From 21482f26a541467656a1c2db735e86d832fd562f Mon Sep 17 00:00:00 2001
From: Keyvan <keyvan42@pm.me>
Date: Wed, 7 Aug 2024 11:34:43 +0000
Subject: [PATCH] Updated Minio to latest version

---
 external/minio/Chart.lock                     |   6 +--
 external/minio/Chart.yaml                     |  10 ++--
 external/minio/README.md                      |   3 +-
 external/minio/charts/common-2.20.5.tgz       | Bin 0 -> 16082 bytes
 external/minio/charts/common/Chart.yaml       |   4 +-
 external/minio/charts/common/README.md        |   2 +-
 .../common/templates/_compatibility.tpl       |  42 +++++++++++++++
 .../charts/common/templates/_resources.tpl    |  50 ++++++++++++++++++
 .../charts/common/templates/_storage.tpl      |   7 ++-
 external/minio/templates/_helpers.tpl         |   2 +-
 external/minio/templates/pdb.yaml             |  26 +++++++++
 .../minio/templates/provisioning-job.yaml     |   2 +-
 .../templates/provisioning-networkpolicy.yaml |  50 ++++++++++++++++++
 external/minio/values.yaml                    |  10 ++--
 14 files changed, 192 insertions(+), 22 deletions(-)
 create mode 100644 external/minio/charts/common-2.20.5.tgz
 create mode 100644 external/minio/charts/common/templates/_compatibility.tpl
 create mode 100644 external/minio/charts/common/templates/_resources.tpl
 create mode 100644 external/minio/templates/pdb.yaml
 create mode 100644 external/minio/templates/provisioning-networkpolicy.yaml

diff --git a/external/minio/Chart.lock b/external/minio/Chart.lock
index 39810684..698ea3c8 100644
--- a/external/minio/Chart.lock
+++ b/external/minio/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://radar-base.github.io/radar-helm-charts
-  version: 2.2.2
-digest: sha256:f31efab5c07a4c4582f202eab8aafa300f2236941c00579f8f8c8152cffb0a54
-generated: "2024-07-18T09:17:13.244383343Z"
+  version: 2.20.5
+digest: sha256:a07de5441d415b0c47eff9b0f4f6659b283174e7fb522e605629a38fd2acce34
+generated: "2024-08-07T11:34:06.849310242Z"
diff --git a/external/minio/Chart.yaml b/external/minio/Chart.yaml
index 8d14bf6c..4e6264f4 100644
--- a/external/minio/Chart.yaml
+++ b/external/minio/Chart.yaml
@@ -2,14 +2,14 @@ annotations:
   category: Infrastructure
   images: |
     - name: minio
-      image: docker.io/bitnami/minio:2024.7.4-debian-12-r0
+      image: docker.io/bitnami/minio:2024.8.3-debian-12-r0
     - name: minio-client
-      image: docker.io/bitnami/minio-client:2024.7.3-debian-12-r0
+      image: docker.io/bitnami/minio-client:2024.7.31-debian-12-r0
     - name: os-shell
-      image: docker.io/bitnami/os-shell:12-debian-12-r24
+      image: docker.io/bitnami/os-shell:12-debian-12-r27
   licenses: Apache-2.0
 apiVersion: v2
-appVersion: 2024.7.4
+appVersion: 2024.8.3
 dependencies:
 - name: common
   repository: https://radar-base.github.io/radar-helm-charts
@@ -33,4 +33,4 @@ maintainers:
 name: minio
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/minio
-version: 14.6.19
+version: 14.6.32
diff --git a/external/minio/README.md b/external/minio/README.md
index 026ea81d..5dec503d 100644
--- a/external/minio/README.md
+++ b/external/minio/README.md
@@ -216,7 +216,8 @@ You can enable this initContainer by setting `volumePermissions.enabled` to `tru
 | ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
 | `global.imageRegistry`                                | Global Docker image registry                                                                                                                                                                                                                                                                                                                                        | `""`   |
 | `global.imagePullSecrets`                             | Global Docker registry secret names as an array                                                                                                                                                                                                                                                                                                                     | `[]`   |
-| `global.storageClass`                                 | Global StorageClass for Persistent Volume(s)                                                                                                                                                                                                                                                                                                                        | `""`   |
+| `global.defaultStorageClass`                          | Global default StorageClass for Persistent Volume(s)                                                                                                                                                                                                                                                                                                                | `""`   |
+| `global.storageClass`                                 | DEPRECATED: use global.defaultStorageClass instead                                                                                                                                                                                                                                                                                                                  | `""`   |
 | `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` |
 
 ### Common parameters
diff --git a/external/minio/charts/common-2.20.5.tgz b/external/minio/charts/common-2.20.5.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..9d72d93b0f6b1215a5e0cd689976af62e6005bef
GIT binary patch
literal 16082
zcmV;@J}to?iwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PMZ{ej7KkFgSnnDQa8JvFM0RQr8@v<2j!qdlGG8Tc6}OJKyAd
z3D^yih`Jjc08N>(y$`Z~?X&HZ><_nY^o<vZlI0oo%+C?KfkL5BC{z^+g@DE}P5P%(
z#DqUbarBqXKZC(waJav({yP{9s{b7h2YY`R?jIfu_6Ng*;ovWW;qLyy;4d(^16*oP
z#sy-38Qi+9YUjR?2PFv=ND!Lv;|@T81fEbfKZdhp%n%nW3q;0n2OuH=PB`YraFU{6
zihH~Mpo3EK4l_<@atyQG4ocJf=dQmy@DDm6<^dzAQ14FQM>1lF&Eb0-#h|zj#+1Q?
z(JUp&1T;TFL?<MG5f;}NCom!+K{0_qmgjy4;O&%f{Syd>gbE088qql#MHohNAcEs)
z?02R##>X%fBIU>ZzJcQhH13c<BGmAuAJXe2qA2A3h)yWC-+D1(SALpII#+mpO<Bl~
zJ3WJMrw3CUrI>YkAaI;UNZ?Kn##s``j(2*t3!NB|L?Du2rm81M;`c41C=6)417}I#
z!$}mu1({3*hYQRxo8eIQIb%_Q@PvqIHd6Q+(0xsvjs|J);xuCcR!uFf*%u7szC^J2
zprMF)ijN`EL)V#AM)-5H@Z)of$H@N~iZaaaXaQIv{|9@+gR1;L8ty*I|ND5h;FP9w
zCZ)|vVrUC4&tLpsy&v^r&^rrpBFLCvb_^%yC#T=PRLeqVYYQqeWNQn~l(1&_kBl%J
zN-=$U)<1m#g3^csN<v5(4KU}J`?CE1;8!FC{2s+=gx^UH?QCsz+}~Et^^^pAltk-4
zX8zkni}!y;<1tByAej3i-H0?;JpYHg2S-Ph`G0V*zxO!*@8kLKq5rJ2o(Nb)06gn|
z`qb%2;4mZcF>owkOd>2biRZDTc`(JtP!#K2V3Dx|5O6vckkAmHXhxhvh&4yjr1Rke
zkR*t*5QC>#*LV0;*5bYd;K6oC0s-C?o_pZ^?adnxJiW+yupJRD!29;(!ju30FR$B$
z-ltC*=?@=zy1}I_$SNtrW6T&1Uu29VlgnU=!z?1n<ZP1A{PoNCILMR++yUr;u7r~S
z%ir>ekqD+Q-=_?7ZdGyp^xz85kKw}y@UQS3K7Go+0MHaOBq)>0y7O9h^VoR<AbZ77
zGQr^M&t*um9oYnYgg-JWaP_OKj+4;7zQ&R#j$zobAA0q1oFW$9Y8)kiyB$Z}f~;Z}
zrPYT~Lb${c4g_UyF^dhsdtcI6E*QOA3|u~Da<Y5i>Dh88Bd7;Y_lb-F{{g;i)V67Q
zuD-4&HGBskjyNtu)%>y!R9&M4)zEtZ?FCI~L?`nf@EW9dDis6ZzEf0QnY^W{8eec<
z!be#dWs#hl*$A@)3(S2&`%}uL;)lIu-Bf};rJ-fBzWh58WPP?vX;=~a0gY3d;6&ss
z7i3(}_(wFt5%<7<rwyKzhWZtF_`P80m7KiQLe(!#gf;cgi|#0)Pytf?ED=ovelI+D
zvhvV4y|om6lJ^&mpBDq;fnR(m$~u&Ai!0J~!7qK!Yt@L*P_tI1T)WnL7lf1q7DTP!
