From 591c88583a1f3dedab9e3d16f5ec99cfa757e683 Mon Sep 17 00:00:00 2001
From: Putra <sattvikaputra@gmail.com>
Date: Tue, 22 Oct 2019 17:05:02 +0700
Subject: [PATCH 1/3] fluent-plugin: Add client certificate verification

---
 fluentd/fluent-plugin-grafana-loki/README.md  | 16 ++++++++++
 .../fluent-plugin-grafana-loki.gemspec        |  2 +-
 .../lib/fluent/plugin/out_loki.rb             | 29 +++++++++++++++++++
 3 files changed, 46 insertions(+), 1 deletion(-)

diff --git a/fluentd/fluent-plugin-grafana-loki/README.md b/fluentd/fluent-plugin-grafana-loki/README.md
index 22f9a8da6b79..177a5c4b6574 100644
--- a/fluentd/fluent-plugin-grafana-loki/README.md
+++ b/fluentd/fluent-plugin-grafana-loki/README.md
@@ -166,6 +166,22 @@ If using the GrafanaLab's hosted Loki, the username needs to be set to your inst
 ### tenant
 Loki is a multi-tenant log storage platform and all requests sent must include a tenant.  For some installations the tenant will be set automatically by an authenticating proxy.  Otherwise you can define a tenant to be passed through.  The tenant can be any string value.
 
+### client certificate verification
+Specify a pair of client certificate and private key with `cert` and `key` if a reverse proxy with client certificate verification is configured in front of Loki. `ca_cert` can also be specified if the server uses custom certificate authority.
+
+```
+<match **>
+  @type loki
+
+  url "https://loki"
+
+  cert /path/to/certificate.pem
+  key /path/to/key.key
+  ca_cert /path/to/ca.pem
+
+  ...
+</match>
+```
 
 ### output format
 Loki is intended to index and group log streams using only a small set of labels.  It is not intended for full-text indexing.  When sending logs to Loki the majority of log message will be sent as a single log "line".
diff --git a/fluentd/fluent-plugin-grafana-loki/fluent-plugin-grafana-loki.gemspec b/fluentd/fluent-plugin-grafana-loki/fluent-plugin-grafana-loki.gemspec
index 78e3030adfeb..8bd4b77c77ff 100644
--- a/fluentd/fluent-plugin-grafana-loki/fluent-plugin-grafana-loki.gemspec
+++ b/fluentd/fluent-plugin-grafana-loki/fluent-plugin-grafana-loki.gemspec
@@ -4,7 +4,7 @@ $LOAD_PATH.push File.expand_path('lib', __dir__)
 
 Gem::Specification.new do |spec|
   spec.name    = 'fluent-plugin-grafana-loki'
-  spec.version = '1.1.1'
+  spec.version = '1.2.1'
   spec.authors = %w[woodsaj briangann]
   spec.email   = ['awoods@grafana.com', 'brian@grafana.com']
 
diff --git a/fluentd/fluent-plugin-grafana-loki/lib/fluent/plugin/out_loki.rb b/fluentd/fluent-plugin-grafana-loki/lib/fluent/plugin/out_loki.rb
index 123bbeea73b0..48b54dff2367 100644
--- a/fluentd/fluent-plugin-grafana-loki/lib/fluent/plugin/out_loki.rb
+++ b/fluentd/fluent-plugin-grafana-loki/lib/fluent/plugin/out_loki.rb
@@ -40,6 +40,13 @@ class LokiOutput < Fluent::Plugin::Output # rubocop:disable Metrics/ClassLength
       config_param :username, :string, default: nil
       config_param :password, :string, default: nil, secret: true
 
+      desc 'Client certificate'
+      config_param :cert, :string, default: nil
+      config_param :key, :string, default: nil
+
+      desc 'TLS'
+      config_param :ca_cert, :string, default: nil
+
       desc 'Loki tenant id'
       config_param :tenant, :string, default: nil
 
@@ -78,6 +85,13 @@ def configure(conf)
         @remove_keys.each do |key|
           @remove_keys_accessors.push(record_accessor_create(key))
         end
+
+        @cert = OpenSSL::X509::Certificate.new(File.read(@cert)) if @cert
+        @key = OpenSSL::PKey::RSA.new(File.read(key)) if @key
+
+        if !@ca_cert.nil? && !File.exist?(@ca_cert)
+          raise "CA certificate file #{@ca_cert} not found"
+        end
       end
 
       def multi_workers_ready?
@@ -110,6 +124,21 @@ def write(chunk)
         opts = {
           use_ssl: uri.scheme == 'https'
         }
+
+        if !@cert.nil? && !@key.nil?
+          opts = opts.merge(
+            verify_mode: OpenSSL::SSL::VERIFY_PEER,
+            cert: @cert,
+            key: @key
+          )
+        end
+
+        if !@ca_cert.nil?
+          opts = opts.merge(
+            ca_file: @ca_cert
+          )
+        end
+
         log.debug "sending #{req.body.length} bytes to loki"
         res = Net::HTTP.start(uri.hostname, uri.port, **opts) { |http| http.request(req) }
         unless res&.is_a?(Net::HTTPSuccess)

From 23c4c02917be6a7e7cbfb223819e9b9d27584266 Mon Sep 17 00:00:00 2001
From: Putra <sattvikaputra@gmail.com>
Date: Wed, 30 Oct 2019 09:54:03 +0700
Subject: [PATCH 2/3] use OpenSSL::PKey.read to read private key

---
 .../fluent-plugin-grafana-loki-1.1.0.gem        | Bin 0 -> 13824 bytes
 .../lib/fluent/plugin/out_loki.rb               |   6 +++++-
 2 files changed, 5 insertions(+), 1 deletion(-)
 create mode 100644 fluentd/fluent-plugin-grafana-loki/fluent-plugin-grafana-loki-1.1.0.gem

