From f0c0bf786b971e78fd5fa8e9fb3c89fa61dfb186 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Stephan=20Austerm=C3=BChle?= <au@hcsd.de>
Date: Mon, 22 Nov 2021 10:40:10 +0100
Subject: [PATCH 1/3] Add Helm chart
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Stephan Austermühle <au@hcsd.de>
---
 deploy/helm/time-exporter/.helmignore         |  23 +++
 deploy/helm/time-exporter/Chart.yaml          |   6 +
 deploy/helm/time-exporter/README.md           |  48 ++++++
 deploy/helm/time-exporter/index.yaml          |  14 ++
 .../helm/time-exporter/templates/_helpers.tpl |  62 +++++++
 .../time-exporter/templates/daemonset.yaml    | 114 +++++++++++++
 .../helm/time-exporter/templates/service.yaml |  20 +++
 .../templates/serviceaccount.yaml             |  12 ++
 .../templates/tests/test-connection.yaml      |  15 ++
 .../time-exporter/time-exporter-0.1.1.tgz     | Bin 0 -> 4344 bytes
 deploy/helm/time-exporter/values.yaml         | 151 ++++++++++++++++++
 11 files changed, 465 insertions(+)
 create mode 100644 deploy/helm/time-exporter/.helmignore
 create mode 100644 deploy/helm/time-exporter/Chart.yaml
 create mode 100644 deploy/helm/time-exporter/README.md
 create mode 100644 deploy/helm/time-exporter/index.yaml
 create mode 100644 deploy/helm/time-exporter/templates/_helpers.tpl
 create mode 100644 deploy/helm/time-exporter/templates/daemonset.yaml
 create mode 100644 deploy/helm/time-exporter/templates/service.yaml
 create mode 100644 deploy/helm/time-exporter/templates/serviceaccount.yaml
 create mode 100644 deploy/helm/time-exporter/templates/tests/test-connection.yaml
 create mode 100644 deploy/helm/time-exporter/time-exporter-0.1.1.tgz
 create mode 100644 deploy/helm/time-exporter/values.yaml

diff --git a/deploy/helm/time-exporter/.helmignore b/deploy/helm/time-exporter/.helmignore
new file mode 100644
index 0000000..0e8a0eb
--- /dev/null
+++ b/deploy/helm/time-exporter/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
diff --git a/deploy/helm/time-exporter/Chart.yaml b/deploy/helm/time-exporter/Chart.yaml
new file mode 100644
index 0000000..5c9b1cb
--- /dev/null
+++ b/deploy/helm/time-exporter/Chart.yaml
@@ -0,0 +1,6 @@
+apiVersion: v2
+name: time-exporter
+description: Time Exporter
+type: application
+version: 0.1.1
+appVersion: "0.0.3"
diff --git a/deploy/helm/time-exporter/README.md b/deploy/helm/time-exporter/README.md
new file mode 100644
index 0000000..34c3810
--- /dev/null
+++ b/deploy/helm/time-exporter/README.md
@@ -0,0 +1,48 @@
+# Helm Chart for the Time Exporter
+
+This [Helm](https://helm.sh/) chart deploys the Time Exporter to a
+Kubernetes cluster as a
+[DaemonSet](https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/).
+
+## Chrony Monitoring Considerations
+
+Chrony by defaults provides its command channel through a Unix socket.
+There is also an additional UDP socket that listens to the loopback
+interface only by default (127.0.0.1:323).
+
+Before actually deploying the Time Exporter to monitor Chrony, check
+your access options:
+
+- When passing the Unix socket (`/var/run/chrony/chronyd.sock`),
+  ensure that the `time_exporter` process has write access to it.
+
+- The container cannot access the host’s loopback interface unless the
+  Pods runs with host network access (`hostNetwork=true`). Consider
+  securing the endpoint via
+  [`--web.config`](https://github.com/prometheus/node_exporter#tls-endpoint).
+
+- Another option is to bind `chronyd` to an accessible IP address and
+  configure authentication. However, the latter seems to be
+  unsupported by `time_exporter` currently.
+
+## Scraping
+
+Typically, annotating the Kubernetes Service should be sufficient to
+make the [Prometheus Service
+Discovery](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#kubernetes_sd_config)
+aware of the Time Exporter and scrape the metrics.
+
+Example:
+
+```yaml
+service:
+  annotations:
+    prometheus.io/scrape: "true"
+```
+
+## Deployment Configuration (Helm Values)
+
+See the file `values.yaml` for all available configuration options.
+
+Do not forget to enable the desired collector. The Helm chart disables
+all collectors by default except for the exporter metrics.
diff --git a/deploy/helm/time-exporter/index.yaml b/deploy/helm/time-exporter/index.yaml
new file mode 100644
index 0000000..36678a9
--- /dev/null
+++ b/deploy/helm/time-exporter/index.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+entries:
+  time-exporter:
+  - apiVersion: v2
+    appVersion: 0.0.3
+    created: "2021-11-22T10:38:13.950181758+01:00"
+    description: Time Exporter
+    digest: 6df64198080229a804046b4a320e11af57d52208359fd39727b734bea58b1e93
+    name: time-exporter
+    type: application
+    urls:
+    - time-exporter-0.1.1.tgz
+    version: 0.1.1
+generated: "2021-11-22T10:38:13.949249278+01:00"
diff --git a/deploy/helm/time-exporter/templates/_helpers.tpl b/deploy/helm/time-exporter/templates/_helpers.tpl
new file mode 100644
index 0000000..c80bf2f
--- /dev/null
+++ b/deploy/helm/time-exporter/templates/_helpers.tpl
@@ -0,0 +1,62 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "time-exporter.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "time-exporter.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "time-exporter.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "time-exporter.labels" -}}
+helm.sh/chart: {{ include "time-exporter.chart" . }}
+{{ include "time-exporter.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "time-exporter.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "time-exporter.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "time-exporter.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "time-exporter.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}
diff --git a/deploy/helm/time-exporter/templates/daemonset.yaml b/deploy/helm/time-exporter/templates/daemonset.yaml
new file mode 100644
index 0000000..0425c27
--- /dev/null
+++ b/deploy/helm/time-exporter/templates/daemonset.yaml
@@ -0,0 +1,114 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: {{ include "time-exporter.fullname" . }}
+  labels:
+    {{- include "time-exporter.labels" . | nindent 4 }}
+spec:
+  selector:
+    matchLabels:
+      {{- include "time-exporter.selectorLabels" . | nindent 6 }}
+{{- with .Values.updateStrategy }}
+  updateStrategy:
+    {{ . | toYaml | nindent 4 }}
+{{- end }}
+  template:
+    metadata:
+      {{- with .Values.podAnnotations }}
+      annotations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      labels:
+        {{- include "time-exporter.selectorLabels" . | nindent 8 }}
+    spec:
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      serviceAccountName: {{ include "time-exporter.serviceAccountName" . }}
+      securityContext:
+        {{- toYaml .Values.podSecurityContext | nindent 8 }}