z&6nCTBr8ZGiJq0-g>;Pz)Q{C<-L5j7s>uD=Ws_|%JXhkdGMS5U_RU|=?ZQV$NFo&|
z7!Jx}+6c6S3fRVRD(21*cdJDqWh4<}@KBoi<;j>=I)<+lQaL-+nse6o>N@k}3eR`o
ziIUoK(CW-k#psD%;M8Jg>NPG$wT7LUr7GV>;<+Wdb={@Z!)Crybsi!YJ^5!~qq@BK
z^4Lf&i~4V8MI5fT-YZRca|>ZfZ~muW2n!wlUu7X&-&W~0i>lAJ+<oIt-<5^b?L}0B
zfV$x-x3X}mG<nB@Y1I|&v++aA!u3Tk#KQIJ0W-u3OVGwvpZhWXbxRwt{T*9sbEdzu
zE-kbCKezk0!T%qi6pcu<!5x4l{{O?H!Jy**KO8*z|L^B{X#RgO#UK!yU;#hm;v7uK
zL91ve@vK}1OcY9?7#13u`NKbT>-<pE@y&m8h1G%Ah3#$odJ@qQin`^`3&pJL8%k3~
zQ$~=Gf7{?06$6vfFeIF1DpqEcg%d3N)q0%Lhy-)LfafU04tjD8tBS35%K14AGFF?j
z+wOww_PPt(9LF=vPHCJXhQa&Kp}#xq4ZL!>9H3gX!P98>XTuQ|Xz2J0rSxqpTX!qo
zl->yz*OXlu;;lw$Q|J5v68vZ>z43d26SXI?8qG~-Niy-TzEL{WCdnT#n*2^jD-zz8
zeo!P|fyYNuTU?FYw&><a93mXkgs&_|it-PN%)|YSvo=aozFAVM@WU7<E7Q8D@JQ@6
ziOmHPc$`J6bGBRKOCz@--{&ASNhS<)z9Nxr={qEFu6>!dx=v$xxk{O)BG$nBJoDpb
z4gdSnhMN}bjjZ#xV4;g|Pfmeh6NtPbC$SL<9@soxu3l-RGcl!%{Ha3f*BXUI)i*bz
zPcL4qItT#^AJ`Zyp8+T(#q3*){4F&%NBNWUvrEioB)}`uAEm@rcv!<QSY;R(o)9kB
z`tzW*?&gN#dpX5uB2Wb9G=!5(P#&NNvlT~Xnxah)iS>%#&K}uo9~m+RUs8X!MsL%5
zl1%!uT~%bs0M#nA4b9TZn;X)1m<bZxbU<g11A5;B%0aM9sY2&8yu?Aqh?r}?3J?xF
zOH;}O4p;Pm@zl?&Y+OcC);MI1BX-a{VtNZeb$NXXorEz_!K9}&8Iwt-CF2dqgc<>T
z4$7%%uoA=Hn0`wa<Yr>rijog%p<X0Cip5sB^_i4cW8xS9C`zZBF<jcF#7bzarZBWr
z-rVxy$f%oeOWIcbOXHW6hCOb2Qp|zR%RDRMw9+QSN|0`{$VvXnI1cr}XS1IrCHS7d
z_qE?Sfon7eK_Qsp;HstcHPT0&Ng@~xvjB&XC4xkGfjxiEAHX#c)5`Xi1Y^jz1J_d$
zOhM`=h$I|P0w@gC{yvJp`|#<L2aq59_B-aNwM2_>w{64$0mBpgUWG&eNw~l$1Ugo6
z4C8hj;L|4<;Q(bEYse&-sA(qqeTDVua9frn@Sl7B9x%+aNJtC-fkzU7*%$>_QDjWB
zB=i6?My1O4>@9^628Lrg!y#Nxv7X=o5-6gRryOFEkT^@4M&sGD6<vyY(c})Uo;&{>
z%6K2PXa5-V{{6qZ&;IehKmGT!PoJK6uw5b#d;~!+1(TF;LN}H!c(>jEZP@>pvriC(
z*nA@a087sQ?j6?m|91}#ANT+7<9R6i|Bx@lj=&7Dz=6OaNZuS%7RxF6CdCP#lCkLg
z#L)yF>-kn)BTGz7cwWgalC4v`y`pP)l_cBA`I!*_-2WbN@bWc;+S=8HV`W7)2{8i%
z7Oe;aFBA!7V1_uwNhsw8)l$w9%ZG30dE5h0XRq_@6H0okcRrjYK*bcZydsB)T;YPy
zaBXF24ld)E^;Oaib3_fq6bT5a635q+T>;I6TnZ#cBl=#iO7aK8TreVswKp5W<>~3_
z<H!^_F3SYSBhEMu@>g~Xz^rn$N~^~kuY^Iax}gxI0*AJh<LBTPXxV|)I~m*C)<;l{
zC@D4BEttr)gsg4#2Q)*e;9W4H!mvh-F=YYvy0EP@v`s-pnV=HrI<wQXo11;IyZvWy
zq4|#_&P-T=2}$CxafKt*h}&?!>c~9@8WT}_?Tz_&vOy0#mL(_rCytr@+kEJ`L4rDp
z)!_l3;~z<qy?>*ke0aH&XJa!@Q36^)rla3+Aa<M?NCb=-jqOy*BB9gfX#A{JMFgln
zxTFjTt-pXvBHgIpWwgt^v@)wb%+VdfF~L!2hDvJrA>j;95DTrQ#<C=leNq~moxgG<
zQ$}Va!V?@qOhXL$lqKUT!oE|sKyB5|x_X}1-1llvn*rejjUpU+O1t|zildF|Z?}Ew
z`kzvwH<tV1FDvMOyGMr={crzh?=k<&y*v*<|5GTuoidtDrrLzlav)153@ODX<MLlE
z5mUsu%Dz>S`4XfOwIi&{`5jlScv48gm$HGupvkdP6yoM&y)PS%u&+SoiiY~8Pduea
zOnpIpi`8JD<VC=+$p3h)4nuoN?x`xeXm2p^3SUMI!{J?FI9vn6VUA%96(c6}AmJQ5
zuVdnND-Zi`7?C;&x@9#@vebpm9%LJY6fvZ;FZ7_=8uY-})IG2@efUu#K*#RV$W<v0
z!Z;43DY7Hi6}=v7)+17>NS+E1Q%0|?w?Vd>Z}vd0>N)M5BZd=U3$?opmyy(2$Z8!u
zeh$A=lBlC@bt<@Oqtx)~^>cmi0!J8e?4R+UG#;g;{)xiT(De8@c)uj)CzqE$zqxpE
z2`?`$-dr5R-)W}jW6J1^gc#;DV-RFaQK6W>l}WA@8r`_p-sp4VtSi0reo3JEyru$c
z;ecm20W=nv0mCHW0!5MP`wq}3gn(fs#84y+q`72(1mjTKNMefT_U#o;h0;T$vB!n%
z&5TA_j3I~+iTOs*{#(YBF-8(;ifQf)P$Ju>BWt^fJeyxg1Ma)o3nw_i3`PAZz3vIx
z7mQ}32=ghWqBq4+tW#z6v@Y1+DmvfO?AN=Vk_h+maWUo1$nYC<@vBNDb7ZSjtj>@h
zVT?$$M6dkZtLK;h)b&3SqsiuSfBj{-{&%#0Sk3>ne|R)})c@||c_{jyvkjLrno0pE
z`A{WDZBjoBm#Y61XHeD83rZaikkx<06zkI9X<tTBME}-q_qMgU++MD=nMkF%)S%o`
z+<uOUZ;Qb8cJATPU(JWE3ofOc2wDIv0kR*93LH!IM^L5~<6{Rifmuuvy?&J82sCkb
z8(gQ9Qz|4A%!Pa6(P`{Cc>kla61eR>Zva$ju`1D}311>+eZla);{C6<{GV4TTcw+W
zX$h~|-e0{14Ss!ytL!fu#(qJAE6m_bF{5PyxKx@r$ksS)hd5<8Kmv!ypmxbhT&TT}
z=UEi#THNlvbr(#Pv?yMgFu79RI%kGE?ca90Z8K_>301<%QE;92l6@6=lBVwY?COMa
z2-2;(;jTy$o^kMEloqFQbLMqhdk!c~<rtRU`ce>;y<RR8tq!N=Ijbo+r9K)um1>zU
zF4!_2i~4)R9yj*+2EDF&3>SG23!9}BGvEL=UgGNLA6H0K!sR1m3Hie&LeSZ=RldAM
z<FdJ_jiqgll+)HYFr<}X)vpEfw>IfFK8q{1_L7;~fY0*zYrY1~{)qj%KD(c^?2p{}
zWUp;lh%_?p7TxQzqs23G#UWtRF2+qo#`@T-fXSi>_qip{U6B8F@@vyW@Xsv;wVG|C
zYPLx-p$v2Ln&BCd@B1mk#;Kru9q?~3Mo~0E!4=nmP>2aAE|gfL+RSYD&3bl#YQh6w
zUqi8q%$wC>_0)&AXtG?#R>qJD3QF}3Uc-e9uMpSTWyt$F7Op>v=%~NDH$E7Kc<&oD
z_~!61IKbn<XdLYCj`qe!dk4YM-f(a<IvNc620?#9w|?9o_I}*oFYS^!F-gDu?`;*5
z^mTXp7vKE#U+$kh_5GyxzfkYbUwZ%jwfR=O=sxSp8egwe?#XWstxAT&tcY~fU2Z9u
