg=mTe@&k-(%-u)DU6*R5Xxh#A4+!A7HaV4 zfEf};Ly&yFnT7Mu9^~+T^c|pS zHul>DQzQfgjp)M2yhBXWWLayb+aa#7+^Re+cD$>i%z}aU?2noULO%OQNjCJ7r&_F( zI2GwTB~5pQrL*J2p)(Fy@(|f%IRj@~M;v$=EzJH^`4o(}=o;O)?Acl`FNasM(?!hR zRo1yds>`Cua(3q?2Tx|LUqHl=T$JANFK~+znS+4;33`=EWq?6@5G?DSsYhii~i7^ewU$+Ft zk`yu<0}zTdAa(qlOC{1cH`{n(pq7b;nM`7UqpaQK#AEE=$dgwrWF3O)f%2c}H%RSCBB49xo0hZCB7WHxcpUf+M49)?n<;Az6Km6fWS z_%oauwsaIn$zjtV@=m&K_FTX8O*odi(6NP9p7^w)rkT|bi=V?lmQ-?d@Fhh>O4LNQ zc^Iy?eqtI-Z8*$r21|LDHpgOheqbjV^d|tyV}Skbua=v@em?jqg-!cSM-n;cR?e%v zwk%_qY*f}X$oSy3mh;by+wiawmsDk(yGae|b? z+4{|-E0>numzm$q?L|of!}aw%z<70cl13+2dI?-&IbT+DbZ%k(SfocsKrDi6j;jT@ zXXG$ETV4eJpi#-u*Lzggp(9ZkfPOMqUb6+B3CXofqQr3uMmg$`C`&IXBN*sQxGj>Y zTby+#DXm6h)TP}+3m19EW;E$}p*BT(6%92(Dw76;wZvV0Uq85%%CSA~nsHP(amSTo z8aK;54wKuqSbJHVO9pUJnc43;87-By&B^Qxyc%~9qndhqeM-WGR~tc<*_n#1)ZBbo zhz0d?3T9-ZMMnP)ciA&s{j+Sn9mO*ulIazmv>;QbBIr-7J5${xSDO3uItZmSkA)nh z?#AlNYid4)V7~gRvoGuK$=fz9F9yZr`w-&M#=*@+sl|Q5`ZnY;QRN<_ zX!J9;A7rHxjTVDg7~xFMW_iz+^;1*mE{ME2$CuX>kIvJeBV>pTB+`;6YVg3~kkXr$ zUs~4(q0JQ(&}d)U`h?iw_3fgz3CC`ih35VMUZdy2>|E0I$A)%6PBlVH75N%7CM25PRX zSWrGnzE4SP2=B!6D{6K;bR{UXsvaBPEk-6^t5ftXzqY7ma0Z6 zu@mEWk}4daS~SWuD^U$Rp`4w=?zKHG%COoC0|c@;8{?!cmT)_e1~tIpnqsY zL`R1%k-^C?ARyp`_%T&c*ng_e4Bt%ptqys%fQULKaay`gcjc-Pl}Z*P){V&TDY+HV;jDWTs}3zIrG@T6cx!>J56Lp^L^z-TO^F| zM-bMIo@YcGf6RaJd#CyVEo;m_t=BlbfNU(mv;78VcP!a#Kr2Ib;qyaQ2z{US9ghIv zSK8gaMYS(6a8|9aOe$q+!Ozcbm&0&bR^xUv8=&^dX9%-UXVBh7D1w&FLF3}V;e&So zVILHhj(&Xvd$0#CBYu@p3{m)HdCkjS(jYgLZf2^C9$IZvY3hkM1vPseGvLovLq;5vkGgpYdH zSIcL=cks-)mUE?8bXQgk!iIn{+cDyrZ4 z{%CoO^G;A{!qxaFUgq9pRj}FaaI@X|0JGV#%H|Pm{W#ahZD1cOO0|9aSKvAME{1 zWfN(S*f-l?3m!*NeKhKYYJb!DmJ3VwnNcfZ$?8VX92tMry}cyNXvVf{)hz~QQ~$>K zI%v}fb^Df(VbeGXyW?Bg^-!OmB+2oq#gKO3^i%{L30yT5 zYs=r`e|i(VpT}`R+KhSqU29^-7}8xj!VA=gv>2o1(Wg**XgZu&TOl0tL;R*Y7(19J zT_ATAeIa;D=W^WJOcuV-Yp32UQ8L)=a~i`iL5-j}bj7eUuCKMbhF|WF9FSiOaG*I! z;e-mfV1Uz~gSu7%JDEeJt8#oE=>&x98)E6(MzRJ^b+qCV61@g; zd`H(DXXZ3=e82(S5C)fF4mZ|4;Ghy1-!N0%Dx@IjsFvgPM}B?cWUuVi4SCIQy`uUf znxo~hGZT0^tGyBv!FSINF!7su4Jomx#VS^z%SI^BcHX)1G+58*n6I(nC2-yLaJyLO zbAG6;uQif!@pxUJ=ty*w<9~`q!&$gGZ1rpp0*kGEWt^&296=b_)*=$m`OW3J1b!3ykLC}<7_XhlWFyDdNd1pX}L5AlzA`}+8tMW zMLdXEVu{}?JHd^$R#E+;F4R|AuB~`KJ(pf>Kzs9Q&lZ1-4v~-U-PFcmd13Z!W<&mZ zc7Wz~Cj`~@Qig}jr+|R@1I%}m&3$LVR*KnpYNEJo{n|(X3vZV@eYA^BLXnT-w5lz< zCY_v=FLWUCmt`yrk)l2w!<2WAx~0+8J9^>&?ybf zsN-NS=TF%Hz9|zo(zA4N7dK#n3l+xp5r`aWO(Tsk0nF-%}C%B`Mp(FtHU6fCXqfO$?L;~DC23hVa*Nkg-CM; z@WVPDOe*t|kY?AcIPj%QXJ}tuCwa)uxL~TDB9P-GxLN%^NpavGGmXrvu@wxc=HBC}+(CT8%|4qwjGtsT8 zLDOz-Ao(I1kSTO+I15Xq$O2~ONDk^0@h;7);kziXseKLleo7`tPRR7*%7|3boGCRc zON-GsBTbkiL~>_q%SQrz<(R2taHzOaAD~?N9^zRWh0sc%-dNQaEuyp26pz!i^A#&w~Zjpvz?DCR`nfrxAm*fM=JS(8QwUqhV@W+Xory>WGH!xb+fZ4%G>Q5TJN^Z zu=z*50%29Dbl)N6Cq*Wz|KY-=-0HdtFM!)EpoyloB|LwTIh;!zdoaD&@d~cgt<=yV zgfVHdV^1S`LG_aY{9Wk_Gj@n{ihOuYhQS-V$cqwG`V+Rb&mN@k#dZo zgvj^yY^AmUU9OpGApIk+xh}y>vy(23Zf|d=4D#sW=6bZ~k{*2p0j~=QHT9HZeG4W8 z*fFb-f-n(7CMJJ)XCI5o3&tx0Pgkq8M-{)2gS&1B-B{H}`OU-S)2CmRPU+}=xln2? z&sjUk#-}cahU`o!4w?K^l<-RU(G`GQ3c(Y5g50<}n;H)ljrpglbMo2VF5@873OFlPR82I%jkp7`s ze1IM1XvtA2&LsGzHe;Ys`cm51r97a_N_y!yBG;Pq@;8&p=LVq8@m)SAbnZ%eTUqc` zKHMhAlYQCF99?H@HKJHNFiF+^lV$5XBXE( zQe*z)5DmvEO|y8LxW(s9GHu4i(zR`5I!U`4!IB)myhHvD@ev4M?KWR3tL9>xk9-Mw zb49vab*FwwL+JUr4Vp=jmtI4oeRlUAEYMfHOgW}`#8(t=cRC!M*JOC3P=4)C6m}3% zbe^5TO3tz~jGk!0)Oe$gr|l@hsO@3B_1K8!5$llTUb|fwN1&WHrx{~3cW$wmqi{b7 zeRJZUdrh>N4A1cfhc)oye}f|pi^sZ-EEv6NO!s>Me<(PD86!~CI`+o>dc3{inaUDh zxAwXs29==Y%$Acdim4cFeZPSOZjK8T6Xl+JULQ;2irnaVq{Vztt;be$oUbqRYom#Q z)HX{bXkK9I7nq=$Hwlk*eF`vfy-_A`KJ$f{+a!)8z$pS6ost>6roli4Enx?-6mY?nYHqs_z~Pn^8wxau)&XS z_ZDqTv}a<)-K=8PY^Y-Iv77BwqLAY%Sj8#?Sf9d^_wS-5O0S(}eFp}g4ieHme>brf zryzA$H1b?(T?W{)WY+U$7V=m;jq6}xVHGCS5pX79GvZFlrEzJSEgFq2E<2aC4E_+x zqI*T;R9yrEd)ALA>(Sy-o>oPx6_DpDo!OOyVVz`nM}-vAH|p z9ZC@W{AUBRok>uv?n$_(ON||PERlk_hYpRdaA6k}V4fS@mf0@)~pdBwLc5Ouk zv@lqjpCD5$OEHd^ji%T>--_iP#tyaYy%GIyhxw-_<70>J0J<_L%LC@x`QK1|elT~EDLfNZIwkTDMC$&}rMhNu&<{}snz=S+7 ze6EKY(bhcEZth1$TFMm*B3!-5tJ8_St)%^FH_fr5dVNRk3Q!Ib^0u zos47awY27t`Kc&`;E5YVW7)MSlc-*_pZQW2cmR4*i|@UGR-r2Dg~KDvH2f6fS%&;H zV@_c;Q7MlfKbkpJ`C<$Zgi(V~_*$Ysw}L@779_$PdN4AItZG&0vQi)Z?pOn*(fjua zO;@eWqOm57MH*NGB@PcJ_>DKF@;8kSV)B>upJ_HHBZd(@b_64T5Nq;fJTgu5%k%6; zbSOhC+H3xd9wAbW`hGTBpK|=!!hlEO^Z7K*eX5PE&?S1@daQ0QlAdoytdXvxlZM|Tj zX6KruC@7vH(Pj}hHHd+%D^zwYy$@8HWQ9-mkPxTg)t_2{+RYc+@wcG&H^aE?v=s9L zW<@uLvpUc28&hH__>@g*!;sbO%hbX3f>g3=eRM`f;4DodH>*xXSjWl3Ult_7zu0{n z!K^Xn(njk@g6qD|_^s;9w_;PtZD+FHh78x4#FVEM~AMZD5t$B-Uw?C>J4s?N` zic>ylS#<3rx&$D^qfZ?+P;-=oztoY3yMZU7=z0V|hNzpWC=jc8Hbb8Q6~rdS`4whn zJB~4aBMp{7fmXB6yQsMvAl)Igk)?|TIp3JH7z1(+8z{n0l%%XS>gnXu-`;?)bRk4s_NqVW8dd|| zTCX7bBXRUbHd?CuuW>#j`qDqc5wzY#9$JB_Np*o8A8$G@*R$O9F*KD7`StxYDD;?m zyJZ=T!86O2LvLG9IWU?E`;)-Oo~`WGjTZtQH(ZpZ15{=fh0~u-vz_|xE3SCItUEl> z)!6Up+!-JyuQ@G}GGCov_x4IETc>7TTA{6u?(|<&k>J%QUg$UC8-pDdza@?}!}7VmgftSHgXLE~_6S}(V1+(B)EgT|c~6hy>eN#%U@ z7X3QcF{yL^?T$?Eh&AA2@%$3Mb+DdD;7um*GTQUQ2Z+tnMFjn;e7J>1hxED8M{NvW zD{v6$_^%*{jd;WHRrJKngMHla@t%bLnWF($&l?c*Q<>Sn`B2JD`-WW}cY@_7`#icG zwGGs5+2dZ1E~)x^h7Qw<*vDNOeq<|ci+DnmvKW={XB441lf-5a9?FQrGWh}cc=EIf zxIJxMm4470Yi}6zjAVMB>Ssz$Ep&?v^M_NpJ-^1LA(}X7|NY7yw$X%XA%Nz+Pp^3js zTqQLT2EDg6Kd{+8_u1+hPSLj5EEcAINrpcmA#oXZHY%nH)-RmdNu!iBs+`hNCvSr|K-qCQ-O7L2b9hZ*s*GFb= z2IOD7i!yxYQu#j2w9=`Ics;&(e`abY$6{b_z}5pQM}l2WZxOb@{skVxkT)`=z*k<5 z&`R9Fyd-Cq)S{yf+N0}sYe3OKOyN72YEkdo7@!R=G6dm}OWfbli&{fhg+7`3QIqEf zd8WyfZr#3r{~q(R{r6$9LkUB)iS#zKMdMdvL$rn+E9+AAzCG3iip-v?L&*{%HWARL zbyZvkN|@^F)cc&EVLw@ZSMRgI>B(IFZzX>gD^zXrj6F`7>OeBT*Bw^8_)KnyEhe8# zRNe^na_?ZO?0P0}NvrJZo;>-EFyvAEg}XzQMm)78zM^$GK2|pPlkCfphn-4H;`F%z zgvt1Lo~ufoAG_XN7xP4d`p2>v73L7`SxZ(CdJ0_raX9g5nf+<4D0&^8&C}hGk#bsv zyQgjW;lUMEabMh)ttn|9`&$-vll{}9y-)neKNpU@5z9o}KW7(8t|?~vY6LcN9A-Xx z{UWl3+f`R7!H=TDZ6sjm`xK%Cj>(a%K9*tMiz{-` zU!4UWff;hI1q_A%*UJKgHUub0K*CrwGn{nJNU6D3TdF2XGNfN&3?qzof<41CDNlSJ zu@uvjL=c|pp1ZT}Yn(=to|Hc(R1mTriFp53>Qbze>z3JVybELY;Pc=+S+x@J=6T>& zY|3&&z!=t@qN#D@E6c6LwrkS~ZCE=8h@Fs#VRj;*JQ!6~Jr!im#=Yj{CSBZiNIRTa zGnjbeD2@KDWJ5G z$sR|r)S?=~yTcq3u_bC5c5m?Nne;&+7bP5~==`JpW<5r^5wOz0^gO z1EZ6v(VDDJRmO%>9qm{UXwVB(%ZgQ!#XO9U;=h~sX7G|5n`#WNSwES|7ZfRb%<|wt z%b8l5sU(YoJn__F#b2eMK%F_HrdlW9U@veNmR-bcR?$?IHD>VI`w2d08tr`(UE<~i z=Fgwyzl0Sdz#$`wc{}Eac~;PbDRIKpE@_BKT$c5pkm+k=WSC}|)XfN}`54$#3wjGn zt%oy~%(};Q0C9pQ%P=#aB0;A6E(H7u8FpI#>gsxH*5dXPt&s!}TyQ}`L?~$<9P}ZY z^nt=0YK$3y#8C=d^f6t1X11unR}F!5-IlOKuC8G+-%K^sgz6^%>5T>71WCAFc&%RD z{H`hgdheV>2$)?}S~_(Vm#x1`(cc+$ZY$d(-v+5)>^+e{I4${Dy1x~CzpeI`hb_N$|CQ1FB|DJO zAHBD5t-;~5K0ajZ448C?BJgY4xt$+R?NX?zDTS;sOcz#GMbyPcR5rO~o{@LjsH2Gk_ZYB z7#mUc{2%AOIT@H1Tj>|wf`MRW^4h6jrtp8Sh~{t8J>3*j<8+hjmo!WjB^wzGp{G*JjmrALi6-;xyg;V739IMcu}y!IxPD4GXb)U8LJPq{4LKGfI$w9JPqs;4lEjY1$sF= zyNkt&NppLCfJ8X8n`&~5LFCYZ!nE+%BZKk%+7QLiFVD5-+(g?1|Ig|=q2CWxI)aJ1 z{(S~>dN33U`H%b@zlBatE;KJtesYrfJ5zem>G6J>Bm*QDownQ%?*)mVV4|v*DRBO| zSpoxOpqPY#Ha9$5(E6}9c6Wd5wz=w{g@zV$uduS1bb~|ePu7LWrKcoY^w*#C=R1?^ zfiyJI8~?x20eU*o2DAg^q29)rBZxNV`L{&&PF3>HvPIN>Ffa3~8v(O<8c=ghIhie) zhmL4ANBaxv6^I4G##l6!c{~_-ECqiQ8GLf+A^pfMbVw|6S`cQ@$E!6s$#D_04R7z9 zPq2Yg2fzMTPod)pJkh%fLMZ4QnTE+WFc=&j?LF1u-XK8y@(KsYltl-f zn@?J}$!@2vYxUb=fYDWqj<)zW63yC1E__L}#?cwcOKjW*_4sr1Q_eH*hL_CInXILe zFxlt6c$s;1_4N^}M__9N?CDZk6m2facD#S3cfat^JMu0rE_RrB5#{ilv0kNM_$DAu zVSl=5l5~jY7qYgQ1hi(BDHJoQgZ?KMfVMi~+pr;zqc;sYh8d+_ad9)Y>0?DyD#5N> zsyT(@YH~ZY=VKF+(RtV2!_Z6vR)%1@pZ z9cLB-W_;+AC~=VaO#{X^{6lTDg*1}Dm0U0%jwf=@60y3w=Y7|rgbc?!H#dYzy$Q}e zU8tO)rUl?H3F_CEIje<613Xv=aP?!RRN4KtHpn&iC*ZelflE65z#6-rb0m^YVKM;! z#LGCBSR(yT_meU=B(&MS@-}Nwt4c(Fjt-%&;9yYuUtEt)s{aOXg@ISmn~#nzZ+x`F z-(QsuvR$Q3ro5?3G@_H=*iGd*zwGedSduyW{sI}!kzy)lQAAcE?_ilJe=K)}tdqAXuMr#`aQR zjDpx`_TIld|5YU~MwN`N;4dkP@Ej1`lR9wW#aOaQPmdwP-b~v7LM$z}Z)vx#0=;zRB~w zb{=r9%wL2X-CK@N+&dj$GdcR=EG}xe-xdv|)hGV1olGdJ4w@wv*THhS{lZh8lswt~ zSFmw<8urjGr`HlHdzx=KWOuiA(YFeZ$I+pp{&Y8tpS*0W@i^S|!Cm=bb2}RxX>T{Dx++ppG8;W@^$!6W{f7W0_$5;W zDfCzjoG_b3@2z#>m4wy8;e5~kEj|0h@@5bG>CWINAtH$lNKP)B3|=Or`F9q8m>zZ` zF%#1#dEO^t&%1*#%V9C6@Qv??E3O09WSS07SsVJlbsTXTX!*l0xXV|r6>GrrW0;CB zaGRX{;k+o!rWrv%FSlu_Z!I%?|I<_i?Rd3herycTxFBR5ec{P-ZqI1C?&9bhUH@%% z&gkw)E7q^x*n;eVxamLa;`Islcc0O3J2cc(u?4p>Mn*3Ci^Ad=Waai0NYwwy3~(gg z4w(oJb?nRX^GxGi{h{=5->5$&!cI+BbWqXS3Q7=CojvBb2$f#n+J@UlKM9>wP(wvm z-5yj#sXxmaE#?{qrHr}1zC7+L=)MOT_>6v&jAli%K!4Xtz)0MX?cgw*(UIz2x;?rc z!dB2j1BGR*XZ@%FSTSX8^(4Ch#MHb-3E*u-S%wEXU7 zFgmBoa)+tF#?WY6kTw*HYk*2&hQ1(5v zeO(RIF_(Qcqigv4dA+^t@YVIFEZDF_m8H7S)5B1VjH_$}i+8^5FJY1FffK84o`$35 zVM%6eY9$^u8|c`@!g|Q7_db>4^NZ7~j8E-Cxw#9JKv(8yIHE~TC=TqxWnCA)rcZjY z2(ypXw77+oO8rM3#xti!gr18TJrzwKCfVGVUFDe`j2uR3ctSr0)b%kS43Bdu0hVk( zmcUX^Z)39Y=<>2(XBs}v8E&4zsEDDZ7Vjx|=ouIgwYIh4ECn!G?DZ!n58!x5viyq| z|LoLsqFJ&ZOPnSg#O*6-+MkCn-{<7fUpgPS^%YBn;~IQP1X&nwXNpEC&~@kR%2al| zHVwFt!@qc)-gf6iVJII!sh}e@&=J3=*gyiEFWWEbgHWffQAi-m^5bV1W*Id`jqu4=?U2CY~V z&@pZN8(*It^be6C}`5qQ~sMpk`^p z<5`=>=mSKtXOO7}S}q+CJ}B3#b@*@{FRL+UGUmWhKOMT~LpL=g+-V!#n_mdh zy162415{oS(jODc3cI!J61U3cfrvOIYTH&PJHIo=yujYvydgtJ#f~Gn5u(}hJor)b zxqeA6X3l@7)3x|+B&}f^gjz~WOfviIcDfRYU&T9Xb&_d$x#x)fhlwg>=yEe2ANNt! zq}6C0Y-TC}MN_%X&DWQu&Ta-njo{YS|6ecr(%0X%?D^+aVUzP`rnl=6p@;b^zG1y# zl^ld3uM!diO1jn3>dX|+8k)l1$ehZ-@P@S_q!Rb_JN`KTk*(IE(22y>xLW<+=@G=l z+DJlJHhH8XcoZF!@Zj+%mS5xN+OsEC%rGAS4$oDE-EyT{Kxk<4;cBMsjV|n;!FNvf z(1qlx7i?z!W2t(PFbwAc0s>Sy@ znomky{g*?eu2ex|)XZVbwIFcL_}2T>cquYJW}>>DWR+MClDQ*FWX--a8v4AdTDqi} zAzt#5*R35yIX!6wGusk-;f48{nD|Z0-!uBBXOHxjdpL+(Dihhaycx9IZycMA1Qs~A z5^wEBG@k#EE?dnnC@{Dg-m%{%XoYtmz4>g??^=gavd{{of>t%vLJ>;6Ql-`UT2kJQ z&d6(6=EZKSF5ZE%^4W35{D|+r8@s=&$fZz$R4COdV^3b2VjNwMvbYc5>YJ|p!xu@Y-jq<(1Ds5)n>_lUrCBAHJ zws|qA%@(L!L~u8-rkrAiem1{Vphw+_V757$6Uv;(v109AnU=1#-d6?!e z&yF1&K;|FyQq41HlsvZK_8qC!h9x1YByVf*Ftvv)b`Cgh*K%SHqOzPl!7ehol9a!H z{TkdKdV&QC~4n9=1C zmiBR5&HJ$ffze?~g%p?P3rJ-FlcB3yd_1vq-y7xw4zV>6(6Q-%xAy+70l17#n{;{v={xkZ|hoiZ2;^l%$#Z z`-aSa7i2ffw_n7rkSY*W$bykE#aQvIDbNhDS$6d@5VV?K%Ovp3#RNXhX(yg|-<{bt zSzYGQ5;J3^*EA>z`iVYcF^g4%pDZ$j{vlyV{Q}f3w>L)fx!S)pq`S6NEV87xrOC0f zlm&@aDu=9Ns21L#C8o32?as2I*r`ZL8%3^5YjNXQ;)S)FsnTSYqsbRI~6l1!uF zW1?o4IiF@pzN)@|{=!q>IOLrEvBcR3%M;sDB(0xmU%Gq#zhW)q8lHJzvoCw3y>pIG zOR>4-l$R@XYLK5d?$0Rna@;c8U3GZx&$lUwd#)$=9wb1~1pfAS$B>mC(-77xjpOB@ zK>`kYZ4zVzC3YRJ+Pq(dg)TrNHYd;gyvfu}V&8L{=`TWksv{F0L_&=WYPxHV z&G9C_$5_JycXr4TZ zkvRwGHO{xDIN8wevaAa(QA~m(PnhK5(3+c?^n2~W6Jn!cYdGR*>CIl!tqGpYcYdW5 z)ha}RM3SIHJSj5$Dy+vxxLYUdPnoe1dg~78+r?Jb)sHE|j6{9NHDdEFF=ml>X%3kAwc3bMfCiU=9S8i+WmmSY@oIDV`*GSqfh9@90pEGM}r8>Ckr zzGz+dspuSIZ~j_Sx?r6iz&_5k+*-G*d7qYl?toiDw5%OExKlC80`l=`%*;%`0fA5Z zRbKKVCabK*wxIB~+K=zizdM3E`{nTy;%-mqJkw3ubkRejPdDl)Ci zM1`RN#omNmY_Hg}jD6#4yV;+bMLV_4XgnSU3pfXrA?GX8T*#oSaX^O8k*bRMixK!D zK}(Dj@e!N;i6=?nn=`V79NFtbCHoIzy1F3W95nJHWIm7Zx}#$I9W;FBRW6?EFAdbO zqoYhTB<{SA@+Ch#yI!94z!f^r=)bFehj_%WfNxLeY8n@D=4#riO8&q zx}!5(Hnl_m&9PYfyX^UsB33>+S>CMsk&QGu?j5(`H^H*C`I1CAtTx|sMcF`YsZcDt zx0blk(J_0MA~E+ycz;NoNfI$gyW!