+{{- if .Values.priorityClassName }}
+      priorityClassName: {{ .Values.priorityClassName }}
+{{- end }}
+      hostNetwork: {{ .Values.hostNetwork }}
+      containers:
+        - name: {{ .Chart.Name }}
+          securityContext:
+            {{- toYaml .Values.securityContext | nindent 12 }}
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          args:
+            - --log.level={{ .Values.logging.level }}
+            - --log.format={{ .Values.logging.format }}
+            - --collector.disable-defaults
+{{- if not .Values.collectors.exporterMetrics }}
+            - --web.disable-exporter-metrics
+{{- end }}
+{{- if .Values.collectors.chrony.enabled }}
+            - --collector.chrony
+            - --collector.chrony.address={{ .Values.collectors.chrony.address }}
+{{- end }}
+{{- if .Values.collectors.ntp.enabled }}
+            - --collector.ntp
+{{- end }}
+{{- if .Values.collectors.time.enabled }}
+            - --collector.time
+{{- end }}
+{{- if .Values.collectors.timex.enabled }}
+            - --collector.timex
+{{- end }}
+{{- range $key, $value := .Values.extraArgs }}
+            - --{{ $key }}={{ $value }}
+{{- end }}
+          ports:
+            - name: http
+              containerPort: 9818
+              protocol: TCP
+{{- if .Values.livenessProbe.enabled }}
+          livenessProbe:
+            httpGet:
+              path: /
+              port: http
+            failureThreshold: {{ .Values.livenessProbe.failureThreshold }}
+            periodSeconds: {{ .Values.livenessProbe.periodSeconds }}
+            successThreshold: {{ .Values.livenessProbe.successThreshold }}
+            timeoutSeconds: {{ .Values.livenessProbe.timeoutSeconds }}
+{{- end }}
+{{- if .Values.readinessProbe.enabled }}
+          readinessProbe:
+            httpGet:
+              path: /
+              port: http
+            failureThreshold: {{ .Values.readinessProbe.failureThreshold }}
+            periodSeconds: {{ .Values.readinessProbe.periodSeconds }}
+            successThreshold: {{ .Values.readinessProbe.successThreshold }}
+            timeoutSeconds: {{ .Values.readinessProbe.timeoutSeconds }}
+{{- end }}
+          resources:
+            {{- toYaml .Values.resources | nindent 12 }}
+{{- if and .Values.collectors.chrony.enabled (eq "/" (substr 0 1 .Values.collectors.chrony.address)) }}
+          volumeMounts:
+            - name: chrony-socket
+              mountPath: {{ .Values.collectors.chrony.address }}
+              readOnly: true
+{{- end }}
+      {{- with .Values.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+{{- if and .Values.collectors.chrony.enabled (eq "/" (substr 0 1 .Values.collectors.chrony.address)) }}
+      volumes:
+        - name: chrony-socket
+          hostPath:
+            path: {{ .Values.collectors.chrony.hostPath }}
+            type: Socket
+{{- end }}
diff --git a/deploy/helm/time-exporter/templates/service.yaml b/deploy/helm/time-exporter/templates/service.yaml
new file mode 100644
index 0000000..07ab1ee
--- /dev/null
+++ b/deploy/helm/time-exporter/templates/service.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "time-exporter.fullname" . }}
+  labels:
+    {{- include "time-exporter.labels" . | nindent 4 }}
+{{- with .Values.service.annotations }}
+  annotations:
+    {{ . |toYaml |indent 4 }}
+{{- end }}
+spec:
+  type: {{ .Values.service.type }}
+  clusterIP: None
+  ports:
+    - port: {{ .Values.service.port }}
+      targetPort: http
+      protocol: TCP
+      name: http
+  selector:
+    {{- include "time-exporter.selectorLabels" . | nindent 4 }}
diff --git a/deploy/helm/time-exporter/templates/serviceaccount.yaml b/deploy/helm/time-exporter/templates/serviceaccount.yaml
new file mode 100644
index 0000000..ea9e6db
--- /dev/null
+++ b/deploy/helm/time-exporter/templates/serviceaccount.yaml
@@ -0,0 +1,12 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "time-exporter.serviceAccountName" . }}
+  labels:
+    {{- include "time-exporter.labels" . | nindent 4 }}
+  {{- with .Values.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+{{- end }}
diff --git a/deploy/helm/time-exporter/templates/tests/test-connection.yaml b/deploy/helm/time-exporter/templates/tests/test-connection.yaml
new file mode 100644
index 0000000..0434e0e
--- /dev/null
+++ b/deploy/helm/time-exporter/templates/tests/test-connection.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: "{{ include "time-exporter.fullname" . }}-test-connection"
+  labels:
+    {{- include "time-exporter.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": test
+spec:
+  containers:
+    - name: wget
+      image: busybox
+      command: ['wget']
+      args: ['{{ include "time-exporter.fullname" . }}:{{ .Values.service.port }}']
+  restartPolicy: Never
diff --git a/deploy/helm/time-exporter/time-exporter-0.1.1.tgz b/deploy/helm/time-exporter/time-exporter-0.1.1.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..a9049cce6ff16622cc3b87254d7e003fb6946891
GIT binary patch
literal 4344
zcmV<U5C`uciwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PH;NavL|2`HiROqc&y9Ck{zTmU67h53S|f^_{J#B0H%qSIPos
znlp$nzy!ch;wiqm*SOcaC%MAMe3FzDTP0VvG(SWV(`Ymr{e=cvhUGZK>q07nYV<Or
z%0x?=^KTyT8IQ-~!-E6&IUbMupX15l<eSOC<lyk|aBu%;^38a1Fdo172F4Fb#HOdz
zhN^GIUp!WSa(|MC7VIZfnn^K*#U7zWQU4rA<7l5GsAI(n<C@;F9N|@v79wblQ|L$#
zG0Os{K#PL2nA%Qc(cqgz6Y{ku{Pc95uKq75FHt|V0k}i|4__P|_Vs`7aQ{jFALH4A
z6P(kM8}MrnbE&#29g!_~moW`Y1BHJazkM^DOO;b&Fo8MaXaP<z=2RgpsA6=+QG<~%
zLnx@$m;e(-!cvwB4CV!=26aRT%V~;J0-&&vni;8<Q%G`lq?V(uRRJhU&d(%g@p1~U
z=cm$~Dby$o0oZ~c7N`_U?5G)nLkotcaFt1okc0^`|2nol4jMxj5wO5h7z_y6f^$U3
zj4AYVG`cKjs03PSnH(iD)+0mpr5@!}&=iLW#axO}StQg{zlIvki1?;+qo~1jY3Jw-
z<ByVaCerurwViqUw*>>p>GgX-7nE_!$SF+5<8K46&PvYDF;-~w6h8do3~)7fNB_L!
ze5H|SR0|g4aU9E1n5kpgd4VyTGt_XEp~+AIg#ZWC1A@+E$rHPbu|jGvArQVz!Ke})
zqGKVXahBe#IZYD#VHw>+M*wI8JB6E1uK&9X!IBJezOI)=R%(nK?CUuQX+Wa^Dw05p
zTUS-$E>Mq%X-H9^WqksrW+HWnE8f&1NC3PCvpgzfa@?cNww+^KDrS~1r7(DHYO3e@
zZ%UTM6!ymBvE^_V%)!L8pfkpqVW@ozK%!((eILT{n>X&eLYn*_`0__7&A&5_dZ`WO
zEhei{9P3jlEI_~cy+-AvWbE1~=kn@Iu?6Fp;wv3fPQCMX-6~;dMDisswL$gz%xalb
zW(xoI-Q>Hqt7Y*QO6FEzN~aS#R@5RHSmaKBj^h}0&Gbxa^Gt(4b0yU!<aBApN#SoL
zQ|KgxI{2WON{VGdwjh>y?p8RXLLes=&8f#x%|oG<rHZkUq@NK=T~f}MpwMDKkvMrV
z60{TdWo--U-cFE=1deopV62^^*3QLJ=$Oe;`=!jJl}TqCGdm2b$Qwn<wFD-tC~DM>
z;MjjEqwNBL6o6vEloUA%qv48~3^+4}hefPN*#%w3nH~Nu6U^G4$V&WDmXJueqM|dC
zR<~04*%~kB(n<gmsl(2hupl(~wbbr?ZU+!(nNHPm*UevHF5T=A;!^P?%oKIJnHyB_
ztYP)DC?L(5sbxAYN+*AL_?=_!EcxNVTNY;cTZy{Y;l&F4{@z<gh>!`MBgfcC<<-zg
zZk5@~;fG&buOVFGataoBs3gazYpQdqz1y((WnsHpY_G1FHaaxpe2%f1!l^uuGfYa3
zgwXk%31*gl;4L_l37jb=t#04#8)7M9EQ}s$kC2IUhzk~5(np0%hDAU%EEHnyV(JmG
zD&?DBa;o*IGfCb84Bh-<#SDunCu`uW>EdjG0<}I<a_00Jh4masZ7AlH@lxTtOrg#s
zPo}VMbsZIR22P4Z+XW<G1<(pc3vy!Z1j|vDrUA9uM-%qggL0XsOr&0n-pCX<E|9}^
zg0nK+1t#Wl7p|xhyMRhbwL`#zOx-(D^|MI8$1t$XWjfEzF8r#cupNB+)cqzTmfVY?