z>*%4c{_o{g{a5IBshH<KN#g!ISN&bA`-88T!9U6QZLw<qxy|;CJq`XJb82#P4xlCe
zpZ&w#>i*xs;OO!GpL=;8fd5A?Bi|{%wZI@(06EWaB6Vlwz$e@dfKrh}D2m(!F(>C|
zcERE9)?a<aFx+igae{}`NjtL>X1<zV=G!@ytA+h$epUCU&Yj&T2WGwz<tsA)=vc*g
zyeC{)0;Z(xyIWhflh^K_CBg^wN~t{CltGfkBh0!svc**M;Y`3ai6R(b5DX<;PVZ2z
ztRWez^z#DdD2|-?v3$D=nf)-JOrl8=fhV}O)%8LW&fVvFYXUapXB*9H1xs%CEQ*=0
z4NehPRfOXoKW_*qT6PRQ4=bu2PWht*yy@(Aw_d9KptWwm8F{T%xvWrpmjhY)u12=H
zP?>Kk>3kbNfK<YAjUYMIq#mw^(yO&0i`L+|AKk!xNh%AFB%%zhTYMWw6p6$A>UZ0m
zV%2(sA0>-5Xr7BbYv(#>Uofd~n}|^<2c)L=cAlC@qw*=K<$}S6b)Oq3p4N$%v24AX
z!)Q&1Xus(Vyd{iWKHJf)9efz0h~vd48Z>ckc3i=9?KDE1D`|5pdY)CFtx4B<b%(wi
zA@7}2Hz#g@ndrqRK@+tjZ2}scoA{LUeEZ`ia5717*pU^;m;_QmQ!#ULIVIZWGK6uf
zcP{X_xGBzUO-ibe2E3oiaqAl*_qXx^?YUr<53Yp$N`scm0Oq2w!5l~}R+yF3PRAD;
zVGCNdQ7T$gO%eYA&!Gg`s}drJGHGq;t#BsA{7Ti96fY+s6%p^DAjV$T6>oQbs$=!1
zuK$}HulKkAyFWbIt?mCF>_6)N_whU!{ohgMxj;#XSg5lUH~Pd4liHF+y7R{5=DJcn
z7xCiA|5_Wp%Hc{o|0~UQOJ7W5&L*$jBR+m^C1ovlv0mY7%a?r3eY1Mz8m%|QQS9?+
z-}tjys#$MWQLo;v3XVzw2Yen6rZmllDq1pzz0tg(lF46^_gx=Nw53klTrN+3)!rac
z5UZi(S^d~+AxjIxqwcbeF;hVUj>opxJSpX^w#|1NGMaa5ihA=nHfD7$jidxr8p8!u
z>?lHGdv^S^id`DI#`4ABm222>D-Bz1xEev`x5HNNplUxGP*s-<@znuXngEI8OsI=}
z&Cvm#1yexW<lOUliUXgUT;^_Wa;XaNSx_#pK$?`(nlBP4&TR=*Y0~)_L#U!euTdhT
zy&X}S0-a$78kiAlW~0G`KE|@7w%-k&oFoATBA%-Bw{vwSE3ys|Yuhu7uAJP1e8<}V
zd<U=y{Lc6E8qYA>(SS%S)jWfjMCqCl6(xzQLf1L7%sRTHj;F-29FrIe6e58P>CDKq
zTlP&9-h?;>HJ4#KCBfAVc4?MeTF`}$%2oe&6i1EnQcvJTg0yR!yseO5Us!jGQzx60
zRO?Ee&#&V?KJ8Ck|JMV)LG^#B{(rPrJ^#IbFg$qF|L@~@0Q$c|;pO{OE&_7NNsNPB
zo&QrhN9(fU3a4IC#3XoEb(I*h>$WWUW`-FfA(qmSWk~>sd+JXTUuNSmc@JK%?drl)
zhNVWSx26@E5@)-CiHyoJnir_+)pS`0j8a$fE~#k5-dEf!cSQefHL#Dsa2lZigZH%u
z-ml)xJB4z>jk744!yg%n<hX`XPf?xqrD~&~tMWp&Au;FqsZ&m4?C#1GUPJA+ibzb%
zCWM$04%>!QFJ52DvT7$J#X;BaoQ>^S5Dg^HR^rf}6dN3h?kXRNMBZS#nC7xz&5>yN
z#D2_q#g=I;uoB%}7vhto8Zx|$UmZMia%d>!H8;n#^mc6ot6W%urrTYI*%qt(OPNsb
zQsE?+f04Y{?n>3%Sai=}OlyM3X3SP(QO=ypF&e1)@y=MXmV2s&SB~&ofRj5}oJJSS
zn1!V_Fl}=3l$%<0>NKj(1@cW_Z#|V7p>BFgokS76c2CtQR^+K%E%Y%*s>u^#o#QOd
zB0+jZA;+u)l0ZP?kve^*sJy_|D;8x1r(tDw`>oq@1)h3y`&AmXE@Ud-l{s<f9tV8N
z3lgomd^Gj5GTbc|UNNWqh7=h!BKqC6NU^H^SJ(fGT-}?p0hXQruj~H@`@4_#Ki$jo
z0QCRLRdkmB)Xpg8qOVqJlL-Yz$an=2Ovnr;kTR^Ufp|N`9GhQyg_kmIgg6O6U>#;7
zwe^Gwh_P{j+2vX#7olMmwB2%7ObXpX^_sf`C3MN<>U9u#ROs8O(ML4mT4t-xOUWBB
zjEr4zF!&0#@%sR$0&qITF=i<0aX}fHXk+AkgxCc4clCdPlRq)<<|sX}^s##n9Wc0?
z{+Q@w&o*BuA!+7;HyjLN54;%1l+ESu-EUqI54;*K9(V_XSH$aDfVz8Ca0eA||GwJ_
zZudI_P5$G>Bw(u|y<2Hz_u%k0NbemTl)&wMv%ezJJVsHpBGLyHN*@f{NwWgdM->_z
z9kvf#h0-`AS$spRhlAaA;@kl3;lW<}*p=~C{J$z&`-2jL4EArw*8V|>K?X;wvi190
zV7;)JRrtCL?r^xjDqrt@PP7lp;D)=q->k;kg-Kwx7jogKul&qyh9t!As~_w6oSO7~
zlMv%vRaJ>ipMJ%k0!dW11GT);YaHeW!5CIo)#@g;bv}<B54NxHoaY#*dvo*L2)FgF
z*Y!W066XHmzlTSAM|<`7@5l51_wqad{jVJUt=Z4GO&0h~ESr{GB{rb?(&RU43Og&8
z0nb>a(iYYBloTiP{Le)J-W5<icv*VU&vOsy)Nv@%G13wnyWQ)AfZLPY>b=>wR1w-*
z(KY@lwIK`Y;%G;G%`-3Sw5i(8rU^DOMn@D9tMgJF9c*(WZU3HeVK$$0;&+Yy99&%^
z78U{cI%lK8;A@hM>2cFJCX<jxM>FugU>NsfM3Ulz8pJKzd)=<0X>B;%98Lut&s3ng
z2@#0qQjA|?n4+2N#7v6)Dn+@p{M~E%?mC*i%%L?0)^fK%DP}$Qx-}4}1p0Z^|6m+l
z^?GZ%R%{$dmFtUzRGm+(#hrI6;XjG%VY4_l#qcz`{#uK=h!zyE-EVdkRi(}qp06Zy
zuACd#Zz6N_b?8@EC719X1<QR17O8$Urh|L!>^I6nR$i#8%cr**%bZ6gfaB-jtJd6U
z+c0ZNIb!Scrd*?T$i4Diw)hIAsXcD$oNt!6JU4pmf?7{<q}vZ9FP&@_#PYe8C-9>T
z7#57+8J3)-;(;QDQ8<S{xpKpm=46pBPe--6d7<58hjz=PJO{xu+3Lb~rFg(v{={KJ
zPQ_iX3tohiiI{pY9H=p*atzfOg7OYd>F<Sy$IR5PaV+#oEc;ZC<kP}&c0I+$i<Hxt
zaFAAzB;|s+P=VYq8D!-$p`fSoDgLJh_SZ7Bs!+07-fZ%V2BEYA*q<Cr6^#E8<rMaO
z_?bizs5q}NVO;3Ek62)44g{L{X{;%YsvZ;Qsq;mJw3ImOFQ%sx!<!*6l!P?S38%s6
z;e;N1OKF5rQU>+&6swGVf&vOd;PZGyBW}CA1az@`)u857#zSx7DZ#9ACvrs0Zj2mX
zt=ibVN1lyL?8LJCl+ddssFYQth506Vjj!9f{lY8;vY#x&KAeq}nlGqk`yJp{B-L3m
zx!rO}@HHrFR?ylCWoUgx(r*v<aT2W1uxiL{Sz@vS33V48wJ~dQ!;TQghx>q&fX!23
zr-N+sf2ugu+cc>nU3tC_j6#({lF`h>wb(f%Ck17p&S|YLV^KTM<1A7BXOn(Zjbd3;
zO35&kE3cN0IRR@TKuiDavoW9s`5@a;SY_&Vfjs8MPHfA%Pr0dCOf|b(p5v;6c93Xj
zrnq57Ns{~m0NobiJkPKRPp|NNVKc&B;iAQcnh=CnS*VbAb`UfvaoFtu?D}w?CyljT