diff --git a/fluentd/fluent-plugin-grafana-loki/fluent-plugin-grafana-loki-1.1.0.gem b/fluentd/fluent-plugin-grafana-loki/fluent-plugin-grafana-loki-1.1.0.gem
new file mode 100644
index 0000000000000000000000000000000000000000..bed697958e38b0df50f2e7fd71bc7815df60fe3f
GIT binary patch
literal 13824
zcmeI2Rcs~AlIM?^nW4?tW@ct)X1mP{ZDwY-nVFfHxy{V>@iDv2jP3S*v-5CAcctB@
zdv`SYq8>6+p{k6G%KE1i^|Lp3Gx=uXX2NLc4ft0X^Iyi!&JOsG_AmSAmW7p_6~MyA
z!NJMG#lgb$m!E}=ot+Cn!u+oa=)XSqyQ`at%U>aRSecvK{a437_5WY~|6JQY7WYrL
z|92e{$G`$S-#QGyAyzcE9G00;{hqZl`W|T0cd${>)YaWINU?tCM!}#)=X~RIJ}2l)
zsYCVUJD}*^D%GIHGF`cly<Jbf&15^sp^y>HUsq;eHOLjaj4}Hm;cQWG>}tq1*Gd*G
zLvyMRsVvAs)}l{YYwlX6P4)mqoo@Vv7rR~jjhh}#R!cG2E$Mg!_V{FTGI-1q7NKux
z6^o*9x5a^wZ(PNkM~y-4E2Axf5kz}rsJcGKHa6yU3H13?ml+{>z#mck;{~%UB}0m2
z{*5W?Je&`qnRJ{FaeU?id}WRZ|EcVbgft?AP(f5>s1?`-s|0C^J7>Mw@^f=Hpwsxy
zzI<?hZaxfOFWO9ZBtadPU-!@5C4-!2gpi78Xhsn$wkr#IZPWq%8e9zI)#-Es?zXV^
zyl;B$U|W{nS;q-UzlfgwGTlAb+Z7*y2j9G}nIee{3uc6h-#{xN%qPFT3FRK1b2AaA
zy*=pm+9~JBy$H2#`U8<VHeC+hqfiF3LB9%OmTk{?9V+H)W1x%2LsS<r)Md{GOew&V
zoYBG}9!;OU)t6dUU1)s>T%Dl4-_)SfXsH~5CPSh<HOtIP?cEG!Ul%QLO*)d>9WAcs
zEVy}dzYz6imo`OZJEgAR3M1e$zzE_JA{d&B)mw<EW+L~+iso-dyXgj-Fr>BL13Sp3
zbg#OVC2}?*d17Yq(0U|OAR@(v&ydl5S<v9}3gw%F{Xa!w-TMwFy{N=#2RjAXf4MFQ
z42yA^F{OmR)}chwq$exjO=$sdv6?n?`kz-MwLUuWR%-(-10X~Z7VWXdJX^?&UYPw2
zTYqM(_`%9Lh~|{dEm@A-YC5l^;WP*{d3<a+UUn(z|47;x9p(i>ta|O_^aIS}CBQx4
z|GR!S|5M`n-`f9|0{;Kge^yo&j{igd+5S2P{?`A0!zTNO{$B{#YHew@eOwqh+g!z7
z>XVb$C&g2jkOsBLtNjFL&1K9opIU9KEr^hk0^d&g^nX6+p&*d9<ju|O-d_Pvn>EY-
z@R#xOd$|LhK7g77jx2pFeco>mn1r^Dl@6YV$N7x-|Ja?xNF@+m^Lw@2L)KmM|K4AC
zvNU~f-rZBHWTgkBRClIKd^x!4-sRs8m?)>bdcR;8n$VA4yA`*P1#<kUZ&G&7i;5U@
zH~LLEUDco+9kI1#1mv|gOp6&@U0qqxKwab%F`RBg2g=&FI_+-^PCS>JURxRU@C$AV
z@$>Nu@?zD;D~)U|h4gXrc)Ggud_GYcUM*F83@<e&592uA!ZS2rMEdc>HFrRQ)aMuH
zTOOk}MQ4U7&?*txREA{abV_7HbttI3uy5&EW)M_pH*muAF}>6kZd{C*!pw@bQziK8
zZn|JoBc0^%qHa}lCgGTxAkJ~TII?4eqI}_vOmWkds?;saG3t7>!R(Tl(j@q^)5-cL
zzmWncGH}!7&@_+unfCLog?eYZ@Q(QDq3n3+L^CpGtbUAzzy#)mMR6CDY6VuX@{@=#
zNpKfxAYukW<5s6nm;^#Ir$x6zho(v7JxFLv-&2wnynEvJ=$fO+XCGQ;S$b0nDC>_N
z<*e-?LEL_2f{mBZpmzb`Mrg=6i50gQmMTc86cIdo+W1q(2>z%Cd?iJ79t(Ju$c&MJ
z6(4u@#_E&6r4h%s*pnx_bu!XWIL2@21K5j<!<;Skk=9<C9e<T{2-fIg5f(jEx%UjB
zQ#hbCb|sC0W8Cp;`G_F0Plxcvy|pN;g1m&f0Y?gy4^y|0&~~9`6CR>~R$bM62Dwpu
zvea)DA-LYw7wz0vB7c%9G9FY6wZiY+M;HnlLbNoB3Ind#HKTF!USh)ne>M%-ls9Za
zildIu*}H5O{ZP}vWX`=(gge0LkjRo^A!MMaWQB}xmQh9fDhw-;mQEJ6gzEvrTji^3
zNa{noi5iIx_7r!qAnJ`rG|zP>6lbX+@*G4T^{_mC`y$XV^!3!F?a)>@{wwKg2DTSG
z7xg_eL`7U6K<gX4RCsvdscccdq67`DK#P9Azi_YQK?VtD3@+4HYS06V<p7)$bca4)
zLwzr(B)z5=t8Ta{dy)oOqEr86{0}J;qh`twmOe$K3<_yE4_YLfD<T~rme;R_JytkT
zKinBT9)tWd&+x36Qvy0CG%HoK8Yk8rf_=ca8i=dL%uUr2ZXVSZ#{8{dMb2#xaK|f;
z)4(PVxq@sri{X3-G$l1Tu|+MT=s)A3znCKHgQPc<4T4p<q=EqvojVsO)oYm&;tq@#
zitd|JM5A2=ZKG@tcfq%lxfIgt&m2r_t3eCbpxXhYEl8Qn$S7S{3M8kZegy9IFz*_}
zDOea~J(yY@m4GXfUPLtL<o!?{Xz|3hY?%5wqxIOhpth9t@+^Vjhwt-qCd<90rwu<$
zet3PdTt5`b8Gb)3K5<f%O72I<MKCHCw1bG?#E|+E;)0p7_$YhMkHk|S&PB5CP&6a)
z)8+AJOe(3i1pR6I3V01<=a-gf6;QM5st7QQn#FLpP9*|p&8o8<g*r~3oS^qS<&=s?
z*L7YN8$AuP`7gR&xcwm=F(lMCEj06zCF5G#@M7ky9v->~yDB2J@>}Hn36vzR@D&|9
zUa#D?Oq);g_Py9!KGkU^N%F#g7{U~1;!0*@jQ!$j@DuYxU-itfK4IFMM8+>gs7j?S
zL!vKQAAAalD+YgvZt_Fm*iCalhmiWR+B0lAt5~XX8k6d;UkU9TC>KKIe@dRA$@{nX
zUeszEO-Xt0s*!Ur-ZaE{LJ)hX(l*_-n907Wb|(t`7;`O?F(jZ^p0jyDi!Z{yEt#Z)
z8p;kIg{tZs@{$@mO8S~-Uh*D<l_(jy-kK9RS>*@$f*i(FE#jjQO7N#upe=F0$AE}9
zsDgNDtjrX7AeQn5qa!wnod<AveGsZV(XTZi1n0mv0k&&bx3Kp(l7O`^EbJTNfaUPM
zNVMyzx!+=XQ04XAp7|guvp$tlTV{_`x&R(5V<LvUACM!)P3h^0paX7!_#Sj7S5%Gb
z7e_zG8FdG*7;D5ecus49%Y8J(Oq-s)Bs$cNOV~Z-8yxLBnsxqy!o|LTJq^IqBO$K0
z;w_)WS;0L9#|~1#k%5hMs0U2j*<cwg#D@{LzdH1-j2_b0Uv!M+Bs-XZ`|Y8fDn!aY
ze}aAQVpd?3#bk!%kv$*-3yg*+%G18l5jYF#Mvj>omXk5e1B={0_2rciLWvEO7yh_Y
zny2wnVKu2CnvZXKf|r@eNG65PkhEBHYLsT)o@OKAHNpFy4sD+l$^yzB_l|&|UnCQB
zuLVvEd#A$3WR$q-20pQ%#l^;5-b3|Qd!s_1WG-W)EfafEtX7v>&%hlE6YkmAB7mBc
zwO|w-ox@6)+Za(J)Jpo}!Z5AA9$L$#u;#JA?$M8Il^nW(fZw5~-c}{*mZ?Y)6Idqb
z9`axKlm#(mJWH!OMvAFi#v}pE7J(juB4TvFQqWH-W{_;erbBKN`RpR$)I2$*5>}dt
zR?TeGm^tfUMH(iC6*t}z)tsk>-4|u?MDK7dQFFpJSVsKg=Jl`@X2n=-EML4xj9-@F
z;G4Wi>59!9t*EDi>o1%fer^%zQWPTXXq?r;6KKSRQV{*Fwu$E^Y}q$@>^i$)qM@kc
zx|J#NN7i}5@*__>r*$GzV;Ta2)=)W|VxDOH@mzs5EQDyOY1eO?r>H`7Fh~=E?Br2G
z$#@(-@x1~(&IkI|vBk{(CnbtO^pJaEIi&ec4;4L^Dx*4SV;n4Q`Dm;Z^=i9b`<MDZ
z(IIObe_JqxmY)JhY=~yJ)*Vi9ixSX}Ys`#XJ&0FKDHa^hd}bjVt$vLt<j1L@+JdaB
zmb*^IHkWEd1|)cRT8zzaG9nezI*Q!Fr#x?FLRJ&8AC;|j-p&V5WOf931^Ilv=Arkx
z8R2$m+`UoUI(z+mf8D7M;LGR?(l1QuO@`)?&NIi-jJe5EuN7gXsz!PlI^xwXOS9dG
zoWg!23|6;Kdn4A5(y<WKB>q%3;Xbnb^@vGb3&I^NgMhHGGIr~5$E|Ws?ZOBbdY|kW
z`_`wwhM`QB$14y*<$6pHI(ze4FdB8S@)cm3Dm4q?(9Ytd2qT1z1Y~MA7^B(mlcuL}
z;vJum7)y?ehNFh&&G5jBeY8efBmfWjooMWneNn|aKv)7Pyxh8N(q;^{onE$_Lo`GE
z2(cc%@ei6T1-6KOu@nz@@9?mD`BD3{@{Zz((?wr79BkvvVomp6=6*C+F2N2`MS)pq