zp8D>u+%%o4RM83KXcUXBTvbhPeT#SKUCuZxFP){c?$mv8xO><=2-F00QOzmWSoI2a
z6SRyk(STIe3oC0?nXrb;P$tkL*a}^K&QJv3NJGC}K%q-zN2lJB)LkK?8m<&G7|eCR
zVk9sV!Cz~;x?9s?IbjVVGaBBXoYfXR(C9;ifF?KzE@d&J@nucD6nqI+8H+RP)0yyN
zGs~gM64xX~o#_P(Qy49%8mUr@JYC@<i7XiowuYSS9YuD>JDKk9?Qh_$B@_y3vhe!M
zN4F+ZvP?5iFPlSDv)_7>8s7Fkqb9q9s({<dcaVYqIRD|)#mGV<YzOCQ`BiCvQ-B@U
zk<0W))DE;IC0ig&VZ%3Jis`DX*_XFVnr*U?g9|k(PPx`XNh4#)r*PnYGyO)!l-G8^
z1+*tj8|xUSupb>99*)1$f!LVxALet7=AAS04rG#RPqQ@v!4mX|W;x!e8Xm!Qz;L|=
z#dS+{S21kCags1=q$vlg($f2HBi*j1igLRt5xh2v9;>v8O0IAg8RTe3S`G`p{?)Kw
zd-vDh|JS>-(Z>vVfl5cF_~KN+9sB?NgTuYv{{Qe`eDt*ce~jnmX7rrAx-MK8+}nz|
zAT}b;N1r~Co139E@=PEMy6FMiV*tYj#s%1sPbJ$Z1)`sPTB*G=h2O1#5HTF?yRR%i
zFXwZ14TIqT0xlcBfBHm-qw%HR?9qAzyPsRaZzbh+ADh@6y`w%NKcmO(;Ef%@&P2lu
zV_IqiEpvqbtm8L7=Q%^3XrKyxc#B~l%QS4ymX04Mr{@;dI!zme??mMF929aJ`g<h7
z9fkNmY)1`TG0yG2r?lR}Z7(eGf!aIRTWwn#7F!P!INIOuSDf4U{ytpiy2kStH-qW-
z_g~hA#+nx%N%W&<l<!;7*=hWP#1)DOGl#*qdibp#^l<q>?=NKQzjj2gwWd~ELSEah
zr(4$`Bp!;>8S*>V*1<Ll+n-RI*ZzA*S;6l%9N;uY82sx11|J81T%BZ|OX2C%chTvg
zJfRu#Jkr_7(LRNn8@v1EWwL2<ksp2&lnz_HH(`jVB|%}*$91aCzN1Ca+w9c`3^zAx
zy8I5mmC|6339DFqN-r7CmL5?hP3IvWwT_9^KJ}h#?9X+$mJpwl+RQO;45Ib3V4@1N
z+H+{D+&anb8~*h<xVxv<PBWfvvRPfQC?xTE?qhqy<Qr=k?QFs*+OuuhiwgH3d>Pye
z!HP}z+8+C1pH1<fPiAX;h|}OZ;=iNAql13@cXTj$ivJ$tX`lbnqR^wogj_O_OyR^y
zz&RR{qoD~kbXsT3H(RHcf?8#PU>g1A%UOc;{djHve+R)tg2KRo#b6^X+q*KJ)gg(A
zvo|f&w<2G4GR+`|m3q6pY-JI;=Qn;Pt7kgktgLmo@*gzkebQS-1L{+UK!1y+74aPc
zy5|udh09m8lJcR+_YNeqr}kabtwW02dUtsD+1#s#sFrE%Wcr6!4H+xPT3<4!RR?sN
zq^@&UQ5)IHk<Kb%&0_Tqiux4yeBeqZw;6X$lGh5^Z5>w_(K#+@^=`E{z;z0(#r$ET
z=j|x8?sF@HHZVzV<j`cVi`kzG!=OdEYl@n4V)*oFy7Jo46n^h-RXWk*pg+o4>sWaO
zUvuW%rH`sqcc(jq;gHKTa_PA5TZlr++P~;xX?ppT^SW*!Nxi0Do&1Utrs<61Fw9$5
zvL>Xd@il4esF$K%hx-a=HP#AzSf#9bK~YPnTZ8z7W)w1Nx6>b2x$xTos-$Y0O{*hT
znb+0mZ9SpF6!)W2nBsmIt&zDON|)ZeH_q$(BfaipRaB%1f4RivF8sya^RRpRYM?r2
zxeoKqjq3-WK3T?x&g*QBeXOXgXoj~WnK4D@Ma%G<wNIVfPm^1I_wuaIpU$z@dgiR0
zj5Uv?=Wp1vS^yzG+i!IQu1sO|h^wu_9rF61eOC9*#Wv#U!1a-=9;9u=(+BON>Yu)C
zMAQYmUGKVwhU=GX^<eQ4*Q`h2=Pz0h(dVyP578GaTMyH%>(*Y5>gfM2_uky7=sWfx
z1ym&Wa24D58w^GR*w*Dt8wF#S+->f6cDhtABrkJ(YvZ~N=E(OS`g6UW<m9%WKd8H}
zujwMFuJeR5uocFx#K-MB4-Hu7Cd8M-#Vg}g*Bn~git6ISgO1a>xzRwiuXB9fXpbvU
zUYOPd$D3rRKIiQki@OD?>bRoS?w;1UALoHHQJeBVVR!T(SAp-k|9|x2#mf2L<mvwJ
zqdcAa|5fTI<h;Lb;%CL0R3b_Hd6AWzh|kJYNtq2PnJQ!9wX3C=)j0NrA0V!-NKWBY
z3M8FKcNjvAH5lxRmf@o+MRV4VOS(aBF#YYAxtsa=%tXz>27_^j{)ZEQFEayo>HmvK
zKmU7lboiA2eU#^3hco`5YO|pT;D5+o+>(C#Qp>R>66wwBJ|<*sK+?kh&v7!eN&gLM
z<Npq0DFnJpte<HH?$ZCmNzec9P4@N<p7j4Qp0#RyCX+R~Jh-p(ANIs%@E|(9qN0Q9
zDncgZ<zNbS)Y_}}v)WbAewEg-dPp<RO1+%P>pC0m?x{}U!!rx|?3ZeT<nHu+cy?bN
zOgD!E4yQsZcc#icpW*`5*DxSm{f{h5St_K$2OQ&0|G(dl{}1*iPxt>G<=KKWY78o0
zz2%o4t}+xbD;ZCiNTHzdB~4M+g@C#&T>J|<L(U=Pa^??YnMij*A*Y5d(Cv6z?NlUW
z3k0T4hhe)=IA_<Gct`y&I}!XK_!6XWJuOL4pmGH)5s6ODKb{+@kZeJ?y7be_b4Zxd
zBubeXxxb!#63zZgjoja=AxlU0PxVtTT-`-LG^6olS-4V0O`b>ksvys!8NDRWBa_?j
zQn8dg|8KGdKT*YGsp0j>D@~$8$zL%xBw`8Dkq1}uR}w9BEE63483KZ?{{Q&u_~h-Y
zC{G@Aj63vye{bB^|NZ@^`yY?<Y{B1==itst>#B<Gop$1s{)2`4WxFbWs(kNGxbT=@
z!R1n~c6T*?q;=aiY^L2kSn{F1WzwL&t+MJ$s!J|u;+l+-oTF-8RvPU@gltvyHSksn
zW~8!4?4=Z%B~{{)kN`2OOINhrh%a0bF*CYffmqjgP<Sucbtnjl$h!=ct2lLafK&i&
zN(SDaoYmzn88yI}HYn=CfvVhvFkw*5X^g&rq#+5mJ4GpWZhytOHPAFRzR=OLy{fic
zVSMfx5cshRafb0FafR5S?ot*Zq9Q|I6jacrdb2fE*uJ=}YUN^Q*VTY^3y3bPb@^CX
zmkY~bH)y|{C=?P|8s2s4j$#+|wQEE(sm=fW&;Pcng&Ovif(I}HHimWem!aU&mF`q!
zr~%*hMe9Pu_ePa?u@lvjLaHkcff*>0LNZ}s!6*UvaN!TiV=3k=y=cTYWhN_adp>Gv
zWk*6L4JWn?*TV|mj+^(fkgf{buZOE?mM~)?fs4TB3#Ul}T2)Z5&+1w!>s?*cJ7=j~
z16rC4g$e(JBZ9xnD;r|&deL+K6*OWV3iSy<DS}`3cbWTZ7ne$*FnsAX>^xSqU?L^t
z-Lhb@6~^5<L=PNmDSdT|wkavs<$TU!=BidD$?2uPhWg>G=2@MFJYhPP3slR7$=xbs
zXCqq7c3W68s<`1;(EGL3SecJH`RHHn5PC&beGRs&POf^*l{>qa;XXt}$g69b7aXUA
zTwGk(9df(IdS%ygYyI@a#f9VUiBoG=()+SaHf%d<?e`Tsgq))%#>Osi(faQl7tWSb
z&Y}KK0?=VVrT7scC(_*&nM;-W$~<f;!xGf4P`kNc;55`x5e&b-D58lStU1$Yn=!n$
m#=G_|{kqBM&k!d)Jx|Zm^Yr|)J^vp70RR8BuCL4hP5=N!-KSCj

literal 0
HcmV?d00001

diff --git a/deploy/helm/time-exporter/values.yaml b/deploy/helm/time-exporter/values.yaml
new file mode 100644
index 0000000..285ad81
--- /dev/null
+++ b/deploy/helm/time-exporter/values.yaml
@@ -0,0 +1,151 @@
+# Default values for time-exporter.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+image:
+  repository: dmi7ry/time-exporter
+  pullPolicy: IfNotPresent
+  # Overrides the image tag whose default is the chart appVersion.
+  tag: ""
+
+# See https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set/
+updateStrategy:
+  type: RollingUpdate
+  rollingUpdate:
+    maxUnavailable: 100%
+
+imagePullSecrets: []
+nameOverride: ""
+fullnameOverride: ""
+
+serviceAccount:
+  # Specifies whether a service account should be created
+  create: true
+  # Annotations to add to the service account
+  annotations: {}
+  # The name of the service account to use.
+  # If not set and create is true, a name is generated using the fullname template
+  name: ""
+
+podAnnotations: {}
+
+podSecurityContext: {}
+  # fsGroup: 2000
+
+securityContext:
+  # capabilities:
+  #   drop:
+  #   - ALL
+  # readOnlyRootFilesystem: true
+  # runAsNonRoot: true
+  # runAsUser: 1000
+  # allowPrivilegeEscalation: true
+
+service:
+  type: ClusterIP
+  port: 9818
+  annotations: {}
+    # prometheus.io/scrape: "true"
+
+# Accessing the host's network may be required to access the chronyd
+# command channel
+hostNetwork: true
+
+resources: {}
+  # We usually recommend not to specify default resources and to leave this as a conscious
+  # choice for the user. This also increases chances charts run on environments with little
+  # resources, such as Minikube. If you do want to specify resources, uncomment the following
+  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+  # limits:
+  #   cpu: 100m
+  #   memory: 64Mi
+  # requests:
+  #   cpu: 50m
+  #   memory: 32Mi
+
+nodeSelector: {}
+
+tolerations: []
+  # - key: node-role.kubernetes.io/master
+  #   operator: Exists
+  #   effect: NoSchedule
+
+affinity: {}
+
+# Pod Priority
+# See https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/
+# priorityClassName: system-node-critical
+priorityClassName: ""
+
+livenessProbe:
+  enabled: true
+  failureThreshold: 3
+  periodSeconds: 10
+  successThreshold: 1
+  timeoutSeconds: 1
+
+readinessProbe:
+  enabled: true
+  failureThreshold: 3
+  periodSeconds: 10
+  successThreshold: 1
+  timeoutSeconds: 1
+
+logging:
+  # Log level (debug, info, warn, error)
+  level: info
+
+  # Logging format (logfmt, json)
+  format: json
+
+collectors:
+
+  # Enable the exporter metrics
+  exporterMetrics:
+    enabled: true
+
+  # Chrony
+  chrony:
+
+    # Enable the Chrony collector
+    enabled: false
+
+    # chronyd socket or address in container
+    #
+    # When using a socket, ensure that the container has write access
+    # to it. By default, chronyd exposes its UDP command socket to the
+    # host's loopback address only which is inaccessible for the container.