zoe@-(Kn3ySYE;NVZjrX+DGS1d_^U&;O8VvU5V`Wz)ygDEr^r;0yjAHpHUcmwswvpm
z={+AVl-!Btjwq^-%k=m}O;01H>J&A@XJjf*aiF(VO&6Z(4^K;iStC?5Ec;fVw^X;P
zuj#qg@g&FW_&InU<Qegd;H$hY<g61r;CXKNK)y#}0GlPkDL)*5Z@OP>sAwLrob`j&
z|Efw#CP>8n2^K%#`QI3g<&v2zD3Z54@GI-8qaD<a9Mqasbrv?PO30>vaBLT)12y(x
zVe5K$ULb*#AsbP8m8Ia#q;6!*pcQtsbGT-_yM8D^IvD|-hFpEwI&7WKN_TbBisbBJ
zHQ!q4k1#si4{_k+xG|@lb)KC+z%Ld-CHA{bSqU35AipgZpI^MM_%9xW6zjXYj8M$=
zEB*bK#Ir=OxK*>?8q``wzNP0arJc+)&FOVlXzWH!<-kjMjjDHzm|GLdxhL(ke(uiY
zwq!|9?5WywM@Uptqc`)twHEAf*sSPkSUih{=U~(@Rh)sVp`!8|-zd3zy;r^ZP`qo%
z46ZY-HzVR0qMOR_-i}M7ROywO!6@66!M_wN@5y#VuQ7vdxl)}(=@h}R+toi`XEA0Z
zfMFN5vox)j`e@Rm|LV2P8C9MKgw$4owhDNH-(ToB+><E!kqG5}^nUr}XNMLlW9mn#
zmvh13U{&C5W>PPwL{Y+-Umt-_v++2>6@j*>pOP-Gv$z?X7Nh@zd$CQStyh;%B@+rX
zN2O8~SiYly*Mg{AA}$H9^GZ$rQ3AN=c)q$Rr%<z0daiPQ7AXsM^gUVEgsT(y9EdQt
zP-uP5stLvbUBPFeSI%`k6{ekc<`9#Sn(<sq+%MFt;C8A7%IEebtZ79r)o$(R=gz~K
z)#5zo<=rY<l|y)LYuhbqmU|7ELAh1Os%jK|d6?^P$^}Z&%}9`@`7CvnSq`!$6Uv{K
zXF<6(9vuWJ!!trNUbmf)YlQPvCc7@VY_fm0*}EopFJo@o+X^3VmWS)M!aZJ{`cLsR
z#DC~$nfuHCH{9K;=l^@m|8YOh1Bm}9#s9i_WG_uzt4jLRC|M1w2C_hrc__c1C&10y
zu}*;^cm3icF_oqYsixm66qRhtvs9P9d@K$>IE}ZJDS((am(At8(s`URE~O2|ZTyGY
z)h`vPrX#jXrdvj5u=~aP#q+Aph*c|VyQLYmWhYra_w4xRf9mqTNSbg@=RbDq_kTa0
z|G2N`0my&nrt5suL+>f&J4kulRf^dZrCb|nJfLZwt<e17`UprO7M;0l$O{7H#2^ie
zM$Nhgqki5Mcu#f7gC{6W7bnK6H&{0*YvCm`YhhuQAU3xzwu=u`=RIjSJL!G+;K8<_
z|0k!3sn{)f=zTpLr6oe75o`xY$l4|r?1_JYBP7TSU#jxGPoHvg%`4nbUKh4aq8Cla
zQZ3K4)-9)IYW9FhBuoSD%@cKJSJiViv##&<P?-L+&MSo_(tb*P#bka*X`P$xorH4C
zY#t!rz(^SmaHv!imHs%fR}Lz|O@&C0`~A4c7w?-WDMI@^Wn|Kql;ZwW#L<?bT~AIs
z_18)>!zRgs#w=NF3_NWARK8(kRfaZb<oq1+B5|61X>O%3v@R8`d)e2zxglqfd@fp6
zD-r|2N0Wp|HCWeX^!r*Wo(H1g)YpH#V|b7GUk(QK`=1XE4j<S5`*<G8`md8YlY|SV
zPhqMMp$Qg66pZo2whJ%KxyGqH!NSbw#r`&X>9KjM>h$c(74s#uH0&(G%tn1T<E+|y
zOJ63lcZk`9hWLF-nE)w4EPzj+o<G^X%0@U4ks^-u2s+317v}J)c+#Bwd?qQk@u5MF
z!tb0WQi?zKJ}6(YFH7hg(4XWw{n18K_0+v{)ur&;j6@;eWCk<DbkL8EH%2-Q$I^kU
z5Jiuo9hrFE%f0!_ho%C`@jI(8DkeUSh+0~>{6k$4EiGo#VW)=LRy;)<|E*S4t&P3v
zMM~8++z8uNXvIB5Z6&rrZ*cn1ZLp}-&tk8$6-rB}t|&BdwHansbv=ShM{Z%bNgh3`
zf2}peYJdwrjO>jGzHvs-_saVa&08#L<r8m4zsnC#D&YtfHKS;$7Q*eo=`{q3q&f=+
z!!v?)Vh$-fnc35#V|_SK`^|wQU{$UsEfFE5;Ou+@W!rAW6v&i0#QE@i(bh=5gEEuj
zS9qMB7<Iq*=@Ts2L($u6mWEEOT4`eqC^IF^&V`ynDgr!$geE;xdKH#y53Q<%a$n*3
zu*`=lfO}m|EVWlX0ARYW!Upqi49_s*_y_s&_&J!Lrc{~B+@jS%zFC-8vtnB|+Z=YN
zoF4F7B88e5#yJPj#383s99;1%2IN>mW_UbnC8=}`@Jt85JS+CGwohp?CX-hv-LdB)
z#+0c$Qb__SE#=YQ0sLOl$tHWTSxaG?V+>ovZ}yH3yUR6-z##nAV4KrbW9;<<g;R`D
zwdcI9P^*K_8HQ?+WYOBTcU2hyWo!7~B970c6j5eZ*InOpGsRdVG$uj=_S_3nyepEZ
zb=8o_D=e0ez^7>U;7|_P1G8QppW8ll`|lbtIr}zf0xmiKJsj><^Zy_0?mhZ{@8x+Y
z_TSH%>i~^tCLoh?9~g}yCA!gMk&w<A)|7vXCJU~8yr5JplF5zG+>?ANS9ReDwFeJ9
za4u-?n!7ry_dtHs!GeDyNeEt#{qjrr^^=cUx*mI7wO0Ima`F1?^>@c`QS=@{EN~!j
z2;0&Ib1s7a^yyf>k!3!8>h6HiF%zAuTW1PaaUP5&lV}bM%WmStobo_3O2Rs|mHLUC
zlt|KyBa9~c;IulPnV-%KX~6wie2o}ZM>KKLfA>oM>b*tDpIPrDO(PPh1-W;M1d8aS
zZ<CbwMJ6aCDB}I^emZ;6QwLI1Ci0#^rzg?r8FFLBdrG@iZq3D>*fK+zG^rt&OKp`=
zBh*10G9d|yR${Q2hU&<}nZ0j$t?QR1=dG@0wl<n82WUK2OrbxN>`xttDV2p+n9F`C
zl@yguQ`?>w)vFgX6pEC47x0Ic8-letokbd;J!)Z;!tK%>{>LiIiM_(V#L$wJyA7vf
zi?og9CMw-1Md(*4RM^y&4>!WjM%21geqKZ!E!LHFaJ^Gg^6mfk|NOsj`SSFqi?g?X
zhg=T4F&%_r66ib!Ba9OrPfSE6bjkw4;d>m#=2YOdx+FngBDJHkpvnKLoW(kHQm0Z=
zi67GlgH!>=l*QbL1Y}S71WJI@F?_3~or0mJH#pN9%=C6J_2JSYsO}R~VRcSN2+!{|
zpr8}ChFHa$t3bPq5iwVdrI<;~P!ixB7%_T<6Vu5tMj~UF>yE{QE7To<1vA758bz4<
zoz7)JFDnbIa6NYIuL_5ldy?%9$qOQ*7fB(>$s7w|?UCH7G0E+u)QuuH@#bplp3N-h
z`Z~?UTaM{#ZC+{YTKhoDpqKAaoJRP#({v1Aon`_~&h?=RW{)#5bAhJ%V@9Ja#^;!+
zVNx}{2Gjd(?g&UsE(3)hAkMScZl|e(a5ReOwR4xg@}B5m$tGNiKIB(y)?U_dtb8wi
zEmt85ij^HuWpP{aGc6R{1!rCw;@1Sf5zcmS%EA=?0Y2oxJo0t_8JtR;p@<O8(FOxU
z9beQGXHtFIrU`}^k;GwDJ638^cC}{bWGhfY+<2x83A}<l6`5M=VqJ3QpS%i@R}jpN
z$qmZaLf46c7%l{5jY1r@W2#D`1lFX^lPlv7Ql3Tavn-?XGX{02L@9NQW)po9v$)7L
z!ZUSaP9jJIh%qu#B8HZwjKS3hJKq8MBR?qEw1Sr%{p08Pn7ITrk}`L3IT<HxO*bxF
zz3^Lxppj2(rA9_Eq&c&<-s+-L#K9aNd#<OA$}XXns8gCH;`v|)LaLgvf{uuy-#H%c
zjWh)!26PFHyh;^oTewu#plxwfT<NraqbcC1FRsY(yS0{=OpB&*DIY&<CW}j8uL~7;