z)5)jQ24_Tl1Qyxc5tARcb&cv`c2)#$Ys#)RL(EJ2dX)@FJn;DbV4=h*UempIS@XPM
zY;7<5HZtYeTIAaWoz;htO$!w>r6-Ce#AhiHwK`neYnKOMT&k<lJhXZ~rq9~B_*1I2
zB{ohSKT$Z2B!OmqAr%m>k&9CSe#;3#R~2b>htHWcg8OGN+AwJ3m@7?zX;IF?%eqES
zO>1^({7ZHeq5I>Q|I_PQsKw?C8M8q69_9M?IQhrK6XGLE#ikX4CZ>a&5LV1Byf6<d
zNmzD`ARcAbBz;&>mK*6JF4OB^jFLbJ0`wV@GV(Da8@R$qdBdrw@_m_G-B3&yY;1ik
zn=zs;>>FJ5LT6#jDv7y-c$dW-%I<AL30Smx1e=S#3|7euQ{c2Wd&XnZDCP0PqgJ5I
zJu?cYye-L9cTF;~8p7-I*VPqr_EUJPV5(ec_;4YmM*g^YK-%DS#sC-xt=)W3=4R^e
znnWrwE_<Za48YiOvhc-tv?w+Grs60HC;;3rO%s;B;(!vS0n^JY@@N^Lk{FDW4t35K
zY`vj{yv#ThEfZo9d6qEtU>?^YFl`$&>3E$RJ-pQB+34ZzY4hWKcyFV9+;MIM#fO^O
zN6In+rhNZpglUSnAKgbvDEb;X;c0LusuSEdZbRir5k1*3s)xNYnPf6KTvCaF^e3gd
zim-Z3mA3Hl#@@zxh@kO@)&0%s%EaCR7tAg(VeaGTGYmCTKNQWgAz_~&|9hhL>B`>5
z!XRxs%Ed1Z;6*NA5ZDLgLvsY?_3#J^7~4**3_;Q%06xJv<0{XDQ}N>A&o97J=<X!Y
zihUGe^1wazQ1^w(oqK(0EeTS=^I;Qgm%rCYH&^?jZ!u@4cGWeja;`G9)Im2-`xrsp
z>=a;9_r?!9=P2L)MrEi6JX6!bAsa$4Ql?x$;*u^tsWOx$K_RNY(T2#+CgJwfM_oMH
zw{{!J9c@m}_5KE$OM$t*$?#J}#0O@Z2o9|>Os7%0lh9Pf*QcYb=5gEy$>51KQIy4f
zmkg99DBG*a8y?>%qa5IXsR$d{?9%ds4gw!flY=`Qa8krUaPd|tE@U}@b~5Yg0%h^&
zI@?w^+H51b!DXkeuwWTQu_?$a)xY6|T;*~&Ltqi{O=Ox_dJ!3nM&<MM0E%;%ut_c8
z7N{#wZ>({tH3nB{<jXXUa|l?2ZFxl+-~*@64??)o;BjGIQNKJ`kSW%iB>ysT!&6Ii
ztJ>lc24_c?cMUPjqXa1ht!Eb~2-D-v#PD77h+V>sqPV*4obPYaV*_;@*bGm<<(=d}
zmC9Szt}F6r-E5U5J-}7)1~X4nC80Ee*eh23<@Wh9E!K7S(M@AlM+O-0oQs;358Leu
zH$~>s<rtiZQgFT)jaF%11pyAWe#4WKB2zL9!R7;pu6&mlk|+&1M&7o&=tX7p{qV3V
z)rujRym;%P_u0FqFum*wT!(PkM%7m5Xm04QL$fPK6)4J4>uwNlVv9K{?;E6LFz`+`
zO&6kEH8AUR%h<*Xl1aag8>c2$e5~}`dRFElc@$8Z4(u)S-fIzYc{>z`h2gz`tcWkq
zx;VMJ`k#-H5P5!Y0c4~%z~?LEcKSf=S9=2BN0X~b4ZT<7)DPbYBm}aJx6cSm$^w~t
z*mdIiVh+n2<;f@qgaaFz7m3YMRlzOW=5|{RegtR2*<YrGXG&L}Rm{bdKrHOcHOF7#
z+<aT6|Kp{k+@few1^x`q4W{pl5D|~e-+Z}Zp`y8r{_xt$5UQ#?2MEjyjEWip$4XfB
zQY{{}roTsW!t<^nbWhCgWFA{j(HviFtx*nJ7A|r!B?v4Y;Wz_vZbo|_sd4p_WDIyV
z){fgwXLeO9%ym#mY0DpLH(FRYjgH(?`U0a|g9$)(>N>j%PBRpVIBY8$<=0%H(TvCq
z0_nX%2k2BpA`%0~a^-Vz1jLrSh?FZ<Jd<7AhRgX0w0hX9s_x;5!;1~?ehlUHoy6W4
z!ez9?2Zg)GKBsxjY5Ao!dsBfC42ZzME&iK;#ShMSuEI<8NqpGwiHTaUyr5$9W_Vm=
zeQ;(3o#tjGOSzo>I?Xw(7Qy$2SCr2j!i&p*0MwF&{@TxglPM{q3-<R<;%ojt%b%Y<
zzMLcMgUsfxiR#VVTRB*J?9)Rt6#bEUwf9<XY~E`Ut(C%#cc+ml7ARuqkuZ>RrKW<M
zc+{`4XLg02NY%<zQrO03G*TtwNot72buJfMZ0@NT4p?R5gEZ-{9a%0hfYLqH#c%6l
z_-UlyYX<Kct~^}e>fE$Ng^QpIQi%c=LrB~*Ld`O18fhPhna$+!3|3c8uNb{NY}%k2
zIu#+_m8!+1-nM;546f3h6D=!ee+z-kBXC@ze4J!y|72c@*3f7c`*a}Fc;J=c|IoBG
zgD7$|?g`EI)2m&uT7DyDNv2J`VzKBAq36a;_pBBcYA1=Mwv<V(0=CFUpcS92kI*^Y
z(cD1fdxx+oQybmn3i2+HLKmfz)>IEbi9gd$+#_&rLuH?ViQHkHLObk*z{~+?9mro)
zv7)R9#ze~2YnG2w)sGYl<}kiBiGQL5(*NABa`ffqemnO%dA#+A7;Z0zp_cO5C3XYu
zfC`{GR6$Xak0Opwib?_8f*WfgHYuO;&{?f8m(qr9jvy+K`b@+!9Q-&s-`1od;#6Ul
zmU$>6wI&e=nwj|K)QPpeDTWk}w=uab&tbtUAMdMO<aOhe4~E~jC>@UynHXH+rGnEU
zRT_~U1KuXF&W-8vY$sgVN@L|9eoVC*z&q1M`oQ^g#(JfSvTG?K0`tDH<pCx$UKs+K
zB5f)NiCikmzX64Nup(F`*b86>r1_wH>k><Q8otTj_c1hixZKzvn4Hpz_C|&ItGeTE
zRI-lA7UDQ+O7>0Va5PX4(__%G>nCc$>E+NGM6iq{)9Fw0uf<sC6k<=EGJN|MB<D~z
z93n&p(XiO~gW)r&^mG8io0Y*?lk)&)xV09q;m~2fgI{d$!Y0P#l~-?9=Y%_62Eh4R
z7%rV>WK6}+836SPH^96F3M^*iLBDCc%hg3`3XTS6#Jh`rc!SMFN=Mi8WgfAdPw91^
zP49Ej+oJ*nifkYN>EJY+yrNvsVs?oEc&0N2TfWmwl}|thJCFD9pxxc4v=wjD)Vn@M
z9lDe9lKV3Xo`Rjrw1-qucfQ?0%QA#r9dIH2%=;_4s|ns}MhsWlngr6h2M41~6!uwT
zL&db^J05n0i)2RUfqWo?`WZ_ASSef<BRn%?8LP0&MX0&-AtOGYsf62|_cB+2Z7KV{
zh7<=S`&}Gl#cc3hjI7&CSJcQNLY>`ep~kc?3v~NC_#*&O#~t2Uw3z0!Rkv0kWLqtg
zP8D`t6`uGUw}?9>G$YBQq6zEQ1z0wofi|gJWu<_Xvti!hYccIAYa?rpaRJ`<B^Tu_
zgN>ete)=A!vE2221I*n!C#zMCZ@3vRaiAA)!l_L_+|nj}h+ZG=ghUb(OdUDAQqG~-
zhdOexYUhE|{bQiG#ZQk~`Lv8NI+&q6(KHP3Sbs?FuF;LNq&y3!Y8x=jeb&D!Ufv!*
zcp|LmV8X*5YmuBGc@@)}fwsUEbY=(+<Pwi+R0>-0cF?xn*h0bWP8`Hkqz~dW@fGrw
zq51~)bE1@<_f+j*t%nt3P0&mrH0Bfa#Vf3JGuY#0m`Il8!%tbxX5FLGxk)?2!5HC3
zQD7+Cd9I%Ij@YFeG%A%D3aX)4?`$1eYh%J7UAEctvc8*?-X0ln2)m&cD&tcnfs(4G
zfnFLKqvkOqNvr{NY?>)elROn4-^RbxJ$RwlaJIs+{Fj*TFxTk0Q!KEqC-x}yl<Xtu
zr{@r`lY`g$OAGH$-fQ{q>?D}>kz5k~y_n?}1}(bf1DS_SNl;vKnRYNndm)|Q3>TIt
zxbzH_=H=M^%31(CyK9?q+V%6Cqxd1xwzqRgx+ZFPk&!>fCbpXD^v_ckkwEJm-4!Uc
z)j0L&`sJpW0&+t@BuYrVh%(@@3C<6MDxjFn?y{06+XI2Tae=kWEW6j<hB%QVBnr!q
zpovm+v1TM9VoyrRh<s}@*~~DViFlF?i91uySJnxJ5d^4BY58o`@|3!)dAOheOabp9
zg|Iq~I2-_{6t(10B|BQk?2wZXz+RNT7G)J==R)ZRY3dCl1C2nug^g;~`l4ge-8qIs
z7OG43EAe=MLeCm<7T@)g^0?Lbdo($_1C@;Y<vPg0#b1>yc~iY~94m&oEa^21Z-iPs
zEHTpkvUWcbP0yl(yC{uGM8I$z`fB}+2=xKtYe@{Z2I3XO+6(PzXxtF#b(mDC`pvq<
zT#32<Of!WIA?fPeK!TV`)n}cy4M#>-<gZL@eR;b=#jUUR4358yN!2<MA{*NidG-Qw
z#s+-Y#IgYGt2{mgRP&ZvQ>+}{_r%BU;}2VDS2Pi3_HZA+szH~Ba}}!ESS5zaUnU_q
zOV2^xLIirNu)Co~P-mwMls}qemIZT7KnKIA<b_|umA3E$3L&tR@SBph%22-|u9_$l
zECDVDxSN){V9q*@brRd8WcH{`KPa#T7EjDz_|Il^ad}Y<?0KNcVv-F%F8r5=;L{h;
zYi?l!f_|{E+?j3kSrr=$j}H$@5f8LaD85^S65z1TFj4Z{)4eCvTfB#mWtR$5Ry1$p
z3OlU^6ZH+Yf;YlM9t0EautY8&;TPa|sF4z(#W5s1>jV{j2ogWX+1T$Q{{Rcr?a&bL