+    #
+    # address: /var/run/chrony/chronyd.sock
+    address: 127.0.0.1:323
+
+    # chronyd socket host path
+    # Passed through only if .address is a path
+    hostPath: /var/run/chrony/chronyd.sock
+
+    # Log Chrony JSON reponse (requires log level debug)
+    logResponse: false
+
+  # ntpd
+  ntp:
+    # Enable the ntpd collector
+    enabled: false
+    server: 127.0.0.1
+    protocol: 4
+    isLocal: true
+    maxDistance: 3.46608s
+    localOffsetTolerance: 1ms
+
+  # time
+  time:
+    # Enable time collector
+    enabled: false
+
+  # timex
+  timex:
+    # Enable timex metrics
+    enabled: false
+
+# Additional arguments to pass to the Time Exporter
+extraArgs: {}
+  # web.telemetry-path: /metrics

From 5df05f8c8c0a38345ed87d5f3ce2b13c438fe965 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Stephan=20Austerm=C3=BChle?= <au@hcsd.de>
Date: Mon, 22 Nov 2021 11:34:59 +0100
Subject: [PATCH 2/3] Add chrony log response logging switch

---
 deploy/helm/time-exporter/Chart.yaml               | 2 +-
 deploy/helm/time-exporter/templates/daemonset.yaml | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/deploy/helm/time-exporter/Chart.yaml b/deploy/helm/time-exporter/Chart.yaml
index 5c9b1cb..d317454 100644
--- a/deploy/helm/time-exporter/Chart.yaml
+++ b/deploy/helm/time-exporter/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 name: time-exporter
 description: Time Exporter
 type: application
-version: 0.1.1
+version: 0.1.2
 appVersion: "0.0.3"
diff --git a/deploy/helm/time-exporter/templates/daemonset.yaml b/deploy/helm/time-exporter/templates/daemonset.yaml
index 0425c27..ac84197 100644
--- a/deploy/helm/time-exporter/templates/daemonset.yaml
+++ b/deploy/helm/time-exporter/templates/daemonset.yaml
@@ -48,6 +48,9 @@ spec:
 {{- if .Values.collectors.chrony.enabled }}
             - --collector.chrony
             - --collector.chrony.address={{ .Values.collectors.chrony.address }}
+{{- if .Values.collectors.chrony.logResponse }}
+            - --collector.chrony.log-response-json
+{{- end }}
 {{- end }}
 {{- if .Values.collectors.ntp.enabled }}
             - --collector.ntp

From c6a2de3effd5bf40ca2337a316edfd744d442e98 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Stephan=20Austerm=C3=BChle?= <au@hcsd.de>
Date: Mon, 22 Nov 2021 11:35:52 +0100
Subject: [PATCH 3/3] Update index

---
 deploy/helm/time-exporter/index.yaml             |  14 ++++++++++++--
 .../helm/time-exporter/time-exporter-0.1.1.tgz   | Bin 4344 -> 0 bytes
 .../helm/time-exporter/time-exporter-0.1.2.tgz   | Bin 0 -> 9415 bytes
 3 files changed, 12 insertions(+), 2 deletions(-)
 delete mode 100644 deploy/helm/time-exporter/time-exporter-0.1.1.tgz
 create mode 100644 deploy/helm/time-exporter/time-exporter-0.1.2.tgz

diff --git a/deploy/helm/time-exporter/index.yaml b/deploy/helm/time-exporter/index.yaml
index 36678a9..55e0e85 100644
--- a/deploy/helm/time-exporter/index.yaml
+++ b/deploy/helm/time-exporter/index.yaml
@@ -3,7 +3,17 @@ entries:
   time-exporter:
   - apiVersion: v2
     appVersion: 0.0.3
-    created: "2021-11-22T10:38:13.950181758+01:00"
+    created: "2021-11-22T11:35:17.606647408+01:00"
+    description: Time Exporter
+    digest: 2da94972515e527852708f3ebaa5615af083d48d1cff9b24628b492fdf611edb
+    name: time-exporter
+    type: application
+    urls:
+    - time-exporter-0.1.2.tgz
+    version: 0.1.2
+  - apiVersion: v2
+    appVersion: 0.0.3
+    created: "2021-11-22T11:35:17.604661748+01:00"
     description: Time Exporter
     digest: 6df64198080229a804046b4a320e11af57d52208359fd39727b734bea58b1e93
     name: time-exporter
@@ -11,4 +21,4 @@ entries:
     urls:
     - time-exporter-0.1.1.tgz
     version: 0.1.1
-generated: "2021-11-22T10:38:13.949249278+01:00"
+generated: "2021-11-22T11:35:17.598863969+01:00"
diff --git a/deploy/helm/time-exporter/time-exporter-0.1.1.tgz b/deploy/helm/time-exporter/time-exporter-0.1.1.tgz
deleted file mode 100644
index a9049cce6ff16622cc3b87254d7e003fb6946891..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 4344
zcmV<U5C`uciwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PH;NavL|2`HiROqc&y9Ck{zTmU67h53S|f^_{J#B0H%qSIPos
znlp$nzy!ch;wiqm*SOcaC%MAMe3FzDTP0VvG(SWV(`Ymr{e=cvhUGZK>q07nYV<Or
z%0x?=^KTyT8IQ-~!-E6&IUbMupX15l<eSOC<lyk|aBu%;^38a1Fdo172F4Fb#HOdz
zhN^GIUp!WSa(|MC7VIZfnn^K*#U7zWQU4rA<7l5GsAI(n<C@;F9N|@v79wblQ|L$#
zG0Os{K#PL2nA%Qc(cqgz6Y{ku{Pc95uKq75FHt|V0k}i|4__P|_Vs`7aQ{jFALH4A
z6P(kM8}MrnbE&#29g!_~moW`Y1BHJazkM^DOO;b&Fo8MaXaP<z=2RgpsA6=+QG<~%
zLnx@$m;e(-!cvwB4CV!=26aRT%V~;J0-&&vni;8<Q%G`lq?V(uRRJhU&d(%g@p1~U
z=cm$~Dby$o0oZ~c7N`_U?5G)nLkotcaFt1okc0^`|2nol4jMxj5wO5h7z_y6f^$U3
zj4AYVG`cKjs03PSnH(iD)+0mpr5@!}&=iLW#axO}StQg{zlIvki1?;+qo~1jY3Jw-
z<ByVaCerurwViqUw*>>p>GgX-7nE_!$SF+5<8K46&PvYDF;-~w6h8do3~)7fNB_L!
ze5H|SR0|g4aU9E1n5kpgd4VyTGt_XEp~+AIg#ZWC1A@+E$rHPbu|jGvArQVz!Ke})
zqGKVXahBe#IZYD#VHw>+M*wI8JB6E1uK&9X!IBJezOI)=R%(nK?CUuQX+Wa^Dw05p
zTUS-$E>Mq%X-H9^WqksrW+HWnE8f&1NC3PCvpgzfa@?cNww+^KDrS~1r7(DHYO3e@
zZ%UTM6!ymBvE^_V%)!L8pfkpqVW@ozK%!((eILT{n>X&eLYn*_`0__7&A&5_dZ`WO
zEhei{9P3jlEI_~cy+-AvWbE1~=kn@Iu?6Fp;wv3fPQCMX-6~;dMDisswL$gz%xalb
zW(xoI-Q>Hqt7Y*QO6FEzN~aS#R@5RHSmaKBj^h}0&Gbxa^Gt(4b0yU!<aBApN#SoL
zQ|KgxI{2WON{VGdwjh>y?p8RXLLes=&8f#x%|oG<rHZkUq@NK=T~f}MpwMDKkvMrV
z60{TdWo--U-cFE=1deopV62^^*3QLJ=$Oe;`=!jJl}TqCGdm2b$Qwn<wFD-tC~DM>
z;MjjEqwNBL6o6vEloUA%qv48~3^+4}hefPN*#%w3nH~Nu6U^G4$V&WDmXJueqM|dC
zR<~04*%~kB(n<gmsl(2hupl(~wbbr?ZU+!(nNHPm*UevHF5T=A;!^P?%oKIJnHyB_
ztYP)DC?L(5sbxAYN+*AL_?=_!EcxNVTNY;cTZy{Y;l&F4{@z<gh>!`MBgfcC<<-zg
zZk5@~;fG&buOVFGataoBs3gazYpQdqz1y((WnsHpY_G1FHaaxpe2%f1!l^uuGfYa3
zgwXk%31*gl;4L_l37jb=t#04#8)7M9EQ}s$kC2IUhzk~5(np0%hDAU%EEHnyV(JmG
zD&?DBa;o*IGfCb84Bh-<#SDunCu`uW>EdjG0<}I<a_00Jh4masZ7AlH@lxTtOrg#s
zPo}VMbsZIR22P4Z+XW<G1<(pc3vy!Z1j|vDrUA9uM-%qggL0XsOr&0n-pCX<E|9}^
zg0nK+1t#Wl7p|xhyMRhbwL`#zOx-(D^|MI8$1t$XWjfEzF8r#cupNB+)cqzTmfVY?