znt>CHLqHH9eWFHCm6O3{Yu7i!!azzIIW|Hk{!qCL5?ykhhdq|)Wg{FXjeO(arEi(-
z!k|tTbuoWY6#fc>FJ@3`w6?hl0>tr-%1EKp^C%%^uq?z@jh1)N$rZZTBn|4>XI9pv
zbLIK1lHcl9SO>qn_pVg7+L;eODGjoyaBlMT8s2nm=rLuEne4;gO213l#d&U>tHcpa
z+6xK-%0e?e<}_n)P1#jMQK+U5Z`4rp!D!b}%LaS-@+Ng1Y(SF$r-B<#cE%LO=6bkZ
zP6)>i??1-u{!=_P|F3fjx&Lc`I7dmy(5;-o%i@2A2i5$aM~8=x@jv(SJQV-0IVz5&
z+O1ixxEVV?d9DPx6v65Q`oa^o4TtFqX3hb&1qYdfw#8|Go5-tdr>=H3ubg4dCM8k}
zQ_)!`1+YGpXHTx?Sm*IByl1f0?b<X1O{t6gJULa-l1-b5cu|)!Nmk$L4#&E`tp@I@
z#C05lmGpNFTi68z1G1J_u>{ZLh*$}bRm4jW!qHD0vvY>W<o!xuuJGK~l`4>IN(ndF
zgrgW0aZ2Sj%Xtr!W=)yiICxUc{kM((sL{|<$8x&%qaldCl)hq6S5rUmYP8ZiX)|iw
zZOxg{z`Wiv#0qV*{;fFyMqxfKmjTv-ujH_>a2s-LG~WyAjNO78c(V5-B8bhMJXSiU
zQJLjR;F=gK$|^ZO7YetfQ^jUTUm&hNgV<P#cCUPdAV<;Rm};(=0;Zl@)jXSS7Klbq
zPaWjSfHpPoX66=MS#RvEbZZ{;)d!>Ou2?t<Zfsclh}e!TpnWOGOl1^l&IQyI;&@xS
z+hi1ayw{?+yA)UrBG(nP1b+Cl&+WvLF|W?Drr|7qc{B{ajAya^7b8YcIJ#vh&=ULa
z=;*K-|8umr_h|p!%k$vuzgLpwUVOW8>(8?CgR%W=M_VmFm9yw}R-bL-Zfw2=lCEX(
z+4=??%Ea`>MqdS1v&n~8FeL&9B4dqF)K!F>;#EkQn6{ga6*zLCl@(gd#tTYCi|NRm
zPhP3j1~_v0P0C?65=LfTFRj1ad|h1s0_Tw+ZQZGts6&0ACUJF?TFv58!FJQw@JLS%
z@rJGA5(eeoC?s7*xk<j*8pAbN$PL@NN^VzhXxJ&*v=hQox=!Scx*@9DR&MtdJC>x6
z=gftM?c`!Cn<rH}_cfGXfeDLRcR;2loEB5;U&WEL$_ltKU(N=VfmQInfiuT~ZGd+Z
zN6w01Htfc+omgYsZ|K5lgK|p;js^R`-8Zf{U1yG!l)5`~-rV7ID|O*E^UPh5)|pr>
z^)~F7lk<0tkuB8hFLG21^p}jND<zvo%zeMq4Y$PqLz4-;WB<=^aBx)3|8=x?@Ob{~
zUY>{N|B)>B;@f{?c=8{ccLEuHemG7bx3}${AdU7deL-$hcjOSNlXpFbkg2~Bhfo<-
zi$iF!8>bAS#f`JnsZ{AyyHn|*IfPyyfkuc|>xbs`eL0jau}$nzcO~g>OCg<PV*0Y+
z6$ehv7cFim_4;Kyo2}z7aj{rpi{63vOZy;P6dt5o%!s;w0k@d0;7+pJw3@?N?u=83
z{>xpi;Bxmqxyp+6pnP&1ixpgQg;-kVj58%yV0vA?$Fb<;*UE0t17{F<^u4XBY;4Z=
zrj)PIM$E<)@V<#pz<~X-eQ%}{YmEC%eQzyLZtHt9U>~^eZDkKln+AQC9-0l?IjwzI
z=B9Bb)D7G;cj^*dWRiTjLvwq-s2#Gq_ltgRzmI*E`2W<kS+`9DwJiSY@TeC5H5@$N
z|8g(S!}I^mFaPI{n|J(`?tlCIZa>w@JB|EOE!>ftuS(4IoP4VGMqGR@q#H(jm5{k{
zyq62*G1}`f+N*Bis~P<-;MDruv0f#~`JlW?pE=S?GvH&K*XQvyEnV|A=V{v1!oM8n
zn^;&1=$GwdQe9Yiv~TKPYJ_oH?~(%gz<o<AJ2Bc-x4U#<+|Bg5wdX?5t1mpBt67cy
z;zo0I7hx_9Zym>V(`T{&C#76W7`~+wXj%U6qpJUBcQAZB|93yngY*BKYnHnUCy>L<
z55^Nz;MDF8D$3l>C*-tsH;$oZ0<YyAazNZN4NL>1Mi)_TUFPLo^J_U&DediBUN}0I
zwBguF3!;mfTWfTz_~pgsGkR0%#TqHwZsymEx7)Q1b7Mm(X6jg!-7AJd&Oolkh3+VN
zmAt6dkI>LWbvzajdtHaZLgrj)1n$<ou()Rr$<c5#^*O`=302BrC9SbUOs<IfE_ky%
zEL`*I%$9NN+Y9bXm#|&od5?~J_S>R$O<m>Gw5X}8<Rs=JoMRiRYraTgu(nHBMToa9
zDvNtiR;MdQj3HBH9yOP8+Hu%Zb4rNcuTaa}$>us6%A@|-d`-(&(DghK%i%c-ohFpN
z%X%eg*vg>QMwSQ6He1RzY4CP+OdVXBeMsGMcNW;wt!=Cec*CwLr;BTH%*~uu3jp2H
zbL9@!!**X;XGcvXTyqFo)XF<_hHTb6Sh+`cB0Y+tKjj;u%O!}?mFrV;0pEf<$I_b0
zSgZ==RNae8wqHw7TZNiiyaP$%DyugWC1rK@3+Cd+{%lUVxrAO*(p8}@0kvUy=eCyK
zT;w&{wqG#2wDxHU%e1gWTAAi9KP)QO>OWrW|7AENx4#H-N&Mg8{@y_~{%^29eDwd`
z$8)Ft-y1oAFC@?1&GBE&&JV`-tI%n8`>M~k^Z4o(?#9_$Bj##uSzT>4k8EqeT?xn)
zo^wA{Wh;QxO_GR_KXGU-I$jFQsp8M<<;dzjjdmZlkQyeNySJgJJFqML@S1`sx=U--
zE8ssGyJlU3ZSM9~y?T{6u&T4TISQ;EBp4FzIv>{}RqjGuP9(SJ%H%0w`4h({nV7CW
zp81tf%Zg_lpRa}HgYf1T<+6f8w}~VyQM=uPn)hAeZ<{uHU)g2n#Gh5TZ9(juTe97^
zT^7Nu4X+(1=eGXkJFb_xp|pTqv{pAS3hOzanql11GSfgGq{~UKc#tA7%?&Z#`;{rJ
zJThkCyh9snV_Hc2vfn<;x{f<$i%EYv#laQNcVYAeiV}YX@hP_y<yxP!0vwqO(TvUj
ze|-+a{qD*m(WrLZg8v)gInFM3<*`D&ynJo1p>uWhTIjXtUa|pm$LS5%jw-f`)ekam
zYu=r)E8Nulxs9`Xcoy6L?s9W;FTfJ}fB)$4pc?<Rd+>Pv?_Qn<7yo6<VOd5Q`XgMo
z^|kJ<%BzWeN|W(mAcf0zRps;SHT>$8*JkVI!3;)4>J0`)O>SvzxY^c*d26evd~KSZ
zzJ<GyHcefqU%Xuz21uR7-uAND$?<lIwJKt68nsy4%Ps9yo2CbI6i21gj)k$;;!i2m
zidKJ0bGsZSI8m1;hyB%$S*jsg-o7qo`eu*`kwDE&w8uTHpw|~mmAT+M_l}hersdqj
zNiwOK3k47R`9QbYMZWH~!#(Sn5jmHcd+!#{_T_zQ?Tc5vqG0KijORVKY@rQ1e?Cr{
z`<*luQ=<kQdgbofqGD<;t+%qTa3sqfrpf{t`|C`~^4zKVEN`gZIy0{AaHUqMZO0rR
zmFJZ%VfG5+r)v*kI&bQ`-Lu+0_mdgQPmIdxV3x8{kqH*38DlspoQj@Tb=;sN%q54B
z7#07CZK;iFs?uBfGMT+Y%ng!kL8Gu?;B8?p2fB!6?c-mPUlJRQ_!a*pX|Qy3;~H~0
za)ttaw<XZ4>;cf=pMJ%k*2P+W1vCmnc-repwMd#<&!5QRMhZwQP!jsm3M*Kn7=7oR
zC18ybE88_j|M#ajipeCQ3~ye?T%!LE4hO@^{@?E5!O^4se;>~loFgHH30GJ0D-Mt=
zLjt3WMCvZ`6a`mkg1O(>g11w`foEw-nc%>uIEqwQ3dBeRQ<6+}fZ+%UGBYb%@g5~%