*Eys1`seukP*0ByNLW#cYp?dOC~w@gmxT2$P_ zBKSJbPzV)oWm;0o+70cYQZjUFtlDdhUJX?VdTJmDN z5+2UmQl;`jb($N0q&XMQS{>K4*S7ybQvY?=ok_va;>m9sJjGL-yi$)sKo&O}O(u|g zmHdPDcn9UgWk|bhV4@(7^hPnws>AF$PdrDRC4j8kJg=RnIRH9DtkMm|42d(4qAZd< zUe)B6Oi8OZa~(6NqD0ve-v^)rL`7NSPiE0&z5fpdpk~coR=H;_Dqzdaq+8J+9O+87 z9&d@uVXkuWP=`*-0+((589lZUcYZF24uBBE zU1ZnZ)s55cV%LXQV(MvH{idQgvQj!>Tk+af?+?Z!Of z!ZwyO)s{XIEaOz%g04=8a12niY+;UjFmvz5XS$3=eAY?f|K+yBu* z+Cfj>cV!>LY~EgD(V;b_1xNk^TtCNzLW|K-zoX?9Q=JF3JCvB$H}jU|6DQ#OvMmK2 zitu3-*vi|K5RdDT2Id-nwMMXg=K5O|PSEtH^G-M;q-nBFiw*{#+D~mpUmXsvU*)12 z?$V{_3Az(_4jQ_~?R{!FdmPyj{SROTCN)$%$hi&kyC(beh=Y=Mk6oigL$A~Ty%tJ1^ zKU>Nv8dC3gWcamfYJxa%^U7&v>toX@Q zZPy?x^$OvMB2)0FzVOUb%Z;2#(+G-IGd}nnkpT9{?a&aQ5r9N6x){!?r7Rh~8$ULL zFsFW(*eWT0xv{ssmUO^YbYhiRE~+T`F{8;!DR#W#D7SY;`x2MU;BkQic{@VAh8In5 zbUCtilz8Q};l5ce_C;u;mV(f?F5|YL(Mcz(>s{;hR|M_F!_aFD`t5B1l?G|CdD87% z)0d&yzbTS^fe)THcprSs8J&C8K`|=x)JK++lgx!O9Xl9Kll``1d%6&MxZzDuTr=af zP_8b@LbE?&SdxUdHqBE60zcf>(Bh%+l57aWC^~-wEt9+ZnR^>|WF$hp>ESbdCZhnf zOu=wgRwGyoJpKSH2CQG#MyUL*E$=LS>drGYa(r>|A^La<*C3r*cqRAE;T7cOn(vDr z*-?!B&$#wr*qbVDdK{sw8pM6fjykT9Rr5}lL;2D}43WTn$dCQ<(~A{o%Vw}(+6UtSz4T78JV%ZiHJqVxlYEv>LxTLX2IlT*=)o2C!| zskNw)Na`%a*|MdG7{{;tH24lGFfq(T5ld^F_IK>v(y0(>I*tTbyiwX7UIakpwxNor zMRjOBrCJ6xiQ1uEzINNfl6yqO?<6i8plQ=dnKgOSb;r#+gLL{!k*VD z0?`yJepl$iK~VuqwiCaPuA!x1ntkMM3oQiJx^W`9&XXBT$S>b|H{)@hWwq_t)c>u2 zU|=L-_=B(tflK;CxBAqkcAOg4&l0WALjGwTZx7g^Bh(jf$LSxvRm|ps-iS`iMF>B* z(e-853PdLy&RH}(xme8rOSJN;Z}R%lHK`SHCzYh4(cNSxNku|hp4`Ua+%Tn?n1@6L zIiKmB&b;(E&zyq3b2{b5U6&P>ifuJLf~oM>A$r7Pc|mwj%;iH;77tV|Tp;~``e>i|*DPu~*uzhar zzX${`T0l(m6HsyI>zAzZvSJ@?0At1oXE0sffj&3@Er51*Dl_92|DMV{#t+H(w23Zh z0~aca{#ISZ9pbl#hJr+qotvE&CRwCHrA$nE;T;>5Nt-IndE}eK$|-))bU%h#vuoe< zB4lMbX~OB@50kT zvsZpxH}Rb?phkBEkp;sl26dYqxPJk}cAXrQ`rp^FeB?Any=rjzfHR*tJ&u5FDcMd3%l zRJ+cB2Q5NIA?9lBjpD@g5FsbM6*G^`u>-9=b`{IDqw-VARZ0S&)Ey3wFB#sen0Rcq z#mYiH+YjG;^HuWvVutmw?fwEC_7DvU!_2F6-4z1<))iGqHG)u&ok#u!oN6z+K502K zLROESKbTisSwTV!m%&Z^7sf1qMTKt5rwrL|%Vq2MVGcdrU1G$*MJHO(#iOGr8Nj8C z#kyY24r)SKRKNIJN|8~eBVh%#Q-E^5_rtUx9$y;F;e*$~dJYmoo{MjKc4Z4mVSXzq z{B6C|;HJy;<7VIiIBaWgLMf-vW=IHjJigaacgL77zcbdO*x_y<^WB3b`5c#G?87~) zzR2_;b%D^v4>CfC68KwlDz$P!{5<&jk0m9kDVkw3D%&2_rR|Nh|Dsm)bO8VWZAu9x z+WnR#2E~Zc^LR#;fwU7}6o|)j@pVG~+Vxz34a=yVE_^`CW8hrXhh^;!$D-4~!~vO} zBxk6+GC8=`t*3vAr4PzkzMuYi&81lGjqp-v36D?NLb`&wXVxOs<qfvN1mWgj$!LToe=4)4v`LiF7%#Ne{gqcipg&u-W$U7+ z+34OcCVc&lz2|P?7F-f@i9v$#wDSF~z6>@;!IW?NS^zu2H1O>ld-qze<^lC}0V|Aq z556x~y16GF)@VoNf+50@lGUU%lruIU?iy^g;|5uGPM|+3xHD!}yfQ)vf|Iei-kSTn zL_hweBeS8x)T!BUQw{fe$Ejwn&4d&qzfKY~N)EcK)PE18Xwps$&gc|eaL#(n{&5+Xw{A!Em z(Rz#((WC`bl3nvDi@9;mKg{)S>F7yxXE8xX?=D=4J=-a1{#dgjMFqg>U_|T(#*q4K zRJf{j>891KoS|I~&}30;7E?lU0^?((C<2peRp$5(eOKepG8{75i7p?m+5lb;;-RO| zD0?rRGprMz!w2hm1=8qwHRry7Pf9#yrm|S3E&GAs)owqJng$RBJzJ$AGWm?{w{P$- z4|8hUk}=BUtj>p<`3_j$G5lN$;(VlB)0x(RZEJ`G>=Jj*VcogkDun}hqG`ym@b=Al zE?PLBA_{=jRhIc$YAccu>=c*zTiXQqylB7#)c#HDI)m&CD8mOFEC>d&ZTt%M`1?Bw zpd3IK>TGJglG($~<~BVzZ>>Lq@$p5r?e@}M>5^IW`_E7~pEc*PHC{gBXAV5O=a*^T z8JMVbR#l@FtT}$nSTPr2YbAI&iv4z9bp)r!OxYnayfntxaCYlb!%cghj2tSBju%)@ zv3p{s(ME&5^wx4QSlF&{;UTGoEG_~HZ21xDZeynJb>A?L6RFW0)mInec+w^fHKo_S zufI6TNFu&X;D{5_4uaR~Sbui2B*;5?atS>1z2$)6BX~5kGb>5EVkPKr?V|N)UxMXO zVdP2(m4tu)I{ zL}plZ{Z3}LF4rtjfR>p>J;fIZQ6N6K^c`a?tSTW1Y|uv0B~1YMl9K(pGt;rTG%=Qw z(gCJiQ^6~(^nhuZQI>y$;jgU~?SA80<#)Ch=1ZNQ10SoZtnodJPV!eY>5}t3-8>SI zeK@0$hmJ-_FZD~ZTfBy=ukEt=u`oDEm9-$0)=IuE-70r^*k=m-Lc=nfz}LX#E2Mk* zak$QZp+Y9FH+rznKrJwob91Z4ZBI;}Dnxr@#_W@>rV!aCuFMGZmfyx3Z;&JEQ51CG zjLaCGyf$K>ptvN&W)_*xDn8KPl{9)X$%&`N;v^d!rx9des>b7thld|gi8{?*i*qZM z8RE^mwHuo6WNTK_Jd0=~o4a#9R~AG>t71EMp~!H|&`G%{+BmH(?a#(?%KTm$bE zx3QsnU8+rp)I-EX{e&?;SC$Kq2#h2MMW*y~Lno79Q0m^kq^gKb%}~r`JkA+f4%*Rn zu`pUqX&nd|U3}L^^hI6~o;ty$j|x*5g0Y;mkj`vKIAjNd$=tygxcRI}m5bmNaS+zt zCH~g#3B=fmF%+I0c%X=1(M;2S)x3jRk=0eeg~1qmZ1)Gd@gPSYDKzFPvMD!j&6{iM3mLD#(7F9uUpWt^LGr z$5-^L%F)fC_dXgaNieXmzxxKXvxzqq;G)WB^{{&Pa-y*H^wWMR*>>@rRq-MWZg2Y(8aP`J3#-e{IW6AxYp{&r!jPj$Pn)958op zJbYcYiR5Eag>n`Fn|nH#M6w7T|DP=hFHj(nUgxuOF9%s7K>OGM7MG`Z)|p=xBAT-( zRl!I(D3uC{%ZnpG;k4ilt=~}ifHU@HL&}Ag-k8*~++KY{x+y5$zEP?8TcQBq6UL|D*UpoXjPIL09~t_%i*YE+ z+}je(<5uyA=k~&Z%%^qfZqwnSI*$pBRuRe7oNl;G3<}FPBQ@NE_0`TRX*~>huQUOO z%JqgmCEHRY4y;U3$<-0YynycaH}lFBFw%!815R>O0FIgH9X~BG16s1shCua4@9F9= zsOa+LQpz(2;N>*jWSAUmNmESwR9-}11R7yH|$9OGuCu{mH)W^_@ zo*l(DVA1;cF7fTGg?1bJdrkcY4F?~Nj}O}vi>VL!lT!GqJ$UtoIKLV)C0WCy`z2Ck zqTu+@XN#=q{u=9*?1%`dqAWStNtT*d7zWO2CyPo>YAn=*mVj5|YYQsq{h$ot7|FiW ze$k@y8S5vLV|mMdqqGK%E@qsh9kpAVxH#S8t!)&_X-_LGo!HE~{n@duTi%gZ>|}yA z>;86t)%a4}6}p*=07x;iBg0`j#Y8bO@cd~8+70@thmw~w=WBC5v)q1Ze%n=ak8&=_ z8}_nl!1UGiD*B->Xz;Nd6URhG$G?6E6N>E^EK zJ0$%#YQ}1Ncsi>PvWbSmTI33bmC!EWSNoA;!8s+_T{JMf&@Y&!Tr=CqCV%v@=}`jm zknG_u7iy9ICQWfF3$>L&w*u5rJQN%cmycUc3p$=eM7Ey*&zdp5s!aoE^;}<9QmRpy zksF*p07M7m#0YPlfnR@p(I4NO@kG`F1lt;OKu>*2<F-ycgi6 zxSv`IaJkVHBuAJz;>fuC*7TiXmcS%1LjndyPTA4T%RVz9rn(thh5cNHPKSgwM?v!Z z z(GZR`2bs^^9pl&nw$#vAPB*YBy0x0)3=OAJQz`uPP6V4ww4o1?39P6afbet&+Zl-G zFqrGDx*J?lt6&wM0!oA)1tf);^E0F8CCx z`PW`B*#td$0|ib%o4J#5@cnalVfXyqM`+9wCB5+{NG^mNgoL58d%>!v4eEVxEm0lm zd|BIaF{XBA z2V;zYHaeFrSYQ+wI-l>cGn47wP54wU&XAu>S{Z3Pa`=T3^80RBNML8G+^{2S=UQXLF=69#r zB1b_qj*KfqiN(at+n4}`U-klWx3AX^xLR=3^Sy9v-MssY7xVxTjatie_kJx?# zl+srU8Oyj?DJd+m%m8drXjEi!X<51^&hGVzYcA-Mb&eH1fWN;_ep>H|w4@mfk}@susyE#J z)<)$mm8WI1rj=P8kwv8lu^)oQR_i-n4sYIgQ;|2QQem(Uy>CRyEblEya$c9k*MDG* zmohX3nyzGKGVU#G?hScGWFyoRJ5!vovtmRp<+oS+b`FIK;SyIgB0^$Z=OUE0ni?TX z6BuhWWT8K1EiPy}Rv00J@{dJ@o~dwG)Cf$i%+9`S=8$K-Wg(TdXJZTvIt5;;1BE2} z9-wMnAojiu=lRM%)l^4|p8!Kn_=z?>sFY)bhR zfB5+ZY4;S>8F9KgLms9_aCHjF_O3m{4Rt-H029Vbr|pzI4Y?&1{fFtr7TxFXB^?ew zZZg@^Rp9O9&BzLr6eaTvD~Gd5H@i@o3h1;A%Iy$*X?1}~$hq?!zWs1vo$D2>udj>+ zzQkCTs?qe?MDl0^@)#>l+fXvti?TLTt&Zho`o3^ko`$e6@0&!I7b)uHgkAitznFk9pYH$lCEzA%K0ir<0y9Y;ivXPifgd_Pp6@66y`1j}* z`=lSNP4&{vR`zCw-#x$Boc9`G7>3j(dL5l0|N2!MqPb)_*z~&_m?a8*yxO8^*1pi_ z!8MO}VMv5!kRibzEW4U-h>B%XyW_&t-x`e;A)9m=YE&WiZtN6BoKB2HaT4X-Uf#wqK zJ1mSESwL0=I_?|CDo(7ABU!H)g`9cBJC^YVd1k2UMEVr@D!dYSr9r1ca6eYkO}Ty; z)?~+vTf`Zg7*XV5;o)h+8ND;Q%|(aR&+LgcPBIXdWar-Qm@l4&m(cd7+H>N(Xx#qg zfGX7QNYM7l$MS8?+hqI3;*$d`d5+d+0FJffP3QEdiLg2*R;lLWI@=p;7@07S zG%Ap&OOK_twz46OcW2AeVwJNroYymrlE^*FZu<-*yw=MZqU+m6p4g$;G&+sD8cs@D z)=ST+Yy?ZYU!Gotel=F8J~2$&JNSm%_;cwvVs=errw4*@u8N9^p+Zc`l*oI~d@zVg zNg}ZC@{;-k%jL?bM|*xL74X|T6!iugJ;>fxthN5P=)>znOpNPffdMFyhv$8(Q8r{q zNSx~fo1hoS;_rzCIED%~>gPETwQ+x86`?Ffuz4?$jm2=1`zpepos(7JOZ0gw%1iy! z8DS9sy;z6+wk)K^v62?1m-z<=_n4){<%2fD?R8Z4d~v7K6RMG}cN7e`;myb-TRuG} zMcj-NG{{e0qn-B6ySe*I5G4fWdh({Yy?DC3oq_ook*D{BPpG=XTtD1nFVulm6gdlU zy`eo|i~6iRbeL;!?nreInR=nhRhhSKOx|DtRF4MA4qUb}Ymp7rQAVN*?szvC-;pjJ zzPxuoU-9`BTQJL>ZNzf7=q0C@^bv<-@!q}0%x$Rvls#*OC{94R=sx?s5<^!H62UnS zp^ok)yE2fpv)S}`z!>QJ2j z=)N+c(yy5P<+w6`KghLyMl(%|m$>)&4k7AjZua^vit~ljS&rX(e8GqFS6N#q=hF@^ zC@KQ0?CZk9D~~o_r?`>f!Ih1*Toc6yE*w8LX7!@1#0tuR5ERzKyw<WTSJ;KG^1JEsPcPA52>O{`Lm1#)tC@b4+r|542@&9IDj4y(gLmy@?!h<5H$oy@qP_m7 zJWCJ$^4Q`^u~cpSCo&c^B_pP@>=#+Q?51{V7&FWCs|1lTE-~{wugr8m1@}lb<$Xm0 zPXfKlks`N@1B{Z;rE9!#k!;!J@FoMOX#!pArgTYL6v$p~4iH-tEVdsnLFE!ty1X7E zJ6I@mfz9X9#xh=!qCoHe2FIqn0@me`ncoD7b2Me?4WTg3IIEsV-TjC$qf(TJ-Vx~p zEkN$j$Y}!U8fQ8^jsAaRg1ac@P6#wtfCQxfK+Fs%ZMi`5+d>19S+vlfMUmb6G4`y0 zTPKQ~`1;=1AhZ$Gwlswm*F_H!Ra`PgTbcu*Y_g^9`6asISAL9qeH(*fSGAp$5aN?q zs$_3Otmg2c;Y#TK6jqzVXPYi@)+LL$s`FoOlo%R(SnYg+oFR2_%%edeAiUcJf0M45x&~xcc&rmT|JWnbLIVRmD46S|k1;3Pno7y?RYO?{R$s>rwkW(v6h@&hFVl_#>>it>Vz3u z|NN_gB5Gh&!}-`7S3E%+$vB+ z;$6w985aO~w5+Hzb&-)nbV6T45P5BgFMDmS_4J3xQRepx2RjY;n~L7d>x@PQo6MNf zSFXFj9?C1rl1Xk8aC*sA!)QgBoG)qrGG3t7YomTx0z9u~@B*Zg^xfT`#`GK&d0ZC% zL>6^^`cVG=sJiN~thT2sh#)Q9EdtWrp_Fuoba!_n-64%MNWFA-HwZ{0(%qde^&Qar z`|kY{eDFEv?7e5ttXXSKeya4S0e)vL-NWlDXH%Pi{QKLEu4zJgV}hQU^{+jhS}I3S zi22>~a)^-%*5%F#yID0Qw;0%ZdnJqVS{Wxqnb;DG{gKc__`O$}+p6S24rGY!JHtQMS{uG^s$Gp@nFXLU3sq5u0hs3%J|=Arn2nr6MF-RoRGn2z~0* z&9@6&!s%B;-rGJADesS0`mnslET_LSsXm`$>DN!mqG;@MvY2*|9f-i2PrXYGd1>d6 zuejIi`+Xz*E;zipXH5o^gsK6v3oL5nKNA zg`Og_DEUt#&SKL3s+~$Iq~r5qc7&suxSp0TrV+e=~r>2)M zMGX3G_pUn20kwp3wdGYMf^S^aL;iCH{_}%sqCg5xajTZRbZ?>E_06y7F%W!Athwwj zmzq6H@``IbwcmB{kv)oQGmaM_xUG*BzTqmh!4W0B^n1JUpKm2z1;EXb^5$TA(2@Ro zFaG3vjnCT*GXPt0e0tI~3p=4ERj58*r&}LOPk6CweEIEUswXM75hu#!s%we&8y$=8 zC8XNRhgfgO+rg?6&7UqM%6l1nH`}}gT#sR%HlHZngf4oMPGV8;=cmA7c%N5-a>L4v zXV`|*U}Nd}=J%|oHHJd|up+8uopwNRmOXSObnNR!jkwT+~r?@yP_)idNf=X=ciTQcAg;-=Id zua=u9%V_F$TQ?Ls|(`6-o zC^1{6&8MVPP*nAJDluJ1R~G`a`RcQ%EZ_qNRBmW*Ozi!XD0FDl|D*db(S>w(vI@-b zeggujjS08Cy8Jn@NRZ#8xsV+%r!G)}nc*ApF^cado5}ja2fl~;qo96-%Esa41zK)KbS~IJ2 zW)^f3eV~}P-_xuo($#s(ii>)z;2zcGQvF>{ia0zAdIFUbBk z+5I`Z9z?wedU5!>=9OFvn3_=eK)4I&!yJE_=9^y`ds%jiI3Y*vhaeRzKfPDovc`{E z*Ce`IU5I5rYT1FFNF45r)cs62fG!hf@@;Uc=sR5w!Cu)ea#GS_HXF2604obATmzI} zg26qIE!yy~NOAAmwBCrJIRqIzcYOF%Xzp2->6Xt|`v(WMT}y}U-uzy8O-^^PBV@U> z{AG6#+B6{cynk2?A}MKcOf_h^EFk^U(u+|$JmUz=-FW#!}| zqoWy`FE1&EN8**lZt5_-?vSSMDam0S{;-qF|%@E_vVLu(D2}`(AOfSzW(Mc~BLd zVRczclVNn2rA%x1vB9jjo{Rm_-s5`Fd@yxCWP5)#bOy`Ax7Cg0tG3rA1WvWrOtJIP z0=wDB(#pPa4YU%EYE1Y;O+TOk4fq-2o%kADlla+QY zTg+wiY+$#qTdlcpUB*s5@It%{82$+1YEwdLUDVqhi=gAV&&%+m<2R`Hy;9HzK@rOQ zeUe<-6!wQa?8-dplz>r8+CGqWo$lhomHtl5=*ev(Fe%w=qWJb?3f*m38YkZ!eT)SI09 z=>8LHapsGUAj&wa}Z3t&a=aevY?!=ELQNEgZ;clko%dVjX{ z6|fK(TApWQ#aeX)k6vqnipq-1P1dcG>1v#hTQ8&Z$Ljd?8E_ytKk#J~iIy#HVqr3< z3gABPa!k~pkB^g`rUprW;^;ruL^&Mw2rIFWV z(k+ntuEQACx?f@BGWjtsHp*^UT%$^mPpOteO0Dx%Gs zhdyoUfz9Nteu>^}_o#GqUlZ)s?Sq4y?bY@5VwbuKt=*1WtmlHU8Uun+wFblWv&z4k zz8~9ZAYra76*}9%h{acvjOI4*&ZU_)P2L9kozB81*K8&{0n3i&V;Ep=mrg&P%xXho zoJ=?~$1{Ec%2Bz-@SNihmbT?PzO5{x?x@`4aU&uWa$as=&Ow!UkrjuRwmOeiTH|itt zV03fMqsw5!ySZuLaIh&e!nq99dl~(0U(?=C+G8MPaHN!vIV`G-D4-Vly$ILg8Zb6) za1frehh_r}=a&LnU_mLtR28x~rA&PAb3vB#CK_LvU_&e<{a>}nb~lt=6|*h4TTb#D zm+09_E3IvDo=p=Mcx}7~>7h2VBs(3cb&15==5rT*8gWPAv)=_ly`wrDcQcpiPEy_ zd~5?ed%ks-8{86njd>@B?kgz`ssS$etztNzDhy?l2C6kZ8LC**EeAVNKlGtBnYQqd z*fQA>+WVsV`cF86=~4;eEm+tN#EL` zAgnd9aL1k;yRb$^P*;Otd+XwMBYUm-o@rcx1xCes4bEg<*=iid%1Qjf48knMfrsMxd^J&36^|7(;#Te zxfDsak|O5$-(S0K<0~M1I^GTI7RQ=Natn}zfMaafluhMtO_sLG1=#Ek7H_aPAh@@p znW<2nlR$|`tslk$=4^t z5)6!xx05+os9MOJ8QhRq+24me%%NXsyb>7Ix{vce(8!8HRHY?JIIS?SR8e8Ksn225 z&m=z^z<#P{1ngmhJ3tLkhRy%1YFKdlcPfRG(c4Yxpq3co8`3!qJgZy~Xc4{uQ7JmN zx;XRZ{0 z6Yd({BaF;_fd#m-zhx=dZ0e@}@dAMV&3T2YGI@Jig?zl+Qm5NfY0aQN%?eo3sv{VA z9IqIolMRp||9DA3J^D%JC580k+Ld^9<__U={f!5+wZfd@p^mZ9XR~+(A6Mi~r@_lDGd65|%AAYp$4r-BQTBS(4z)c#YT+E!&XA$ocD6 za1L@Zr{X;|1H-42ZTTW2(2wQ=+bAZO|WsI`=VX0RZKt0wQx z!V(uePVxmo8_M8lh4YzSdr(FR8bFstS0DINTNsCyR@a)!V~gMc^~zZZbid$s`?xY* zffn%|RYcb(!{dSA;p~!H^%#6Mna?*r8r!_ZQ8slQl86(IC#|LU5*o2<>(LV#nEdIm z1P%Dj_q8DN>Hbt{(;Y1>S@zpl3y?sWDvFX$OtEglqoXUm1{cX3hnCDRu#f(psGMe&=A>hjk^^AzXtQ?a`k= z$pe5s0()*wSe$96g(W+jZ(y%mi9dWcM=W7Xo}Ny4+)VGVPZpIGcH@|v&8{rPl)1U; zV)l9&J_%Js^n{rMO{n&;b3QaSM5lAzl3c?%!!?Fmkoj@@ohV-FH$-X~K0cxfV`-lv zS0%-`wZUYStk6?90-kbYYHzJFW;RYvSfZ9kq|3vVp9JpZ6~PkyqCyUR?nHNqgH5-4 z=WUyy9c(s_xAXJ!6=pqA-&h-+5WBdKygyF$HtwFYUvZ z4xz2|1`h}5x@FzQ#FV zdU-({UrgM)W{xtUkC(zh z!3|%x!