zp8D>u+%%o4RM83KXcUXBTvbhPeT#SKUCuZxFP){c?$mv8xO><=2-F00QOzmWSoI2a
z6SRyk(STIe3oC0?nXrb;P$tkL*a}^K&QJv3NJGC}K%q-zN2lJB)LkK?8m<&G7|eCR
zVk9sV!Cz~;x?9s?IbjVVGaBBXoYfXR(C9;ifF?KzE@d&J@nucD6nqI+8H+RP)0yyN
zGs~gM64xX~o#_P(Qy49%8mUr@JYC@<i7XiowuYSS9YuD>JDKk9?Qh_$B@_y3vhe!M
zN4F+ZvP?5iFPlSDv)_7>8s7Fkqb9q9s({<dcaVYqIRD|)#mGV<YzOCQ`BiCvQ-B@U
zk<0W))DE;IC0ig&VZ%3Jis`DX*_XFVnr*U?g9|k(PPx`XNh4#)r*PnYGyO)!l-G8^
z1+*tj8|xUSupb>99*)1$f!LVxALet7=AAS04rG#RPqQ@v!4mX|W;x!e8Xm!Qz;L|=
z#dS+{S21kCags1=q$vlg($f2HBi*j1igLRt5xh2v9;>v8O0IAg8RTe3S`G`p{?)Kw
zd-vDh|JS>-(Z>vVfl5cF_~KN+9sB?NgTuYv{{Qe`eDt*ce~jnmX7rrAx-MK8+}nz|
zAT}b;N1r~Co139E@=PEMy6FMiV*tYj#s%1sPbJ$Z1)`sPTB*G=h2O1#5HTF?yRR%i
zFXwZ14TIqT0xlcBfBHm-qw%HR?9qAzyPsRaZzbh+ADh@6y`w%NKcmO(;Ef%@&P2lu
zV_IqiEpvqbtm8L7=Q%^3XrKyxc#B~l%QS4ymX04Mr{@;dI!zme??mMF929aJ`g<h7
z9fkNmY)1`TG0yG2r?lR}Z7(eGf!aIRTWwn#7F!P!INIOuSDf4U{ytpiy2kStH-qW-
z_g~hA#+nx%N%W&<l<!;7*=hWP#1)DOGl#*qdibp#^l<q>?=NKQzjj2gwWd~ELSEah
zr(4$`Bp!;>8S*>V*1<Ll+n-RI*ZzA*S;6l%9N;uY82sx11|J81T%BZ|OX2C%chTvg
zJfRu#Jkr_7(LRNn8@v1EWwL2<ksp2&lnz_HH(`jVB|%}*$91aCzN1Ca+w9c`3^zAx
zy8I5mmC|6339DFqN-r7CmL5?hP3IvWwT_9^KJ}h#?9X+$mJpwl+RQO;45Ib3V4@1N
z+H+{D+&anb8~*h<xVxv<PBWfvvRPfQC?xTE?qhqy<Qr=k?QFs*+OuuhiwgH3d>Pye
z!HP}z+8+C1pH1<fPiAX;h|}OZ;=iNAql13@cXTj$ivJ$tX`lbnqR^wogj_O_OyR^y
zz&RR{qoD~kbXsT3H(RHcf?8#PU>g1A%UOc;{djHve+R)tg2KRo#b6^X+q*KJ)gg(A
zvo|f&w<2G4GR+`|m3q6pY-JI;=Qn;Pt7kgktgLmo@*gzkebQS-1L{+UK!1y+74aPc
zy5|udh09m8lJcR+_YNeqr}kabtwW02dUtsD+1#s#sFrE%Wcr6!4H+xPT3<4!RR?sN
zq^@&UQ5)IHk<Kb%&0_Tqiux4yeBeqZw;6X$lGh5^Z5>w_(K#+@^=`E{z;z0(#r$ET
z=j|x8?sF@HHZVzV<j`cVi`kzG!=OdEYl@n4V)*oFy7Jo46n^h-RXWk*pg+o4>sWaO
zUvuW%rH`sqcc(jq;gHKTa_PA5TZlr++P~;xX?ppT^SW*!Nxi0Do&1Utrs<61Fw9$5
zvL>Xd@il4esF$K%hx-a=HP#AzSf#9bK~YPnTZ8z7W)w1Nx6>b2x$xTos-$Y0O{*hT
znb+0mZ9SpF6!)W2nBsmIt&zDON|)ZeH_q$(BfaipRaB%1f4RivF8sya^RRpRYM?r2
zxeoKqjq3-WK3T?x&g*QBeXOXgXoj~WnK4D@Ma%G<wNIVfPm^1I_wuaIpU$z@dgiR0
zj5Uv?=Wp1vS^yzG+i!IQu1sO|h^wu_9rF61eOC9*#Wv#U!1a-=9;9u=(+BON>Yu)C
zMAQYmUGKVwhU=GX^<eQ4*Q`h2=Pz0h(dVyP578GaTMyH%>(*Y5>gfM2_uky7=sWfx
z1ym&Wa24D58w^GR*w*Dt8wF#S+->f6cDhtABrkJ(YvZ~N=E(OS`g6UW<m9%WKd8H}
zujwMFuJeR5uocFx#K-MB4-Hu7Cd8M-#Vg}g*Bn~git6ISgO1a>xzRwiuXB9fXpbvU
zUYOPd$D3rRKIiQki@OD?>bRoS?w;1UALoHHQJeBVVR!T(SAp-k|9|x2#mf2L<mvwJ
zqdcAa|5fTI<h;Lb;%CL0R3b_Hd6AWzh|kJYNtq2PnJQ!9wX3C=)j0NrA0V!-NKWBY
z3M8FKcNjvAH5lxRmf@o+MRV4VOS(aBF#YYAxtsa=%tXz>27_^j{)ZEQFEayo>HmvK
zKmU7lboiA2eU#^3hco`5YO|pT;D5+o+>(C#Qp>R>66wwBJ|<*sK+?kh&v7!eN&gLM
z<Npq0DFnJpte<HH?$ZCmNzec9P4@N<p7j4Qp0#RyCX+R~Jh-p(ANIs%@E|(9qN0Q9
zDncgZ<zNbS)Y_}}v)WbAewEg-dPp<RO1+%P>pC0m?x{}U!!rx|?3ZeT<nHu+cy?bN
zOgD!E4yQsZcc#icpW*`5*DxSm{f{h5St_K$2OQ&0|G(dl{}1*iPxt>G<=KKWY78o0
zz2%o4t}+xbD;ZCiNTHzdB~4M+g@C#&T>J|<L(U=Pa^??YnMij*A*Y5d(Cv6z?NlUW
z3k0T4hhe)=IA_<Gct`y&I}!XK_!6XWJuOL4pmGH)5s6ODKb{+@kZeJ?y7be_b4Zxd
zBubeXxxb!#63zZgjoja=AxlU0PxVtTT-`-LG^6olS-4V0O`b>ksvys!8NDRWBa_?j
zQn8dg|8KGdKT*YGsp0j>D@~$8$zL%xBw`8Dkq1}uR}w9BEE63483KZ?{{Q&u_~h-Y
zC{G@Aj63vye{bB^|NZ@^`yY?<Y{B1==itst>#B<Gop$1s{)2`4WxFbWs(kNGxbT=@
z!R1n~c6T*?q;=aiY^L2kSn{F1WzwL&t+MJ$s!J|u;+l+-oTF-8RvPU@gltvyHSksn
zW~8!4?4=Z%B~{{)kN`2OOINhrh%a0bF*CYffmqjgP<Sucbtnjl$h!=ct2lLafK&i&
zN(SDaoYmzn88yI}HYn=CfvVhvFkw*5X^g&rq#+5mJ4GpWZhytOHPAFRzR=OLy{fic
zVSMfx5cshRafb0FafR5S?ot*Zq9Q|I6jacrdb2fE*uJ=}YUN^Q*VTY^3y3bPb@^CX
zmkY~bH)y|{C=?P|8s2s4j$#+|wQEE(sm=fW&;Pcng&Ovif(I}HHimWem!aU&mF`q!