zx=RRx=#P-k3!+Na`Gn83hTp{Kn8ihjgON4KGzY(3V~!$EMiD`_?$>%Dq!Hvm`GNRL
zF*|Q$zDykDrqJYx?YE6_`CSsS-Q%&r8bhpZO1!K-M<Ke11phS6uc!)H9PLzfaF3cG
z5Xt!(7>kdZGdm;g<6%A#E+H12keAjm+tueOuT5OKV)!!nk6ku8E5wAnq2oFC{Kcm^
zNeWz*M5b_lxD7L5$^dArB}O|4+QLE<Io2!i<@rFV&2LvzEN8s_>KT(v&&D4DSsHQP
z;PWr$im)xM-XdNk2a~}?t0}C7Xr(Kt`t#DV87bB<t_&=KpG@%|^p$dy;;-UR{(_G#
z)ayXeIeYNMj#1fByI=|22UH&_F?ej)q5cL!G9FbsX;t!Mj?AfVK`7I~sz}As9QXsZ
zN{VL&mYqLWOGs`;n_8(9G=DZ}XHl$Ud^~;~aU67~t6n7S0Amg9b=MCEu<Il-&AW!q
zr&{r5%K7tRy{0Gj{(J{7f@8rSM^!aewJb?CN`VgZM5-0xjH3LGHz|+8G=$LB&Q8eG
zcmm;%@$9J6ZKpNP8OfhWZt!>_HIz8YIKd%}Q;NeM5y_}Hexxl9aU$Gbb~G(w>GzAD
zEzc~;tW9BD_t;7Un{wNk7S=%^K)f?T)O1&{OA9Z9@Ur$<qO|}fHd3e+2E~)e6=n7G
z>69Pf3CrYn&}GpsT*yU)_nbc~Kuh68m0}!ZJfjKCV2sPWV4%L+IJ+?{{UMFEQ??B!
z%DV5(XnfLBF(wy^<h3Ic6wo@pzCr@Rcd{grj5NV4llC2H)T?dJ>2FV%HhbW?b3Jdc
z6r8}JI$R#T)I1M*4^DXC-v++gG-H<!!afs~z<8{5f9lER=js2JI}cFG<L@f{)86}W
zx-cyHaUH{C@>2e`d#&>M?pv)oirobEl1_s+r70J&UNro**tmDwc}->2ZB?%PYF-~n
z1(}aTUGY=$WqpT3<5*q^zqb-hzcQa^z9<WfXXh=*L}|m+!fN;&MilQDJ3Ty_T57?E
zSIpIIS6!X?BWhLO4dpesk`2Tc*dPue>o8^r8{7i|N4$KElUE7x1BPrI|F*}ScQDyB
z$0K=9A)4Gb-M0Rc*8?Kh*}GZUI}h1wSbLjG4Jf+m@Awmt{`=aulkAf(L1^Xk^UIwO
z@=8zGpO>;4m&QmObh@D0VXgA+&!tz|_sWZ#ovCw8ISmy<I-TY=D{CP!qmN~X2jUNz
z{ac1;ewwj<rO&zK2)d_FxEIL$!%vU1PujbDbIwC{hEPvj3`z)xU@Q9;ei*M@u~>*d
z8;bLB0ext02gUEgXdt5vm}oWs7{U3t-2x=HgZ6Xqofm~HVXmulu<vyX(Rn)Rr6=kZ
zP1~YXp6OL&Pkju-&r#1<TUrBK^7j?s=uVrZ5*!A<|Af0+JO6rU!FQ$Ryn#Sje*W$d
zZrjfe&L+-la<8871<~`y7!-#cmn}kS`4TI^av1WR?+|Gz+rCU-$$vT%j}n@0f`HBR
z6SM-{TC@D?cbZWzFE?J^$IG$sMKp4`1uugh(rW6+h{o9VmTLKJtQIx|?kWxhw!_vk
z2WqYlLK;w$Y2YaDLPMJaZ1u!4Yx!-*&A@&qO(&-&*X+!ueOd%^sI7EC8oDB#4l1X$
z`ryL|VkS%<$hqy{_w?rWVW_Xs=^>c@wL{q==Jv7l<*JuXC4QNX!uTe*e*o|PjLFvH
zh7Pk~j*w8uF&%}=Avu8FsLx%E2?fPx5^+}}MCLQ-Ma(z8($-{Y<(l6L`l%}9OluAK
z=BRdm4F_d4cc`p*EjrEU@N^sHW@jb672qk6=c6NzBYe(t|3$=Cu~S4gG~1s#n|aL>
zG~MBEHb6n&fvMPe`#q4O=^e1mJ%@qPLTiOACoZ7XFN`?mQY0{G-yZoz1zF*KG;p%$
z<Gc6Wto8QT1Pxz+WgfOieQ{7w-Tu~Szc<hu$z0&@`6!LO&XL3e<J8&j{b!Wt6&ADm
zhhq@9p1ym#zbeYx&8H^H#L<oiohQXOWlz0#oMQhH!lKi{2RX|~aQfYt7fAWiLyM5<
zo4fa$H}lI@@ud(FG*j=HGgW<8{SBPE{F#TfXoA*=(2lIO>n*nT{TC-_1?Oaw$h_!Q
zOFk?{-*~NHZKUD)?p8|ZkmRM_yq5#wYy2h@v7WUMOj39HmR*ak6Y<q<h>E_(TQDth
zzJR4RR{^SdV`~YbKoUO%<$3Ev4(W?E16PlkW2R@D6+ahaF2M{qu0x=r>rLWWcKwlr
z4bFmnhD~IKzW*ifT!)y~413G@u&+uL<BKA)cn^5!8)y&_-lYQ5^NpEV83ZU-y|}WO
zD=>orF0X3uxP=f@EbK|biH(|cZ{bq7g^Cp2)InGcbHW5tD<C>LG7Om~MW6-B)jvd0
z53`m>wsekhC;WI9jEpy|W@|`x)CFo<VRy>KZ}qdsF6&w>sEn+4`MTf+X3%X&e4YhJ
zlmn?(e|4G<qJ+Uofie*rB=FZ+wJ71@6TS`9I-KAQ?LH~a8BqaV!XHw;wcjThQ8ju&
z|AwD6lY+skAZec$c6Z2qZJ$wt^*TIuX5rh8sGQq~FkV>Nk^Z9|*GoKDiQM47J&N$S
zGJg7k)F@N>zTN3Q7dJj8mrc+QSI=?SKowd7f0O+gO$I~=fU2aoXwrLcr>ZEm<T>P2
zsunsOH$qWFHu~W9b#-!Dte+WFfT=k-<EqgA$RV)O{N>q>{p$I{1p5prH1K4%p8)rg
zB<aA0YO{>a;vj_7`NvN?%~?m`S=p<c<6}}O%cJH-MLqJ|2HSYr_}!PN2N)F8E25v<
zOw!#((!03G*F)EN<;)jbM3{>x{?-x>Tzs`uFAg(VRH-%<RVl!krWj9p8>VAh|4mP2
zEMv4i$(!A--Em(DLeI&**Tjk3&oUX9v~?(OcL$?_Cuk-LsF63+HZx#~E0{cj6XCH}
zs4^I*qj-7&n^f<w)-{I3l$rP1F#&wn;al1E52OTvDHbBU(*W>-Z&!t0T=sLt3!C2Q
zE5GdtxOZwl@l|&;u?>0$Cg)dNt(q^15x}7!AI}+IiXFn{j0V9e4erAbZ+OAVA2D}p
zA&Jhx1he<^iebMD5_BAB!zxM6<tf~i#29GuO1f;h{02u3_nNlC`67!lPO<Vxok(ML
zREvG8MSNz+wobRF^~6<f9%Qhd9e?%+T{>*kRAzY=@?lcrn)m+hnRAp-GFw1{)35(9
zdc;H&!pVYKV1E%zZ@7K&2eO|rB(rL4N0A_BG2h?D!<$Q}b?X}gqu%*p*?l2Io4fhS
zvsX@{QB3$tS#zEZ@sy=}DKy`%{|M3=Y@wL6e;?8AQ}n#a2<Gxw_xRb32$Sz5f*7SQ
z3Bs;n=ru))l3ni_L+|>dGo@|yv`bd{YF>Jk<Fd(v+sGB$0HIH0_vPi2!g#yZ+q!&K
z*3;cd{oZSg;m*bP2Q;hS=7H1%L)P=)6|YSDh>E2KR4@KOT8)!jN60MAbHiJyqBE%?
z<q2Wt&7*pUFVV__ey1<c&tBv&-?Bq6AmEeNk&Ct(56*QBqha!V4(8f-dEBkF;mEdK
znKD%ZN-08{t~D-GW8I0%7qTr`*$k?N^ZN`>Uj8bvx3fM-O)yMYpS#~%%sI!@M8^wl
z<)43EQfk@+g|-Q2h%eH@-YtG_H|60<nDhQhAY&}Af>Hc7s8G&)eM}rD?5@&>w9=!M
z%o|@~&=&4FNuYu-5d}{|iUfbkK$a;T8Oiv8<e)k9J-~GbA<9peQpkY5Shp_{UF-N&
z5`~6o1;ky9oWjS8_}=BSV9OkrFm@l~p{UIW<d9rV@NmW<-^1W*FX6>!^{Pg<`uWXX
z6_C8_ZHY&#qY2WFb2Shz$~>m@M}W2Hjga8culE?+EEQyLBc4|>^2vgBB95R-{H_39
z@mq4n@i)pS+6s45nU)k@aZ1M@C;!tmC9|EQLLRAEoJiDtwH76(4f8RM%P%LO$i6Yr
z9c^!87bS<(QB;g&y&c;~XM)9g&$BuXa;gv6mYwcVKM9c6CQrHTN;iH_8{9;TfsOj+
zq^W%^t`YAg&_*VzU~_8-uJq(jjz>vhWw+PP&M_L-O=}_y#GF)xz!SuvPaQ?ypN2Y|
zms|F$oUhamoAdafN8|4T6t;w+NpS+1?oJI+RDn;{Oc|vQl$x(v3GE(T3E6$%s*%UK
zhr?kW&%6+iqG6rG{kPPAJ}b2jmQMcjYXAM4_%C|t^AiG)o2OL>_}9V3{{}|tfASP&
zR_125uHWrl8NE#G?fx|s;D4ae{}=w7nVo~>pZITfP8QC;`M-b1zWWFNXP&?luP1^C
z<(eys^JC$gs|IJLYkr{IQetutSw7GRBOXkW;?{8G;I`xA?KOygZtLUENl(!MmXQCa
zAJ8jzo@dKRGf_(zuTfYvGy$K@emC$a286E;Ib%UEE*7E%)LNwz?7u4kByM-%qdJ9C
zNk!;Ash_M$wkpSN3tYyRFxPfNJ7xdOP6qotU?;6T*Qhd^;z?`fVJ>58I&G%=T2IHv
zJim$ltH<xgrY^<sO9T4pWrQP7q|E3eBlN;fY-zfUlLbX>NcCDrHr*lo%au%XdQjBc
z@+Qu2=D9IJxG+-*GQq+3<p#SOL%?<e|EvgR{JDd7Xzc?%X}Neg#6nhP9IYAf8}!=h
oY;67o^Q6g~Y3~QbWM0_TGT6W4Rs222-x>Hj1Ak}W-<pB{1w{fO<NyEw