~#Fsdi<_8GGks!eJ9IV(LjxAqu(|V| zH1X*x`}6M7epB(K30~th&NiQ?LUyJy=b}kp<}=c~#eogOt~mION!V`%XVU&fSfDXQ zycUb7jILE+)$8X?`KdeB;7!x7D!faP5dp59v+PIW=41>%a)WcTPt6twV~OELWcV$= z&;2%w%6Ovut4>^Y;@K;_*4XZjC)9d!OeTnWBUtunF@BN3g<*O}EwNkng-*4tlr|j+ z>#csK0o!Gb9h_?5lb# z#M`%S=Ey90LGP+}_UWLSZdXG=&K6A|=wtZVS^agU8tesFcrBSAb1Iv5EZ;qu-2f^XAGb9w!PuOoi_1LUk=bR!3 zBk26qIIBDVD~0~WbonljhQ%khF>hj0Dhq~ikh3jP^41*;@nDD4Nw0WL^hc%o%Gtlo zCqGfj6~DWV6UH_^@!v(C1EComX}tUAad=RMUed{>sNG*o4xp_I*I*@TGro+aZ_>CC zz>-|*Z@V7E+n#EQ8tZOp_3{$;qG3}zfe|3m)}FWBS{MxCLAqjo$LoI4OI=3$g2Lap z!QlsoWCkNVMWm?0&9#1SVAA9?F4+C{I+Hr!fs>m%);TH1Ze+%TgM$Nm+Z2|_PwYD| z$b>w8w>&?CD^{zh;kAtSktUV^IEQGC@vK0DJv`I zIoaoIk%>n3)|RM;UxtK-%Xh-mSR)ZKA@G+yz~;-O2|PkH#;-);^L<}X;&dh{gJSbA zl`!8aYst&qia4ookj9|^5{olf056F}?Xvc7N#h0Fg{i^`nX_(U2NC`xTA6R&_{BG) zJXeh$GZ#>j(oIw`%z|T)YaQF>%^E=>@ATo(CzW-nHnQe469N=4gvD1cc*G|UOO4OR ziH1nNJh!<{;)udFwmQ*^X<1kR7O%6i9mWQVX+Ct31Kfl@4wr@hsoAb}k7B&}ePfL{ zq@y%w#8n#(9)4wa*K8MEJjUrTH91+A!RX=M8L#?ccL7VA2CSUlLVGbICv=oee!VS4 zl?dn>NXyr6wdW$RCIqASVEBaoKJ&&?=CqMK82;yleo8{N$z|JlnhtV&Uuw%Om62EK z*nv%n^WUj+71oR74zQOiSi-ugP}O!Q{XAr&N;G6ll4Fx5>RGQ|_0D3WLxVLeplI0^ zgI~cPQSt1k36GVPwcc)8DT%=rE&{Q8S81riypK&GPZoUqjRu4?*mKjycegHaAhD6k zTYN4|@Ea4nx0kI|hfd_k=ZXP|MFyddAxz)vIhg+ZylH7ql)+nWflK=5i!2C=qfXKN zD;85^We*4Z)2yrnL%t+d(b1IVVro#r*a<2v>XnYE_2TBcFxc!dMP_H)wVm5 zn5$AYH4~8G@g*h(_3qQaFHY^)_bCN2gcLGt?|L`69BkUgSt$#&U=D2kf)J)!EsmRO z&aGu3$k>7Ak^!#izc3hqAPQo!8SXo>IK;n50V`~3mf4rDaSWQjRUONDqCofLS+x*3 z;f3Jq-<J32C61V;~ zN3uG;)<5dfh4a}({Le$R_k0A31gxRhIM2UNsq`9PSM`X22(Qb2kX`$s=Cma_qN`Bc z3oAX&%Skqr%$iK%KQ*U{b6|n)RCm;?kWb%Jm4f<-dpWC=<*bSV-$qRzrd2{Dezzj& zO1^l@N{*xcIG2r|sxGE}cX!Wt5xR42KO}N@R5S{tt4Mg$WnG?E^RRR+R+8XLqA&jb zE;M)Ng5_g7X8}ZOC!&X(O_l$aINlF|crPSQ0K z*-vc)FnOQ4Rl{AI)a_B7$Yr+3T^doc8;vCoa}D~`*E%w`Gs z;Ylkn<;E(rl-vX1-B;*;t|j0sYd}5IrBohMPK3*Ge)&FqhD=_x*(T?jNVf{xGl$ZR z?0Zxl!wmpiSU8X>GcZ1kVc~yq zxUsQG%FjPaoETq$vA4U6ZcRgBJZJn#MPHM}az=xdAV)+qG(W>#4mLk5Dl8zw`vng# zFRQ28YPTA2uoE&eqADxppr0_d9OaFzo*qHUf3|`sN{$)|{BJHj^8tTZH2lyUDOxs)Whp z+=!ap?e_W$vVwnXk?3VGQ*Mzo5#bCO2$&2jp;;aHP+XLlm}tk6SC{L7o1$>|FEArB z2jvNwIS2`9{Sy?QljgsDfj^(Pz8?siyQJRjmAwD@=Kud-z~4ErJc$~{(v!BS|F(lN z(NI)tSFs#+NSDeSvqcxTmBXlZ9<)=YaSxbpPK%aT&0Ha%a$=n-dmq;`+FMU8Jg`_= zV-GZH|NaLDUxDB^x2AxS_9u2fmHGi+($elgq}BoOP-bSJuko%(nq8zT``PL*IyOmJ zEEeM{&>CtmR0())Afc$!$rUlyOoX+ylQPzCP^=p!E(9d8)3{-2MFv zA^3kOgaUxhi1y50Y5|90kfpNI}bF=i+JD{HSx##Is`vEihjnlDEzizLcyP-W-z6=Y$Hr3z6WCb zF@~k);=K33Iz5L3VfEyC&pLMjc1%x|OJr_KN z?EhI<<+sP5F8O9FItE7&CBjza{M3r!(tQnkU{#gl1ZEsn33*V^(q1}NUuQ2PXbtlE zzCZnD_tp;$FP!k=Fo>cVMqugtx!nj#F`d|Cct%{MmVN8Hb*7hos`vq?yovU2)Ws({ zpaH{7u5l11?*Z?z!tq)jNgY?XR+8MPPWyQQVo74;{8ZlngbV! zyE#>e5-|-T+8<-;$HNJ0J-3&!P$0NZ)#&o*b-!Igv<9=$s{g@?*?iRC_TKy<8u@IZ zY>)R~vaNrpw!Xpy5t@e0&EbL&wj*t0jflUS3!S}V*Jr^KPbc?#hH>#1&NDH}$NHBXK?gNBneA;9Z}BS;FjD8E!V2-$f~OQqg*8L4fi?l>EF5 zzc%=-b!qS0=x{@NFv7G0pwU}YlRP`39-6K`8(10Sv7jGnUz%@PGn--9(DHAgenRl8 zMl5?d;ZP>A>^HY6rYE)4*^QYntuE6F7T#|C-H9kDsmJX;YO6z)q-YO@`rWc@UtYP}_4~hsrn{?-&9j zaIMpX@si`w%FW?}pv>x0bMNG7+Ty*oKKBcm4!gKXAm0-ddRqf?`Wx~$xYPEYOB|RwsV?MgnUOE0e%oEU8CVkONvrMG7 zG~3&pnVJ&gD{{Ka6k-LUGZ&lBkK*pg7Kkye*A7gO8yg$tRaFX+k@XjmrEQ!)$Qm!Y zolcPkhb9m`nT?UmFO{glo_|D4C6$vqAkrUV3*Y_UElLhd7&iuz`hUcDRKX5I%-wRB zUJrGn(FkCGY8;q#LxGFj0ZppDwkDN@iw1YWqHQe<02* z_xv?&zP{=24;KCWIcvm9L&Kr%WV(S0>tp6CSeg<3u$~*N7%unUTtHPw;Ou%OVC`mU z*}&(D2i$L~RBe}g^PWIHb!OEBVcl{@0we>qH7Km^ExqTDMkl2Ea}82ez3WtoYhXO< zX$|M@*wxjKlX5-06ciKT^d&8Ql;UtBb_F~$X3#|{1t1+pCGc;VfeF9rkMNu!jiqf^ zKc_~7$Bbo!Yf&K!G*Tan66^x7(d;+b*;)&M?XWZnw$uKz9p)$?dWr_eM)u_J@KS~k z6okjbpZ?*eEnr-2L`F4G{!wA(%}ity)mXFUn|fA53Zu7Hrt*oCAbIi~I}UQC!-M4y zH>QKfriWDFq3Th&H?UHX>@|LcVEp%^UB3pwZ>SWutPZ@2ROm!MeWIkp;mxZ_wEB91 zJHbywgYO58tP~kbQ81_#XeFJCDVG^f5fa6lRg8_Tks;6=pJ;8z=`Ehg*UR}L41O(I zRf#BaWIeBMGeGCc}W54)T6thbEH@UV)zLs$=n(C;O zipT6N9xA(@_M0kw$3?8?GwB(lLzLR8jxPh*?py8tI+YQGebFmdYn{&<9~-fURzkS* zpJacS67QQ!Go`$`VN1&y*Gf!PEjB}C_-)3>ic=ne;%WWiN z6-BogvjCrNL{ax(<@{xTVIhlSsK{+{kxWi(&C2ljxcpt~gNg?06&FY(KP{vHF`h|( zC+|Fi#qj-u>ypPtdEJpqdU{2^zRh*J^!K+tWbE8%jG|X-Lgx@r0sdql6>sKGHC8jP z6bYieJ6ccYMeY<+gWoc}B_i=d-AYwcNFC2)N^F8AE31V(TJKp#z$sOZhSm% zS_(tLt}nE&F#dx>pL%TXsS=e|{l%gAb8yMWVSaS26Ld384&be@1Tk`o4Mg%%ib@8z zSh9y`I*AGB<%fBjBgCGqu5?{I%?@6%yG|G2@8WH;~C( zT1rk7)$NoPbpnq-lF}PqcJqOwwtL^XIW-N=z4w0POw3HO@_^3kD=)%fMHVIR0X|>? zx4h{@LRCMbpj^s?Y+5P_b{D3 zJ=eF=Y59!zQ+xzBtQn_@J?Wt$uC9fZhO^eF(O!$`nuR!@U13n7! zr1Cfd?z11Z@T{Om#jQ6Qo2b5z>jV@zN-U5CTq~-l)8mO)oM6``q0csqIl z1^)BJ7nbs6tPIKTW7|W0X|1%Kn&$kdmeUjZf`?LnQQPXWlPfW2axv1f|D&5$yoZMKAnu1nymQm)0lQL?F%tPg)f9{#3T^2B#Gfc6*jx~`w?BY_4 zVTV$=1SdP-2;Zbv8*1%Z6;raLcRyYQ4!V?zm$3?x(US+;dao!dL1a zOLQAZIy4+ZTq6YR@y6S}!3&$f08B&<>JlDoI99$Li$RO9*k3R@w}AkDfxuoO7^XRR zD7oCUoNO(dbv;tORCLMfaJ+5TiX+F_Ohd1W(#AvI?Bg9L`L+_St`=@fc{Jd`p zXp+47mXMn2AGPQW17HF2;nGu6=ZA$QAB2RQo3A>&SGJDIn31*T9s8t0<@PRJou6xL zTidVWeWUy@hEyKJwcqWwZdFs5NO~W5dGH-n+9r8UvAXCy~hd@;QjL-jR-D}OZc74+mmsR2L4`= zzKYvuk7!mw645Ng&a{$Q2qAW-*gsIsJ_Fy1BoZpWCAZ*l61TA<)rq5z{JxOvuK-{h5DofPlOA9Bvyw>ls<~r~= z={stp(t47USUKA|eK3fkq*1%$^;)VXpjLhiY&vYk3JEc;*d7X)?Fvdw z_7%rr5{Cc+%L^XsDK+6hhN=LxwE*pT?pE<+`r==$+3Eq9+RhhX{wqpT=En^8zGdlm90?+W4)>K!? z0d)*1T`zYDdy|>=Es~sep6Y;>axFycVpF*9d-->_x^f@zFXN2N=cdpk&KZr{cDe4d z9E^{JF2>)N6)DpwbRGiE?&c0&GBPsZ1ndy%Y>z%LL~aPRwYB1HXnp$8F){w?R&5hH zsbv`%G4$dsD{FgUz#KC?b1yBQZGF*6BflB6zMPYFW_q2xuRn$SMz-+2jkjglj{oJ8 z|2Y7kGCO3XEULw2lCQo*qzw}fa)J47lE-G6*?JCa(XwOzKsTs1wiTkIl=MHEs`#hx zo#IiUDSJV+-tzdqYc`7=9ML>Q9L{mz10Fo%*($O4G{ev09Pams4BZbKiwA3 z|CyB#Jw032;AR(DXsQ0#J#QZFu2Oh5oWu!pvwq+0nyaWAMNL6rEcuN`$k3kt)oZf=Qz+jui}qnA*V)W}n3g$OEi&|%Hv zcaU;+z?*FjC=MuD^=q{z@^qeJ)o^n1w*6)l>d5!bp9K|j)Fg(78$i|es;q3lglD?k zX04_H9cNJXC$Z*qQP^(_qwZf=*`~+cXbE;;AN3gUs&vm45@EfRYPWw-J z`m|s`hPw#MVp?u?g!ktDA0$RK>`T{8@HMJMsH#u1_bM?-P*q^gITkSlf z;(w4Tz}yZnGO8t|-}@_=YNGhrm9;n&K)rd9U(Rb8lBFR_V@7mAxJ6A}%FJR@c=h{s z4<1KURtUOryWn#iI{2ef$3}pd+k^3eCq>>~-9Z_xfx}>rl8UzRc;=4ENbi*dmOcPe zR~U~<`}_Or_5air>7%<_e;F4Sx7?R8EgxgUFO?yM=bax8KlkAAP2DIXsi^H2eE*9- zIo}`X3Bm{3UbV)DuJZdIED9)tg>_=gGv!IWJS(z{$NC!bluh>`t##Y8<@l zR>D{tjX_AO-PCfK<06i1&Z?jEkQl@PL1T*ra#`w6b)52m(vyVDcNFoaKToTHP3Su} z_KNVvJ~WkaZWSrh_2ugKk}&i$s3cdoHahM_w%$YQ9DGyK(MQ26$BkM4E(FYN0qGZW zIi5nX#dd^t!K#1!G1W#s9mo04Y6E*f#}WX&D%o_C{}w}BG!W9A55Y3p7WBj2ex|o5 zQcAbi^;h$J7Q|%JYptFuGD^4AhV`+?^^MDWpBXu%J^4q&daC`0#S;UEdFPmuocPk- z!){J1E)VZxr;>I}RrUdttWbQ2(X!5^yI0 z@brTXv0%c#CxQ-^=U@q$u=dg=8G&7UtB;DS(V?P?`$Ly)lyjU9Fg66aeX$b1`71#Q zehUH5F`x+XNb$x55-$X>`kYOG`s-`eXh(c&17Wgg5K*KvVz~p?aQzHq;4%wNJ0R&Q z#Q(r@)EO;jfM4|8({N405yx#7?;TWK0v~Qqu|uWXl+0`Ru=akroMAQH-HnNpfuJMZ zY$~3C&r2ag z{y$gFhbO++8fP%(pXDQls)lu7^NU|EANK;={p)gq_}5W=3VfSS278-P0_gui!~gTc z&v!sGtj6?@7W*G4S)hp`I^mmtlK$=2uj!B@HY*zkL0X>BBp{VXr?MtW6FwiJ1iH?2 z&EG69DI^>5?aP`z+gt9!j@t8VQfj&0dnyEd;{Wp~CW64ZGZVb7tp49eAO^59S17=L zLhmea>iGP!r=2A6MO+Rm1-GA;gI&!x_QG?k8K}mha2tk6j6M0(*2ua~srR~lwa zdZVe;CdCMUx_Lg+6hO$FHm0NgkCIJQAQM!H>TRX*vh9nGhV8~hc}-1?4kpg{*z52N z4h)a-VnA7tQ%Dc~`&R+LM=~U-k7NjMHBJ5C=H;a|^GKF>v&7}Qn4R;lrw&Kqu;0Z7 zf!;Ijj#FX9SL{kEp=em{ztP(Y2XqAcCH*2FEXhT z57q&B@&bBIh!S~u7C&HNGOLvS>WD6Kdu=&OvLS~Cz7}16U@crsS?U#%%6fKnDK3!o zp%`uH6{kq6dq{;;CJLzK)8;ld;!?;6kx?@fwA`MHewrzNH#IOkAmVX{b8Idk5WPBO zXl#6KOT|eAF)~7Te1V|{&coogK60zB;!Niv;lwApIg@gn^< zI{Hf6u1Yt}JCB9jy{$qL|Jy{FXsE&5XfLgayn%dFL$N8t-3mUh9!j^_o|tfSE(&)t ztFjcjRCB+A$AwfR8sHrP3cnMLkq;JBQYr|FO6W+RCA{6{+?Vs0#kfRDMJum5A`z9H ztW?#|W$b74l#bD9sHNL0v!M)Wwe(3#N@%swQ#&LY{*sPj_-b4xn~2hn314W&&IZWs z7zp4c*5IVGU2)3n)^RzI?&WV=2Lk_3H|6* zSbS-l2YO?@A-d<>*BXjn|7%Xy_&UCvVr^m}nHxoC&!0e-x&PY0Z;E_?OFsdN;yrW) z-h7j;`8Gl-xo7$Xj!ETI(EEx`ED~ph%T2(xRnNv7RSp^9c_s+Um(ZytUp` z+3(|v@fu1hy3ULg?-^wk`;kTY1+tvu9jqn&i^hX%r(f3f_ap9KQynlRTD1yx@;y84 z4Gq4p6p3#lfz&cN@+1DQQ5zFD<&1r>!|3Vbiob5Miu^AtX1 zz29HBa64oanr&LqY(v4d1_d>Pm({;L{?j6uadmvBKWnrU!ev?FX}ft2%xbE~QjyGf zS^BOY6&>H#INkeY6rT%Lz_B5A!TQ=>P}}2@hg4Hk6unjJfz@53)2m2PqOof8jPu~# z2=A6^fwOcxfUBRU#TeFm=a1GGl~ooHvQje>{S1%^7*hb!kFmY7w&yOUcravv@VrO|BjBtS>oFIS{mi#*YGmz%_}BZueh3pBAjc&iJblx>CR)hE_O8nUQ}jHL6nbKUXRq_J%Qu)h=|OE3jv*A zRX#ZEfQHhQcM+yCX{o8ZMei{cM&6gM8i$tq?4AT2iXd(vq=*ds>Wj?ysQ>b0XmqH; z`08KGnSeX;KOYnm4d5X4Y#RVvBuGgB8&w`SdLzh5SPyl+UO15g)ivc3i9Z)rZBMnH zZ2fYCV61M5c<{q`+d##0=-xxUer_7LuDqQ4+caQvmrJL32e?9d+G#v!FIF_^xSy!td7S&f!(A3~Q zA)-=b2*uLfM^KJgXz%*aD4&3-DJ-UUo$^hZ(7_oNx$@SMLU>3;LnQuUnS+ue1Do{R zpS{)Y02$LY=%76QWF*K7X}qRi;V^(TdpRQlR_0c}F_b9_>oAmG{e0JG^h#Vjl+odu zTs#uCbVNbaTj(kHxwyTyH z!^3h{)LL)bLTFYOF0w7Cv{XdcmD82DX6f$ZuxBlhU*~|nOa*gR${2$t|&`60+eisIIVpo08&v5Pp6F;pPe={Lg%E=yA4#Qo>4koJG)VoL>m z{io;s(*tr$?pxoi(Flk?h5)yKkNB$wd7?LBS=pEW8wHWE)?`D{b{9{3HrEN zsmQNLz;#qj=L5`3_eD-nqE4teT&?^T_`+RcV{2pe0fsQk%vi;24v#w|cssDB%@R6j zM6-Bx4NG9LUeMpLr(4m)}StHAMND! zC#5Jc`L6sV7|u&m!d zppJh!y5Qal#K|L1J{Pl#Y}=c^U95YsW->_U+-e4v<_*NiiH@-|?b{qiN@LS4!o`@> z-yy0~*t88x%1|S6c6t=xc8r2bQ8_6LuN>OtGZ1xuPCFiiqH;#AN<2v(kBpcFezDzm zu+}%tx=G8JemtKEtRN76dD~m~^!37@qqTI+MnszGV=Wa(y=Qv{O7Uxy0n2eeQ$=Ro zN&UelKj?l+Yc*r?#6wNqu8O*5el+DYwV5BbCQ*EtGWQsv)o^<=L)6=erSK zz6ji#ecL-fA9@=%=^A~pGZE$Q!avM=fOc?`n2IX;BRi(5mBDg!%f}Z#?(EFtzsOd{B+<+cZ7;EAk5x$)cTo@?&T7u zZ`0zdq|j$-buS2W<%?YFU8)fkyy)rJsCK@NO0EkAI~Mh$d0@=X^Bn)|%(uDQCK39I z71zppe7v^Iqm0+8R)kNuUU+q`tu5l^l}@Uv*$^Xq1k*@L;BF_3gd3pK_0Rm#(G3M zx49=46H3k}n(^BDP*R!^jz9w8olpTKu{I~xb8R9#EDNOM?__qvVh^vT&y|O=xXjN` z3yyH_u(@7ouamC~-Muv|9%kt^z*YaPyxy%VX2kN|l(2RkLrzZJuV?Z8Bvr+rg%B=L zOkghq%sg+hXxqWeqCRPU^?UpbN1<;mFU7hiCoH|Vjv6yP-O~+)t~-qk8H$^{?&m%y zdrlX7ZCR zAT>30U~RAM8zbaPzmvntC|vY-2WYG1)%jn{E@u~sV%VX65fLS)d`iM+MBG-8Ps3)@ z685PE&z9~ML{!y_;@mZ^5?q~^$NJKlW;fHf_{}D<5r`P!j#}?=1FDp$J6m3oBYR)n zM==oFWlBF@Eu6U<5^@Eo(7%&R^=)f=h#V;iKXqp zo6;qIjTU6DuBs{@r>HqQ0lc}qT|#^Up1Gx#Aq~^!romU|2#GpLyJ4Aqi&w5ZpVe}L zYV=ch@i8w)6<%lahv+>_Uxa~oVF4;%s8?RGSo@C25IKF%U9$$Nt~(nS#zPe+6(gb3 zWwrDpxX0{pdxYCaue+bo<@8tXd6R;~$E#Q59Zg{pSI5WZ=y{4jyvrPZedod;lYjK8 zYM%RHSlL))xQ!uC8`~@X*WE*I?o*bR`2q4yR3C7OGhD-`CXeeIoEp|_F2Vi&j{Uc9 zdqTFNP`p+LI|&-YH=cB-7;M(Zaj)ihPh32|vKgH5WIlw;I>(+RPv{(aR|&&dib>-J zSQlFEz(`e(b$xn63t*i^}95rr7}te^b+N`$~UDle}GspYmI zC7H^jG~jx1a(Y$ay+k-yGTf!JyHDGr#f!{e`RQbRU}(7KDurEln1Xs+HN-f>eJpc$ zB%@CMJjwQYR3)XIvlfYPHY%5%rk7eG19)k3#9j8>FT9zUd>;HQ>=*5!O6FsA+TOzD z@;oKs{@u}sP*&aKfk>XyoBsS-Aq+8asm__*HM3{=z?(*Nz5TyvD?~?oBSdb%8#qJM5T)U0+@S*uG@UTU@-V7-jm`Fv#}pwj1=3mqSCb*SIcmu z%7*hheKPJX=d_4zv#;89YXjScE@;civw|-!e$CrCJ0lSzZ zLy&5Cf6MGjY&@)k1SE~DEeA0L>SFVb`Tx=O)n8d{-`5h7(%sTs(v5U?cL>s*(j@`{ z(%sz+(%mK9-Q8X9LB02TKYzgclLH6i;W=mTz4lsjt~nPl`G8{q zyQitu&H_8Yo>5pl9J`=H@D2-@%&)Zuu>Hq*7pg zdhC3&eB-@d(Y5B;Q>=QzJ8`2`5aP3u%qW|3|F0z7mpW5vtWrngW zlqZ(L_ucZkd;$H(YoOyQLkkwH4OKry)ZS#9Br3`)+{H`Sve1f)!2>GCu+MIkg|-C$f!jfvQC(nu?iwJv94$gzvC8rI3n# zTBWr-?fX+pl$WLI8hZ43{HLm}hV>Z6aq%1D+`6-Az>+(ht2mS45wynCbL<+V5Io zU?`JbUF|=x--MPpTcdR13+~B61b$Zc=qIjZ1{XpSPFbUtb8KCn0*pwziK6UjnNh@b zZ%@^@?;&JjCF!cXD?E%&$E<-w4bjd)ea>Yaag7n^#VgI2RW5GCAsF3h?2wFRDtbqg zn2=R5gNPG&Xo|Cw36q7GTwE-5v<@*U8iosZE%d>7ZSyJ}y=d|V5&f+d}-$oQ!