zr~%*hMe9Pu_ePa?u@lvjLaHkcff*>0LNZ}s!6*UvaN!TiV=3k=y=cTYWhN_adp>Gv
zWk*6L4JWn?*TV|mj+^(fkgf{buZOE?mM~)?fs4TB3#Ul}T2)Z5&+1w!>s?*cJ7=j~
z16rC4g$e(JBZ9xnD;r|&deL+K6*OWV3iSy<DS}`3cbWTZ7ne$*FnsAX>^xSqU?L^t
z-Lhb@6~^5<L=PNmDSdT|wkavs<$TU!=BidD$?2uPhWg>G=2@MFJYhPP3slR7$=xbs
zXCqq7c3W68s<`1;(EGL3SecJH`RHHn5PC&beGRs&POf^*l{>qa;XXt}$g69b7aXUA
zTwGk(9df(IdS%ygYyI@a#f9VUiBoG=()+SaHf%d<?e`Tsgq))%#>Osi(faQl7tWSb
z&Y}KK0?=VVrT7scC(_*&nM;-W$~<f;!xGf4P`kNc;55`x5e&b-D58lStU1$Yn=!n$
m#=G_|{kqBM&k!d)Jx|Zm^Yr|)J^vp70RR8BuCL4hP5=N!-KSCj

diff --git a/deploy/helm/time-exporter/time-exporter-0.1.2.tgz b/deploy/helm/time-exporter/time-exporter-0.1.2.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..09d7bd2eca1d4b952e477796c1b858471fbb4849
GIT binary patch
literal 9415
zcmV;&Bskk2iwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PK8sR20|uxEhUdY*C55JOLGuZ7fCCE}(*dNU@=T+1<Ch1G6*h
z%q&I0-Zi$^uqzhC9!nHr>|L>oU9n-s5)rKY&Xlcy`b~1o`TUOW57?c#@4ox)yY1cg
z?lPDjieRFFq!>s^e03<rh?7t~UhZFPQmItx?di$=mrAAf|D`f-Svi@f%+uT3M<(->
zm6OUm+1Eh&ZxT^fGtvx7m6QJCvFs=JKhjVG)(28FMiL4T?}4BOgZZmeEEUTUHKbJ(
zW?;BS5ttqVe?eLh0@XtWu#q5yNiskMKn(^QQ=x1pB;JBgCiX!7>j{5rHqBQ5<5AoQ
z>3`b*d`ADhy?ngw_20wG`<woMjphXWpawPK4B*!uXh_OdrNxL7h|pm)z-WMi{#}BD
zL>iLPqYMMpK!f3s1@MC^9Hk(LM=1<d;*bUm36u~RP@0BnfDsG{l1L*37^pYkC<AFR
zf?#@73l#_e6f}@D#*kE!0;u(v50xabwJHD@j5r=j;+QH)0Rl83Boj(O8WIcwfD`By
z4=D;$v!m)D;LrjF)q(^aNkgC(CW!H`RjiK#7DFdS01K=Dj*bZ81i~Q%I)*XO3W+4n
zsDu;&S!yv-q9#?eghA;zTB1h@R0~CF6zWMrVl=2x#`H}@Lq>w|kHQ%WWuP{Rog;4;
z!$=&*2yG<ynw`1zcNPo)J(?Ivpz$b%vy4;#nN-?B;8my*$HSqDf()$yQG+-GY??bq
zzs88;B_1L)q~b9Z?4nYUMuJgrEDJY46{f);4H9&a(LoBJK!5`%4+v--X~fm+GO8$u
zGEj{G;gbR|lo4`>x)21(aF(81b5yNn|FMj=Lx%u>T3{7mXbRUqLI(j$G9Wdj^<t43
zX(;Ak12ljj89+k@poChWg<Dt32;Bk7Bf@B)g#=_-uLedMBeWc16K~8ShycKQFqTIK
zQr*RlI`&yOR2eCZN%AEL1|~9Qsx@?XiZmJ&z(XpPvK+Pr<6u;%0aao+#$b@<p8%ky
zNQ3FK2y_Vw;yzOlRrezBq%e|Xx?wn^lV}F&t(Z(1i7s>qNw5I+k0WVFaZ)1Xo}oBS
zCWKO0JcdIp^ruxQj`Gf%>t+%Li%9z7Mw)?CKq#waB*iE|+cvT`rLGo>-$0RiR$z>r
zPS7d}Wsx|t$T|J#qEbQH%yb<|Gp%SqKqi5t;(#7aV#SGqgN+ykIY~h|ctJBMl1Ne`
zPC!NK_1p^UP=bIs!lDV`ahT>oL7FsDDrk|Uz7QB`BZ}imfPyRrNT@k^VMsu8;+|x-
z1?JwIATcDsAsP<>!`eBNwR0+xpj8-Yr1_=Pk*rK|wo%6p11T|Y6j7We0Y<Q*NJE+<
zSjGRR7@A!mKoS5F@fbxCdPp!dNWd5!z%howg+(-x;tpt|O2-Z#j1d@Xd&I27Cy_>=
zCP4y9*v!PLn~~sW%kXkevJ!w1S`Iso5iAI*jy2NUdp$b<0a>P_RFXS4e+ueJZuStU
zj1-;(loZPGM#De~w6d_el~_Qk#~8Crs|-d?{`A6kJ=AlS+}kr46J|Kr2x+?xUM1k=
z9>Exb5TqK0Lma9YlH%2nA#qljc{z+4#Pt$^IGCgWEU<_oaVWMm)q0fX-3E)FG_c)S
zZ2pND&CtSQsL?<bqW~dfxJn1rMjRpts?lHs#w76rJAqJA4MHi5WOe)VzClG2DrjJ6
z3C$zK2(1XlV=9((iGfs$3<4^Vfr3!a#ncjnRVn_lFOJf52xpRb3n1d=r=l<hQ=vFg
z3LI;?a4a4YkfuW^QpxExBv{X(HX8~Jis42IM(8L=>quO!0CHB>A%$@UjwIAHyMPE_
z1&|dCD@Yk@ConxEjf@49)jm{>eeFSUQme%XEiXnvq!!>X9^$}74V6Z%JHQAH=?)T5
zif{*zqDaaW0X&F;dxx0%u}A<P!vGhY)N1sMJBX!8g6+URS8(4EL`CAfDAEePyFWKg
zPE}0N3D84^!c?qWnH~l6Pk4uJ%NY)fFK6jkcglU>aNA+$L4cV6TT~hpr=h8rU^f9x
zs^TC6NQ(8s6l+y6f;D6eiV=`U;3RbEtAm8#8&RR3JAedjq}b6>-jbNR0v$?&1PWuI
zV6Fu$3<)qs47!@_s=JvMmJ_T&#26Yx`h}V;x<DfzA_!;%CxMfsL5Zs3%+!+vo&*wf
zm`ca`bd2D~##j!SEU}qHvCZ@Z3<@BLM=1$qBqTgt!auc`C4+-CL&`jS#O#h&rjUEc
z%it_aC@`RmPIw*4N4JcQB8^%dPcNncVl(?$Phy5=dxxTo?lV*gxLNrYWFRoSR|pp)
z6Ep-ag7akgWzqmn0bIF`IH?VTGzV%WB~E}~3~cyDFa||QSz}**TGH4@Y~;X&8YWJ0
zPYo2wkSY>a08j2aMhB596gS%eE}-?pXohu+3LqDIdV5RT&;qe46z`?c(2$AXj64S-
z)6+c7tO*b-fj!Zf9)4Cecm#<8hQv}(BwDF%NeoV)i&~AbMjFKdN@<O}|7J*TS7VBD
zZBrsJk)hBol-3fJBtWH@fjDGGN)j3P^*0UsU+@0x_y6YInIu{VaRa1iF=P10sesSy
z|K*<E9(MbGZ%?VmxBdUuXhVle+z|gn0~ZF{ZN<1CR*bkwQc{qiLq)8S#|Q`<ZPNp6
z4@V%fz;FS!m`^3MQ3??E;nPaiJ5!L%8VEuKyye_SOdoF4Xs|@!C~^b>E;fEoNkI^f
zMqhrjhnh!V_j5^Luo1=CeXN?@(R0*`k-m_}&A~J52<%K~poA*aNJBuAdI)-&<2QcJ
z8VurU8lV*9!&@lqV=)@ID3dsT_=SYCu&mQ$qi|O-5}*MT#M#iFM<Tc*A^sP(qYOyE
zaGc%u7+G(@Z7*2j1!_OTUemVK!eZ9L2pqNF@0&PR=KC+<I!>GMICC>lbolaRwa{qh
z1&>4=#xsiVYogQU;s2311BDTc1~|5$MJ;GYJ6!yrUoK>&f3y)jt2Je{MaXNj>&dOF
zAS65#jw&Jk*|p_hEemTuA!}aqpM{haNM^$U992Q!*xC^|MmzrB)rr*WNrI=7{v4e=
z6i=uQ;(9TylW?>vz|f)W?iV+z%bJ{+AHFOoTG;9Z2}6jjBuJQa7jvqPeTNzhcAGu(
z0mIOtrF2OKgN-Bu?U+y!3!l<ci<C(`B9k<Q3;C$hm}uIkejyv}=PD|d5I!eWHph5l
zATE6t7-0&utmj~@a-~VOz2PrC2lx5uS*IC8%CcFuU}7POXXid#%9y;x8j4-Z!bn)p
z*2-R(a61Yg9KQ%b37ha=d+dL=l@<T-$!r?_8>hjaj{js*saJ{k&qwC@E&lr&&HDTo
zH5h0~ybOuM2(<$EaS{*?8AJ~mRE;vI!kjTL+d5e(D61?$Fpd1?i?al!_ruNhKN%1h
zp@swlJXs8Eq{a3&8Bfz838T^lS)u+U@{&%*GKjZHy}7)s$s*XE-|#ajd8Pw6E6X}u
zvOlWF?Mb&X8o+$&Akc5cQWNnu1lXQO@F=)^g;i2sc*OS>NU)w-8%sAEQn;<R4e$Oo
z_sm0>mZ{Xq*dJb5$S85F^-tzh(gA%+QcH7JVryh2j&w>AW?3w|gCcv1?R;Q~Os-|z
zQj)x^kbSCS2}al)mss_-dTs$Wr_ijJFS6*lbrfpu^GODk!6dp&4#_-hG4tobz|o3w
z?vdDXP7G2~6eV6Ws1_vKZ&hrfM@RcnLamOKOW?DdIor~QQd-(}x*{MF;iOi~rQ<qS
zArey7{0mzwmR@|yxwLLVlDd?B=H!=HjnSwQhazF#v`N+ok}>16q_M?zDeBU2CqShc
zs|j3WN?F+jMOH#>H3*;36bl)(Pt&h5<-$J=U`nc5v#I2Wrp)V?P-m4Y{SpdUco8LZ
z5OK!?W$zzLADCbaU&a%HF?<<D)}(zIN-mlD#W)kc9BHCGRthDw5ID!dBzNG<-6{c!
z4(5T(8Pd`)4;{+&11Tx&G7Ftcvv6!<1+#=6@^(wdFb10!R%R~L`i$GUSu)uXzM=N~
zu{mTbojE1W;Vg}%r#rN>kpKwUVEd;WfhDF;@<7enVAzmn4{Fb9yHmI_@z}uGBPn@o
zS0)~NP<vGNXMJTNvIYFK-q{{emcC>qk1@aEn%NQf_ZQ6$(cfP+J4F9r+3YZVa^0+#
z!*tQ$bHRk={)T-RAxHsAsK3B5xxm4|QQ`<(Xrq#5C?Ey0&pQ`aS6iy%N!+N1!E6*+
zhB@N<i}+JSJIT?r{rF?SFZFD;2uzoUgcG+Cj4ct3Ti>v-fZ5!;_$N_#iSbOADy%j!