literal 0
HcmV?d00001

diff --git a/fluentd/fluent-plugin-grafana-loki/lib/fluent/plugin/out_loki.rb b/fluentd/fluent-plugin-grafana-loki/lib/fluent/plugin/out_loki.rb
index 48b54dff2367..f8d5d0164a72 100644
--- a/fluentd/fluent-plugin-grafana-loki/lib/fluent/plugin/out_loki.rb
+++ b/fluentd/fluent-plugin-grafana-loki/lib/fluent/plugin/out_loki.rb
@@ -87,7 +87,11 @@ def configure(conf)
         end
 
         @cert = OpenSSL::X509::Certificate.new(File.read(@cert)) if @cert
-        @key = OpenSSL::PKey::RSA.new(File.read(key)) if @key
+        @key = OpenSSL::PKey.read(File.read(key)) if @key
+
+        if !@key.is_a?(OpenSSL::PKey::RSA) && !@key.is_a?(OpenSSL::PKey::DSA)
+          raise "Unsupported private key type #{key.class}"
+        end
 
         if !@ca_cert.nil? && !File.exist?(@ca_cert)
           raise "CA certificate file #{@ca_cert} not found"

From 7ee3dbc5ba3a9fee4b4c018dbf0d49d98ac0da59 Mon Sep 17 00:00:00 2001
From: Putra <sattvikaputra@gmail.com>
Date: Wed, 30 Oct 2019 10:03:19 +0700
Subject: [PATCH 3/3] remove gem file

---
 .../fluent-plugin-grafana-loki-1.1.0.gem        | Bin 13824 -> 0 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)
 delete mode 100644 fluentd/fluent-plugin-grafana-loki/fluent-plugin-grafana-loki-1.1.0.gem