#S zV_o$WI?917u3%F&qlHoWth2(j7Q4?`ECExkMLhd1e%+_*QE=07NdoC;&^DEND$;J( z`+{6LOWAt~g5a$$PJWes2s;XAr_8B8G$#0E8s7RO^mD;Yb99Y>J#_3hxxBNg74Xsc z^kG`rQ<`*ohg9D8nkJc=UJ1EuN5Rf;rwCu8XWk|uM+Y9G#kfM!5*pB$95wo)y6fsu zc+SZSTuH`|8dIy;uG`jTbc#@v=``lZY{iBrE|g%rx>TPTtR(iyWb?`{{W0Y~9wH($Vo!U#2K0stgZjMY_WJk&hBq z1yimVa{prq@AB_LAGDk!gHMnul)Jz$n`8lC#(>J-~0}t z^WH!RwR}^<(@@N_eu>yk%B)_jFgiR?IXy5{V5T_~r!xWZO!$D|SlI62J-B%7J$k=KTuvzrXENUjVMGc12}&ilE2HO^V`9E%hxFi%R&x-K$LcrZVD z^wl@y%d>(sLAW#aCoYY|3Cg$Bd|qBg&*ZYH>7Tlz>E#E_C}o!7OCEQ@P%$tzT3;Sg zk&SgP@)zq38zZY1)o=_wY)2?q`C1z|OzLpBvqv5z8i!_GZN%~`1@Qw}M;fo-4V4`R ze0_ZZrf!a+-;F84g<@hLo(nzA~F%GyE=YJ|Fh69mugnXDWSaW_Ie7#|wF}fvm0hD^T?UiPC|L0%IwWUrQLI!!p^StI*J>zItIrcyf|>ARcCDVIF-0&;8WY zikm%6SuwOOyv%G3H<2^f$pfgog@anch4H58L^L$0u1}tX=Z>{^Ahfj_;)}nL%p0JQ zTdxTFDi154X|xWfE^)=AK-CPYGaFcwIZ~uv^C*s5QqWkhXH(9eO|YKgVppw^oR*7X zoG9d5>jG1|BI~%k58|tuFQ$w1GLFg4t6_3dkkpF{3p3L)H8w!AILd^#$^M1R94ueU zc&s#Q^{p&s%Zck<%TFFHRxvV^>V+&y!wk>45w(EB0ZCVHM4eIrXl7+5X!6gS%YueU z6F`y*vF4$(%o~mC3gz+hNxJ_D5p_{eyup)^0|_bGd$zkcO#&SmVyk;AECStR*#Zp_4P`^naObp`+R@=Qg`JQS;c?IUa4UHTf-7?=e+) z9H6^j@3k_Ro-?0katDUYZV{-Ag|Z9HLdb)uw+vjq?^?)ZbMe=rr%hN`0WAke#Hiv-dZNPV`_yuodDTy5N=Dw0_-0zfZuR{ z1MF)Y>*>`pw@nfkpO#ijLc5!-=Twp9eN4C+lD{#sWXcFqLITAG6%EJDZc+p$LDSRI zcLD@h%)>@$n!$Uuvry(yc$WA}56&cRFl5;Zdnw_~jn z(sBR1n>c#$!N3l=MXObXW47wN9z*9(NooX8sql&utk;{^+zyz$_oqCK+UZ=m9t+8P}E+eZ1`n(cs`6t=H^ zf?h748OT3lz+_dNn1zc>Pjo}s#MUrvIpWLeQ%yKmno~iH#5k5Vy#XN!ew&Z|(yVtv z7ZX7Gr;r-%|EQx=`jL*>@WNm;r_0}EcI<=~mK<)bgl)7dU*7O^hEx(QJkS3YR?k{m zb!Pgeuei8aNdUcsLMp6t3;Tm7LZjGPsKsGT7mj3nBje4(@f{BYJnr|rRF7r7hM~mf zU7g#76?qLS8%>yh0dyaDveS)r?i4JV_^stLFYx`L{5yVJu!|^epEICy*ZN>TdYlTR}VJfUyu%<-diBjHti)SNx1_J3!h4m%rr?zfV#;2*?OZ&)wTN#a%;V5zc^@D?#op zB5tQkDEQ}w@D7^Kt363pjD86NsQzM8RdH&xRF|`y8HVTkAY%r}gx}h^ zzfAT%)FdUEK-L6eeoi@$Qd)loG#g)M*|HhEap8|xOE_v+<<0!JdwG{ugE?3zyF(ns zLzqQU(m;O5L?oxIoU<9Y|BfSb2ud>~&mfGWn7wyamd|}@bv}0}Uepx{54)I{?JxBJ z<)8vU*@acS^;RFOVFwtM-TG{)yHA(KG$co8izQKu3Tq@SOL%h#{>kV|KDH$yr-wj; zkhNvz6gB3_W5y{)$*X99np5AoGQx<#{QJQIpyy>@$lXni#ik}=b`%| z8>+wIf6Aa)Qv%uoE-LbiDMVlT){c0M zmc1T;`#E#ae%1QO8!CngwD<^a8%b3iN_0Ls=>&*q>te2~i?o)E9V004=qeCbQ*YIQ z-s+DYae%lwzJ%P@^!wN1#Fnw|MHF3g1Mc~H;*CiSgp>0TE%C)G$b}&>^>^d$UH|Nm zcoYz%;-NiLW+UK>J(v$r8T4_r%+(jOTPy1aA;ZUS=xv;i=DwqM{O6ScFG3F`DSMdDu3&hQ5?^s6VSf{ZI1@2p6K&}Ni~eYgwMnm!n> zplWw1LGt0gOZBsfL2-)K>UlB3Z4<O&^jq_^G&s=6-=CabZeYy>Yp=%nCMy=u|E=Kr?D4Ke>v25V&bF34Q${u12 z?4Mo8014XDlFk_D+K(&sJ{?=}Qc|SlYAEuNE$xkA&(@l?|`IQXW_y3RPB} zYT`}76V3>jzU}cs{<`p`EqH%HO^xbe&w8VV%lUMJYQlNg&USTn^M5<1ja+E?$jCJTPtkbF-e>V-yGQP)27VLpJ@z#IZ z1sGI8?_4>=q{W3+Km_MBo3!&drbi$XrgGGNoKbsH59YQt_LQWRPzUVqJ(sZdENhx# zYI_ck@zfV$7C5}iOIB`;&NYmiX8hHojm73Ca5t%@ zBdeD6piovB5792pON^s&C#M1Qt`*VbEhu2Iz>bF#s_1Zgd#it5ogm^?Qe4~x5PX)G zsSP&M$*$$jCN6_kj@qv)*~SbCVDS~K^dA-HmIg$`SKV9PWG^#>Mvg3SzVieT!!Z7gR{%Q5(49wA@-<+1j+8N+b<_I<~FBoyu(W5vh^U&L#>MTOX@Ns zDPbbY%B1&jn9~`G+uZWWVkzNyOGJ#kM${_XDZNxHV-OePcUgz~OHW1#1L}w#_4&2m zic%GN2koSgi-{c_h)%}dM!%gP#z(? zkQ8*UvCtmn1Vxiya*;Tmh8cL9lB4}lZRsq|Nh(^`L4w>g+0*zgtmdYD-q(dhb^7I` zu%QJn$e4}utv>OQfJ^4O1|7}SQ;&{hKT}b#)u)-taAYkgWO~9PnHLXmGx|kyN}pJd z;Mr-n$cJPWeByWl^`cAI?92!EoY{1t36dp2V``g^Io>@;eqf}xWQ%oq*CFJlE9@Jb z^XZsIcxn3+cQr#WxiFgZPy85Km=dj^l})ASMiET9a3xke{>_I3BOW?a4tf%b*UsUhBX zHw%)eym9Drcmo`>9T|Md83C7SRnOW?M7rp3GJc~n?eEnC3g=DvnY8JeW$IeTxk2ast=%>KMzF zhPSx;+z&lTIJiXgY#5(Mk_FUFDen<5p>$i#@juMN0j6kjN=i`IBtYXI^ceFo|Kk zRbi_ULxM_mBVYqj$R#W5nD0E=gHg&);8KIS=S0s0u5IUQ%4LR}h$1X%4dt4BV@ANY z{_+X_-U&cfGcbhzO-dBXfee%ut;nT>ajbV$HiHd-HBwCXKFr8S=;_ZRsZFR9@F>Yh z=;WE*%iS36qPl;~u+`lr&q(A&wSrIh)~^97gXPLdE5jGY;);<@#Q3c=?;q z!a2X4^$Gw9*U5I?)7%hb2<{CZD$Z)f`(`iK?M9Dgl((3MdBzJF(ly}b3}yH><=y&i zJ2S`0N1uo<==6Q>>GAy}J+|v_nRs!Op?H9{$Q)CeYC}iOO1++8X^UD~$G(B-gld}~ zNlInf{J0j^3C$KL^#O4#kt?n2JW5)l?28q^cH$&7z*=>Y(z!qs?{#`=Vg^n~Cvf5c z{Ix)C1tZ|K1Viv*pAae7-_sMzokwMR;(>s9HK1{J202?}*qEF2aGX%aq5FK6M>35t zrd1?6lEUN1rt6i^Rl3Or znzyoOFhWfkoF4hRuXwrH;m*0t4#Q(=*u-W88h>V8pwZKEC=!W=C3Jiy)ZC6KIlmXR z+pXpS%-Z~Wwd(st=j3%)*NjTJyQeK)?0ae3DmlV=H_qld^E{BiRKmrM>zPaJz?|j*51-)4w_G|4NqMSF6P*=*sWy}I z(|K`&u}8^=GnH#oi+9scPcBJ9l^7mGXK~dOn}EAzt6%AsI?SZR;^Hsdb8`yRxam!? z^-(=d=aj;c*y&yCgW%SOcOtsyT?3_5z5h!?dfIPKL|+v`+W(~zFEg4L<@uL#3(CmD z2!s_BKvTWWV!k9jH+fL=YF)!yHJPSH7IU+cpz3;@Sr=>6<1X{ID3wx+(S12IKRE?z{2_Ig*&JQ-{ zqMQ<0^YJDc9Ohw~9vIu9kl&{;JI;JOo{a6v17R&CyRo+RRn6^B5f}cGMI(Zii1C9L zsrXZB1DVnCN$G$5)9w!`h(Ohd4M7F>hhJ0Lt~84T?N?E0HtSt03iL@-o`zIz-c zxQr!6-@>=PrhR|YToy`6}$p@3ECfIb=^vq!Cjuov*ycsvX5WhS044K${Km*=h1D(&}A})abe(UoQWFfe3I5smf z+7|K_G@GoCcUN|jIHsuSg%4rMVVO$Y!>1Tl=vX6D>`QHtwmk>b-4Ku=RhQN*cbt*j ziIWB~4QF}-Q8BvO1uYh5)F-Ge-WLw?Q19KMpU`>1F0=)u_u~YEbJ=f+nj40)??aW% z!mn6aA)g)qUZ%qOgg)N+;N;TUw3J>~Mo{G5=rSDl8*!jl=b9iS3nZ)r@JqW4s8`H* z%yu0drL&U37oS;BBTb5N6t}I5Q=o~ECILgFiE)m`2&&4CkKy#89jG8$bFr`!)glW z1**cuE(2&2=(*@q8bv3x8Br{a;H=Z+f$vK5nsizt^qfnZ5R+Ya;v$7E=ssH-l{7Es zj$Awpue8n0VMXOF%UMrMMoSJf^E5getfVeMTv=Ei{fLNwm!;nbdVs^;MI#|6r6SGX z*%y$#vSM>F9eBh!8XBL-U3()`~1zN%^;RI;RHqc<^ZfGn8>tM|6akff3u70lXn#7L zSGgF&&#$h`yxAfJ&|#`9Em4|04Idpl+o-IaQni+ zGvjN@Wa72`gU1jTwgrcXtQL8ovu>Sc_yHhZ9<`Fga@5If2fKN`mD`FSZPgl#^~Kjr zxlbByjn8^0cy>4zG-@hmOG-$k3+>3qJ8M4mPfyve&XA|M${?jYKdyp40@uwrB{Wxv z3NZ(VI8x4Y)iIObeh9voNPo`NY!-sA^V3Fy`{AQ& zmRLM_OPo8Zm6xNK8t$0U6RAUE$5kmKH zy@JO`5QAPLT*!fvWq_n!ZEM$X!1ess| zTpr7-UoxF<-ev;d5r6ZrI-tIFn&qhq@tw%F*mpW6lv$!}Sy35-s=!o;+>(Xhh;e@X zaY6b;(8h*BBn;b9;RYA|wtq)=^@vTUy{N27%yR#e7#o|j#4Imf6qzi`{HUX0kN#!+ zncB@=-tFOpm%M?K_4)J%)MF0)htCJkAx0<70SIx;A&EteDx930`T&m+&+3sY^CF$n zDr4BdetMv@wR%2fKCNig-g2+}FW~c9ir@+GyD??MCwRY`X9leaOx77E(GJ`iM4v$$ ztFg^02TP&9peze+zp#?<>Jg0?4g+7IAkUoE`ekb)GT2q^^W1M}y5p za_aqRc@2Bvfkfl}+x$b8Elb--X#r$6-YYqdT8$fAW0$W@#cJ`e<_4{nj09I5vyGC% z9I3@PdS#{N`v(QHnCy)|-}|47vP?-xNVIW1xVk;G4K6HXZ@ap>0%Aa)RxkdnD{5+L z+dYF1#lEslVghIb+|zDm__fOC^HCQsqvw6m&vRxysW~^J+}6>$bhooH2Hs zL%)!h?OM*fa{h#i$RW4n5v7ZVi~FnW#ha|g-rgRJAQ$rl8*_Q$SBPw*rQ~+mQutp1 z$sc5Y5lRf6+TM-m!@uzOe}dVcYS8{QqSX?-37Kafj;)|YokdxB(?&gBd?)WbsbnUKchK|nxHsoD?U#Ou3n(LP=N@;U96z0T(ZK~) zvrfvYHetB&qO82w!GA`sY)>!}eAH%ilwv0fJsd-eqc;C7SgVc)+5~7tW?S&&mK|iW zTUx9p>7sN?JO~F&{(W5jJdz(tQK1Aanh2VjT$eZu@209l3mFiYCDC$cXq~-q@3sk_v=E!NKN8mpo^dXcoCOY;=(+q8E@}sHZZZ~n)sVgp=R!t zFzu05gbih&6X?_&aY0rt`NnVg+fXF%os93)J}LbB6<(L*9$W_Z2@SX|<5_MHsv8Zp z&+k*4A@nYKMr{xKfKD{e5KokPD+r(Zu=Z8IqlriJISQ%0!ngsf9k<2tRhh!v%ZZr% z=xCMo=27_fM3X4=&#pukN|7-+)I7TCA;2H76a}){TEhj7FWcN|`}9sE+AD2H9avKpc$T?UgmZ}2E1+1^l)Ys!j;JLCG{=Alao1SbCYCBuPpC^(v)Ra z$9{?8DQdtaAF!8G&K`TTr} zz)Uz@{eLB9QbxwKE2~+ z=k8x#*$Pz8&ytynZ-cZJud!~#BAXp7b>^+4%5MTfa$wA1*7Zc!m9c`fc#2a_9otC0 zI8Ivr>Y_&fL6&1NVR}`1BeuAKTdJ7rfutP~()$5ngBep@Ks z5s)KDmg06EM>+_n7iKpAy~Ok}u+KYuL0uHuNQJ@v<*mkeod~3qKLs*V>tblt77e-3 zzEs(jFttsEI3RcRd_M9m3V>m3Vbaqsb1*J;d@^dq70+~6wt|8!ynrcg&0YMfVzvZM zzv;y8yPdx|V!`(B95Gf()6SsAKehUgGtDdiH6O));^`ORd52tU^^ENIHB7`&8E7(j zfgo6UbGgTt&677yW@r?lXQ$g!_H%($3%XyDoUkvl(q3~9nj9xM5)EXBE-uxjFNclD zBKZtyEAdMxI1PI9v)IwqQBr0|{Qhd7U%Ne`3`Zfrpg@FtLNLPZx^6SQpGtB#67?Ok zCbW-c-HXZjxpiI&u~5}JlRTNSYqa58;=`u*t)!7it%5BY?KANV(>24v=Z)Z2*LNZW zW>M1X6J9XLrz%$OmVq(nALz9!BGrqjo4i}y;Je*-7=A{`sSe$Zm}sGw?K7zs&cq2Z zcu6*@pcJ_j4<-a)&adcV)#hh|a@^&dUf7{q7v1CgNB_>POOXM-;^K+o)>K;kL90kj z<{xkkAXt7~K>mkhAr0q;7W7ODPE;rFroEaTVU};O0~)nD z_Q|Y;G}jm!X6y|RB{C=YnnX;R3h?a@LS9gNHij3~vV5obaoCE_@I;rT9FwhVPJ7++ z@YN(cWKcr~GXjTMu7zO8t!Y_thQIHh9PJ%azzA3Oux;Yyz~g+%Fnb>Wj?JV?%|%06 zAz|r0y!^@Bv{_W5YN|VNCO#PVR&DO!&|=rbRN4Av|LgVUUd^C==6$8Ij(R#(QNDn> zE1J&pEk;-Jpxk{;_6~!Gmh2*nGvcA;7O{F!TdWL##qQdHbH215Y9B}R`ThgV{-)5r zBmIm_@u5w64t-pt#^ln6Ad_i^j)_6LeNJ-h>mOmB&Q^>Gt-YuxQ<-AA*eo>29%oDj z&()QfsE|CsG}#Cn+E=hCCHFY^d{Br4v@cF_fr!NI6o$+{*5v2HKuR*%k_XwDRTOgg zRT4~-z}OGvGin{Et@q)g|EQa{Hkw1_p0!m`(8zh``8Z_6zOb;q_t3L;7f7Zzxyo`Yw4ORv6`pF+>=cz)`ZxvTDRGnzc-e5r?*%zQ=;0o%P|xTS?5PI3nE3X z76#X;4kD{=a(^}Es(q9uZK0CtSUabYIMsoIj~mM3)|C;7UphhdaW8xsZK~>`5Ef_f zO0uWGx7o|_7i2YBjGex++1SzZsSxx#+w^5jJpL;GZFPlj*$=Fjeyw)z4hqg@YB37s zPoT>uey#c*#D9?Nr5pwIyZ^g2eN^86NJ#Y^A2)cn$0tLqVp|8mSP z>>O;;P^JL|HRc%m+E1|$-#fT_f1rn^c(GJ)1@6?uoymN&Fp8#GR^pPa&)ZfQDKZPu zSQHOh++l|x^tN;KP_Y5wi^;}1+J>(4RNI}0eCSI$Xj~7u&13-4MJF>L4j_cDx?-5m zrG+Uep;_BD2=pcD^oSIJgBQ50cOc2z3IYJ&(;QjgDF9sh`eCMEBI`r=Td_!o3m5ng zA?ARwtCDgK5rYTd|Qt=MWjs$BM?mZe%>N6N#51(EZK76f9-B$qI5c#=~ zZ*S&V*j@C}jJx_3t=jM|PA0XIzH~e#2lE86t*9HDp%jpVW0SPut60#L9z$HIRU1%K z^c|i1Dt9RZcf1jYG;*;STt3Ld;C=^%p9y)#btRNUqSeP2JlaOkYyS`3I`zn*MDtS& zRJS6xrmkU@nL_7_svgFIu9@s(+yt_X!UpaGD#b%w;mR#p2j=5sTb=iJhA$PLP!)Ko zKSSaSV=5~`wXe(Pen;- zRSx!Ces*z9dwYVBMoh>H4-8?-&%{f8rSusHK-=31|A_W@?6I-1ng}f?Xj!(9N7DEf zF29Zo5T4eNj;;e{qsZ7A;IGQ+qHKSAjU2~3+s}r(U7*MK+Apw(%Uf2(%?Q)zUBva3 zYhKPZA8n!5)aL_a7o6gm-6 zwp1@K%pkeUjW4Ug;||jPXesPBCE0&bG|V~19CjG5%#U#LiO3fHJ+Bp1frf#T2xSoHZjo0@)dAcAUf81SNn3x za(`L0z;e8pVA5S>)|MWzstw-g*DT!#CL?(VT{YpfYBWlSX><^}IB%CsIjZWkk|gQ- zqlH7UG>>cI#vsCt?|b=K*Vpw=hv_yAZYjjr!_F~cgsyyA!*MLB$cc>_EUD&_UhYQ+ zGdzK>1@d;zQ4ezX$9S>+33aF7oXwNRFG*2W`NZV$D{|5ParT*vsrz>0*N$(YzsYe- zzz5FhMFctDDlQO8RC{J}Lv|iKJ?=h zS-*fl!N6EKa02HVNj5cBwU29JW=8gGx3ZS?v5Ev3asp2x;PP<$I{K!9am>ciUJx*b zOS*iXnDu9Gx+4mWiAO}BP80=*94IKL;yQI5E4q1tYo^&nvh5SG&OZ0c@?n zfc$*o!04NgI(~kB$Mz#bef)qDIyfYRLRXQ}HB0B$5aD}<{B{;{QnFP*1O-#Hx+=G& zJn=ImS&PjI`*3$>ZL*(2OGa8n#Yos9@Erj#5m3}QLYcMY`!Y$#;r~%Slj$RaeNi1- zR<`fHGPVahPi~MLNZQN1Pg}m2t@@m*NTG9sKfUYC7ggR3xe(U2hxy3}Gj`5|Tmy}r z@Ns!HK`q$>mHra}IekIHFLs%9-lTKIJy;b<@#qlZu|r~s%#pyd7#{XORrnHODr%fK zQ_(gXbMj%RJnHj`1V{PC7G7pAb_=E0*~$mp=enop57&-< zzNfz)k&ZYKuzvUP|4M+ud^Va*Fs8SEjYWdc%)-U%L3UwCj;RswDL>yWmp~7RFNeOe zL7TfF!f{!0(gc@Oy9=(*>6hAlLf?rh#1_`6g3JF9KD*yZsm#q|5L7)V5C*q@h;tIn zbW{_U*Oto(s7`N_%B`^6GCIJt^htKa-H8vVC7FKjXRfU+=?m(N95UH&Osq|*%e-a%78VSD_CC1O7Lxr$Yui;#w=Ps7dga7m=~jSCW}@S@}504Y(Dys{~zY zh+4~`HZHG&9FnElVPQdmh=~d2@`K*nrY1+hhE%mnhOcl0(CAHUmXBq|-`m>sni>zY zAcRR3UCa9}wh!p3GX_{$YnjuqVN^@IW^GYUdlpV`9I9+PRbPAMqB*tFg!A1_+}^+* zdm%=fkEcI}jPhlDv%8^jc_YhLA%~RxGZHYtXLY{-qoFN>PNU|1egha*&0N~9@LaI$ z4Dvlk`!^FNn)4QvmiAP7H3a}Y!i4nn;R5U2K+&2td1o~^YGZGmP@c{dkEK9xgz^$Y>ROEO>$ zn=C>Yy7|%AG!%b&hCA|EPsqDrG>81Quar*IKpCmYq*yOe)$kfeo4)jR<1IGz>-c2&#=6hRbIE_GfxlMWA z`2XnPcr)v*L$n#*- zDkZ`zo=<4)5@*#7iG7-lt!Z`E-GPJ4?V)VLijiZGf&S}7^v|Kn)NxUwQS>n@ncCX+ zsYywG7;)TwI6EVq+5Hngq?2UI<#K3MY`28Nc|sxa-N8?q?xHdgO*%lVH<8bk>}d0>_eK8btiX8vjpSIC z2L^RKk{34a|4_Y_;&i%XFdj|~=~uLt+g?2(@Xje~%J{~gkbnhoaejHO&_#6xhafB4 z%@rh!0ZaojZvJv3?~emdZj8g^#BDs%fVATAz&9Vn00Bk>iEVDI@Jg7;xP~8ASlqR) zt}9@)^b;Y67g!&<)_g&8b9}qD*DcAstmM4Z{6-UX%+jdYcPe3`f~4mO&fcm?y;U>C z{Q8GoVBm+m;9xs&1x!6bbkU$A9`0rbC%aE4s_>?${~7ts|C#JHjraWW!TB|<=f@yD zEkYvv)(iy^l|PA%E{?BgRw1#pqQ~WIL3Bc{_+3y1V98!5289aRP1cvZ(r_*z^I*Z< zr3x@!ia0w>5*ZutGjfMi(@UY@I~Uq(q&CMi=)*%}GHL56bLswvrlaAVwH+N_h^VO* z8-KQ6L=cM_t}HK!8~|2a!1$$kw!a#((G*6+;!IiGnbN{!`%(%Iq+olY6n0P4*47LB zP&K1paz(4>Tg;!bb$hD!s%$n-tu>s}FPnGbQdSYg(YG!`cNXH+a#nhx584F-4R1=* z+VunLUXEo*KmAfu%cS%W$9sL;-{>WPHU4c-?bG`EKZFcSu6ZCqgiiRg7%Ds6hBj4b zFq1@46{Y9qR297RLCDpg*R)&-gT!+Baz3>-9jFKz7sQ1Il+|2Rk;r+{)Skd7oO<|V z+!