zXA2TM(Sgj{+IwIEM&bYH`tT-+=0FowQ=$YZW)P7C`yKzq<*%1=9qMessbX1pcX|mS
zVZ7r{i0G?-HToTY^e5}9f9;Fuq%Z%mKlv=_7l1}6xXMyxp772ypI@h)XZ{FXb)NYm
zPCL*3@6HyyLyXXj!`X|MyyK^g{*D9D@kxkLUzcO__l`f~0S&Q)P2vfRX%u4CA@M}D
zHkE2yL?@lo?@wNT_wvU#-}!O)xqS>~{$IR2dGYF{ABT6*#**`2hr?kt|IhAVICz}@
z_wj7Ow?rf;CU!RbNJdO57N>Hp>2yxuAK&9BF2DZo?WqtcKkoPCvf=Y-KcoTg3!0LE
z_aj~OSG8L4{+2A$RW9lYqgg6Nism|q=!66?!r~g^Bu7No^E;ibEqMFmf4sQpbbkBo
zH>vz~LY(3x#7RJ~QLyFmcWmIPrPz2ok73t;@4vT!F_aTQ+58x2K#u!;h9`szHt!An
zkOo(n`GodIx_#ZeY*Muw(1g<ncVsUhZ+{M1DmBWym_iSw<ehDPHtbxHBs>ObYm><<
zly+h)kkoS}<{Iw?<3@hq{y2*w9kr<To^7pou9X<@zQ<8S;b+RC(9=l#Na>ZNt)P%`
z3^Zea(mW!FOMN?KG|bd?!hgYAHiv(_dv%Q%hPNpBGlP?&G@K%VB04Ds+7QPNXxzt%
zz$|5i<L*wbv0xSu6afy20$_CUd`vYwJ*a1i$Pwvu)RLk#o0QQR2{8v`ImG%UVTz*^
zGY;2N5=<dLiPWjoeu6qVF~bo}A;H&%dmxjVy5`*)w|4E41~E#|1T(+WDKlTG0kuB;
z<A-d7QJV4s+Ld|Zhj`Z43?AY%qVrg4n^ODL;MGq$1~rdPHGGml5M^9oW*GgPVP(&A
zA~5fCdLY|l2^N^c(BIwry3^AD_WW=B!PmNuG&He<p?+SbSPcP5(o6skrZ`6G%NCr)
zXo4>&6$P)_DInQO%u{>}T-j9}fDrS55oKH*!wWS(z!rC`Mk0YqLn@+yG_E=T_&ti#
z2p>Z}t2!NL_AP1ZA}^_^r{T+4;6gTx*iR-TdEe;>G+72#!x3oWf*Jb5Lx0!{@ra<L
zHyrfX;a;bcW>IubBN8mdRS|nU2c*HD=N0qKETvFAJ&CT-oIjQJP>zSB*;D0h7f*Ne
zwv;pkWbw1{Ybwqe<~R{gH9mSnpBD%r#?ZV2Km^uqhQ*j#D><42w@4=%h~&x~ebWwX
z7e{#z&nF=7`khXQN0~$Jk>2yGkw*7L?XQqA%xMPKG>bxr$Q71fIL3hA3x<FsW6EMJ
za`bw@-9gg3fs(gR5+Df|C<(9uHp0i9t(+}gj@v2;{4&36N&2^p{uVgH5AH~Gwm^5?
zV5H=&oLA>k+H--E02edM?DQ_BlieQG<)yM~Vfii*Bpo{)E+|72d>SFnm+|IzQ_8hR
zr9e=?I~rv%hD!|y6r>$E8(ZG<dfpDW&Ae7il;;_l8xk(@<Pgr)GO4AtT<l0PDPipO
zyiNxN0p|P_4e>H`PgF^WX;?%Qx8hxD=mMkgXGR2mqXvMJKbJOkN&duZwD8S$q|=dx
z%rdy=#*H^B1~M!`vMcC9cDAge2YstF9Gb3M;1IS#fGtoIP)Khn^UG;A=h>H~K%s(d
zl}56pm#&-51{@g=Ua7P3+(5s=^H(U9I^S^>mU*A6e;Q_r11Wi~@LWlLwGhZJiPN(D
zNRl=rH2!p?EVM<$)+$(z>K3@jZUN-ZLRrYh&isJqIVmMARfi>FnUqvNOT+ov1abn$
z2`9=FR&!A$w{cYjk^nM@?*OMU20>!XC4g&`s7X1IwY5gabi_eQIVU3$5i!@zDxGhN
z3FB32NY%oQ?p7hm`-WEPeXrMRR$C2KZmzQeL}-K~vqGUXUA?Lv!Z#`UBg47wTa3ns
z50Ianu>RbSFgo1FNsyn({Pd|)>U5Y!MUQ>oH-1E%%#QQZ$<~}WKe@d8`OU?P`~zs`
z;olgIkDZrb2(2Q@#^o;y$Yn=I_t<!XYiSOej}TTjAIeQ$;rYTAuN>F&stuY0RYm0D
zr%#H0oh^4?LXovHqso(i*=&M$?hd7yV6Wf2eR=7N_o8Hr-C_rLFu316;KA?)yTGd^
zwOtnZckBINH8y8sDUrsM1#;!2Jl~@?C%@GugOph$ij;1rL>Y>(G^1-Kv=YTp1XBBj
zcy2azlqbA0P|rPYr$Wo;o~JneX{G3juJ&pJPwYhhRf4Fv-`lqkI{B=_?^DVIIAESX
z*_L);AR<-SZprnOoJ&!F^TWagFF=pN@0=zQz31Ksb-|MFaN#FUiZ{gZ;Xd@jZl{R^
z!yA!c=#pT#84?WdfCR%T35?KypVA3Kq105A2zg6k=nwosr}K|D3B0B=9FH)A;oc7H
z4t57S+Jv6%S{F84BM!<0k>=5uB!o|KSeW<|BBt3$IXxuv_O*9liwh(&-lOB5nBt!C
z1}k3(;Si(WDYI@UY3k_^LM}UO6qtPHK2Sbkt{pYnmm$9wo&qz+lz||q6bh83lp&#&
z*pQ6JSPjb<Batx)Dh#pOT-9CO(;Ae5BIlt|d6iEiZ_4xlh~PLHOQQ<0(C8I8$zHzs
z(Kk~0=P437?$?-MAjYMG&Ax7x4*%8Z^x&M~new8Wmt50>aJR!5$M9QOBl!)sjnq(d
z7|mfs#Z*_?RsGwu#CHJ6q18@0)&DZg-8xL|T>+Xz^R5s7_#QL7*w1PGo011mN=&DE
zO00L4*&ColGF1pMRWvG$T{NPZo>vZDzv-QEzte-CBo(w8WZbF0)o_~a`6aZ*=#T!E
zDcw`Z^$eRY!A3Utw#-cu4-Tm|f333pOc7Qs_s`UJ2}}`(kyPF(3$bKq6s1!%!h!^9
zMkx(<N@F^~36>*&jpkYpmMehcA9Q?UhR04Nvxb-%@1@$3%Is{{6NTiQB)RL%xEhS+
ztjpqRNf<L41Cm|Syhsyl*CgxfGc#vL!Q)eDG9*t0jHT#8$s7ph8Rn}usdaQSj|`*o
z04InMDg}g;*=D4S)5WbFQp{!ZR%F@vh?2P+$O4U`7s^hkOg6V`deTU=`69f_#4u|K
z!(+^>p!x?LkBM?Rs$wAxGHKbUF<U%&X1l-6_I{1YL=SL(EB~{Xaoh_K$GmH%iTRXF
z^x)Y(2nw@3!!18?JkBDBNOGmTr~hf&mTmg8_!=>6eAj*L^zJFAch7Np_l(oK&oP^k
z0Q0`c1Z4z8y#L)#XD@mTa~jQXPxfb5{kzvoDHpv0cg-3-l|{y%ia7eKi_9v7Xsj@j
zXz4PzCyAh1@6C35f|@_~`hQg`q6y6GI6<BN7SMG5A94lU&jUPl@R7hQ2G73p^x!I<
zu<vvnC`!UUWpaH0o{cyO31UPgBQni}kR_oBmp@5SFvS*;9k3^xcKrct%L1PH<aPg}
zBN;bFb2SH~=vNG=WD9;D;8e+;fW~P=wEb?^Ed#>u{M`VcBY~8-k)5>*ttkaabUKQt
z$Nm2G^|g-_iauqNex!@={*Py;FJE7(@YTO|IzJ^5=Db*`M{~QIBA1H@U4xWj6NdHb
zLK3)UM5v8!PRBxWSSKW0Ffz(Si98l3!oe*d7lj18lS??e^x)f*%d^X!&d+CWzkl=7
zTlo3p;^O4>+q0LK@a6(e-@JZt_V(<}>q~g^H#m9yclhD#^@|<AMEeupOS#P@f+SXY
zh2OcvxYW4yvuTeo2_QnrBtsJn6FS2zQTzUw#f0mH8YN*TA~6w09M`(zf9{R!$LH~R
Yd>)_2XRYV|4*&rF|6l;f%m9i3090bOFaQ7m

literal 0
HcmV?d00001

diff --git a/external/minio/charts/common/Chart.yaml b/external/minio/charts/common/Chart.yaml
index 23ba4e4e..dabd8068 100644