diff --git a/fluentd/fluent-plugin-grafana-loki/fluent-plugin-grafana-loki-1.1.0.gem b/fluentd/fluent-plugin-grafana-loki/fluent-plugin-grafana-loki-1.1.0.gem
deleted file mode 100644
index bed697958e38b0df50f2e7fd71bc7815df60fe3f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 13824
zcmeI2Rcs~AlIM?^nW4?tW@ct)X1mP{ZDwY-nVFfHxy{V>@iDv2jP3S*v-5CAcctB@
zdv`SYq8>6+p{k6G%KE1i^|Lp3Gx=uXX2NLc4ft0X^Iyi!&JOsG_AmSAmW7p_6~MyA
z!NJMG#lgb$m!E}=ot+Cn!u+oa=)XSqyQ`at%U>aRSecvK{a437_5WY~|6JQY7WYrL
z|92e{$G`$S-#QGyAyzcE9G00;{hqZl`W|T0cd${>)YaWINU?tCM!}#)=X~RIJ}2l)
zsYCVUJD}*^D%GIHGF`cly<Jbf&15^sp^y>HUsq;eHOLjaj4}Hm;cQWG>}tq1*Gd*G
zLvyMRsVvAs)}l{YYwlX6P4)mqoo@Vv7rR~jjhh}#R!cG2E$Mg!_V{FTGI-1q7NKux
z6^o*9x5a^wZ(PNkM~y-4E2Axf5kz}rsJcGKHa6yU3H13?ml+{>z#mck;{~%UB}0m2
z{*5W?Je&`qnRJ{FaeU?id}WRZ|EcVbgft?AP(f5>s1?`-s|0C^J7>Mw@^f=Hpwsxy
zzI<?hZaxfOFWO9ZBtadPU-!@5C4-!2gpi78Xhsn$wkr#IZPWq%8e9zI)#-Es?zXV^
zyl;B$U|W{nS;q-UzlfgwGTlAb+Z7*y2j9G}nIee{3uc6h-#{xN%qPFT3FRK1b2AaA
zy*=pm+9~JBy$H2#`U8<VHeC+hqfiF3LB9%OmTk{?9V+H)W1x%2LsS<r)Md{GOew&V
zoYBG}9!;OU)t6dUU1)s>T%Dl4-_)SfXsH~5CPSh<HOtIP?cEG!Ul%QLO*)d>9WAcs
zEVy}dzYz6imo`OZJEgAR3M1e$zzE_JA{d&B)mw<EW+L~+iso-dyXgj-Fr>BL13Sp3
zbg#OVC2}?*d17Yq(0U|OAR@(v&ydl5S<v9}3gw%F{Xa!w-TMwFy{N=#2RjAXf4MFQ
z42yA^F{OmR)}chwq$exjO=$sdv6?n?`kz-MwLUuWR%-(-10X~Z7VWXdJX^?&UYPw2
zTYqM(_`%9Lh~|{dEm@A-YC5l^;WP*{d3<a+UUn(z|47;x9p(i>ta|O_^aIS}CBQx4
z|GR!S|5M`n-`f9|0{;Kge^yo&j{igd+5S2P{?`A0!zTNO{$B{#YHew@eOwqh+g!z7
z>XVb$C&g2jkOsBLtNjFL&1K9opIU9KEr^hk0^d&g^nX6+p&*d9<ju|O-d_Pvn>EY-
z@R#xOd$|LhK7g77jx2pFeco>mn1r^Dl@6YV$N7x-|Ja?xNF@+m^Lw@2L)KmM|K4AC
zvNU~f-rZBHWTgkBRClIKd^x!4-sRs8m?)>bdcR;8n$VA4yA`*P1#<kUZ&G&7i;5U@
zH~LLEUDco+9kI1#1mv|gOp6&@U0qqxKwab%F`RBg2g=&FI_+-^PCS>JURxRU@C$AV
z@$>Nu@?zD;D~)U|h4gXrc)Ggud_GYcUM*F83@<e&592uA!ZS2rMEdc>HFrRQ)aMuH
zTOOk}MQ4U7&?*txREA{abV_7HbttI3uy5&EW)M_pH*muAF}>6kZd{C*!pw@bQziK8
zZn|JoBc0^%qHa}lCgGTxAkJ~TII?4eqI}_vOmWkds?;saG3t7>!R(Tl(j@q^)5-cL
zzmWncGH}!7&@_+unfCLog?eYZ@Q(QDq3n3+L^CpGtbUAzzy#)mMR6CDY6VuX@{@=#
zNpKfxAYukW<5s6nm;^#Ir$x6zho(v7JxFLv-&2wnynEvJ=$fO+XCGQ;S$b0nDC>_N
z<*e-?LEL_2f{mBZpmzb`Mrg=6i50gQmMTc86cIdo+W1q(2>z%Cd?iJ79t(Ju$c&MJ
z6(4u@#_E&6r4h%s*pnx_bu!XWIL2@21K5j<!<;Skk=9<C9e<T{2-fIg5f(jEx%UjB
zQ#hbCb|sC0W8Cp;`G_F0Plxcvy|pN;g1m&f0Y?gy4^y|0&~~9`6CR>~R$bM62Dwpu
zvea)DA-LYw7wz0vB7c%9G9FY6wZiY+M;HnlLbNoB3Ind#HKTF!USh)ne>M%-ls9Za
zildIu*}H5O{ZP}vWX`=(gge0LkjRo^A!MMaWQB}xmQh9fDhw-;mQEJ6gzEvrTji^3
zNa{noi5iIx_7r!qAnJ`rG|zP>6lbX+@*G4T^{_mC`y$XV^!3!F?a)>@{wwKg2DTSG
z7xg_eL`7U6K<gX4RCsvdscccdq67`DK#P9Azi_YQK?VtD3@+4HYS06V<p7)$bca4)
zLwzr(B)z5=t8Ta{dy)oOqEr86{0}J;qh`twmOe$K3<_yE4_YLfD<T~rme;R_JytkT
zKinBT9)tWd&+x36Qvy0CG%HoK8Yk8rf_=ca8i=dL%uUr2ZXVSZ#{8{dMb2#xaK|f;
z)4(PVxq@sri{X3-G$l1Tu|+MT=s)A3znCKHgQPc<4T4p<q=EqvojVsO)oYm&;tq@#
zitd|JM5A2=ZKG@tcfq%lxfIgt&m2r_t3eCbpxXhYEl8Qn$S7S{3M8kZegy9IFz*_}
zDOea~J(yY@m4GXfUPLtL<o!?{Xz|3hY?%5wqxIOhpth9t@+^Vjhwt-qCd<90rwu<$
zet3PdTt5`b8Gb)3K5<f%O72I<MKCHCw1bG?#E|+E;)0p7_$YhMkHk|S&PB5CP&6a)
z)8+AJOe(3i1pR6I3V01<=a-gf6;QM5st7QQn#FLpP9*|p&8o8<g*r~3oS^qS<&=s?
z*L7YN8$AuP`7gR&xcwm=F(lMCEj06zCF5G#@M7ky9v->~yDB2J@>}Hn36vzR@D&|9
zUa#D?Oq);g_Py9!KGkU^N%F#g7{U~1;!0*@jQ!$j@DuYxU-itfK4IFMM8+>gs7j?S
zL!vKQAAAalD+YgvZt_Fm*iCalhmiWR+B0lAt5~XX8k6d;UkU9TC>KKIe@dRA$@{nX
zUeszEO-Xt0s*!Ur-ZaE{LJ)hX(l*_-n907Wb|(t`7;`O?F(jZ^p0jyDi!Z{yEt#Z)
z8p;kIg{tZs@{$@mO8S~-Uh*D<l_(jy-kK9RS>*@$f*i(FE#jjQO7N#upe=F0$AE}9
zsDgNDtjrX7AeQn5qa!wnod<AveGsZV(XTZi1n0mv0k&&bx3Kp(l7O`^EbJTNfaUPM
zNVMyzx!+=XQ04XAp7|guvp$tlTV{_`x&R(5V<LvUACM!)P3h^0paX7!_#Sj7S5%Gb
z7e_zG8FdG*7;D5ecus49%Y8J(Oq-s)Bs$cNOV~Z-8yxLBnsxqy!o|LTJq^IqBO$K0
z;w_)WS;0L9#|~1#k%5hMs0U2j*<cwg#D@{LzdH1-j2_b0Uv!M+Bs-XZ`|Y8fDn!aY
ze}aAQVpd?3#bk!%kv$*-3yg*+%G18l5jYF#Mvj>omXk5e1B={0_2rciLWvEO7yh_Y
zny2wnVKu2CnvZXKf|r@eNG65PkhEBHYLsT)o@OKAHNpFy4sD+l$^yzB_l|&|UnCQB
zuLVvEd#A$3WR$q-20pQ%#l^;5-b3|Qd!s_1WG-W)EfafEtX7v>&%hlE6YkmAB7mBc
zwO|w-ox@6)+Za(J)Jpo}!Z5AA9$L$#u;#JA?$M8Il^nW(fZw5~-c}{*mZ?Y)6Idqb
z9`axKlm#(mJWH!OMvAFi#v}pE7J(juB4TvFQqWH-W{_;erbBKN`RpR$)I2$*5>}dt
zR?TeGm^tfUMH(iC6*t}z)tsk>-4|u?MDK7dQFFpJSVsKg=Jl`@X2n=-EML4xj9-@F
z;G4Wi>59!9t*EDi>o1%fer^%zQWPTXXq?r;6KKSRQV{*Fwu$E^Y}q$@>^i$)qM@kc
zx|J#NN7i}5@*__>r*$GzV;Ta2)=)W|VxDOH@mzs5EQDyOY1eO?r>H`7Fh~=E?Br2G
z$#@(-@x1~(&IkI|vBk{(CnbtO^pJaEIi&ec4;4L^Dx*4SV;n4Q`Dm;Z^=i9b`<MDZ
z(IIObe_JqxmY)JhY=~yJ)*Vi9ixSX}Ys`#XJ&0FKDHa^hd}bjVt$vLt<j1L@+JdaB
zmb*^IHkWEd1|)cRT8zzaG9nezI*Q!Fr#x?FLRJ&8AC;|j-p&V5WOf931^Ilv=Arkx
z8R2$m+`UoUI(z+mf8D7M;LGR?(l1QuO@`)?&NIi-jJe5EuN7gXsz!PlI^xwXOS9dG
zoWg!23|6;Kdn4A5(y<WKB>q%3;Xbnb^@vGb3&I^NgMhHGGIr~5$E|Ws?ZOBbdY|kW
z`_`wwhM`QB$14y*<$6pHI(ze4FdB8S@)cm3Dm4q?(9Ytd2qT1z1Y~MA7^B(mlcuL}
z;vJum7)y?ehNFh&&G5jBeY8efBmfWjooMWneNn|aKv)7Pyxh8N(q;^{onE$_Lo`GE
z2(cc%@ei6T1-6KOu@nz@@9?mD`BD3{@{Zz((?wr79BkvvVomp6=6*C+F2N2`MS)pq