~2OPthyK#+T^D$gIOH{L+_}#MV+$^0(ykEOSw^6g?qIA zwVE-Y4Y;C&p!4ees&r2CRQp%^*c07jC@>X9;>WHj@8fu zj}JY^;bcdZ4f3c00-@ldWt@)5X#{$LmST-5khL;T!4O>{Xl@Qj42@KL(ME$h8Om^Y zR5;KdSNwkNj4Yg8dCeH^4VGP4zP8f+vnL%mL7UdTs<9EuQ5%PW(~V^tJ4O+FRL@1+ zjRs$*fiH6T=b~@j1LU2k;SFF$|R zH{AH5fb5iN&KRH*{1592tVVj(E09&i%aP!$O4zo*SF&FmA`Xy%qyB$M!1muH;7>Q~ z9d-E?S;>;Yw^7k9A1S#+@nH=F+Hj%2m)~@$&-0wVa&}TdV{yhQU9=cC?|~*~;pl~6 z;jGwMKq>WpkW(?zX|?sPUo1CSxmO%n_f8Hh7Hp$~yrg-0}G=ACSVi9S9C7`|BAG*xnCqc&pMD0gV{YqASX=L3 z%~s41^YI~=^J$h01q#=^6h925yAJi6SO7)&fK^a3Rd8ZIlNCOfsS&78mMA+xFxi=vrg(Gy+|N3x5{DoHsp zf&LwH70SS*M#$&NT}mN54*$+Tg#F2_5K(mAun-a`k9yA%JC`r68yo}B-RnaIvr&Dy z;D>-j+uT^T6o~9=SqLkN{K`nU@!lla+aQ-x0OvU3 z<)Ar@8f|S`Ac1MV9|&2*+Ep)mvPSa&G#uW+23U^HND*Wa%WD0cz zm2Z7^+1(zeTdasYQ*`3$`mjp*g^tO1SRSLl=x?|I0S+%G-m4mlb7|A40}dsf0rXk& z-rC`t$rM9jSkvG!3WCCNY{_tfkbXggOVYLji6wB@O@6#_V@M&Sr-qa?_b-rI=`U@U z30>UOQr{VXMdZ&^^Dd;zsE;s9B)UFUkcTHTXA;X#PKxqtYSQx4Qc3JLORC8gnTk9M2Pg>gAaMX3>*_D;ZxRoZtcj=RNh1mO* z+1cPt6X|Tjfz8A79p~rg080Vt_2LcDxbx)@t~bLwd1i26ps@Wubcu$A7Qw@C=|6gQ zKt=uAlA;c)n--)>5qfuYv{bNg|h(cPye zrrQE`X(m6-WZ$zN=GMbC$-hD9*F}T}xq~g|n9L6ScQgE=123ioX@F8W@@-Ij7x{$} ziSMcW%eK^@H1DbiOZJ3Z5st$B!Z#SJ^YgCMX-+wQHI+vK87V+A9^`;AaHumivh5<}FQ3mU+pOi@zO zu@~$P3->6t?wEeyEY88NzMtG^f8^7b=Qx2dZZ z*2TftS}w~`FVB?j6kTxLs}3om@y`li0Ypg=BKBMgsU_7o`a9|;S`M5HXGDM_X9b#T zUpk|2Fwe0FlQ{t2h%sWY7x!6z=?)EIMADW|4 zLM6@zDoH>7M?dr{);+b47t|cRxHzS}g#lzLzn$!b^0t8jS{H+C%#oJ$R<;XhnjVh7 z7#6G1WUcYn*Nhuq9*w$Hjl@_$TRIlr>Hresy&$3IjY^fO7c zsix-n7(RIlc=efj$e_K3#u1V9MPShX5XtMsZaIYN#D9}F}Tq#(h zP~Zed+#f+>+`791$gYibrgW~bgI5H$^>BlPB5IEZICL)tH$sx$Ff1o=};e6YcNEO6kZJI4tg?1_K0^V=UJXZok?eb*MXE4UohvJyotHcJXu{ z)MjF;`f{`sn?Jx%Pu6+XmZF;FKP<7Hfd8yL1qB3ujJ|fpHMwUNWD$XL;iLt$`?VbI z8qDd;e`IMsti->rUX-nw9L6jDdv5sMkjpD-x}*2%-tS1D+u2vP>8LKZfUu*uN%iY* z?JC7dHSz3BE*p|6Jd@Ybc2nL~%*rjUxhqmClXCjTT;pq8x0$)v2CldZF9%wT`A5v@4esmvr6}xd#*Xh7>}L}Zu;e% z|7~0AUwD?6e^gdeqZYzamW)&L^3P$qmR93&e^>akp>MQTMPou=Ym)7+<_AZ@!k5bZH>One!({NCA6{FI09xFi&Pba(P5)^Q z+m`&fwgNO%|F`((f{59L46`@zLV_#Fw;}iPn(BUYM^L%c}z9-8KTjwaSOY>pg#W1QzOgx~+tHHy+X6XSL80dVe zOO`*t2FJkItc`Z{JXO2!_Vvwc=EeIoJ%!ES73o!hN7rv8*Oou^^Yc}lK2;V^v`Iec zB^)S7nZE&15ONuYt7xQ4B6?@h)`M>SlOY{vw@{qy?+s@t0e%Ww#$Y6>#haFh@*klO zddjzFp$`=7=WMO)1!9FAF75Yzhy=c>bKSQqB`w-Vhp9NG*YvbVygs%cvuzPtnn_p)5vDKle} zroMdqgBTfi;j>982_br>+ERp;J%HijGT)eUzoMW?y_7dOJ$sWtk9 z_16m^dsGeA+Oax=J7)=?H1zrE`-&jCvu;W>)p9q0U8a3LoYS2Q3{o%ER^Sua+^@J? zkrTaX%zyKp&&?*v`p?R^0k}mKr`)a#j4cj0?8)}(>Z04dAT&<$Qy{hT|NaTGd=zyg{TLro8@pF{9908!osJ6HRV;XK~l5^Sz;NXn%a=R4$ zy9o0o3Q8h?RvsVIk@HX*04O&;@bQg$S8C;m2p}bOKeSO6F5N5dS)m#oa!I?>a-J4YKZE$I(WMWr0-T!JoDQ;U*Ge{$YYs*(hC;js z&xZJzp&=@OtwTXk=SpGfdqNWj?~L@aI+6I_=SL+cK;trX%O1-_-eH93*5HB!JX7om zjfdLr&VxHGpfBIDQKJFo4}-hBb1-00uq5A@!2J__{vUtDv&%g|4&<>Tk&Wa-{*x`h zEH{~rHy26IJ~k4%LE1g;MNHEW2+#tdOT&n30eMn3^2>pH(6SF12~_ujYW3US0_bDy z*T;^$*~HV`nZv~iCu!5y<(-}Pu8VOdX?m*ZY-$b)ZIf7? z_=$&Dm|55B%j8DstiRVuE&jNXs6c9!_kYot>XN`;pnN@Y=)V3lQFPfksXK&UPxN1 zi};-B?ysALmUKk6EU0I@l$+6DySSwy3Q)0V`J*a-w}+UDUiagZVJ?wlaPxosS5)*| zP5FxhiBn)XA&uWLa|n788sVj7C=i|o6lEHq7l@CukEFfLmJP^2of1Pl%7-O5Ddzz9 z*Yuq@kL;0}E%w0wqbY)S%qcuFe3wbF997*E@j5gVvNs`P6c(ua=J|4_sB4X=G&ok( z6-^bLSv=M#)Ge&KKO9i3jSz^*k2#y{a3PW};C}4o<~KQXZSIp|G-^`H3GOFJ3l(34 zWLiVTVt+YxzFJ2c(gBtuo-E07x#uCp>Trp$~ z2#H@?yy9yA`qPv3q2&7d<-uH;hMfJsa8K?t+*4<}oAEIf80b*x*?hN`kYM2D>o{J5 zrVa_xWyP~S?uuB|YZKz(NmeQj7Ms4!=$IXQqjjqhPE8_;_02$*BCzX11tL&U4LqBI z_sR*b?2LT0XIWK=V!L|zT54=p*QWJz@_v!0oLzAh-JvaF$I&jc#G2iUz;k@`@|o|X z{)cd7IgB5M001@laE`Uo?1s8%eHcufW3DFVSi;`@yzzjri#sZHkoKR000Lps24q zNdjafw1`@u!oO-IjEhpJk^`{+FK`AZZ*qrqCu5IVy3nM!o<~YlS2dMZ2ERn--A72gAxufoLKKY=wd8EmCjOt0P0|82HY!=Ny?d{-= zr*rcOcT0jxO0zE1fGaD$`)3qqA75fXytq8>I^|mK6&B-oS%<{{8oc>Y0IP6Y$RUEg z)`4!5u{^6&jh`)Vrih1WPGqL0g}vbp#D6oINSgKbq%?m={!^HpJuA(e*rDTrOrcl^ zQA#Co<30hntX=8`2>brjuVE_m@C0H_&!JRpfHjlSBsbm|BIW`OH&mw*CJTJZ=0DJS|q9n9QN; zzP&vMDOo%nHJz~@fI!cf485juW4}?!k{iO@k00u?o&R_V-u>|s{5CzwRJ(rVKp4S$ zRT;{6v-D(13V4pE&>qRpe9FK=HHuSkv$;C{%Elhea$@du>$W?6^$RDmtMktxKWsVz z>v~DUNT#Ym^Q#4V9xXk$4VK_*pt;p>ZZbd|Mdt}vFGV=SFbIa5%p;{Q#+4Q>V1psX zuSzp9YQ-c+vWbGqI@ZJ~eTDKs+(xmeh)nUkm*-|dQK_i1j-||EPl{0`#J!m!w2FB+ zNZITv-H{jtM@$zNFq_@1txokn3;a3y+~HF_Z;I2&>^j;U0OP=Kni^kZAG)ckdYo|* zy&v6%b}Rp*jbh0`chRwOFYx1qntUZGNTAdX@(XX2)cE0q=d_3ocU8a(`1?u3-~KQd z)_hYYsxj5zpoNZwkw>TYU`Jx+*LG9b`D-NeyMG7lBRV_!)Kh#0_+V^5fm6ms8X4rs z)#`MI1{rWOsWsC~i^C}IZSt&{fChwNH*~tb&`{n?6c8!0gZw7{l|;2I$z@{$il||+ z42WYDW+lyB63yYP&p#VYl+{#BN^0`X?%mIrqQ!>)D58KgqD@W1@cNMvXKKx+Z=wKY zi&*G^%Vir(OCi4UgnTpmN)wh;-urw+jUP+~eZp?KDy_e!cuhA>fu?{O^Rt39dY4zB zGBCCdY_>o)p=Rb%-z zv$MZ<_f;Ohm%F8UyJ~XQeW4vrg=jS}Ae@sV?NnOR5-IdE+Wm**9jPVzj(zXyg!{6l z%C8zLZ4mj{grrg7qYUAQJIuz`miGMC1vaxIg;%c$w>V6tBDi84!7Q8+6Q^56=HlK= zp`k_F<>$tJLh`U}>0aocXeLyo5!(yOVwAi0Tlc{rBY>H=+PQ_B!nAqG_9`-MS}_BS zfydd%D9_$1dD}SB4$)(Z31|P!iFBqBE1{?dg5ETZ^q{+IcH}@ZM^|^qt4uuDrjz~z z1?EzV@G>&lDKJ<=+aGs`Fx;_!!h?&vo;$iVvj`Cw&oI6;U=E2hT_nhzGlb3RYTKhy zTUaT9y7NULiZ8%npuw~KvJynU>7^^TpL@mp&7P+!y)|pe0#s6x?MIvnQ6I1}Z`e~t zjjvL0ih6NBta>LZo(kyM8X}Toe1UMdNP|A*{Z>hyXo^L3kpND!TaNDhooGl12&(Bu zVghp3>FSvo!%f+uOt%u2;W!%2fcAFY`|ELMOHS%Z`w>a+`wHs6HWAO5(iAVZwQ^Og z1Me0g1nUd1B~G_-zf_&0m4HO^=Bk&4%CR$3upt#!iq-1N>e@Rh=T=ir`f(h^nP&Kv z8h3$fG$5kRXsnf*cKPJ;ZcS!2WkSEk^!zvT-!$)X%h_#7(I84WfUKUxY-LLcSob2hzx{u`ZC+J8GudFZ5L@J}S74<2XdYMCo zQHvF~$aHzSCk3JlF4$+L@U{(?=yH7Z)O6r9#kd05&>VCxgX5-ixvc@tIslL0+0fpH22|hp za@p-_So&7$_>jG`o1eOe?M$Fwf*?7XY~qyjQHT|CPkie|YYUbkoL?k#~e4 z!tgo2hMZGt5@%(R&NSHsduea%ysxd(f@NB5ubrXTT=H~lp)8qu@>yU;=4^JK698hP zR3SY*oGv}1e4$FBEGuZp1>>WV>qs%L5!y40>vc3;&jf~%ajAwn=U=1rjgI%hE<=WN z*05M9$E8kuHmUDwLvkIE;_|K;Cti_gAPB3zGPZp>YrI`&ht-Dv1V}89E*d)NqC3kz zswzRfQ$){9%qEkUbt&CS2*1Q0w0i7MNJYlR{!IU&zU*Y?)9(Hz*BSuFc4Z)8Q8c`; z=5TR=4tetl5zRdQ$M`|IzX4V6K%9FucG668Xj5^D^Ovw*qIgMvJ9Pv+PSg&+@b*)E zt+jnRu1rfVsdIw&KhrMPD^hrgU`>}xt_4|YmxAe9iUTxqh$V@2BV(QVje;m?($IL&kbO0y=^lP(!FEpcaK+E#tu#&WB%gbB(D$CHj=68LMbi%_ z9Xcj5^3(D5lV{^IQ}Y&j7GEMFI#Z;Q86;{taG?E?N$IFDx9aIjm$$x$_XRXH&`0z2 zmE&I;YshIy2_<;}8c0?d_k2H9C#O18T>~AXz_hfX3&w5B27b66z4fwz!Ni_kAO{?} zt4rXxXdC{;qrw|3oR>IiYS%Y6ILQuWMoycd)iJ!kZ}(@I)CtCvT{?{bZgs{HQ^{C@^}>(Bmh%ES zDKEAkg4l7w&TMO4ZnYG9g*w*=_v`9eqT zFGypK-~wp##LKTD zy5lDuE;2GQVInn)!Jd4AI@&vi;z_6E(Xr^n_t&16U;>JO^UbdnNb^QPMk+wO^y|0& z&(wKj4%R0O#=EL2RAiinniim4qq91IV95=p=NJLkj$@>QpqZTtQNuLB%)F*)8OeO3 z^l$o3Fm!`nC0Tf03}MF=l?=-6@=lxwgETQNSkysQwe&BGx2CX7*Adx1!F%5t^Em5M zN=h#aOk!Xgg2K4pWO5epGi3CgS{1Wnz4^WlWr78vG8cuUv52Xrk_+swE#g0y6OfAz zbW8gWv6KJFQcIged#_Nq<_k=Y(#y-i-NBMyO>Ii)pOkG!e6xpbeoRIERCNK3zdLNlR zxq$ZiZpIcU?%AkuHz#9C$z%!&>*0oLFWb(F37@Ui990-o#Myj4>9dGFh{DYma$}fR zpLM{cjy_wfWtBr@jybf?ihIi~q3NiURO(m4|K<+EcruCu%nio-t=@_MuKp;HLxDj7 zGr_LJG8kXEj7_g9y8RSl;yt@mVNiU ze++woi_^HrqL}8{iSX~+4NB&g(FxVo7a;VBi$p8ioF*{p{qo)YXgRGcAH^Uj7;c^o zD)}Ors^2TlmlogdP)5z%!rZeNFiDHMsIqQTS|aYf%j@Ra`@*KRus`y8IpWyv2R)iM zl5gwNr_EB5|76j9gGhpM|ht6o>V3(?@v4?hn|)cwZGoyDR7B zTX3rP#-)EQB#-FN(kqLTMKx76Mao%I_~!e0Nq%u(3Iv36DfmC) zc?-AR7BNGzRfRPx7WdWWq4(ve@+d$eqUWq~=De%Yjd7OxC-8Mbh?~7|FO&G{KQHoI z2vr6!oQ8yZQQ&$MUAt)aay>09_o}gY5gD}>Q#U{NW=q?6GT3-y1K$cx&>ZN(hgkeW zeMLmUFB)*Y-;d`tpdK0+Uv-!oLlgvK2vkX|^_j5GF-o`Kz(<+%Pd@va@n1C28b@vk z#cWg7I7=I*{$q;;xRSNy6IT8x{-1NRfJoawDJmzw@`v(C?%q6CrMYevvPW)tJwo8P^T@TDUDjbad`{_TcL;yMC@d-2 ze$GawGq@LXF%^|)miW~_2Z^>7fimtLHVw&zEb0ISc~qi*OZA02mfU-2Bb9-I*TsG9ROR&9nHS@JdaQ8X_T@+jPLGw$4d=ZG){;e|)as zao|RGWd!BgX%a4p1y2&`HQ(ySM&Z&QfDjSvGPbXGsJ)OprJFX&e6mhyT0mOb zpm4deg7L&&4^7F@MsNBCw9Wl!%-=g-mX z%{9Cu+|f~mQyKu@8Ga`f%G*nVe2pr;B!VCO`{be(?|*jVEz*ZEDWX0Sv2odR=@}jptw~Q@z{B&Mje4;qRH;rlQ;FEmlUCpZLEI{cy@HstTiyr7Ml5@ig zROmTePgPxiuBYdPcDSLTt)T$r8@!kpgu@XS7uOT3zlcbk&)K)_=sOOVOTU_7jBo^y zAnZgAo>K$BSsD#9?_#z)g?M;M4ad2A_0``%!pi`3D`CDxB0PVe$Zb#jBP zLcT`5?YH*+ftB_3;A6C&)q?|dm!r;;Op*|l5!TxRjlIS%Up~JjBZC8I$j6tLGE*iZ z>K77;NW+9{^2|vZ>Lc5J&7qHt5@HepIyzwWwxDb-nxLQ{iXVqWjfUokhzu<02vk+t zJl7{LfA$F%;gy9fT|Kx|Q%t9KbRa-b6SQ!Lv}{TqEH}NLXDpW8o1JA_%MKjhH5ja^ zP7SlR&Zfa4kZHGDqLgMJfZKN&wt0VOcTkAA+ZaZS5*St35^D!ucOL&UWqcgh>o|6s zJK5QF)SJIF8LVa{@4Um29rQM40s_5WF5`j?^fH}J*$Vt}`6aoIWVcLXl2wvDZQ*Rq zh$nx!8tCO7dLaVT-_~kJ8ltnNny+cm%%d!NUzofLoP*hRCw28+R|9|g4DWHdd>GxL zfKu+rc!a*%Tr)gaB+&8rTTdr^2G7Qi(<)S$FjarpOHOQqqtMy7u(U}0%07w>AA+PQ z`!~VTsKJ%A`GqfRWW#k_!2G+vXC^(?tos+Gpfgq!k2B+aGZAgKDE$$hHS`ABH4074 zO-V;j8oRkau;;4o1eih?hMWLm6So8m-#Vk!2?tU$Y73sTyms7SPRCK=AClo-VkBu7 zB1=$M2@diron)`#0@)ofj~XvnVfkcA%gdpHl>jUl`-3&YQp%I(}VPPv7J5H2G#GO`Dd1T@{R2$dS& z*9~?cJ*vd}&uQM-4a~g1-!8hU3>JPN)s}jgkRf+@0B`f*B5apce-ASF3*Dd-6cF*` z1<>@$g{9Y$geK4NOF2H=sVvwWx%J(QR}jdxBLn$k$NPR&^jB~+_t!S2OSNEXHKy`Y zr;qJY(N&bMc2eQ7P}^J)@z~Q!wRwv2^HF(tG>(Bke8tbY^~rJsnY7b+aF0O8%19GO*iMs=oCncBWtII=PLG~&~ zSV3_)yz!pUbXd)4{Xjv6vZ_Hf&Lm_bc3x)R?OBW#Q@`D?99D<#hN2Sd@AMkwcG9Yp z8L(cCWyW-+-qa{-_3ph}%`9vCW*#Nt`mtk=eX(nveA z)RFvwJ~nDcA+Ao@a3qnxqHU_!j?-sqvbx#&@;Lq?TnJq%LyGGOO3nU2A&jp15%KA2 zhsHabrrT8c2|mUBP{4HVvca1D<{V!6uHTqO^SqhI?cL1T-MjmvM7j@8Ed-QqEe+Zz zfgiH~r4!Jx95vSozelqrtXCFvNI#&zmVs|DK=zxLy@EK{b8uJU$qOE@L%6B>@GhF`ND2=vJmYIW;)iE6|zWZ;=7*q=i^! zFN7uL62(P+z52Fuu8X8B$loe$Sa`{91idV1UoGmbt9Q(&`oy=2R&HvyxJ6=y>vy`p ztK<=PSnS)3n&qm#zURuH6r%ZV8H*yL6df_OPVY8#m2U}7mp6?RwiJ4zglBz49MGho z;kk}ZcMJ5kWN;x7h|1q*E49q&N~#YmNoj3%uV~8%n$zu zad!Xis7U}e-|Pg)OPTZ=jZaL>bO}#^(zC3^4^{xIoyf!U8%&O*TJAJ)x$J!!i`~09 zJRYf?pdlxg*3r1?zjzA2;=lpY+Ug-4gw)kTBsrRoPm50k^}zf?At@goqjBP%R{0P1 z+{923OTGvp67U1!NQ@G);`s_Ci%s^^gZQ}{qpMZnbYGeUD`o=!%d)H44i6W3lse{t zZ@#2v00Pp=g`cXSwy|{>=8vC}=lG-ST7TgC1*kJ-m+Blp8hl?~3L$dZNe*zL0~Y#_VF)9p$}cfw!V!LPQf7#{4TwEo?UK0wMS zg9Qdn3G9f@6o53%L&JOLjKRr*l@UXwiP6)I1Y(z9m9+ld$lL{vGd?en;j5fg4Ki34 zbyDk_?043hy<#00!l8^Ig}RvO=N>fMlt@uXq87VA)GiC=sFPn$QWCL6D6{DqYDYJn zW_9GuBQdu+ER6k#7{0D9UbAE`RHUr1JVV|=iS??;U?d_PYSIq@uh?fG8IDWGvP7-s z5K31%9KT6gSz24VrVd_RV=*GGhb>vN%ysT2`po|ICnO{(Ko#jiBUqM}4aa3}ei)SV zz0CerpU)3L?o?$r?#ynwxb3-(YSDU1VCUVY+dh@;zlk|B+9i1Y&)X&?q!WtN6I@UoMD0y61iNwxC z_^AXLNlCXfs`fr1f=w_sPrVDwx>q(eIg2diq*H0gw>IYk;GC_sei_%2Yp;wgF`8d@`1i`=sMB7+k-N0D(H!}gCFkY!oxgb5(k=R z&le86$>Q^IigNM<_ty@x+`J20q5Clqd$`u|BAUuHk+X7!>3Q8EyR&0s#Uw;Z^Ft{N zavVi&AfCXZIQI)PP?hsX+Zh;AC9Gh1*P+x7Kli~b8t}C9k|BP)c6;P>28$kOl_bUC{k%c zB_$=*rmH(B6c=x{%XhD_Ui5?kAe(ce*_M%{O30MHM21^gGe}}?wqRr82{{EG${F&kt~Q;G$_WZufMM~ zFlac5Gf(~Q`kK;7wvxPTy9QK=$Ifvb#oW~ZA(+Az+Udi5{=-!<*-N}XK65cO3EngI z?R%gh;sRVpH!Cees;;_$?#?wCFZfU~j9ESj49F@PX*P);h6b{Vc4mrTf|tW;nr`*5 zo#ONrV%Nk)-W?b=TpLMtcP*Iq6-?4Ov9S*pSSGE`a(#43WiF{>kPgSjjA;p%c zY_CRR{=-SOOr=d8OW#gKh+7gs!u+7SfjyA$5W?ei?N^w2^@?z&{zi%B=JU7mySL<3 zT2c+<<-+!?Yd<1?EY8iT=7RG3kv@Xo#6!`9V~kT@L?jS(xTm-=00Sw zJOPcP+DYy@9?U=X;J__2GWR?{pIbr!*4mKoFN_2GRZL8*)MXn}ACg$e|22#vfB*yp zhIOWM8J|{{*0h$Q=#5ykt}s>_#~TX~zYpjCaTeWUth2?kd7Q5CB2IcJk4Ch9$ZJvn z@YR!8w;WV<{&rkdvQPWnZuk8c&5h)FV|EvIihIj?J?&(#Nd_dx7{3G9^NUl0lhwN; z-BEw|Xdv(>kRxy~vpZxQrLgw?7XZ@%05IR#?cKMCy7q(k4zd?7$T#a5p3WAM;;j54 z3-4}jGT}i(26}p#jw&bbTyQ)zg7Gx143o=v)&xqSk`=>Lq1S?}Yk=>!H!UN-$X}?XmW$nd#EMCR{4>Hu4Xx z_V-3b1fNU9U=Vs5%Rx4j1wRKhONKy!x+nhPHk1cn4rqc=?