zrfU}e>Nr;SL@ZF&mq-5IXkS;Lcws6f6faAL%%{q>#^Un=W$IW$tGQcY;ruxN-{!r(
zHNKUV{}Xn{|H@VH&((kUczKmP|NVCV`>QmY`VUj;PdM}VZxeqd?7K-MQTx1DiJTap
zl`|#f%1FtXGFH63voe*Yao89904mcJSp^6o35eM2Jw!tAR|*F9g_SEpDJ^6|?IT6o
zZHM5Dt#>iDna{tOsPintgnvf=g%hBEW(Gc||6VdrJN@_Z@%onk|0?Z^4(IrT%CZfG
z0RDfn7oSMK{!`0QN^EF1uP-qnrG|)B`2YVn87xcx8AvnyUy+I=2*_Px{+njtbNcTs
zv-AHRG7p*0H~s$_tyHxRCDo<qvg4OJf03QoIQ}a-T|z}2O;=HLBpK(Z0PLt{uWo;;
zVcJF|XwADP;g~^bq?43nqWLt0yQi!GQLR|eR)b7iR_;z`RI4xLfuihifWt{aR_++n
z*+U47htz*zKy3A2%(4{I5+nux#W6nX|K;}azo&=n+x^e4(wsmj$}o`PtM~Y&2MIbz
z0HqPb)fk}#22>S?Y9Vbd1f`7zF8&3y4&pe_;-r#4kjDtEJD?zrGFUw1au8O}Q9_M4
z0Rn0{9R@B23Tm)KsOBAYb5}9wMc_$*B)Fa|Nx%Rpu7F95i2cH&!x@r-h!YU5uJ!Q^
z2WpI>5wR9yB-~$~d_=4qLP@y4rUyE$g#BasO2>0`Hv%Fhs){ojxKdUcaTC)C2E<LQ
zMB@-QF{5WclN6>!+=d}epbtu6q>%;ze*QEfHc(_NR56GcQ$tk3gHvQIB95n3q#8>8
z7XkuX{SWi+;uq{M)~o;3F+QXJa!*gGo&L+^a<6at|23Ku=mBv(;Lgg;RW-IX4G5?7
zQ7qgb7gPD0$@jVn7hcuSfRjmd$?jZ@Ct`KmTG&i;_n?s|^DQF_>Q7bHC6H7cPNHh=
z5krwU4k@e4Y7$p5f;c$=KaLtbBp3vViHT97w2r&D%2m<uHOkg<55!`z)qDP;5C4F>
zP>JJq@ODwN%{!5ZjRI%`s)AO<vMd=KX+lj;FiBtxNwN0Tmn3LRZOT$3hybB9S5?t0
zo_Mal9b;(w;#hO}5egy+EK#Uc5+e~hNO8r`T!|`5u+uhGvqbuZnk%t%C<AbeW*}j%
zX)#q|AsE3xO2f{Ct8KE71YB(DrC7Fig&Nj(pely1!Q~~wR0v!`CiFZ51b(;!l@6-n
z5bieugpy#=AOw4eh_6>Opq9d7tEmE)m`@c{#kjh2<%zbnZ87YkMVl5ahUG9fsC}iI
zP~*nZ5Mfgir{dyK>+)qCNi(-cq*@iSS=eVJZ~+VfY<SI;1`D;oTveH=LR!G*5@U5&
zrvpP7VT`NTEGdZT_Km;{NT>}YMlc{ALlFR?V)#28Dw5D(+8B#wX)#7;WS{FL7Ri(l
zq}sv>CkCfQCVZ~kyt@!2_X7d^dT{0TBv4|68pH^Ej^UJ?09FNh0iotHKGyMb0l5a#
zvTJ}E866}T;rC(0pa+@2M!)X7=y9$e&=Bf{-;h86FcLz@!C$ktUptkNq9DQGNxbrh
zt0>ff5n2R^NHSn5Rv6vQy9a?|R`$qr!Q1j{2eeV6!BiMmP)#CwG>*R^9TjTknK?u1
zhtVoB9#TmbCfgRsbLPv6+1&1$k(ju_vB2(|lf?i=)9Pscr7MCapp^NBwyipGg_T?-
zKKD|%sv|}a|3p-8z@dV(g6!tqy8OSyhU$~0{U-ZmF|DjPTF3@2oFn14Jgx{54tZkO
zunNRj{jf|7=Vn-&YW|T6V8Z~D;)@Z)kL0c~X-G=T7mY$o(V`mC+;0e2ZliD-%26Ts
zB>oN)jj)4R4#2F<7))gSirMkmm-LGN7ecsy)IQ<KL{hO#EE6-@A^&iUPse{Usocjt
z{_~c4%D=^bU!ygf{DTAcq1d%tYqUq0RMjKcJ1D8Gmr~wGst)(U286fu?$xJ{cW_@k
z7A4e45xvO{td5m?(*7yc$Y<u8UsgXz^M*%T)d&cfL#;bjbN#)m1&h|FJGNUR>U*q$
zcD{UqbWg=Sp|@TC%*@%5lhtbHzQf5gXE{W*=)2vslV9y~I?sk5#(qCw+`Tpj9(Q#c
z9s9~7?U-NB`G1j3pEsCx_|E>(-xaoPI_=$(J4bWxE;zdP?ycv~4P>$I<;g@!+H`l(
z_lIf*99Xsb{J0GAP;~n~!>Qpj$Jc$*Dq?<sZ0y0N%lvy6H|~B%x5PPJbr88T|HkIV
zxslWBI_jo|Kj`tJ?0ALMohOglGVe-=`pm5besx}MYxVvWvv|WtiHoFnr>*68_!ifU
zZrtQ`!SH8>;(+32cP@{rv+&%^M$hAF(rYr^n#>R-&XrXU`flv-#=BGG3wzEES4l^<
zy`w81BE28c+&x{%9O^xKhSb+3{o=fGb-L{fn}bxlUupICM!z49W0S%wEZsDHeuFi0
z!h2BhE9Rtah%E0Cn0?Aw`+`C?=B+-v(Dl4awepunHLIKM(DO-pgHgU!$E`BV4)|sI
zm?|E{itQb1H1w@kYtx?a`qh58Jc{-^GR5^3<C*EMO|Lj0HnnjJkBd&e1uL80i#Y8t
zzRJOYlX~}eJ|D4rT*H$SidNBS>3bP0??LrD(`M2w&lcuyTa@(f_e$R#c~~&COTAfx
zj~{UjI&_EpZew;}_9<B(-7ANV?{8N#cqMc%{^M@)${D(ds&(%SZhSm!-Wt{Aq>-`(
z^7Dq-%Z`SYA6u^S`R_($tB=;nnzFfTthD)$e+KVOuia$1s`-k+b8f6}8(jMx+Tglx
z_j0=L+KpY%YeR8XwY@W|QGafj>)$7KO5-Pw+x~!cPAl&=v-9MrzLB@Zq0=T{J$f&N
zDHT>~9E}rN-#G8squd{rx3qUtQ`ge6w=Yr+bkod{tdu6|V>9yJl7Vv$I=nt~XY)Nn
zy%T#6Y+Wipl!~UORPDT6-8-e(z84F8^0T_me-DaYc6U9wTRwHjn(FsOE!T!MejM)V
z-g)<%UES`jP(QiilK1ja(B?{a=G|`HBs^r-U-8%7P@Uh)7LsjU3f`WGO^whX#jmg5
z&DypWzNi;?zfVly>N<)(=N%jLyBjim>Ye(=ldpne{|Xx2nQn2R#a#wF7?4Z02!G%_
zR#CJxHE<H_x*g0(%J0)Att)6%_vD(xy-)fso3nD#<{2xN)CwFFmOXdrX=UdbZIWcQ
zx7I0y`l^p^giN1OaVj%1X5FH+i`fUm9?Ux$_HN~g6|)1hjpXgBWgKbbe{5UDmg`(%
z&riK|X}DY3(+VRUMkx2ra%hXB<xWbi)<!;Vy#Kl$mn#iAl-lH@sLqKii;o1p51TW+
z$ByO8<-hj%J*?<*LrLD*z;bog?9Wc!1U%ntJD;CIRQ^$y8ghZkIT?+LuRp1EJM2Y^
z6As2dQX54)UxyZKaRDb&*Fc3hu+{LSqD88F_cytFqv~pkq9$hM<Q_!cf4mXZZNl^_
zi=7T%>T&PF=^n)F%g1xaM-SZCeBf;gshgPYd^kNWgU;A>byE>Uv!d{g8&bU$o_CU`
zZcg2|ru{T|P~g-tr{65BqM0-7mZ;6IRTjFoTu<D5+DPfDbf3}`n>KwSGofnTsI%S2
z295LY?B(vD%vV0Dwb||7f@mtEV2wQBMulqE-zyJRo9x;u?$)}8xABn`wsj1r?!Rg{
zwxDr<-sS$R7h$<sLCdn8d#&0;8k_t?e;+c*?`kFIm`bOSZdEDe(~8G?&skM|+m-Hh
zUSAqbrLGEE@$-}$M;zLSr|*v+wZ-FlrIz=pdK=PfXN?F9*yg)ubkOy7VFg=y>^Usm
zbP_5~ofN;%Sh=Z5^1JgNS~}0UHhKBtxA_~dc`nL`I8)`W&SCQUfsw&v%H)IxgR<MW
zOBSu%l7BvB@Q$IEI{a|HBGdb%YfircB)-npDUvfIA}&^K9T%CpY21m>mZzOAA%lix
zhgQ7V!*}<f&dYkj?yGOiJU^&;TEh(v^7<!?dz8-7I(wtzvNEI2Dchpe9pw#gELnJ=