z)5)jQ24_Tl1Qyxc5tARcb&cv`c2)#$Ys#)RL(EJ2dX)@FJn;DbV4=h*UempIS@XPM
zY;7<5HZtYeTIAaWoz;htO$!w>r6-Ce#AhiHwK`neYnKOMT&k<lJhXZ~rq9~B_*1I2
zB{ohSKT$Z2B!OmqAr%m>k&9CSe#;3#R~2b>htHWcg8OGN+AwJ3m@7?zX;IF?%eqES
zO>1^({7ZHeq5I>Q|I_PQsKw?C8M8q69_9M?IQhrK6XGLE#ikX4CZ>a&5LV1Byf6<d
zNmzD`ARcAbBz;&>mK*6JF4OB^jFLbJ0`wV@GV(Da8@R$qdBdrw@_m_G-B3&yY;1ik
zn=zs;>>FJ5LT6#jDv7y-c$dW-%I<AL30Smx1e=S#3|7euQ{c2Wd&XnZDCP0PqgJ5I
zJu?cYye-L9cTF;~8p7-I*VPqr_EUJPV5(ec_;4YmM*g^YK-%DS#sC-xt=)W3=4R^e
znnWrwE_<Za48YiOvhc-tv?w+Grs60HC;;3rO%s;B;(!vS0n^JY@@N^Lk{FDW4t35K
zY`vj{yv#ThEfZo9d6qEtU>?^YFl`$&>3E$RJ-pQB+34ZzY4hWKcyFV9+;MIM#fO^O
zN6In+rhNZpglUSnAKgbvDEb;X;c0LusuSEdZbRir5k1*3s)xNYnPf6KTvCaF^e3gd
zim-Z3mA3Hl#@@zxh@kO@)&0%s%EaCR7tAg(VeaGTGYmCTKNQWgAz_~&|9hhL>B`>5
z!XRxs%Ed1Z;6*NA5ZDLgLvsY?_3#J^7~4**3_;Q%06xJv<0{XDQ}N>A&o97J=<X!Y
zihUGe^1wazQ1^w(oqK(0EeTS=^I;Qgm%rCYH&^?jZ!u@4cGWeja;`G9)Im2-`xrsp
z>=a;9_r?!9=P2L)MrEi6JX6!bAsa$4Ql?x$;*u^tsWOx$K_RNY(T2#+CgJwfM_oMH
zw{{!J9c@m}_5KE$OM$t*$?#J}#0O@Z2o9|>Os7%0lh9Pf*QcYb=5gEy$>51KQIy4f
zmkg99DBG*a8y?>%qa5IXsR$d{?9%ds4gw!flY=`Qa8krUaPd|tE@U}@b~5Yg0%h^&
zI@?w^+H51b!DXkeuwWTQu_?$a)xY6|T;*~&Ltqi{O=Ox_dJ!3nM&<MM0E%;%ut_c8
z7N{#wZ>({tH3nB{<jXXUa|l?2ZFxl+-~*@64??)o;BjGIQNKJ`kSW%iB>ysT!&6Ii
ztJ>lc24_c?cMUPjqXa1ht!Eb~2-D-v#PD77h+V>sqPV*4obPYaV*_;@*bGm<<(=d}
zmC9Szt}F6r-E5U5J-}7)1~X4nC80Ee*eh23<@Wh9E!K7S(M@AlM+O-0oQs;358Leu
zH$~>s<rtiZQgFT)jaF%11pyAWe#4WKB2zL9!R7;pu6&mlk|+&1M&7o&=tX7p{qV3V
z)rujRym;%P_u0FqFum*wT!(PkM%7m5Xm04QL$fPK6)4J4>uwNlVv9K{?;E6LFz`+`
zO&6kEH8AUR%h<*Xl1aag8>c2$e5~}`dRFElc@$8Z4(u)S-fIzYc{>z`h2gz`tcWkq
zx;VMJ`k#-H5P5!Y0c4~%z~?LEcKSf=S9=2BN0X~b4ZT<7)DPbYBm}aJx6cSm$^w~t
z*mdIiVh+n2<;f@qgaaFz7m3YMRlzOW=5|{RegtR2*<YrGXG&L}Rm{bdKrHOcHOF7#
z+<aT6|Kp{k+@few1^x`q4W{pl5D|~e-+Z}Zp`y8r{_xt$5UQ#?2MEjyjEWip$4XfB
zQY{{}roTsW!t<^nbWhCgWFA{j(HviFtx*nJ7A|r!B?v4Y;Wz_vZbo|_sd4p_WDIyV
z){fgwXLeO9%ym#mY0DpLH(FRYjgH(?`U0a|g9$)(>N>j%PBRpVIBY8$<=0%H(TvCq
z0_nX%2k2BpA`%0~a^-Vz1jLrSh?FZ<Jd<7AhRgX0w0hX9s_x;5!;1~?ehlUHoy6W4
z!ez9?2Zg)GKBsxjY5Ao!dsBfC42ZzME&iK;#ShMSuEI<8NqpGwiHTaUyr5$9W_Vm=
zeQ;(3o#tjGOSzo>I?Xw(7Qy$2SCr2j!i&p*0MwF&{@TxglPM{q3-<R<;%ojt%b%Y<
zzMLcMgUsfxiR#VVTRB*J?9)Rt6#bEUwf9<XY~E`Ut(C%#cc+ml7ARuqkuZ>RrKW<M
zc+{`4XLg02NY%<zQrO03G*TtwNot72buJfMZ0@NT4p?R5gEZ-{9a%0hfYLqH#c%6l
z_-UlyYX<Kct~^}e>fE$Ng^QpIQi%c=LrB~*Ld`O18fhPhna$+!3|3c8uNb{NY}%k2
zIu#+_m8!+1-nM;546f3h6D=!ee+z-kBXC@ze4J!y|72c@*3f7c`*a}Fc;J=c|IoBG
zgD7$|?g`EI)2m&uT7DyDNv2J`VzKBAq36a;_pBBcYA1=Mwv<V(0=CFUpcS92kI*^Y
z(cD1fdxx+oQybmn3i2+HLKmfz)>IEbi9gd$+#_&rLuH?ViQHkHLObk*z{~+?9mro)
zv7)R9#ze~2YnG2w)sGYl<}kiBiGQL5(*NABa`ffqemnO%dA#+A7;Z0zp_cO5C3XYu
zfC`{GR6$Xak0Opwib?_8f*WfgHYuO;&{?f8m(qr9jvy+K`b@+!9Q-&s-`1od;#6Ul
zmU$>6wI&e=nwj|K)QPpeDTWk}w=uab&tbtUAMdMO<aOhe4~E~jC>@UynHXH+rGnEU
zRT_~U1KuXF&W-8vY$sgVN@L|9eoVC*z&q1M`oQ^g#(JfSvTG?K0`tDH<pCx$UKs+K
zB5f)NiCikmzX64Nup(F`*b86>r1_wH>k><Q8otTj_c1hixZKzvn4Hpz_C|&ItGeTE
zRI-lA7UDQ+O7>0Va5PX4(__%G>nCc$>E+NGM6iq{)9Fw0uf<sC6k<=EGJN|MB<D~z
z93n&p(XiO~gW)r&^mG8io0Y*?lk)&)xV09q;m~2fgI{d$!Y0P#l~-?9=Y%_62Eh4R
z7%rV>WK6}+836SPH^96F3M^*iLBDCc%hg3`3XTS6#Jh`rc!SMFN=Mi8WgfAdPw91^
zP49Ej+oJ*nifkYN>EJY+yrNvsVs?oEc&0N2TfWmwl}|thJCFD9pxxc4v=wjD)Vn@M
z9lDe9lKV3Xo`Rjrw1-qucfQ?0%QA#r9dIH2%=;_4s|ns}MhsWlngr6h2M41~6!uwT
zL&db^J05n0i)2RUfqWo?`WZ_ASSef<BRn%?8LP0&MX0&-AtOGYsf62|_cB+2Z7KV{
zh7<=S`&}Gl#cc3hjI7&CSJcQNLY>`ep~kc?3v~NC_#*&O#~t2Uw3z0!Rkv0kWLqtg
zP8D`t6`uGUw}?9>G$YBQq6zEQ1z0wofi|gJWu<_Xvti!hYccIAYa?rpaRJ`<B^Tu_
zgN>ete)=A!vE2221I*n!C#zMCZ@3vRaiAA)!l_L_+|nj}h+ZG=ghUb(OdUDAQqG~-
zhdOexYUhE|{bQiG#ZQk~`Lv8NI+&q6(KHP3Sbs?FuF;LNq&y3!Y8x=jeb&D!Ufv!*
zcp|LmV8X*5YmuBGc@@)}fwsUEbY=(+<Pwi+R0>-0cF?xn*h0bWP8`Hkqz~dW@fGrw
zq51~)bE1@<_f+j*t%nt3P0&mrH0Bfa#Vf3JGuY#0m`Il8!%tbxX5FLGxk)?2!5HC3
zQD7+Cd9I%Ij@YFeG%A%D3aX)4?`$1eYh%J7UAEctvc8*?-X0ln2)m&cD&tcnfs(4G
zfnFLKqvkOqNvr{NY?>)elROn4-^RbxJ$RwlaJIs+{Fj*TFxTk0Q!KEqC-x}yl<Xtu
zr{@r`lY`g$OAGH$-fQ{q>?D}>kz5k~y_n?}1}(bf1DS_SNl;vKnRYNndm)|Q3>TIt
zxbzH_=H=M^%31(CyK9?q+V%6Cqxd1xwzqRgx+ZFPk&!>fCbpXD^v_ckkwEJm-4!Uc
z)j0L&`sJpW0&+t@BuYrVh%(@@3C<6MDxjFn?y{06+XI2Tae=kWEW6j<hB%QVBnr!q
zpovm+v1TM9VoyrRh<s}@*~~DViFlF?i91uySJnxJ5d^4BY58o`@|3!)dAOheOabp9
zg|Iq~I2-_{6t(10B|BQk?2wZXz+RNT7G)J==R)ZRY3dCl1C2nug^g;~`l4ge-8qIs
z7OG43EAe=MLeCm<7T@)g^0?Lbdo($_1C@;Y<vPg0#b1>yc~iY~94m&oEa^21Z-iPs
zEHTpkvUWcbP0yl(yC{uGM8I$z`fB}+2=xKtYe@{Z2I3XO+6(PzXxtF#b(mDC`pvq<
zT#32<Of!WIA?fPeK!TV`)n}cy4M#>-<gZL@eR;b=#jUUR4358yN!2<MA{*NidG-Qw
z#s+-Y#IgYGt2{mgRP&ZvQ>+}{_r%BU;}2VDS2Pi3_HZA+szH~Ba}}!ESS5zaUnU_q
zOV2^xLIirNu)Co~P-mwMls}qemIZT7KnKIA<b_|umA3E$3L&tR@SBph%22-|u9_$l
zECDVDxSN){V9q*@brRd8WcH{`KPa#T7EjDz_|Il^ad}Y<?0KNcVv-F%F8r5=;L{h;
zYi?l!f_|{E+?j3kSrr=$j}H$@5f8LaD85^S65z1TFj4Z{)4eCvTfB#mWtR$5Ry1$p
z3OlU^6ZH+Yf;YlM9t0EautY8&;TPa|sF4z(#W5s1>jV{j2ogWX+1T$Q{{Rcr?a&bL