@!fw@DcFtX-x(D#_Z%! zS6YiIvKa8CH0ZOB4yHy}EQHdHx412?IBDgNNJ+K0V;mlkG+!{7oVs*HDwg)fi~9c^n!XX! zUiZXJe)mP(-YkU++)mIa9v(n&07t%$2m0v1%~}alTgM?-xNR zQhEYI%aU|Rnt{YVnFb5=1c2%9$t1dP6E8tUrYYXG*5i7{cX+Fg+OLU z55R7LgdahK%`G-S!VF}Y^XWLES)XjlY40LRKRN%JtiAnrckV!sO9pL{G;;kwOB7v*E6jwpAgY8H&75i%>|B?Y0@D0Nvi#*^{_j?2d|Ao1L|D_fY0(EVu zqigbIjfBgKOT>#{1@@-3HC}a5$<~#0Jrq`=1J(g$KT`zHyh~5VNs!=XX-2ZtKj+JP zu$wnh?uh>^`Ey~WiUEe1Tv%i#o`UA0y?7DV;(Zn=ASC#GL6S-{ncG_6!)bos$b6q= z&V*M!9El=&`*J(t5at{2A=Lh0%W@hu$|D0%5VshcH|w;lWivZL*q7Mjs>(?t_rR?L zEe%in1ZpA!UMIqvo%r;qZbWF&u~lR9P)$Wi(FV7!-O{v0X8&2oo%2l1A4;)n{6?5T zxx=1Qhf08X6GI41KOb||NmdoqIQ#wiR_>Er zjcvEitzQZRwHS2a&u{_KLA_85Y(>mYJ$-j}4JEypBju2)i>X}`BXjh}WQ?%WJ<)^` z$UZ}fKZw@I6<9$U=P#%XwLl!Tj-9r!O&4o^H;paYBzcHV>xX=-w*0LmbE1)DpG(F^ zDZPsyza36wV0S#0?Bx;5&Hww@&tK*_%)%z}j{wPnGqm%=7X|RB?_rw zXao6r)yLR3?apRX>V&sy<=Ox)wTqwM{8q=}YoS*6emU%I(OHQg|^0HR7OWgR$Q)ckIIB@6vzUgSW_C(^di z4(M6FeE``Kon_mQ$+pPpD;IuIpbm z;XOr^Jz`RJI_1jU=`8B}x+pI9uT$17)j)5GpZdati)Wt{1)?zbU)Le~>ArC$sR7OlP z6D5TqGYTGOSpk$rksVnOO5b3NnnGB(&5%qY32E7#Mi|d`5l#Ku)ktHUzd=I8)c!$6KMBXrLAfFlb3 z>8l$nWe{7KJ+|$qI)Xe3h+k)%5{$6$3I?V%fN8ffAm`@i^LF;GU!OGS&s4eDcsn!O zZ@hKatO9QV&5Whl%RUFDjl%+iR{zp#ys91ztV?alJ=i(thg(PH1-|u`M62#|NOk`N ztFjN@9mj=nSzM1?ne)e4)kdQ$o`k~gL znns9HZXa9zeOc?kK#0#LKAwTjtqVo?Y?2*Q0O{H*GB_X$wma~w{`m>Lmgp!&!WXlxFQ*a;T=0Soq@ zeSPmazeWSNy)?P!UDTzXb$c=EQ2|pVaA4Omzf7jT+!5*ZrjxZ^l`1Dfc~kKkXt5`a zL){tdIDyZCqNIrSabkxjG0$7eT@#Y4)L4ck+L&7cpU8U zcF&8x{qvT4Y*UiaAV?aJG%Lo0p_&D0&1Cgju(1qiKXTzLIz;_t@i?|kO{pL=sT;tK z3j#kF?JLW2Ddv+rSgt8zpF(HX3xk6W)s?MhsUp_RW0dXP})CEsSbx?LxF}^@? zAT5f-k~Nu~bLrO8z~#CF76dXi!td^}=#iro`p`QXj-OxnMxr?V%;@~<-~^A13`(`> zBgQBE8@8F?%%bOFudjc8c-x3q9bHr`2;;u7*vpGOiOWT{?(+Q7oBH8!v>HH;Nwfmw zg2rS`P7yT%!UgTWuny4DATO*#f%dH3Lm?i;d#ATQ86pB>*ugoCO2UumJyLYnH*docsrsRj{mOJ zUKn~K{5q{$8BnoVSP>W*l_J9u<^b#y7j;d~YC83>rx@=QJTbi;0^mm&f)bEp(a+Lk z9?^{m5cFa!T3pnoeLN1*O@_ulwo6{|D1*p7*<&Ol9FXT<;3%Ccm&;k~Hl}1svynTe zos7@yMQhQ}Wn0Wq8wT47C0ip7+N9k+%C~&wReyYIk(<=_@z!s7JPpbGJO9ImVhmyG zp0(qUk@HvCqTm?s)7EUw>5D#-=Ha?ev0sD;lcvzWSnPlzWMwkgZBOivJU5aV+NUxZ znL_PbLVqRi;8Q2yKYouHR=~Hfnx{W^?azL-BE79<(U7^6txgWOHsEp^^3)Z3HC(+d zp?PAR{}I8od-Kz#?;(Z5rDHya?55J)8)9#KXbLe!Q}fxwBQJ_vI^qv5m!os7plVDN z$Z|tLLnFP{)6G9^zq?H!y=`C%RN1<^84)5&WlQIqU{}K|4XVMu1YBPWL#WxtVq#*o zpHdQzPexXCpu7|mzo>%T>|T*e-KQrR7ZwVX%BItw+OclhIy0Ox`;BeOea$)<=Eh%B zndY=4k;<INt5Y8j|eI!=X9*#)bRznCn##NvNl~2~pO#TATcQ9m`AOPxcs< zMmOTq+KuZRFQ%d^_~%(upCD`4pjL>N+vd8yyY0eEZITl<_aw7!w#n?jZ(D+1Hxw`K zu%RG6qJ(yyQ4_O)t+JcW<08I6DjX6Up_HSmhFJXkwzet8{f&hI|J(dKyefP}^(U@f zl<%olZ*aW2^$L^Y<{&cw9gpPR2U9v>8HjvqRXPiq;Z^Q^*3eJLqi6XGl>; zZb>Y>;jIGUl9U@ro19znGzo6^Id&GwA)XTMRFgG;F-fq)k~3Zz$+hw~?DkZX|KM_x zY?nk2I~|b9HTDd!ybPK|>Q_TXS1W;*uoa)M7HH4$p(?J_rs0JBD}mc7DXh$c-JVu$MDD=$NZZT484Qf`adicNXZX(1 zV>PELL)j`%@>3l$_%#1luHg*2?S6Q&vXmBdL#p-n_1KSIUpdiSY3*9x8s>kfCBU2- zj@xdFvlnTcV}2cz6_7c?kAzwcE>c=fuhRrn5$Vgs*%M}cb|P9pIZ`PBj)OF@0WNRA zrB`k;?pB(gteNvnMJ(DbsN9DT@Ow7v(}%V6vcH7-&U(KTi>EAz2HY{YG(-FWq3~gl z%Ry})5|6b{-3KgpgNPT&^pG`5h8og{mCKZ?LOP4C+@RLM;@*kU^;_#6gU3|VOx4qe-X$`~6LzCSL_q6g>t2KsQ z?D4{p-O!>*#nW$_H%x z4bvm6Pg%QX?6kzpzwl{t8ou#bf()qQd4pQG58P!E)=I za^UGm2xixX7?I%iDIe7(tGiQnBFf9X4uR^9MY$)S0@ zF8Q+dQBm=t*GYJfL8eVyF<@id?VK>Iq~$8wgW7n!M$P)r?~81R0EU^Xd|-~aKJ2-* zr{>a(cph)K_s#=<RQ^F9jV7bzy6Mmd_~x01Clg5&^ST4Qw;eCrl3EkZbP!WbL+{E8$7N5av^$Nmrmz=xu;?9bkuT%X=?Th+-mF1+u~UO(t;LU z&gl)KqHTFl3c5q^r0^9Srk7IPubP+& zLAWFgW9&7Qn3!tYCF13PSCdC;&hBPmv4amVhqh*Na9}?_76*hmYx1?K|0B$)J%q4b z$1c9J{S5y6>KK6gBOZ8GRlT}>HS#LPc-SPis)`dFcdShH_h47;yLUJs%}IN&@ucWo!uK;%1OqUud!Ud~G}o_lp50MeqO|1N-X$u* zzofX!+~)^E{65RJ9GKvL*$$2FLyg+gDv}i|yfU^KX&GiozPx|L$(DGEdMuhV!Cah$ z4?a`N(^UXT5R;R4gj28Dd;1|U)Utivu>^!Ut$D|2P*?SK`c}yUKYrpTbg^$Z=7%`ls^B*szI4$`-PKUf>m& z4IJg@FU*G&iJDPQq}QUJMz?FkTyan*KX*#r&8C>jF0QrUqL`y-+2nh*=wCrxNCX#jbP+oblPW$*xshpgKem*VL#X)5~u^K?ILd#@SI}}xZ7ycrIfsSNm=y|qtx@uGuxk|Qe2{C8s=vt1hr{>;rv{A_CRGR%W1i)<9BqD&C>dxebOln5;sVU;zO zJ~u{09`4~-m<@dqF!Gs?I(g?GwdO#P9*Gn|J|!>ucDSxAR(9-W@P?tmzAES9RF%1m z#eZ9(?m^Om+*pXr>?esbu8;M9wI=M z6J1*s!-_I=$fstD*_DrkC$vn4v8~AOCG2F|TIAMonX^x@<|)gwn{Y`IZb+MxUXeYj zxtvy#>-Z)Gt^r^;mBfmnx$QQZF>$%u9#eBly0`b22TQ&Og#enn9m6iytqN@qmoZFj zLrQpCxqF3OkRgYOjGU`}7Ur6?qdu>zml-2g6?WOQ#jaKENC*cHf3hyMALFXHr_5%U z!}BE)^_r`@yt-bI-;<+C3NW1xX?`hfy10On{NEvpAs$4+sl~!n84;kHLdiOw?wXHGDDWSL5~gZXRDt=kRoK>pwJLKpM)pe8c~tEuD<-cZTp8}VB4zrIUj`Wn z>1nO6>r#HZMGB#QhN}KM`;~3?X-EPv{dT^UqFhmgOjGJ$q z^F9(_PBv>iR`GZ=S-|kPy3)kDmcty}T--#4pDc`5AS2Jf3JCbVXIL0b)1!QzYyTNb z0U}+1y8lbB;2Flhva|Z~r*O*}gDeoivB*|K0V5cO=$&{MV{y!eilt(5M|4a#%xPIZ zvSNp79=q8|5v*5I0LkfnoLgZ29c$Tj^b`Myt1}xhxa)bPb-M!?@rjuvE>M~>yiQWX zy>IQgKmX*&#sR)mdADkK*X=(!bha0MM)H+*fISD7bK(fKMH;oI&rsuatuX9NgOM>W zX%*JEIuNv#$ui`ja)t)}(mRAqkckoBh0Lw#UdZ+Ou|fHK6>9K2ft<`(5Rq0ALgJ>dM`Bb63ewcIx9VXwxY3X3*wIt)*R%f}J0OEyyC;0iTs zdSJZ#0tG8_a5JHzw>(p9Ja3~tqjFlVt5YoY^3E*mCKt^lETVNBC1+)4!$&eYH9x(Z z<(j#3sC^9Jf+g>p4XxTg<1;-Ua|X#0I;^d&rPb9Tw6t1S8@9EwfGG}OLF1d6+A`|g zmAx6mG^Ysn?@_)*SbD-Ofv8Y*^*Typ|Iu5%XhKjEU})7Oc2#}5;?ABG2Jdzcz?s!g zG=Jx%km!E*`Sf|icq)oLhcn(y{p|cbWKVmEwqxj}aOT=H?dkFL^X@;p>MuxJ-;A2cms^NvFc} zC=MZZvuw5KeEEdQ7@Q9vPTFgp65?>*3&oVCI)u~GQ=5+Qz&qY z;hFBSqL3F8m*_P!Lvd1+kPxvpsc&q2bK?XQ^w-pYfNn`ygV~q1%kxyH_68yCctXJQe&8U0Q2Ft% zAiGkXpyGw4G|X z0#iaas-`OzL)&8O!vU2TkSw3=naGcNEPj-_>2*j6|8)tFDat>z^>;ndZYw4n(57zu zb@V@RDQ@*p>z!ii8Jn4_C1Lw{82V+WZ0VRAycD`JmAaiYnL^u0oqFft~z<628fr5Uq=E6cT zAR6;_KzD_8K$K23uuXe}0{Sk4LqQ1_-*5KJeRy~P|8U&gb#i$*U9db7vX%CXkxu*b zNJGse?{a3q#dH{h<^hG!?S5MGTvXt8hdCaOaHJi2;_`N;o#EHN1z*4zM)kUw2ze13 z4K5aO(~3{&5_yFQ_1-Yt!@Hm0`rObtta7G*pdcLGXqC^kMA(YoG2aZ;00Rm-S3lM2 zg_~*##%-@Ira(XLv8gA)K*5P09NSSdlkf~m%p=mnVIRPyNUX)Ycc*O17&lP(Z`33eHA}PNl8a2y^+qVZA2l1RQyT1W+5{|o*4&__Z z+{!h&+?xsgJ(iqhfy{H~29^bM8a}7JW5=ic-OV?kO){>V6TPYr{5bLSYFQf9S1I>m zlFh#K31#hblJ^u*_xxWCa@SLzo8;BDRi%?$o}L}o*j+CVRWFD~OVq5SH&e=PcSb8C z+N;X^B0iCS0jw^efyvGB3!4^jZ}?~C@d*z8vQJ3d3MvT^FBNgV!q@P zD#Jpz9I^}9%j$x05bhLO%QRJdq4+NI@#@H#djFmG&XNZ=B=xG#LFVOmar&HtR5O83 z66U7jx-(MO70Rm|^0X$W)A{Fy)@w6_zLMYImn27kBoWZhI-bVWA}=&!)H6;wGMY#a z3@*O*xW6|Os#?1Ps_W{Gy%IN6HvO28SLYN=hgEi*ZkNy7VOD4P1Hw9d)hq-y>Y-D( zZ3}BO1*BDVp8)%!6FGjsXHH+gb8NM zA&%cA;I@c4aauv3vu0yKO)rjpGxjk=#_YgYfnUd?kW~I1(F+gd{|^sk`@%z|a28c3 zQK45{N7h)=6%J`MjFP2&+@ESun!e3w?~IJor+8)KcJ*uRZ&pl;Pzo2q zBQY7(msZu1naPE7R?HhL*u8bzw~L~vgd=o7yT2mPDN7&GKbzglzWA-JYXd?soj0t4 zb@6j=_`Xy*ZB;3~R{@3tro_r;Q&zL<>BZC0j4#Bn#rp&3Z#JSLFJEtFaL6Zx=l^gm zPmo6-HE|e0ZN3QDhB%l5im>KLtz+>+%>T`7vAcc|iUO8Pz>xdhciC@vYOPN`*v!d5 zzG^oALsK+kNOY2kX)G!|9g5S%CFUMxmy@p`IV#O$WUD^U04w&*^-fqsf@_hSJNI@O z6LND%?n?G_jykLtNEFyDLAN!1S^xS*fFy1M(4SskUDj1R%aG!fuOl0AQfuyG7%-?n ziP5=pA8;K~v3+!cq8co;PS;bCsK~RTgT1^52r{)0Iu;W#(7UOgt0*Ok+}Ua0#*c-a z=oZDnElqHE$7_bc6?~TqF-)?e?44v^Y_6iRJM&9eS&B9Md^`?5P{`RJW|L%x zaqM3^MJ1bLH*wcYJ2OwNfPH`pYxeP}Q2WhK86kuB_KMzYuQQ#t`9x^XX?U1KebA50 zC2r$PFki010)(O;80_rE?P<6_!hsFZPO2V+4OqRCS6UHSF+a(S|% z@izDS?h7Y2_g#B)^RQ^(+3sgh5)$8L;a0i{@omu!!f}$4ynLW#i<)#Yp5sK#jAYQ{ z;2ty~^OVv}5V4q=Jwi3^sOYb-k4s8(`rSj5HG|w9dV13eAX?YGJ@Gz2J{NKV_TssF zPMUpG@Ies*Iu1oi#rbwM$a8%1OBEsgH(%uFsOHfc8yW=eSH7p{{uSCaKsRw* zzu~(5nQgyl5q%aM3>zCCo8gO4Q6uEJ+=!d(kxS2m^TGL{#N70ZaeiNlAPMyPKtgo1 zx~mXXe^$G_FgQAwwHqM$KXgpNEpK!YWHvpu#)O8+N!*rGVX;H$JtnDkJH^pZ;Ny^M zPS=PhL|1q$TYioy1w0l!=}B>>(Tms+(T*X0Y1v^_Hn$$jfQTkq94=14`b_oxyqE(_ ztK*Y+hliJzz-zFhk>Bn+W7ok1znhZc-?8>uz_WxVr730-!WE%rVPo~w@!rd5q z_efdaP}9@c7(m{=%nSpVr?oxDyZMjmkrR+{plH$DBH?%|DL9d~H*si}EfLOC94fiq z-V#~;IF}<2*IoBdM@GUF6djSys;Y`@X{u5zqAmlGTs57onJu_1ckV21f6jR%gvC#> zxnJy~^WliYwi^9%zD@ZSmj?^b63Dj<;Br2p3ks(SP;I`tXDSh$FZGK6xd2|OxIr%( z>fOcoYFHq4Z)1lsGb^ndVzs^oEEA!b-ee_3h z*2bx9O|--p#yxqRzep-(jw-#JX4|kx5Qck&p3|AyqH=7mfr{`Wpwy}H0vXhRIA=0{ z5&Q)wCo+mCX)!7huZ)L^vg{9RdBK)12Ux@G$x#o63jsyY|MxvWNuOmN{Yhm6C<$tV458Vf^1hs$(0`+)|{pIPb+CAU(l+tMVb{mn`=9HxPcoJq)SMRb` z@6j9%#05g-eFGAC%j6A2xGwyDfYC;}#~sh3)URyK0R}oV6ukTGbI3>5stnStVOuN| z4io|Z@Q&+c_aMvG+fc3nu3d*=0-s$?ID8+e?|@tt2`Fwa~XPjpQv#FRot;k`! zL3m_J(JJm=cW$YDD8Y77lT370N*(_-G}M83A^tGb2zZ1SaZvV#ZIL12R3o4sxG@YZ zVOP@Qej?>&iyf`qZbF@ylhQ*L1A=p*I5eQ%;SZB_w_FlXa;_gH0 zMq_Q%3vhBkbj||lx7wKE=$ejQ7Fr$NjVY~XI-jQ^`z;wg+$JgDqg#lUqJ|%Pn%ha1 zut@51z7`Q!iS!vu-AGe5IQf)CLFwXgb(-+MST7Y7YC@cUvtG6O`uaD2(_S>RrYK~# zi=26jKICbxQ`*UAyABfkMmtvUSUACN&bKq8TT%@Xu{b$hXl}GWSU~R~H482) zPeY?|uC6;^Tv9Hg}uEZfjkvFwhtUH{caiVJbCo1i7uaT@AAvd80qd8ok(%9CQ|akZw!7 zy@zPlRsWI(7SlP|W2n--#SZl|ZbEX5d1QZ|GVcSqi>o@knVE5Fi@nEeyZLdWAqpho z`*1@|M@g8x^;p!8S~zUj`*%tGNv2PCr~oojmk-U;V($WC@r`hQwppxzG2@ENeyt7I ze}K-p%nnqRPl`ULZUT(YixbB#%n5quty8^~osHrX!D@im2f~qP2$pvw>mt@ef4&#?GmAnfe8t9Kas?06|ae-__IAf5kTWSHR|RKYS5HUXgMrc6^r_b2>7qiFuO z)NFx6zmPHP?f#TDa@@HCtTZ=gkG6@6`?8Q)YI?`Rv%7C(3+viRChy5uieb6yEQX^) zJAdk3Wx6W@)AJMClFPQ_CiWBS)?iulvGLa)s;i~FIa08G)tZ4wbGs3*GmC_K;dS! z@p<)}6hA5 z-z$GC;nOv%N4VhB&!|qWQ2X4Eg&J&B)%p2dLqmh?lkE7`Q2Mh*10<^>v&D3^+BIY? zQ_d&xf%I)ayPJh`Ik>BOJ29QNfC_#X^%B;dYQ%kn@lq6P^Tq=W?x=M1ge zw!zqRl1V6@VO5P8_gBpkf?avueKf*J>E#SE&+?(ai~jZVR`6o5XAIIZS~(|)RipBH z{4Y{1HWPii`^rZk62R4Po^c*1IcpfE4_J7t6E> zh#n^U$vkiwzhcfX6;cjN+-d=OaM0&wUzl16#in0XJqBP_*Or`Z^)cs1EzPBILK}4e1M(7G0%J1H_efptN1|h1YShTK*2v?6}ta zvl>E3Fkoa1lsW-mfln+JGvk{EK4-a9GD2i}kDH2ddO}iMq(;)hUyWO$9l4XEPdPNN zMi{63`v)%hFK<*i9qHrG^eRdQ#XIf*Gl_nGltL|vJT6RH5@k|=*E@&VTM%+;p5yHW zy!=>5Can6ct7(F2ZdkgQ6%}*knF^#neF9^#RDWrk6sSk$Hx3Y7qw(v52?^aZ4+=bh zN~SGs(O)+aU|j*_xUPKp+To~V^=zd9mi*r`uaZyosw0t4lPtegZ$=2<{jJL*Uss0) zKk)7Xxw+T=OH1?p9?h2$Zck`CLTR|l!>wOgsZBq9J;k(9NvWo5i-H91E|d4}aDcpz z(meoW?)uecR?;43#zwsAA0bz0Qt}2N(UK2?I?jX0Q7NdK(4j@Evv4%Hm%XUn7SQ#PVlO4h@(=wHJnue)2^0RLaLpIHXe5PrD1I zoqZUGTri#GF|CM>f`CA#pp)~=I?L8PBqvgf<^Q4e?70$N%<@t;YDj4VQKl*W^iGJrbtbezdfb$QLX=R zt;_D70VGre{hB(b^QU?i;3yP^lh!Cd*$k(!`pgv)^v7qoV`_Ab&gf8vl72TEVGt_T^?GV(gCldeQI6XjmLHiYWbct_93Aj<^|IpDQ=Q7z0p*nSvrmMl zP;zcLGVy0(R#vEG*Jk-d#1NBZy63r!{Uugkf;1kz|K{0@fJRpoR8+nNtKpEiT6*nF z!>##&W)Y8WkTvGBzVF03hQQ~x!mxp^ygH>drZ}II{`l9t1T2flFRonI@qOODeErC5 z&Nr`MqzkHF$H&KOUk}mtUH%%?v9g_ByrrV1ejQ~<3}A;b$NmBlKu8#%L)e)$eXRQuk& zi?y%)Qu8~`7aCA%I9m|BSliL@vW*1LZYV^5S?6iqa%GTJGxK(;sg;hd6w_mz7L)af z%;)338i4~d0Q5P_xFvOqO-b>qG2Vm7yYq2%?lNpZ4<&L_ZI-LG4J?`~ zNSuI!N&fA(J!fjR1-hucANE=5%3E85>pxRtVzOP`Z|?3UKcaPIQ_`_Ovef(>9c~?R zrgh5>j2=Ii3QbGXJUKDrcA5*dreL8xZmG!qQ}GO7F3hN2VNf=9&S@WJs~5Qtv0bJt zSwqI1rZ=({Q5dcS7A!DKJ38hHwe>s3z6by2C)9-jL5PO%4P({ce1#VWv>kJMp;OCK z@$1ref3>Cg7b5r967qXWdKDofweOkuZnXTH>G&_2jxPiy^7}q*uo~pQDh+_n1%9u# zg+l(zx$b$+O;Gr=OiMN995l%rA-^|PR(83IhWDA$%by10r6pZl0eE0KrY$uAlo|Wv zv8qm=YK$6*M2)eqhvYdFuQXhbsV3`L(93yRWs3hWNO|K-mpvKU?7Xjn!|hf9;vt5D z(Cw?ktDe3ie_K+vtXT>$m-)#+kY`^R#rY3<{&MouUVOT)%m_!zULD?CSc{>cEW2U{ z^#2faRVsYy2kbcPH`s>=iGERfWK;8s7O-CNL?q8F>vaK&=E_RmG$% z0f?MLKN{?OujurOwyR50%T9=k`C|E-(qjnyNnjpAH5|~KNcuoyZe5Xu86eIS3-U2v z&@nW~)KFlT&gB4HyndAx5?JQKrcm~mlynlh&Y9O);7uNyZ>p;ab5mwq1)=$!)Ry~H z`hBKlal9-q@0M;^XV~Z{b0pp;A)CAHoI4QPTeFcTE(~qPDEmfV(lxoTC+4;EJ^;Z) zyOe>Zq_pF>t6)SX-6yEX$7wMlwj$0CmfCV{PCh;*2@%^=ysmL3nq2-3(K@4yvfx02 zQ^(-!l=e50LQ6wEV=H>+4Vq{m;p{TkIP@|X}hqu>0IQWchW zv%*uutyM7crj-^|^f}OU&pA)CB!R3kx<{&G>LIl@h1&gp7NMYIame9QKX$+02zTaY z!fAa+Hc^A0P*s2Bnz}5>;XTuxMKUnR<}dlgsux+UX3ouX%gl;$tS`J0(MEX*tEisv zrqF}qx?