--- a/external/minio/charts/common/Chart.yaml
+++ b/external/minio/charts/common/Chart.yaml
@@ -2,7 +2,7 @@ annotations:
   category: Infrastructure
   licenses: Apache-2.0
 apiVersion: v2
-appVersion: 2.20.3
+appVersion: 2.20.5
 description: A Library Helm Chart for grouping common logic between bitnami charts.
   This chart is not deployable by itself.
 home: https://bitnami.com
@@ -20,4 +20,4 @@ name: common
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/common
 type: library
-version: 2.20.3
+version: 2.20.5
diff --git a/external/minio/charts/common/README.md b/external/minio/charts/common/README.md
index 82d78a38..fee26c99 100644
--- a/external/minio/charts/common/README.md
+++ b/external/minio/charts/common/README.md
@@ -24,7 +24,7 @@ data:
   myvalue: "Hello World"
 ```
 
-Looking to use our applications in production? Try [VMware Tanzu Application Catalog](https://bitnami.com/enterprise), the enterprise edition of Bitnami Application Catalog.
+Looking to use our applications in production? Try [VMware Tanzu Application Catalog](https://bitnami.com/enterprise), the commercial edition of the Bitnami catalog.
 
 ## Introduction
 
diff --git a/external/minio/charts/common/templates/_compatibility.tpl b/external/minio/charts/common/templates/_compatibility.tpl
new file mode 100644
index 00000000..eb4061d7
--- /dev/null
+++ b/external/minio/charts/common/templates/_compatibility.tpl
@@ -0,0 +1,42 @@
+{{/*
+Copyright Broadcom, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
+{{/* vim: set filetype=mustache: */}}
+
+{{/* 
+Return true if the detected platform is Openshift
+Usage:
+{{- include "common.compatibility.isOpenshift" . -}}
+*/}}
+{{- define "common.compatibility.isOpenshift" -}}
+{{- if .Capabilities.APIVersions.Has "security.openshift.io/v1" -}}
+{{- true -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Render a compatible securityContext depending on the platform. By default it is maintained as it is. In other platforms like Openshift we remove default user/group values that do not work out of the box with the restricted-v1 SCC
+Usage:
+{{- include "common.compatibility.renderSecurityContext" (dict "secContext" .Values.containerSecurityContext "context" $) -}}
+*/}}
+{{- define "common.compatibility.renderSecurityContext" -}}
+{{- $adaptedContext := .secContext -}}
+
+{{- if (((.context.Values.global).compatibility).openshift) -}}
+  {{- if or (eq .context.Values.global.compatibility.openshift.adaptSecurityContext "force") (and (eq .context.Values.global.compatibility.openshift.adaptSecurityContext "auto") (include "common.compatibility.isOpenshift" .context)) -}}
+    {{/* Remove incompatible user/group values that do not work in Openshift out of the box */}}
+    {{- $adaptedContext = omit $adaptedContext "fsGroup" "runAsUser" "runAsGroup" -}}
+    {{- if not .secContext.seLinuxOptions -}}
+    {{/* If it is an empty object, we remove it from the resulting context because it causes validation issues */}}
+    {{- $adaptedContext = omit $adaptedContext "seLinuxOptions" -}}
+    {{- end -}}
+  {{- end -}}
+{{- end -}}
+{{/* Remove fields that are disregarded when running the container in privileged mode */}}
+{{- if $adaptedContext.privileged -}}
+  {{- $adaptedContext = omit $adaptedContext "capabilities" "seLinuxOptions" -}}
+{{- end -}}
+{{- omit $adaptedContext "enabled" | toYaml -}}
+{{- end -}}
diff --git a/external/minio/charts/common/templates/_resources.tpl b/external/minio/charts/common/templates/_resources.tpl
new file mode 100644
index 00000000..d8a43e1c
--- /dev/null
+++ b/external/minio/charts/common/templates/_resources.tpl
@@ -0,0 +1,50 @@
+{{/*
+Copyright Broadcom, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
+{{/* vim: set filetype=mustache: */}}
+
+{{/*
+Return a resource request/limit object based on a given preset.