zx=RRx=#P-k3!+Na`Gn83hTp{Kn8ihjgON4KGzY(3V~!$EMiD`_?$>%Dq!Hvm`GNRL
zF*|Q$zDykDrqJYx?YE6_`CSsS-Q%&r8bhpZO1!K-M<Ke11phS6uc!)H9PLzfaF3cG
z5Xt!(7>kdZGdm;g<6%A#E+H12keAjm+tueOuT5OKV)!!nk6ku8E5wAnq2oFC{Kcm^
zNeWz*M5b_lxD7L5$^dArB}O|4+QLE<Io2!i<@rFV&2LvzEN8s_>KT(v&&D4DSsHQP
z;PWr$im)xM-XdNk2a~}?t0}C7Xr(Kt`t#DV87bB<t_&=KpG@%|^p$dy;;-UR{(_G#
z)ayXeIeYNMj#1fByI=|22UH&_F?ej)q5cL!G9FbsX;t!Mj?AfVK`7I~sz}As9QXsZ
zN{VL&mYqLWOGs`;n_8(9G=DZ}XHl$Ud^~;~aU67~t6n7S0Amg9b=MCEu<Il-&AW!q
zr&{r5%K7tRy{0Gj{(J{7f@8rSM^!aewJb?CN`VgZM5-0xjH3LGHz|+8G=$LB&Q8eG
zcmm;%@$9J6ZKpNP8OfhWZt!>_HIz8YIKd%}Q;NeM5y_}Hexxl9aU$Gbb~G(w>GzAD
zEzc~;tW9BD_t;7Un{wNk7S=%^K)f?T)O1&{OA9Z9@Ur$<qO|}fHd3e+2E~)e6=n7G
z>69Pf3CrYn&}GpsT*yU)_nbc~Kuh68m0}!ZJfjKCV2sPWV4%L+IJ+?{{UMFEQ??B!
z%DV5(XnfLBF(wy^<h3Ic6wo@pzCr@Rcd{grj5NV4llC2H)T?dJ>2FV%HhbW?b3Jdc
z6r8}JI$R#T)I1M*4^DXC-v++gG-H<!!afs~z<8{5f9lER=js2JI}cFG<L@f{)86}W
zx-cyHaUH{C@>2e`d#&>M?pv)oirobEl1_s+r70J&UNro**tmDwc}->2ZB?%PYF-~n
z1(}aTUGY=$WqpT3<5*q^zqb-hzcQa^z9<WfXXh=*L}|m+!fN;&MilQDJ3Ty_T57?E
zSIpIIS6!X?BWhLO4dpesk`2Tc*dPue>o8^r8{7i|N4$KElUE7x1BPrI|F*}ScQDyB
z$0K=9A)4Gb-M0Rc*8?Kh*}GZUI}h1wSbLjG4Jf+m@Awmt{`=aulkAf(L1^Xk^UIwO
z@=8zGpO>;4m&QmObh@D0VXgA+&!tz|_sWZ#ovCw8ISmy<I-TY=D{CP!qmN~X2jUNz
z{ac1;ewwj<rO&zK2)d_FxEIL$!%vU1PujbDbIwC{hEPvj3`z)xU@Q9;ei*M@u~>*d
z8;bLB0ext02gUEgXdt5vm}oWs7{U3t-2x=HgZ6Xqofm~HVXmulu<vyX(Rn)Rr6=kZ
zP1~YXp6OL&Pkju-&r#1<TUrBK^7j?s=uVrZ5*!A<|Af0+JO6rU!FQ$Ryn#Sje*W$d
zZrjfe&L+-la<8871<~`y7!-#cmn}kS`4TI^av1WR?+|Gz+rCU-$$vT%j}n@0f`HBR
z6SM-{TC@D?cbZWzFE?J^$IG$sMKp4`1uugh(rW6+h{o9VmTLKJtQIx|?kWxhw!_vk
z2WqYlLK;w$Y2YaDLPMJaZ1u!4Yx!-*&A@&qO(&-&*X+!ueOd%^sI7EC8oDB#4l1X$
z`ryL|VkS%<$hqy{_w?rWVW_Xs=^>c@wL{q==Jv7l<*JuXC4QNX!uTe*e*o|PjLFvH
zh7Pk~j*w8uF&%}=Avu8FsLx%E2?fPx5^+}}MCLQ-Ma(z8($-{Y<(l6L`l%}9OluAK
z=BRdm4F_d4cc`p*EjrEU@N^sHW@jb672qk6=c6NzBYe(t|3$=Cu~S4gG~1s#n|aL>
zG~MBEHb6n&fvMPe`#q4O=^e1mJ%@qPLTiOACoZ7XFN`?mQY0{G-yZoz1zF*KG;p%$
z<Gc6Wto8QT1Pxz+WgfOieQ{7w-Tu~Szc<hu$z0&@`6!LO&XL3e<J8&j{b!Wt6&ADm
zhhq@9p1ym#zbeYx&8H^H#L<oiohQXOWlz0#oMQhH!lKi{2RX|~aQfYt7fAWiLyM5<
zo4fa$H}lI@@ud(FG*j=HGgW<8{SBPE{F#TfXoA*=(2lIO>n*nT{TC-_1?Oaw$h_!Q
zOFk?{-*~NHZKUD)?p8|ZkmRM_yq5#wYy2h@v7WUMOj39HmR*ak6Y<q<h>E_(TQDth
zzJR4RR{^SdV`~YbKoUO%<$3Ev4(W?E16PlkW2R@D6+ahaF2M{qu0x=r>rLWWcKwlr
z4bFmnhD~IKzW*ifT!)y~413G@u&+uL<BKA)cn^5!8)y&_-lYQ5^NpEV83ZU-y|}WO
zD=>orF0X3uxP=f@EbK|biH(|cZ{bq7g^Cp2)InGcbHW5tD<C>LG7Om~MW6-B)jvd0
z53`m>wsekhC;WI9jEpy|W@|`x)CFo<VRy>KZ}qdsF6&w>sEn+4`MTf+X3%X&e4YhJ
zlmn?(e|4G<qJ+Uofie*rB=FZ+wJ71@6TS`9I-KAQ?LH~a8BqaV!XHw;wcjThQ8ju&
z|AwD6lY+skAZec$c6Z2qZJ$wt^*TIuX5rh8sGQq~FkV>Nk^Z9|*GoKDiQM47J&N$S
zGJg7k)F@N>zTN3Q7dJj8mrc+QSI=?SKowd7f0O+gO$I~=fU2aoXwrLcr>ZEm<T>P2
zsunsOH$qWFHu~W9b#-!Dte+WFfT=k-<EqgA$RV)O{N>q>{p$I{1p5prH1K4%p8)rg
zB<aA0YO{>a;vj_7`NvN?%~?m`S=p<c<6}}O%cJH-MLqJ|2HSYr_}!PN2N)F8E25v<
zOw!#((!03G*F)EN<;)jbM3{>x{?-x>Tzs`uFAg(VRH-%<RVl!krWj9p8>VAh|4mP2
zEMv4i$(!A--Em(DLeI&**Tjk3&oUX9v~?(OcL$?_Cuk-LsF63+HZx#~E0{cj6XCH}
zs4^I*qj-7&n^f<w)-{I3l$rP1F#&wn;al1E52OTvDHbBU(*W>-Z&!t0T=sLt3!C2Q
zE5GdtxOZwl@l|&;u?>0$Cg)dNt(q^15x}7!AI}+IiXFn{j0V9e4erAbZ+OAVA2D}p
zA&Jhx1he<^iebMD5_BAB!zxM6<tf~i#29GuO1f;h{02u3_nNlC`67!lPO<Vxok(ML
zREvG8MSNz+wobRF^~6<f9%Qhd9e?%+T{>*kRAzY=@?lcrn)m+hnRAp-GFw1{)35(9
zdc;H&!pVYKV1E%zZ@7K&2eO|rB(rL4N0A_BG2h?D!<$Q}b?X}gqu%*p*?l2Io4fhS
zvsX@{QB3$tS#zEZ@sy=}DKy`%{|M3=Y@wL6e;?8AQ}n#a2<Gxw_xRb32$Sz5f*7SQ
z3Bs;n=ru))l3ni_L+|>dGo@|yv`bd{YF>Jk<Fd(v+sGB$0HIH0_vPi2!g#yZ+q!&K
z*3;cd{oZSg;m*bP2Q;hS=7H1%L)P=)6|YSDh>E2KR4@KOT8)!jN60MAbHiJyqBE%?
z<q2Wt&7*pUFVV__ey1<c&tBv&-?Bq6AmEeNk&Ct(56*QBqha!V4(8f-dEBkF;mEdK
znKD%ZN-08{t~D-GW8I0%7qTr`*$k?N^ZN`>Uj8bvx3fM-O)yMYpS#~%%sI!@M8^wl
z<)43EQfk@+g|-Q2h%eH@-YtG_H|60<nDhQhAY&}Af>Hc7s8G&)eM}rD?5@&>w9=!M
z%o|@~&=&4FNuYu-5d}{|iUfbkK$a;T8Oiv8<e)k9J-~GbA<9peQpkY5Shp_{UF-N&
z5`~6o1;ky9oWjS8_}=BSV9OkrFm@l~p{UIW<d9rV@NmW<-^1W*FX6>!^{Pg<`uWXX
z6_C8_ZHY&#qY2WFb2Shz$~>m@M}W2Hjga8culE?+EEQyLBc4|>^2vgBB95R-{H_39
z@mq4n@i)pS+6s45nU)k@aZ1M@C;!tmC9|EQLLRAEoJiDtwH76(4f8RM%P%LO$i6Yr
z9c^!87bS<(QB;g&y&c;~XM)9g&$BuXa;gv6mYwcVKM9c6CQrHTN;iH_8{9;TfsOj+
zq^W%^t`YAg&_*VzU~_8-uJq(jjz>vhWw+PP&M_L-O=}_y#GF)xz!SuvPaQ?ypN2Y|
zms|F$oUhamoAdafN8|4T6t;w+NpS+1?oJI+RDn;{Oc|vQl$x(v3GE(T3E6$%s*%UK
zhr?kW&%6+iqG6rG{kPPAJ}b2jmQMcjYXAM4_%C|t^AiG)o2OL>_}9V3{{}|tfASP&
zR_125uHWrl8NE#G?fx|s;D4ae{}=w7nVo~>pZITfP8QC;`M-b1zWWFNXP&?luP1^C
z<(eys^JC$gs|IJLYkr{IQetutSw7GRBOXkW;?{8G;I`xA?KOygZtLUENl(!MmXQCa
zAJ8jzo@dKRGf_(zuTfYvGy$K@emC$a286E;Ib%UEE*7E%)LNwz?7u4kByM-%qdJ9C
zNk!;Ash_M$wkpSN3tYyRFxPfNJ7xdOP6qotU?;6T*Qhd^;z?`fVJ>58I&G%=T2IHv
zJim$ltH<xgrY^<sO9T4pWrQP7q|E3eBlN;fY-zfUlLbX>NcCDrHr*lo%au%XdQjBc
z@+Qu2=D9IJxG+-*GQq+3<p#SOL%?<e|EvgR{JDd7Xzc?%X}Neg#6nhP9IYAf8}!=h
oY;67o^Q6g~Y3~QbWM0_TGT6W4Rs222-x>Hj1Ak}W-<pB{1w{fO<NyEw