^ELZ$>>fl(VX-_>1Vf@wC^|S}W`jh#a6zx$G-eSi`TGq3@S$jah>%0jD*5 z6tD<~hQa&*MKOJt&pF4wm5GpfP2^N5VW6e9j%l7HKd@%Ek=g)Op8Hei!oosXO<5Rh z?6;b3W;D(_ekaWhR#5!+Z&vWH5vJZ7Pi{RM9!sobQO(TQKh>jCSxo6HW%fLEgOdEvrUc)JH3b}1SA63`1QUQ6ZMcU1n}^m z!AiPVSFfP9h;w{fzY@Qu0UeVfv;4F4oprzH&)o6UIairvpYgTBDz%^4X1mWNfgu?X zN%O%Vhr;{q$lV*3qb~y(QKr!@8KBbA$q$44u?=(Nn#r9FNtNIUnVr}A8W@hgy5Al3 zXZ6mxIo+?ulS~E*g#%gRbRHrEQ!1y$zPeFOoItq~SExW#Pj_IfoJJ-pc2P~{wL&|u z+qr*RMc-kl=wp~}7Ct{|kJr0-Jj7UCmi~3#d`QI1TD|r-9R9xWBo0DE8yYDiU=qnO zP#qj5^3|WCO$FT9jT`pNHZqbeyb&U;i;-q1R(L|IFM>!@F!dQOQU4R9BBL#426w0LSdo;BM{nlJ1SS>xpBM)MS(%_3d~scACJo_ceP;zKD%}qOWq@a99pvvS24KpjV6t!tHk+TP+nw# zP@SWRZX6Yy?IquLb!u7RMs(>SNEqs>s?(#V&lP=E$NaN7(zC1GumYn_&F;&rU^$FE zK+BNW_E?9wgpJ@mDzApj(p81cZ(kbCSj4omiOoudXH+Wska4dvB9LWY-eW|PUxHxo zV$ff_CHfT%JQ(;zITko#lsEwx%0I^rL1cPDm>juWxzVnE^mwixSQuvd56!0TJW3sxv76%0+!Z8c(7t^S^2#e; zhM{RAri4+vZ@7B}CKbGG`#(%_D6rH*DD{w_DX}*~{@7LD4fzn6j=239d|SZNd-7IB z5Btygco9lwWM+Ok!>>2#iPYRdQd76LCvBN)K$gqZ$nblOP_b#v4nkr$sJnKZ!7089 zugvyaFU(JU73UO0F@-9(q%ke>RKi*~t{>2;cwkK7*N1<}%VWrYdT_v1U(h*D-9D6} z1OoM&knn+%j2J>VUs=ox1+Z~?nI8;;o@)q3SWl9EXmwlC@{;xF_82Sb=cwr=dDmxvTHeOvI z44lDtyAh(^IU6Vh~EFLOXc)&2TuxRh+?IWQvfirE<94z-* zUAPl7h()_nb56)C6?rT4;KgqBFU-mmqy79fFrzEPAo7CX>gyoSC3>+`!VZHqS~*Jehsks)h;=rakk6_ zpZ)kUF+H7Xs|Z-S-Z*x0OiWJd-VMMp*x#8sIy(n-HdJdp4$b0HN4AxdTFD*J6%Ra} zrR)!zmiF+tQLfo75y{+&<_F_>&`WovTnsuEG47`v9+qeyyCQs)C#WnS{@SzDa^J8d zjNcTHpO2}|;Gn66=(e=}c>D`4gW;pmjn(6FM!e?0t8qYFo zO6JXNcq5v11MfIh3|Vh@(B5(VW>Hml*33> z)U1_O!HQ49_{$wNE+-l|)6>GI)eiUf_fKcHBCOA)Ehf46TugCHSCfk`v)+=ffm%OkeB7UOi8~zpCier4Q0i#rebPkOBQ!2& z$>`~)8yji#rNtEQdO1C-19_OGWgB=r4veb#Q#WHB(YIGPyT1ZhjO8(#nj3~TCl~L+ zHE3Oky)uP>Rbs?BP5mv*1*O+5TntHO$>sN)DKeY28QH_vaVEkQeOQF?mn>d1w>26$ z!(r1-I)-jR&>xR5kC%{neh8FmY%FonpCfkov+IZCjXA90em83n&TynrLA+%fm4D6K ztA&!oBz={#Tr6zw0@tnLyP6~BhF^eBduckadQ##jpisjS6u@Vc$1^cgKNis!^M%-c ze^Vq1Q5#a+>U^|Dl2v`)S;4fW-2+0iM5I$kMK0RGF|W{%_AT3-a)J3a9`%ySIhR0a zqfw&bQLpQPO4+V*-iA-AF4}0w5_q~>0}R!K)1fe&k5gpK`o?3+JO*)-y`HoLQ3#DVHlHEb`JI zOdx%)x-MVjXA0J!slw#22(Nw=@mw?DJ?Ws@aTCNup=_VUSOwR;<61#$z*woj#MvtV3h#y@%SRW0UWX1*26X=j&HDzRXBGo+)Uld zLm@;md_0@eayEp(UwiX4e%lo!c^)l)dS5!4e9oXhKD}+(a`j`&+wKbO?lQfgm2O;;nN~g^lM^2zPYc+B*ReA zD`lp}kE;ReZz3*N?v}Tgrx1>Dl)n8{d%dquXG^jiQ?QtFO*^Gvn2i2@m^VagPSomN zToe|MR`T=Q4s|G=Vqtr_SoEo*F)T|LeLGQECH}WD67}PjET0+GB7U`$QJQ`87+$Ir zD}jYIDI!&e?eWD+EOaFT@HyY6VPpdJFk>+0)Gk4TAt9d?}8mjv?VkcO7a0bNgzr}N|Hv7H#ft`)7`;P$t79#pEIF60?gGoeQ_$W zZB8GSpDFn#m@C)D^K7eb4;Cxcu+{v=s;jGsczD31x$m=N-;J{-eO!M71Fs4$hRHjt z9wveuK%_C)D#ErbB-yw0syb%bHq&-v5t)r_%{|sN2$_V?<4QTvbysG7jz%lZ(Ltq| zkH5}v!>prd_1r44*8Edbztr7rE-cJM?=vY?l&goTsTwD2u;~UI7_RpN?z!zq`u^%n zXF?l!BlRG<$9Z4d(_@c5OLCfq@_jL{Rg2jE?A%Ne5C{W;i^5{Q6jzEbxuBK8vLZhZ zK7!^F$o5KXF}a0o`c9IFS2#G;u$5!HU5MwP)h*Acne;jorcGy!OJk;Xu^@%Apt?)> zpEM5y8SC5E)qQpg)SG>3`vuVR%enLY=5pqESN%;qfsN3%U7h=I$RVY?&8Qx<-2V0z zTfN!%7*Pj^Ix#0950Ck=h}@Rl13<$EbHl9V!Wx4nLenq3j(H8q9&!i!2f;8$Pd9Qi z@}a2G#bfcGABu=xN5taA5x=Jw9AXL2lNvJQSyU<0DSw55+Z|$rPK$@qeA&L;C;$~1 z7w5J7xT@1xo~juKHGy0EEV$H9LU=}9rUy`QN!mG1swyzHin^1zVfd>@E=N6u;`GyZ z^Hr+?T;!X3oC%HYZd!RCK(3FZ;W;>6>(AF*WRhv#ZZ54|$4B>QOOA*5(a=vSm3OA@ zPKXxum)nkO6};KGxmbw2XLYCUMms8mV>0C+|z@=>vcNCx7iOdSt)vwGptq;Y$+Ycx=DYY)( zA#ANd{1Soz!k2vC5Vv2pYkV+R#Vc!FS`-2=JQNx5xITfbvtqNG6Ahr7f+;sgZ>?T|=9$m+Q6VVnD;qF54>Dry{I zgr)bDIzu*cTQP$s(DclOIF8`)LZY^B;ul7Sri#vP?%3QvJP7f90R>5ukcH&uo|P!8 zekz-tOy8>=#ZNu2_bJ=x?`l}+ltF)m*J9-+^oN=3{-%GOW42X zC)YMt;JBJdzzPm4+h$5XDxPMDyc?;cwuxH(p`^*HeoaRvkrG<5-aUWtTtNOrge~N_ zmbk6upRUytfNyAM7>dVKBbU6eFrK7rKbl3lCTkyd`lK+e9w7kLwQlhURd;pIN~Fqv zEg|W5#{IY;esa3&SYwjc@l!TCDlySQRgx1C9+scLyNVs?&I;P=|MAI6B#=z;eV>oF z&uKRPa+Z@PDL%Iu#TGS8Bp)yG3`rySRBr;T+QsdRa&ibO5xUXp-Xk+Ef;c!3e?N+O zHbPucyCX<}cLsP8zPFMBL2_+$F4>4qxbJRG|6+a2j&i-=bgjP}Uw!REeW(OZMIz|e zKnXYPWK^FGkH;yNGAiyE+YZ_lud=EmMfqW9EXsqdDzbXifYPtF*pfzqCkY9pM2>|U zy@k<{$ij(plvW9S2~M^)3~rRhAevi*RK7;KVm;83Pr%lNF`Had^J_%@3xyeadUBq_30dcvQ8zIB`fl zBJI1+`c%xgfWu^fvu9%ZHUYr{;AcwXhx=A>D+Pd2XMsGEOW$_fk0{F1iNb}>_?ntz z8!hYwXYi+f2|=gHhwWqd@KH~$6w|<^L~yv#`;}aW*&1Mx7j8yfM0n$ZZA722-7yKxESz@E`9t6Xsluq^a zq@<7L@U@(YURbZohZZ^ZX1{l*3}Lu_4rzXA zsei4*^sU_h$11Rn>wyQXwN9IIE^(7`;uQLPe!24`uYx=?q5w334bq3*m1~LB?s4`si?{ zX&>(QJj79LEnR>q&cpiJyYi>8hcbsDyZc)S* zFu}+uWt`y8k$dfY{*Z%_CZwT(`*i>GIp0+g@}3`rg|mfyj3x7e=KMyqv^|lu5sJXh z2-x1DU?M<}NvCFRnz6eYrO(<(Z-4Erj&XH_{Ybt22Ihj*t7~cXBpNrDWg2uvbEkGI zYM#KY&@;iWzHpk_vQP!RJ6JuVsq|HGY8=i3gY|m|t9-!1{P@yPjkIZDw+Ql{L|38D zTeKf8y5XUd?loCmDwcyic9_-N&f*xh3?=ia=ZL(Hh!{g^o+p7r^?efe)-mNxLLo8b z_WcIm)7UJW`}b}KRBTsPSA!NCL7;}`BTh@vEIayqj&KG`(UCM44yYfbb_t8AL%mZd zmC3;hCbaWFLlDmM%})uqCuD!%s#h=<$iT|)29eYm*(O608I?ws1}R*XU0)zN|7Fpt zhKow&8<_knH!VM52g=dD6sdpi7w^JHQOIyEWj?mR3uX6;18j1(tMZdS;7nRkdnk_OwT{di$ zE*sUCx;t%`$TY$hB5~Tgp57WJMe3_69kw}iO0t?h^4?Ah11YW;C!Wg&p=+ZHxy9Y8 zG|=|eXl|ovczaMS5Kw(IJ(Vd{-%`jPE?Yhn$$6}kOYsAx_L_J1wlZm2Wla~X3%1v| zfk9ycZf>{-ZygRMKEVBhm5Q{rLtvupXlERRL-?b5y}k#DFBMd35{HGoy)l_L#PSC6 zx#F$t2BY3CE0A@&&aG#i$1z>W(XXE$l&ikpTJiT(BM^bNzD<3_i-C)WvbqJtO6FUA z`+L2CiFLFiTm#~ZO}us}S9|>@M#eutq4wvU^B>MnkNYId@_X%P`V#I1KjB6s;B;n_ z_ChBtB4RiPT-H4ccjT^qht?jBPaO$|-o4JrXD15(*xMi$wVWlKRZ1*BW>*ee-CfLP z>!;CxV`3JTB@?;g#kT3qK7TBi$4(k6|s3Y|^#g5F@zcK_I<27E7fdTNb& z2ejO7-{k*1>WiJ8)M#xOwul-i7Qn{9P-nxprC0Z4)x0Nvx*SgU7%^!)ZU`!TJm)-$ zrib})l3uGhjj%cE{Ctc*_Omp0gP0-?;$U?2L+V_`zrg3aB+p#~5jSp@9%3&G)JPd9 zCa5>PwI7N-{7o;mxEkJ8;bZ5IpjI=*MUJrx5sEtTgpIIU1h4{`n0ixjEJMP`pu3A650>4nxRb*! zNkFVA#=%?rLpMoL9#}12-k+lGg-5EkwoLMYsUbzwYwN;xv+B*;n<5(eCN$N^LYB(< z`lJ_k&Vrvm&mL$#DkUXGAs{*(hXn`Ms7hOEX*v~|tBCxy1H3?KoDe*-i%|lTBlm;U zug#zNP4byVG)vs3@EJp}NrpYg4+z0bd4F;r*vPQr4|q>zKo0lD0Gmb|5;Cc1wJ>qPn}fRdrDFW8Ry z2b%mBX8Q6e9z+a--|MSo$;cM>;^d|qm{|bPfUa#I1 zd7ZptgZlsZmSDudO8NO67vcYW`#%pcp@CC;>zmic{{QzaF=6Vkh8_7|PH_8EMoG!r zo@hj3q44r@Xd0E84ioyp!NHlE(MHAN_pnNu4Ol=q^>4KLf8GyX4!BtUyFS}LMB9)d z7@4GWwx_i+YI0Q@Y`p>h;X#Yk)Kp|lOtVXO3k#Nu%S$WkO|@tRJ{pogXZrWu_0sw5 znT`-J`+D0(v@HsPaZH+sf&wC;xakFjY3VQ3P**Q@)}kCPVx4LU1Z2SNgM%ggJdQDc zcFTWmkhbH?#pg<6QW6Dk=GT7eAaQhbyvRSESnoA5G5Hx=z~nN4h#lie>XmHckXc-f zoZd}e(bQ%7-xt~oOv+Pq8tUft+J%TV0qRZx(8LLJaq>yoGrF51lGLT z=*$uewBZot%aH%qG13{#`x>~kkDm$1IZ@-{How`fcDN_MhB{*Rn#jevVXG%n-41Fp z;J(@sN8Z>AXHRQCv9YOO=L6Ytx0vRS97$h83#JT#Ivy{!RCiX2CuNBy66}SnY;C&D z-gi#VKD7Q&PZUs4Lp7OGm7y0F(~Gl4fU)3V*`A=QmSR?1k8Ht_wa~;YIiH;RYG$^% zAun!GH)i?A3m~=T3L3+K+CfF|zsILl3&em&Kku^UO!&)n9r9_5I!0*gnMNc=6;2m6 zWqD5lK{xn>64Kncx?S8^gl2q#bXu6%{04>tzc@mRrfkVT&K#+Ix1~csSNZ-^Epiv|i0&{E5?D!wL!8#8!50EKmk{UTi}_rF)0E%Ji^ft;{H(?M$3!0?1xYF6xfxIP`!MD5_Dr7Ke#EXdEy8Dx>#>ooZ-<;oVANpzEstRObh9&7G_pwkRx zeK?eUfZzJh`m(|WBU8>HZDj_8=_5?w!d;DhlL|a1(kWw=;WN&BNZQ7W2~KJeN+n--W}ecTU;X2liIHLVXT8% zT!D+=@qyL`!QJlj1|v%i8w_d`CH&C|2!t$6k3kZgr=$d`tH9AIO{*g|3av;o;S`#h zh;s^dm?`}wq@l3N{a-W53fe1PF|JM5QDwU>WVPD8G#)_z@Sy>Ih3HZcwmUR+WL*RD zUgr*H4Au+4L|zCsmlmabkjXE(96BIpB)KVjE8av5KN(skx|TUfbq$)1!|a!k-g5Cv zl`Cc}u{^#7->p?{sOuHdF*G)vQzXt$31^8RZ&f{8nAal#d|0LxP z;Sc4d*BdZ8HWu0|R}$d<77 z=C8fCjS4n~0N}hn`vY}GIVOZaG{ZgBgUbT7j2>-CgxG6Uq)nw|EcTZ&)}N8r_KHwO zb(V|IV9a4WBS2xfVoL-#IetFU87UrT=+O_S(6B7h?vi{0A)a#u(uoNqI;`K44=(bG zr9j7(%mUo3y<(HoAj@BlU&HIc_jNIJa-`oaMdGNzG1Y3f9$^0d%P&xs z>WpXxZe9qddu>f+du0CSb`ue<&vf1pcL98#ov{GWXEb~(muzA}9=oi+U#vt*thyl1 zSuS_5$~oQ7Cx)*v?j*BpKcu?rXRnkyq&U}lMOAgph|E`4N#o*)p||#-tam#=>p*h( zpmnX_B%fwtr7WSJldW;-2ic?S@G$T+;3o9&7{Q9K_cN_nfG-Oio$-92OxLMGRz#TC z=ORvi41b2WN-Y<}RUsQ=;LpthD{U={6tt9#prx4^&$1e~T#aF^Z(k>U_5gwN$vIqG zpl>BiZ5Zy!*AWzDt<;c4?{1x@#&qkqVzD+cKR3jMAQ)$KVcuNWfV#HkTpzwf7bPd5 z1T>KzNKab(-Zs`5!z@pF94{kG>evfLCAzmSC zC1vU3&8S&TShvsT7Ap<-9kw8$QWTkVpVGMHq5X0wVo!w)PzHNbM0mwlkAt!!4nFPv z9I%LY)K~PJH*Y?py@GmTJG#0zuC=a&qUzu!%*F!Y|tzq zF?7iMR6@b5fr!mhkd))JA$9mH;z`Z5@Uv*dZ*8*t(QBpS_u}Uq#uwuH={xAPJj|5B z5LG`zTjgucAjGP3-XTrIL8hmg56tQNks5I%2P|+BRw&p%LaOz2K04dtftYpBP^{Rz zWR0=QB|tZF_383A8e#&ZS%N1p@sUlX#b}3YvojUME0_*iqSZ^B&nej!>051s=UJljsi)MrjTa+L|vA=^WDY@ z-YGj^GScIxI>Dc13#gj#_e3eljkprjjpby7OOjDv3U!_pli6JO3lI8hXJw1`Bxx&{ z1ihX>Ddv1$-$HAl49C^czV0sTfxJ3jJ)nVB4l%9HXDp^m>@-p4J_2i;G3XV_S+IAZ zhMM%$U?cyHG5rpYS7gBN$CFB~FmSUfRoz?sl3Qsj=IjO)bS6ZKqjw+qP17%Tbtdl@ z*#9bTfj0){@P~Z6yWQXQ0#E&O@Oiu-CQlhdAO35*{MXiL_L4iGzP0?%|NQgMfBkX+ z1%%a)pHlVyCwlnj^)oMlI~mr}|Kue9JlsJ9!r?m~j-LOGZ~uh5<)WV6agxkUpZ-K% z4Bud?5Vv~Mdlu$hoZ3swo4MMYiW4ROxugDcVAGk6%%v}^87oXxb+yj)&>;oQF98)} zm<4VwBs4UiSz8PO28LgIBjn-a#GFjHU0r_pMJ0eW3@@2PQZVJXLC0+3UA=-45OhPK zh**|(k*dtUL|_Y8Y<*tb*P2SdYbD^J*W%ZK-d2l&sQRnNX0wKu=9EL<#$Fn9kS}C3Dat&;# z-|vAA{6rvZTV}@bj!KPeJ0Z@1$j$0-_4W1DS@P}z5Dnp@T{G8{qgJ4Mu?3olwGNo7 zsw#udn!H3hJJjJCLiv62;muwDaLJS*Aq+e@IP2z7N8bUxi+wNcnWfb7RIoEUWXR^n zX}xr4X=@Hki1IQTgy zgF78+onE`CApXX)4}NnG^=%Qr2!U%5c35I$X1PB}N*(b%r9!Dgs3{yWnH!zwEpjQ| zTvbHKt7;Nc>LV&HPqY?UX!J5_pU2!2f~HiBQ)5>YUAr{Z)4`{pI*NVUhngLv7AXb~ ze8#H%BU3FddY3J`-iIiefOd;Ivn(9R0!NA(p_^Z3C+^@{FRjXyKQv6kp zdX#D$4iHBGXW3NoMB(mn?^-f&GF^0x=iNB;M*6{kl50V|YHbFZm+O8@^MK0=E5xAZ zec|7@?qBm5N6ZsX5uvMhNJQHaH82btOj??LV#@9*ehEFXVx8Q$7BD(CSI}XHxq$Uj zJbf?Q(bKRuJ|hzoFtEij81i#UdvSa`@>#YFDyS<>a);am;6Sqb&e`$_g+ zymAJ!bV_}4SVb}~r35nD{@I#>G-`@7W1hn~$E-z+nN7h-W`P=mKd1ye_7t43<7!!E z_s|zpTQjqPox-e?whgMIlA5Qm1y+)ILY64iq_(6~L{EFCtZ4f5$o>Co?=8Hd+`jN} zK_r!wl5V6!Iwd3p1cvTZI;6Y1OBzIS=#cIbknZm8Zuq|3Q11PF?;r3B7i-oyYvzsf z?z7L{`+1&yssJX!t0`5Bs`M76Q=G#zP9ozQO*qUq{-7;`a#%$^c+sYGUn`EjF}625 zea?O74!I>#6(i}z6@v^WMfG&?Xho+5bwxA<#rgQU@1U^TschVY${TSZC@FJUz#1xr zA{v%23?%&-0zr8KLo@bO0sf}}_9}zFyoqR9CG0?JUgeKcO;jvjD0#{>4b3oYlJ%*2 zM|6ywpX1~Gd#w4QkUV5*LP4pk`{+d3sC!a$A7fHmG0L@lfao(w{o|O67cA8;WL^D~ z8N4+|%#ntVkV?1P+jw0qFVG+BAfi=b$3FIQ#}Bn5LCF5da!lK0hL|=ra`Q8SPTqzvoZ8}jIfx)m;kjEl0|3ZhFXNQ*{o zQ980zS4y|~oNKP@o?BBQdsy1eu|oamfBTSJ?h4aauE>!coS!zewaK&|bc`cpzgy0r zm;InR|D1q6SwTa2*8giMr&@(cen|@FYw#AbMn+4owNLI0C}Y_xJV_znhs4q0U|fvZ zqVCtSVF3$q=evj;yyFe!%jR)(#I&NPPk6aOdT4|U3% z5xe6?XKa-jy{O4$MY<+CJcqHw)GmaT()6$Te7l*fLVRF@;W@EP?08FLg6bO4NDxCj zQ-{smKOtT2&l$T$y=aCub96q?3}wYwK&C?R)vFODeKdvAc#qGW0O)a>Uq zG#gB4o6)?|OHnf_!$ouHDjkq2^IW*$675pI{CQcxNDOhmC_Aj>YxRj^FOwG5qWonzo+JzM~hD2jG|`B!|) zh?|z?=ZFvVvp@fE1%L%ykf9U}6{`VCHWEo<=!Eu_I|^JW^Qb;}*EhYWNJPU75!mac zQyp?Qt0Rzy%tCR|m9}%Rb1CGd-cly>XofXnh1^o_H(cR_{wYC8`a8Gd zM9XhJ?Dvy(u|5MoCEmEDwFG19_EAgaQBAAK9q#6W_Kju(Vownj|NtR5;iakL3dqgMVrMI)I< zkY;da?li_;v07*EX6_oQ8w&*W6w_P_PoNa z{h_#zi?$M^ZT&-$&cvkWAUdGFprz+tt;Hh7o%UQOCVf^OPVidhi0jn%HD3ad4^j40 zihQX*?vJd~thQ3yCZOlYf$#NI*jCrHekD%GL@L2nz%Wn!)2u|iLXPWMjX11c8aR>M za~9*xE2_Ad+}s0EbmEE0q94ed8{QZ=)eSXV1jCjvEtg0|UxIH%jx7(AQ0`8Kq-Myu zu9PMGQ)1OU4Cf|-x)Y#h9F|RTEE;T5vvqnkzb`2AC3v+}mEjv3sdvkPOL9R+pyVM$ z(As8UYt99KZ>_iw%+N2R1wu!ltiJUkZzl@M7saEgi7;pOZsbFFs$U2}J%XJb5{J1tK!`z<58Gc-Knc@?vr6m{wBH7J- zFZKNWVoFK7MD#yN^!qDq_OirQ=4*hR+^@7U_oiT8`5mXh#vH1>?qWLvL!?HVxZD!HE1@!