+These presets are for basic testing and not meant to be used in production
+{{ include "common.resources.preset" (dict "type" "nano") -}}
+*/}}
+{{- define "common.resources.preset" -}}
+{{/* The limits are the requests increased by 50% (except ephemeral-storage and xlarge/2xlarge sizes)*/}}
+{{- $presets := dict 
+  "nano" (dict 
+      "requests" (dict "cpu" "100m" "memory" "128Mi" "ephemeral-storage" "50Mi")
+      "limits" (dict "cpu" "150m" "memory" "192Mi" "ephemeral-storage" "2Gi")
+   )
+  "micro" (dict 
+      "requests" (dict "cpu" "250m" "memory" "256Mi" "ephemeral-storage" "50Mi")
+      "limits" (dict "cpu" "375m" "memory" "384Mi" "ephemeral-storage" "2Gi")
+   )
+  "small" (dict 
+      "requests" (dict "cpu" "500m" "memory" "512Mi" "ephemeral-storage" "50Mi")
+      "limits" (dict "cpu" "750m" "memory" "768Mi" "ephemeral-storage" "2Gi")
+   )
+  "medium" (dict 
+      "requests" (dict "cpu" "500m" "memory" "1024Mi" "ephemeral-storage" "50Mi")
+      "limits" (dict "cpu" "750m" "memory" "1536Mi" "ephemeral-storage" "2Gi")
+   )
+  "large" (dict 
+      "requests" (dict "cpu" "1.0" "memory" "2048Mi" "ephemeral-storage" "50Mi")
+      "limits" (dict "cpu" "1.5" "memory" "3072Mi" "ephemeral-storage" "2Gi")
+   )
+  "xlarge" (dict 
+      "requests" (dict "cpu" "1.0" "memory" "3072Mi" "ephemeral-storage" "50Mi")
+      "limits" (dict "cpu" "3.0" "memory" "6144Mi" "ephemeral-storage" "2Gi")
+   )
+  "2xlarge" (dict 
+      "requests" (dict "cpu" "1.0" "memory" "3072Mi" "ephemeral-storage" "50Mi")
+      "limits" (dict "cpu" "6.0" "memory" "12288Mi" "ephemeral-storage" "2Gi")
+   )
+ }}
+{{- if hasKey $presets .type -}}
+{{- index $presets .type | toYaml -}}
+{{- else -}}
+{{- printf "ERROR: Preset key '%s' invalid. Allowed values are %s" .type (join "," (keys $presets)) | fail -}}
+{{- end -}}
+{{- end -}}
diff --git a/external/minio/charts/common/templates/_storage.tpl b/external/minio/charts/common/templates/_storage.tpl
index 7780da18..aa75856c 100644
--- a/external/minio/charts/common/templates/_storage.tpl
+++ b/external/minio/charts/common/templates/_storage.tpl
@@ -4,19 +4,18 @@ SPDX-License-Identifier: APACHE-2.0
 */}}
 
 {{/* vim: set filetype=mustache: */}}
+
 {{/*
 Return  the proper Storage Class
 {{ include "common.storage.class" ( dict "persistence" .Values.path.to.the.persistence "global" $) }}
 */}}
 {{- define "common.storage.class" -}}
-
-{{- $storageClass := default .persistence.storageClass ((.global).storageClass) -}}
+{{- $storageClass := (.global).storageClass | default .persistence.storageClass | default (.global).defaultStorageClass | default "" -}}
 {{- if $storageClass -}}
   {{- if (eq "-" $storageClass) -}}
       {{- printf "storageClassName: \"\"" -}}
-  {{- else }}
+  {{- else -}}
       {{- printf "storageClassName: %s" $storageClass -}}
   {{- end -}}
 {{- end -}}
-
 {{- end -}}
diff --git a/external/minio/templates/_helpers.tpl b/external/minio/templates/_helpers.tpl
index 0c99bafb..2a49fbc0 100644
--- a/external/minio/templates/_helpers.tpl
+++ b/external/minio/templates/_helpers.tpl
@@ -41,7 +41,7 @@ otherwise it generates a random value.
 {{- define "getValueFromSecret" }}
 {{- $len := (default 16 .Length) | int -}}
 {{- $obj := (lookup "v1" "Secret" .Namespace .Name).data -}}
-{{- if $obj }}
+{{- if and $obj (hasKey $obj .Key)}}
 {{- index $obj .Key | b64dec -}}
 {{- else -}}
 {{- randAlphaNum $len -}}
diff --git a/external/minio/templates/pdb.yaml b/external/minio/templates/pdb.yaml
new file mode 100644
index 00000000..e34aa458
--- /dev/null
+++ b/external/minio/templates/pdb.yaml
@@ -0,0 +1,26 @@
+{{- /*
+Copyright Broadcom, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
+{{- if .Values.pdb.create }}
+apiVersion: {{ include "common.capabilities.policy.apiVersion" . }}
+kind: PodDisruptionBudget
+metadata:
+  name: {{ include "common.names.fullname" . }}
+  namespace: {{ include "common.names.namespace" . | quote }}
+  labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }}
+  {{- if .Values.commonAnnotations }}
+  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
+  {{- end }}
+spec:
+  {{- if .Values.pdb.minAvailable }}
+  minAvailable: {{ .Values.pdb.minAvailable }}
+  {{- end }}
+  {{- if or .Values.pdb.maxUnavailable ( not .Values.pdb.minAvailable ) }}
+  maxUnavailable: {{ .Values.pdb.maxUnavailable | default 1 }}
+  {{- end }}
+  {{- $podLabels := include "common.tplvalues.merge" ( dict "values" ( list .Values.podLabels .Values.commonLabels ) "context" . ) }}
+  selector:
+    matchLabels: {{- include "common.labels.matchLabels" ( dict "customLabels" $podLabels "context" $ ) | nindent 6 }}
+{{- end }}
diff --git a/external/minio/templates/provisioning-job.yaml b/external/minio/templates/provisioning-job.yaml
index 785bcaf6..719eadac 100644
--- a/external/minio/templates/provisioning-job.yaml
+++ b/external/minio/templates/provisioning-job.yaml
@@ -141,7 +141,7 @@ spec:
               mc admin config set {{ $minioAlias }} {{ $config.name }} {{ $options }};
               {{- end }}
 
-              mc admin service restart {{ $minioAlias }};
+              mc admin service restart {{ $minioAlias }} --wait --json;
 
               {{- range $policy := .Values.provisioning.policies }}
               mc admin policy create {{ $minioAlias }} {{ $policy.name }} /etc/ilm/policy-{{ $policy.name }}.json;
diff --git a/external/minio/templates/provisioning-networkpolicy.yaml b/external/minio/templates/provisioning-networkpolicy.yaml
new file mode 100644
index 00000000..ea9fb4a1
--- /dev/null
+++ b/external/minio/templates/provisioning-networkpolicy.yaml
@@ -0,0 +1,50 @@
+{{- /*
+Copyright Broadcom, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
+{{- if and .Values.provisioning.enabled .Values.provisioning.networkPolicy.enabled }}
+kind: NetworkPolicy
+apiVersion: {{ include "common.capabilities.networkPolicy.apiVersion" . }}
+metadata:
+  name: {{ printf "%s-provisioning" (include "common.names.fullname" .) | trunc 63 | trimSuffix "-" }}
+  namespace: {{ include "common.names.namespace" . | quote }}
+  labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }}
+  {{- if .Values.commonAnnotations }}
+  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
+  {{- end }}
+spec:
+  {{- $podLabels := include "common.tplvalues.merge" ( dict "values" ( list .Values.podLabels .Values.commonLabels ) "context" . ) }}
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/component: minio-provisioning
+  policyTypes:
+    - Ingress
+    - Egress
+  {{- if .Values.provisioning.networkPolicy.allowExternalEgress }}
+  egress:
+    - {}
+  {{- else }}
+  egress:
+    # Allow dns resolution
+    - ports:
+        - port: 53
+          protocol: UDP
+    # Allow outbound connections to other cluster pods
+    - ports:
+        - port: {{ .Values.containerPorts.api }}
+        - port: {{ .Values.containerPorts.console }}
+        - port: {{ .Values.service.ports.api }}
+        - port: {{ .Values.service.ports.console }}
+      to:
+        - podSelector:
+            matchLabels: {{- include "common.labels.matchLabels" ( dict "customLabels" $podLabels "context" $ ) | nindent 14 }}
+    {{- if .Values.provisioning.networkPolicy.extraEgress }}
+    {{- include "common.tplvalues.render" ( dict "value" .Values.dataCoord.networkPolicy.extraEgress "context" $ ) | nindent 4 }}
+    {{- end }}
+  {{- end }}
+  ingress:
+    {{- if .Values.provisioning.networkPolicy.extraIngress }}
+    {{- include "common.tplvalues.render" ( dict "value" .Values.initJob.networkPolicy.extraIngress "context" $ ) | nindent 4 }}
+    {{- end }}
+{{- end }}
diff --git a/external/minio/values.yaml b/external/minio/values.yaml
index 512b5bba..eae19609 100644
--- a/external/minio/values.yaml
+++ b/external/minio/values.yaml
@@ -8,7 +8,8 @@
 
 ## @param global.imageRegistry Global Docker image registry
 ## @param global.imagePullSecrets Global Docker registry secret names as an array
-## @param global.storageClass Global StorageClass for Persistent Volume(s)
+## @param global.defaultStorageClass Global default StorageClass for Persistent Volume(s)
+## @param global.storageClass DEPRECATED: use global.defaultStorageClass instead
 ##
 global:
   imageRegistry: ""
@@ -17,6 +18,7 @@ global:
   ##   - myRegistryKeySecretName
   ##
   imagePullSecrets: []
+  defaultStorageClass: ""
   storageClass: ""
   ## Compatibility adaptations for Kubernetes platforms
   ##
@@ -68,7 +70,7 @@ extraDeploy: []
 image:
   registry: docker.io
   repository: bitnami/minio
-  tag: 2024.7.4-debian-12-r0
+  tag: 2024.8.3-debian-12-r0
   digest: ""
   ## Specify a imagePullPolicy
   ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -96,7 +98,7 @@ image:
 clientImage:
   registry: docker.io
   repository: bitnami/minio-client
-  tag: 2024.7.3-debian-12-r0
+  tag: 2024.7.31-debian-12-r0
   digest: ""
 ## @param mode MinIO&reg; server mode (`standalone` or `distributed`)
 ## ref: https://docs.minio.io/docs/distributed-minio-quickstart-guide
@@ -1103,7 +1105,7 @@ volumePermissions:
   image:
     registry: docker.io
     repository: bitnami/os-shell
-    tag: 12-debian-12-r24
+    tag: 12-debian-12-r27
     digest: ""
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.