zZimwke8-Gv*`|sZ%F<rI;9U;MRr)rVEPs41^|?xZeA%(uInLb{J*-qMyuK*C;hL~1
z?FZ#LO>}QiWBa&;Pn!70A8wbL|LiGwYh4QmB=)!GZ%=gpy=C}sLGoUb1-=nmZVs8*
z@W$(oX)UuxXN<UdEMfY{;x@&(=MNs~>V#L$!`?(<Bf>{C$(eEdRrm8Xwzg;y1%lB1
zKIo)}8S5_3{k`XW{ckfySM_oW*?F;RfRpOzYQwEz@(<k(&B}@2Q)z3fphl1Duin(G
zN#mwdcb^-1Y2M3b_vv5mFOt8kp`IDnYl~O;y|rIW)U>^^reV{)#yy5z-ybygH1?I@
zdk4>y#;tIzoN@N-JJRX;hE<cOEZ16pcu#7&cI(8z4Tic6?&`V^s8MzI#|xXHhZg4C
zEY8W=a^`Tgq>+K$R~6lk*wf@)@rTj-cis3{{5&T4)z;$SQ}XU>UM>71Q#`Q#wX2hM
z0&mAt-IsKnv0%Y6ua`lfTIR#@S5@Wqe}Aabr5U|iTy?3md`a?vHM`_vZ>}HtqpWd$
z)<*YEk~})T`smzp6~v8p4}a@7A??M=n@`RRshG7SY9HC+UVO6!mzwNK>*&}i?eNoE
zzcksK?YF<0YCvp75k01O-5sA!d2M|c>y{!ZiIdT0$35{=bEY<HwK}ivMMZF<vCsVO
z7BqIC8oeFrytm2NqE2}C>H}rjPybxK^~OHE#Qnv{EA1{t>7yFejjCCv&6S(a`Yya$
z^s(c>yv##?)$<wsu&^-t;<!We>opB{m8PBbEb7c<?EUBiKTWD4AHVnaAw}z(zB0V&
z@=T(BygS}+<F-|OqPqTkb;IhY9N^q^(zymN+vQx`>s|HglF$V?ABXnnzxSDU<6EBH
z>c4+n?)zqyhYwt&UfeVH;rWC!50|xH*5GCPvzL#Y={R;lqpWxL;BOc;quH=JvuZ@`
z@<Au0x9EbNJ#5U#{xi-0%+)6sDp&LIiOYOnWB2T{G1IE7?Ux)VX^=gqY3~-ndCi+`
zn>z7A$AZQ9lT*eWbADX%>y;BSvfA>3EiucHtygH>+G~oV`HemnwB3=lIwwTFnE0*#
zpiM5$FNWl+hVH-HD6alfe4opeE&9uokwTE%;9AwalY)z`G<}CI34XDpmnJTG!ns@R
zZtqUppEi2f`vgXsG^x1h9c)SQ+2yCx4vrb<F(WAVK){~14QHk;tK!8B(4O##T0Ljf
z05~$H;fMRj`;RL4kf<*nUU{$IsC|1z9*l7kUCr`Xe4+WoiCcU`=YMyMHhP={<7W@a
z`U8ixGV^?fwOp%J+*-HJxZ`Cr&%BhgQQf|K6h6N5@X0HGdeNjpW?rqPV~_XUI`ieS
zqlGn`x2}FY=-hhWNmqv?Bo<!2wsw5_9PFw3?fAac8?-(=AlhSfWMyW-iVbw%-i<CF
zo008?o>UgpnDo}6F!@$s%ikL$1kcPtF6*20t$(Ji7%L#Q`Rp+w>kqz1)AF9WY|W=z
zkM@=Zkath3H%`91r0V{q{yXC)&8L+`udvLQS57+&dqzeo&fHnr=~(~A{gNt0)Az5f
zoR$%hu)5ut-08<XsfRnBMNQ~>?8@#3N^HoRS$|~`%>#C=ieB`7Qted_r`(aAi0b=W
z%N1*0cwtY{=Pv(w{5wSJbrDJKw{qQ(F1>rEM~yBTqjB(v{rz0CzB`{^EuXO>c0ur3
zr#`7U7ar(4EZgT$m=-qg_OSZvXY6biIQPaMKG~1oIqk|<MMkXnVffAi_r&iHUjJ*;
z(6_Nm722IO{yO=~<H}1q_CGW}`!PN>WnKC@-MHVKQ)T{n{>Ps$+}3N+)n30w4J&-P
z?$na(%{fEvuUk09Yud^@^3s+8<(hZ8N*XI}2to@ctX;pa$;-D(Q~DHUAN0Qca8JRE
zbxl|351gy~H0{xnKlOg+EB!I(S?2h0kLThAF)wQ6tm}R&Pcoq9nY@hyYM!a*9#!+)
z`o|Z4p8DuPvAFQYwe$z=UV};z&V`1bt`;?_*6q7X7w-i%s-&8CO`o3-pBW)>me9#@
zcQUKrKT_E2Exl{;-MibDbV|?KxbdN5`i8&8$T$6TXv2ZSPutb3-Y>7^fw>0`w!RaY
z(|EwuNsn&tA3gP4=FT&nw{4`8Z|J7A4*hxF#fpa)sM9;<J#9ESt5U|J9m_A|FTS|5
zS>8x_?*%VAp$V@*-;vKUi-*6ueel?un|B|6e3sUJ(YxZvN3HJuv75N9JvcwYG2mU&
zjM)n(oH`Z}kXqd})lHSVZSBf=7uviY+YD^j&?6)_0&!l{BcXoRU%cu+nLH;q&CQ>_
zIIU-97ee~s>Aal_-n>2GcXIFdqX&=wIKIvZiTt~ShsBcvIu#FPn4($5DYNo^9xwm6
zG<M6fA8rjl^7FNs!`_7*-`ukH!;_CYwp8mopWRn{YOu%Ffa2=0cZzGMTq|bwT(<=K
zKL2d-{(w`(&w^jSuCe%4v25|S*p!yPdS$lXvGK2FuMcRR1I4c8%SS(Q>)P_(y%;3^
z{FSwZTdqW&9ya^p<{>@grvi5^Jo;GCC_jHqNbY`l)wfUP#*V(5|0*RhKDud;&-m|Z
ztnS)6Vb!q?OKw-VkRt_yK1_4(+23u&zRHd7gcR?-Ijy+n>z2I=i<{oNJW3v0%`JM@
zy}3;{csNK~H|RC5$Fij_S_Jpb89O4=ec=153g7JJ_o(|d)u}xax-?%sPIUTdV${<J
zXLZ$zt3t-3S)pyTIr9>`e~`4R^&S+}USa4U3J6_FRdTO2F(kXw;znzx<6U-SzB+fD
z?lJGIb6{$Nox2w&*FO2N=P%c8W;E~F{dKQ`aLK^y{+&J3Ucml4!ny@7?*29doJwo3
z%lVYkuUDUiZJyP>nEb6$r``wEYjO*Ywhmt2^=P!r+gVxV?2O8NU-qpnV%+OA{?MSp
zs0|;Biyjr-eY)1AS5sz6yH~@9lh<;JKYUpIuGzG|@Vz%@<lV{+e4H^Ue^LDHSszD_
zeFwALhG!%{3)%5}Ud-NmVH@KUyoRkXUiHRTUGLEE<+4BF*`<H3|Lsv=Mo%$zd;XM}
z3)5l;^=bIjZwww;;Pt!@qFM1<w<jwd=C_EvJ!5(~+1j3cw_cwh8CXju&x{_~FDEfH
zQF6)X^25X<S=DB*ZDTZ!h$yEI{GN?(?ui?C?Md}^d9-h2#<j6hH1s4k<<Ai-npfH0
z&fhhj7=Cc4*J)4hKTn_8vMXczKr}hO!H-3os}3IbqQ&5`mzL#+)os4q(Kp&5;`FK^
zTf8DK{kda(>^-G6=fVhM)d}Kt#y9=?&#ihK_0jEK=;Bbjf5RKbM^lycUTur>ldm~h
z{NYsb_KdL&U(X&@Sz5t+oUvf;vRh|o=SRTw@;6`mKkj;<u-oj!&2=u!?3&TK#>fUP
zGrM}AF?(Ig7a4ME9#gsAci*Ku-~(H>)(`C%8w<O4ZCSn5_G&r%k(*N&6mFir0lB(y
z{90^|ROL8w@}9h^s{<+whz#9$>d^q#$Abo)Z>L=|=(_>)tBtKvJjQ9%?&GZ+Df5S%
zp+ElQscecARO#$GD!MQs^<7-Oxq-{1$q&7rwC}Su#<9iS>%YZp{^`(lg<s9aajq%G
z$=h9BbM7T)EAMCYX>s)7%H8AM=B~Tnf6=)1sA5jlh~wjqUUyS#od%qUkLoAS*pb`s
z^t){r`lU`&ym=6v|Kkw<$du~a*M@8ua&mUNthu=z{rrxsjhkPu@#--H2M)Z{gvvTJ
z1m;k2A6^|iIQCBd#PGPjXW#u6?2WgJds_HYyD<yXS{*thHk^6;tVzA>IpNvMKK80`
z8tuHYs8;h<XRrU1+H>~XW9@Ob{k6|;2+i6VbIbF5?^@M%?{--}vB|o&=X48Xe{4UL
z^;-NP^XP+9Kep=7q1UN%f4zFYr9*MEa^;GPw{6&XqFl&-opt%vzO`@dTl??Z{|f*B
N|Nku)(hdM*004vhny3H(

literal 0
HcmV?d00001