_&1njsfTN)G(d zG`7cfv-Rrwz1_O*)Hy%9CNDk2*2hn#t;_clArxb-K>-;8D5&So|wnQ(~3AK=O#ZbJIV`>2R8p12Po;t!S6LQ7jwKZ zd|?uUDhxs#eg)_JkUWH1chhP}oH}w336y_uV28iA(6?0ac28jmvbt}&2%jaGK%kfl z=i_&WKWm-<`-_#;^%|o#Wgm(qQ?d&LGy2oLFfB;Fs#MT|O$Vbvv<=k>1%Fs0fBVtp z69p;EIDA)gX3L=~;bl7AdB~uZa6OgSBHQ@N`Ko+c%S?1VO}fMQMf>UI#29oCdz6KS zgH4DPbH6UgncOZ0J{`9^i#x@v#+j)hqE3#=WPeJcuc4DXJ0`8P27*nEwTn{WHHI0d zA4>)?LH9h<> z$iqHA?~i-B%fU&TT`%e1~NI38<2^K zLtdAWo}!XpWJR}&TixhKI{id3*gs~%ljzOJL`oUNtYxmyrjTH=k(2P>oKVv8+adk< zN!2cwRSL@?D|FRmczc|W(=%%gL(S$;X;>%aH!|Ta_>fGbvrj4$ApeMA)Vb2aMYKeO zymZKph;_t`_`rC81UrISn4Kc}w#;6UR=K9dXuBZQRKW5>`kJ!Ml6|Ria#|X)kkGsM zm_tt}N3SNdMP^{KX=ujWlHtQALXxq+R_x8Vg5N#mye~^PrE=bRRO_M|tSrUsmeL9G zS3>fY@<27k)uz^?Xuem_Uj!g_HQGfRKYd;fV#rxErn&rU<&!FAWxd`a(TtxmpmyJ|>eH-~tvV z+@T&0Sg>;25SpRw-*S`MAF;KNCr)wH=+yJ;z$E)T_+frz5{U4Oi^A)4<&M7-k4)lS ze~rRr4a2;*M)tT%i7cWLnkKWDPBGb$e%&-w4flm(P%SA4@wmAiGqi2Jmf7Ndc)G+$ z`|D87!Di^^mADbDiXF%tTa-5y^&$wQZXmLEoiOPI1?mXQHvqlbl~CL7@WYyhU)HX@ z)ZZ)HgM&%qJ@@hiA;Fe@YDBIAy>k%`ZMcRSq3^-H@X9N0jEp1(HY1jAx##4@9trh8 zpx5+mBHW(NH8lA431RxS_e=^Q>5V@0Gq9Ar(f|&Wyv`mEiQITHhO5EKuNq=SF)T;K_+k&*3W~5s5;V zB7jie%cCdH7Uoa+S(dvbg_bKFk1F6og19YOV#tO}X;q>yOGte^oSrMoLIczhAamCH zW3?(ni@>aFp2UUn5(yTiPw}$jEB!NSmOWaCfJo3!I3x^$<`|A?5Q?Yz%%Rl^?#u$8 zK&@??<{2-&Nbo3#0ECLuu*{D*H)A0LUfWD>?NyW-Y@;yVb#-lhesNvB+***!9yx_V zzL{m+91=OcRTHzelw*_{s~(E^Haggkx52zU}*uEnP~y*E?2?tpzIH)pNe5=@zn6TeW5Tz#5vQ zFu!t-Ki^k9S{ZuSU?EF zcYOcj5KW8^3@u+0r~iVlEs%ja93o_w+5evWuPFTgBbT5EbK3ea2)@`J-@mi&OjY9n zeTpfmX+3KFV7`9UVQ|`mgo1`v&a~vDKmY*z4F0J%tZ$n52$7?*Bs<&0B|MJFx)1WT}Az8`~ zZxE1+ODdzE~_l=oPX84f>Rl=w-_e!IRJ5_llh`jx3*-e4aCjO&5Ozl z@dppPF05ra#FQgA>9;+{Q^Y&*kCWU3AnMk=VH0+EQ#cVa4jUw(<F1Q5mv~H;di1ZPyi-H9$4f0dkkUY@6yoDwQN6f{ApmDU%`-bK@S$n%EucK0n%Tu7% zsb?>mQ%noa&uKbbe*JM^yQ1doq$sXNB+Qv&pOGa21|<41r(mxZG&eLv+~U9#*p6d7 z;~fBWx#KasE*+BnmYtoRpZ{`k5oO9*O`Ypr#iqfzj{`#C_cZn(l1e)^R}ge=R>KEK zp!+B?>F$7@)F3#?_?+B80%2QRsF+x%0hDkYKDLbZY^?R zQsEhKTJHk`ApQ>q06ODOl&lupRJS!T6QxE(KoDHe6B}!wR(+*1bJ?S5oL-l;JX61B z`|}G24li%R(%^|^RjpH6NeRT@V2S-vJSJ(S`nucn_M8)p+x;}N%xz6|bw+hHHs94D zZPg`3rERxi_EjqLy1>sQ78q&XJ6IJ})l65ky1Kf>=3@YfYO?bRcCZnQGr0=6ID_?__IC6Fo6HHWqks0mXf~6IA?iu+J}S)Z;hx3V=?7 z-3#Wu{IH<`03iv6UqrO=MAWvrgt3JY+~lN#A$_0Wi~3K(GNy| zoTMW6Rai8+szN8e%Y!D`(qe>aL&*6`dyYnAubEQNnFJTq|4$VnQeLRarjzh&u7A<`R-M?TpiBq zmF@>Q>kek*6ta)o*HZ(s^&swU`}`(KcX7nz?`XvJnSK2TZq$Jhb~}5W;Nt&OZ@No;VLyB&bqZ<@Eoy8_EV@SvyPrS4*a=F$*pBK4B&YrWna^+Z zYWDTbajP4@f&uj1d~4VzYlrpQ5Sh!fk%avCBXXR0c6ejW`!Lox8v>WW)R`k@JwrpC zT|SM{F`?}q4PFHZYPBW9YsEIb42fDCcYkQRxY8=EKw898bXh$c8 zt%ZOHiF}{|T`f`!?kIODP}a%xL86k*)$|JQqtZVr&F*T4Y^$ncOSP81KSIAXU_O;+4vwba1=arkJ zSZ($548G%gjerRY$B1*F(2Q(#*;V%+8iUH-q*-OCM3-hC)X;IDw|?XHo8$-*5gT~) zBu-Obg?+s(OWj*fPv>4VV^8nH-RWyud8On-rDT@oM_)Y@^uzz`Lk415J zj(p$ksP!7LrngYQE*fc2lr}F{*0q;K_Kh60Fvw^tIa;a?qtXypO%E^ELN0E~-uu4{ zLog3Q`o_w&5JDuaC47dNJjUKj0?UO;w z^6Qg{O-$4sm(P++E*zz%qhlIlJGmc?)70uz)O^+Rf`aNE6hX?Xs3Ez|lx**IIwG&* zpg(N*b4x+7f;igrPA_BaLuO<*b$p|2Y+2E}@wqRIis(^0VUA3if zeHRh+)Nu7@54r_1$@{lWqH23MULWC3ohpuAvI0e!k67qq**mK_9911fBuRxLcxS~W zL|rv3^kPUTQPG>9&)|fqkfNE8!pgYlsosiD?z`S2N5;~Q_gx>;x6X{Hjnes@eL>9` zySc%jy}ZurDGWd8BK?FD8pi7^Es$Y1G3=wz`HG+xr;PZK-+B5#uxu7wLlsM-hpXE9 zEK?h-+;gjAil5g|nw9m=xKf!_5-w*(_G$Z_(q}9dQ(94c8*JkD+{ts`zLJBut-Ih+ zDX(tCjUE_pEp#+AaIc8ZW^UV3RxA+?DJAm=WBoW?brsF-K=ZB22O*(vhYHR&u)8-G zhtUv3O2R_6KX-pb?1wWj4YEty=$O9G`z2kV?wWkh)7&s|72k_2VCCuum=u6qQQ_L)6j<3yW1S!*NFp;tR0V21y*A9Emk@9I}Zk-&Rkx1vQQ*Txz z{bDayDY@HdP7$?tdpdfa>R(_XDCLry3hv zxcmD*DkkJz(J=!n1jspLYSKIro(6}7Dy5%&Ms2yioBPC7Iv>Qbp4wE%oW?Y$xb zw^JyYwhEwbm_q^)-=P!;!&TE6E2yruq^tq!KJQ1fr!(KvyCcfJD+$MM_4rCbXw z!L*{?Q-LC_S=xp6aRAJ?q$G%5m!w`Y)nD^PmB^vuH`zz5AwMN?>Tu6D(X3<2tG%8GVgf6{WhLsXxz;n7wli7K_SSDC;HAJuk$oTIx0~S3i;5 zzTaXyU(V)hK;f%BH2}7>n*G9U^D2)D=$Zo1!=q`7~oo;)r(jsP67sm=8{lhFb1uC>UIqNKGP6>rc+t)2^=f1|UqL zXVG+*m-I#2NIsgFM030D8T8h)cIFfP##ltPu+RV!Z!iIGoD?JvQCiELxOkw&&BTX8 zfsF$y87^qLI%jN1FV6zog7I4JLLaS zwm>OGSdfUc&Qpslq;96tv^|m-iQm^6Pp$|?Tii~J=&=-O=ADUb6iKl49`_NwSOhhc z0MN)@@L+PyL(HdgbfBo|3W3AsoW=sGPT9K}by0FTwNa>*O%a#N?r%cq=kZBMFv?x_ z2GIDXgj%=Z+y;1rn@(f%ubF)%b9dNziC8+jDy@p`#G-UW{h~q_1Yi{$ z?t9@jYrX$8C&GKPsK7;-3sR3HKr{c6R_2JU(9Yq@H(a)28!w>kk)Hz{twb+ z41u@^S9qdy?Su34N`=|{e2o_WvN9$Vs?(TCIX4wy2M(au9p`FkDJw-xM*ji|23g|! z&-y%z!=T1Gk-w^Bf)P!3OSEz~HfhoANmqn58zy1mk zmyx_9O#&xOx{&cxguXIW7#sD8^PUY!Whentx!BS(P>R+G?&=neeTt8sO9`-z3*&Jq zMSSF*L6BpOba;8-)tX=K;$Lr|xq*f0=^cut=kGw~&r>n-% zSA1dCCedWA(rSa>tDN}=`x{c|F!|rB{f6BG$LJQt;;-Q$Ww3{{4DHu z{`>q*tPs9XQwFVE|MxQk{B%Gp0pjCd5C5+(dgMgkZ~yMPj2V1;~jeV2iH1b ziS|KW-aRS*c~W0j3ut`yv(zBaQw#O_%=syq^B^>v$DkQ+&LR9L#-Xz^6+rGp+Iwbs z_OHirD+L_9kq=S|p!d;xfQ7#>P3Uoa07TxW`-=;A<|QXfAYWAl&BjYd9AJ$d7#Yz! zS&*}(hKJx>^JRgvN z)#P_3@=%0N=XaKLP=WDA%PR#!TRlfT)2($R9R+j0=u2`f&EIbazTK+k8V*18(fbmKukg+I|{KoZlyWr4+O=^IQ&xy z#zV@F1jdKdvqr_*d!Sb=Z_`(P#Ck^>+|u2nFfH_Te7izuo7tcjh_Nbr9qSg^A)D#U zlvdGvkc_03i%^C`TDo0bIEKh>_7sVhd!e~T<-q}$8rr@z$>=!08*3nf^& z+qLW2-sv!c6s_;MYXM!#o1#1*!v-pGLk?flR!!{FkE$GVR&v%NPLu2{up447ZGNyT zD{|h^;On!&1ivYiNX9jz5%~hnp6v6T>!bU!grcR;f7Bw!U1=*!SNcD8?EVxM%Qeo9 zUvbA1XjQ?E>K_>DgPP{)DHsvs0I$kB`^2UG)LF#IZr{DO7A8xI4e1$9=**Q>FWWOx z(HzyM-$ya9{cg=|SpSFuD@l}V7CY!%0-$Cq#QfF0(|=qfte~a)tn3z2Gsd2_i+%GK z6VI2$pi2P_63b$@?6;`%q?sGDNC~dib;sy_S7i7;imn6hVjLww7A7`Bhewc8T|oEM zdEH2Kj^j+iQBq}|`5NyLeE2XC?}0vZpnHq;98v~7SfKK}=!t-7B=Xi3pVjrGkX)Qr zT*d5r$55mWt^|kYDmA@dP*Bh$kH!g|N09JGS$rY!Zz_cWQoE?{;=HK!4IkRJO42?E z;>na(yk+(Oq!6qH435?}F#VNWwlUnFj#f`7B^#=MxXvxC+CPac;S&kOHJioEs8Jo> zl<89xf3W)ath#EM^WJ`jTth#0G18aSne6Y?^3M!;LmhH0Ro>B#<_v(|7~0^3-U;gp z2@nrSXX-S6%`|8k!9OgN6#%)KAs!v~t>Hd24v8vbwsk)B8B^GOBWg_pff@1nP6XD)yA??%7dVYKa-%;{H@L_(=gLUav|s>^BnbwAxD zL#dT7J;Rv9J2YRVsGWYX{Tn|1gCWiC{)8tV_eq30aLu2QWvan|_8J8PA3{;_xDpc` z{$uam^_j7Z&KOV-`?$;6gDa#}S4&{v2)(QsX@4Ul_-qgUl_7?>A(lajH)P(70owNy%uIzCkynS6?tx%WPw>H5!eTpLVy6947|Wj& zQY1el|F`8s#$?&Ux59oF>57y(HX5vkchduK4?>j(`Nn(h(&*PkU0O`l+zK#xWj6YFDlE&uLUVSEe&L3cFFj`FFSD=G{iC+d6Dw$=Z07xx3iJNEhC~N zKVZJIHb1n8h&$BDYKaTaf*5fG0;~YNhfRf7S~IavKQpoOtd`&e^T;yLcH|FR`stNTff}huilY3bo#0QS%fcPNv+Gl(VmSzVL==ovehp`Pr zsGo@!*4DCCf$kJu&%9FHQFG+?z;g^_(5DLXS;wd7{R~camvZT$>+p7Oc2$#cY{|-L zfOZ7`yxo3S20u{$MajQD|1~7;UO>!k#UNw*cmDIQxa~pn_cGtHBdp-RVs2bX0HF2q zDCPQno4;Y52kS`z0NPPzSCfCPy}!@1paq-(_j&Z}+_m zAnafLqq)HUJ#$Di1R&tkU;@>D`IlcOVgCZCv|*m=+x@<($4L`FoFL(E&NIAu==$`} zl;p4fHZ?zh%vhAQzssb*FYjSsHn1VaQ&uxA@)S5(|5a9zc7< zpDDFZJUreil#IwLE+6-^s?^(cbyF|wF6*A+BZz4+pxGavR!r0z`&q(CMACIsjL&P; zeLojEjf!-J3gbBpu73|LU*F7o5AiH2>Ua9$p$#NmqYU;x)QI6updo;UKQGbONJvSa z>vp~u`tSk5s+7qBfO8eq?V><~d6^Z$#%P#)s2Un`2E($qgQ8lLsQw`#g0mx=Q$uqu z>$H+z*e~m10oAN=}^ zkQhpnK@x>^+Ec-WHNCx0aieN56qjg4$1QzVs8F?4x`66$Y!$KEHp1z+P9Pug!_bib z(-*5baU8uz&)+4TSkg%t=lO({Q4_24^nofA_bbcG7nH=A0)yZg&02)o+S*dA>;3_K zej(OSFDy*HPwemO^NhRU0=o7Iidiy7h5>a)e)qM@RigCz(BioyH_HzwM#jc6ii!yJ z8ezdFaviTlggcwYUhS;v?gals#(yggfTpFloOnRPBvL@!BQGD_1M|c2Cl-et1HG5^ z{zLn^#x|yXSei4$&IHffkHTCDQ>wxjgAWAxpC~0iMxrS{|H*?Nfy!Guvn}sREirSQ zK(3sST&W>(BT!3DVh~vO8mDIdw$J)U=R4}MgVa14)BG1q9jMsTBN{Z)txwzi25F8h z?5rX#%NPIT#H0QsD=8~DN<94%bN3oj?K3;e8vKUP^KB%#mTsUd*qmD~{}%`frmKgf z`Zku3%$w}Bp6Y<=biU&&mF09~8Vi2;$fakLh-!QmCDTkH&K7Y>hv!05;HpsR5Qo=0B;b_#E zB4q;&uK0R3GFB5!C<`H+MMI2*63v2a+YGacr>^!WCk z`#e&7MY%nurs(xM&!qK6xy-x5 zJ&Cb%$I6cs`|?f;sm^vIo3C(pi`sqN!o=>AG?U!uba-+4Yaa5b5 zs@UO4MqzV986`R~`9r2oI$e!D5v_hJd~w`lV7>{;qQ;6L{14@Ow|wNE>U4qCJ5WMg ze-hjn!LrS2M`;818eUDNveU9HD=Qla=fG(E0|b?2GM`!?!^QmK)e^$luc zu2sskD|f*oIlXAHGVPV}x^GZZ$<~7RVBEhBe+x=H8jz1M0-_+9c z@=z`QJ-meO{3Fk>w9##>@crGDA%T5qqJcJrQ*YJz>f{aPt=)v0zvSX3nOq z^mF`q2WS7Qd=Wlc7e7z$&3Mknf%xv5gSvhzf z;jq1{x2KqA{`rOo6gHt*R~mC49WonaQ*!3W=J92As_T0CC1ajnE0GQACS?}N z^0NH~#l5QIZCg2bgdn}cNP_O0eO?;F{*=wZy0;DvN3$XrpYi+g-iY3vr8^w;1y=5E zx+YW9%>`p|h{tkYYM%MixY&0W$mx&mIOz#bsv1$W(69KGxTs?BzS<@Dl1TlOOz}Nm zUw9Cvs(wxa^hVK1d#9#LlHd~vC}jSJ7yr;FaNrI0{M&W+~08=HB~n1s%{+nA>lUQyq_HgMSiz6*01*_vyk;HdcM{fdqU~ z!Ks`XBxSo9p_cM>ypA(n!!5-++1Y-te7*QquF_C=*s{W4?Af4LnLUk@t(!KRg!JSw zog;1DVyncrnydVC?Z$oc28U9Unc}&1miG3{DYw ze9WV6t(=Fe>R(4)_YKcZ>-ka}#=2booUsqnb`gzG8=Y6eNT4YK@+r((w_>(rnWkgl ze0M3^4vS@0e^pPmNMn9}-!fSyNv3*1W!c^>$Vk2uu{N|Xstyj^l%KKfIKoE6qsWTb z$Q_v7*~Ngn(coTV7xMzo^e92aZ)-W$XmWl^kG@VL8^fr-fk~j}T4n#-5kAdsFtt7m zS9V)>v-InscfQF^{EfI`P%D8s7eOT)c-SZ*g$~U;LGS+gN!Z$&f%5Hj%$Yw`ea=;! zk)x)rZpO*>IQ;O5YnL1Z!Mi{iG|YF8zPa zA!Ka`R0S01EJvs$QkfhK;|7fo$XxC!%`B-#xs#Vo;Fv`+lD4ZRvI-+ZX7LrMIXQ$F zJ9Q&{j`yR|vZ)OeOzqy^9OE(7RkgY9U$z#Etsj9> zG_Qh_xa_1{!5D_)+bj;W~@F`<9Uzl+#vk95}LU$#J;9@t-7cc|<=&ciQbaQBitn z2#YII3xSbsU?Zkr+9;E4d(B0TS5K-B8Pg>#6_p$BwVKIUk(Hp*Lp5PFH%n(q^qpwJ z&{4B!93(!(MI38>%u53@s@ctYalg)t;tarDPK%cNdNCR|H-a(6TN@i2vSI731Y<>I zcEl&nV|* z-C@?0z$cKFG%_|vRk$)i%$OMJBpgqnrw|JF=POmGMmF-e_L5f1RG6xA?iC!Xi4mCHKEAx`W|jfvYv?D8Km znH-ZPp{4q?5atAid2sFjhma>JkY`< zkEPr!UybZi?31hplj=xHtc$}9XrIGjsmkP{b+vuqbZJXjW4mT`b-m|jtwC49`CLq# zrsG?)M%^sjoC*4V+S}av2#=Jr@%rFu?fiW8dhryuJ>|jE-HRPLk16M5*}>qmqXHQG$P!)iXqK%zS_0E(j&m2e6FM&!+J^z1FQ}A?Iv>B$ z&~UjFKDFyp-`dY``8qyul?X$yHFVQ(@j2HW>9=2EL;?H~nk{}H{}RH+C%4g2L%sbJ z`kmJ#ETupbzJg7e%k~ookuF` zqtdw*Pk%mH1X+QwaBS53I+ZDbWX^N zJMHH4Z#Pi|rKZ!dbmLn{VL$IFSV|B5Z`LXlcgNG}oG-`s@A+T7+S>I7g{Zi@Yz!2N zaq^%V-Lxg@ZI*}b%~|9SnqTkA=vTwSgu*Q36^UhkII&e(QG)1Or9CG zl>Tx-!ILnJnTj7{@yjIn3AZ34F4vcH{Fuh1_=cP8AbH30g-lUQMPtQ>KzZ4G%GD#! zwY#kWIY>EqViq!i4Dbz4?R9m{luB+<(RN8J=zROcu-;&1Q7|SlC4EUgk>G;bdi`gl zs#!d75Wc3#yj{*w+R7?YY*G@gTjetsI@#U*x$vti$Lsy5mX@!3*_?bZ%fk+6=6|lq z54W%iGv&-{{ZS*Zf7ykn>T202wUX`&*B9IX>G%m;J#Uc7i~|*92kf`3tSMuKXJ|4C zw%<1}+p8fRA=+_(t{NhTP~OgC{&+F?vC*v49pdRuTqEo0Xs2fK<0v8jNl>B4SlkrKA3?)EUp!v| z_DPBrNAkl%6x?5XM4V>Y{^_ij#1}#;=h5SW+=>FhQt6DpjhqKcROyuP?+|Yd zzIf21+C@U|?=QHELEfN&#p=aq{{H0GLgwxc0ZE$wd_zd!pO^K=SW2Q2YU|6Iqayqj zng6~rLM`_vaMVvZBar_Z^xqcr1OjLQrW8Mt*yj2BEPublBIIxBc9$ZB`nCN09ZK;x z0lstMB3;W@2K7qvO>n{SCAL)r;v66EpCRA#oFv zA0W+7nmTSX{pOy6|0RZ8HxFl(qT)TC)!SR7w@xDat;Qijgp`lW4%wd?;x<{xjcsuL z1C_L9q`C;*Wis@}>_xEr5XKz7lw<17H?0742nyH@pNXE?J>mDYQ|mb~2og!i%#6f; z&vd{+xjR6L8TsX&ym_Y-KVIe`ER@H@Kv5__m<~mr`z?ly&K5~BMD3tee~l zG|;KyM{(y1vTPpTkXEUCPbsM~SuWF%n(bGkA5D5$5D7DjZ#z2ZJl=X*azF-9rD5tQ zngV_IsdE^p@@DqZ%ocPWUBDlPA%Lvq4T80w0m9422mfQNkzD};Uu4UC_wOG8zw|%` zJh+d0XTksc3i#2h>4%oNAeEomV37fbfBocZN0{tINGybMeka3(d zQV1N{%VgRy#p)uhDE=w#tFd_-JRuan6O;!B6@l{6)HF=8edLubFxc7@nF3J3FDcoW zs5}K851t6zo0Qs>9D6hlB~*og8K-hQkB@LlvKR#-hq(WEI)t*2hFf&+@{G1#lmUeY z1}|AWNOJgS4AFRfvCM!H6tu^WnO!h#RiHMhz|`hlF|?4_U&}5rt(LMv;%a0k@h$Gw z?^NXB5fYOX?<3JgN^(4@!h!(Li*+P^~6uj zWj|GE>DxFwL*Q?rnsf9%BSh|mB!LG!6qtRFFv0h+?eRc;F3nq-sK)QC#Vw|>eYX#Z zdW}SyuQLx*{=~x@MMmx^*EJ?{Xm(B&G9ytZz=^j$0*$PSH#PY3i zMdg3DH~oq>-5$+PamL9=f=mu^i&@iSRpO-eg*zAev0ML2pVl}Wo*&q7J(?ogvSlQY z1U!XCNH;glIjguHz*{wnCq1589`-K>=JikP66{S9ho^;Fx;Gmk+QRs;pw{}kRE379 zo`=hOJRaf?Xan=wCwB2UJmE0U$eLa$ytT9h7S{{3i}})oYpxkQ>9VXCKC-^Y&yrvA z*+>G&@f9HnSZ4}B(S;oj3`VttfP{r20lZA3ef|}1N&fYSOH|t~omG(DGdY;?e-6bW zs!Twb!RhTc@lnOXhScaxjYQ3k1kmD8h#Jp5Qg)2w>BQ(Z{S)Ayn6Q*kp@5d>{{aRD BjT!&| literal 0 HcmV?d00001