diff --git a/404.html b/404.html index 25bb391..6dd90f5 100644 --- a/404.html +++ b/404.html @@ -4,8 +4,8 @@ Page Not Found | Rancher Government Carbide - - + +
Skip to main content

Page Not Found

We could not find what you were looking for.

Please contact the owner of the site that linked you to the original URL and let them know their link is broken.

diff --git a/assets/js/09127693.87208c9f.js b/assets/js/09127693.87208c9f.js deleted file mode 100644 index 32932b9..0000000 --- a/assets/js/09127693.87208c9f.js +++ /dev/null @@ -1 +0,0 @@ -"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[620],{4981:(e,r,n)=>{n.r(r),n.d(r,{assets:()=>o,contentTitle:()=>i,default:()=>h,frontMatter:()=>a,metadata:()=>l,toc:()=>c});var s=n(4848),t=n(8453);const a={},i="Rancher Manager Uninstall",l={id:"registry-docs/uninstall-rancher",title:"Rancher Manager Uninstall",description:"This page will walk you through how to uninstall Carbide Registry Images from Rancher Manager both for its own components and downstream Rancher Kubernetes clusters (RKE2/K3s).",source:"@site/docs/registry-docs/uninstall-rancher.md",sourceDirName:"registry-docs",slug:"/registry-docs/uninstall-rancher",permalink:"/carbide-docs/docs/registry-docs/uninstall-rancher",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/uninstall-rancher.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"RKE2/K3s Uninstall",permalink:"/carbide-docs/docs/registry-docs/uninstall-kubernetes"},next:{title:"Introduction",permalink:"/carbide-docs/docs/stigatron-docs/introduction"}},o={},c=[{value:"Reverting Cert Manager",id:"reverting-cert-manager",level:2},{value:"Using Your Own Registry",id:"using-your-own-registry",level:3},{value:"Using Docker Hub Images",id:"using-docker-hub-images",level:3},{value:"Registry Auth Scenarios",id:"registry-auth-scenarios",level:2},{value:"Global Registry",id:"global-registry",level:3},{value:"Uninstall Carbide Images on Rancher (Private Registry)",id:"uninstall-carbide-images-on-rancher-private-registry",level:4},{value:"Uninstall Carbide Images on Rancher (Docker Hub)",id:"uninstall-carbide-images-on-rancher-docker-hub",level:4},{value:"Reverting Downstream Clusters to use DockerHub Images",id:"reverting-downstream-clusters-to-use-dockerhub-images",level:4},{value:"Manual registries.yaml configuration (RKE2/k3s)",id:"manual-registriesyaml-configuration-rke2k3s",level:3},{value:"Reverting Rancher Chart",id:"reverting-rancher-chart",level:3}];function d(e){const r={a:"a",code:"code",h1:"h1",h2:"h2",h3:"h3",h4:"h4",header:"header",li:"li",ol:"ol",p:"p",pre:"pre",strong:"strong",...(0,t.R)(),...e.components};return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsx)(r.header,{children:(0,s.jsx)(r.h1,{id:"rancher-manager-uninstall",children:"Rancher Manager Uninstall"})}),"\n",(0,s.jsx)(r.p,{children:"This page will walk you through how to uninstall Carbide Registry Images from Rancher Manager both for its own components and downstream Rancher Kubernetes clusters (RKE2/K3s)."}),"\n",(0,s.jsx)(r.h2,{id:"reverting-cert-manager",children:"Reverting Cert Manager"}),"\n",(0,s.jsx)(r.p,{children:"As Rancher has a dependency on Cert Manager, you'll need to update your Helm install of Cert Manager to use the default images."}),"\n",(0,s.jsx)(r.h3,{id:"using-your-own-registry",children:"Using Your Own Registry"}),"\n",(0,s.jsxs)(r.p,{children:["If using your own registry, you simply need to ",(0,s.jsx)(r.a,{href:"https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images#2-collect-the-cert-manager-image",children:"collect"})," the necessary images for cert-manager and overwrite those images in your registry."]}),"\n",(0,s.jsx)(r.p,{children:"As pods cycle, the new image should propagate across the cluster."}),"\n",(0,s.jsx)(r.h3,{id:"using-docker-hub-images",children:"Using Docker Hub Images"}),"\n",(0,s.jsx)(r.p,{children:"If you want to go back to using Docker Hub images directly, you'll need to upgrade the cert-manager installation to revert pointing to the private registry hosting the Carbide images:"}),"\n",(0,s.jsx)(r.pre,{children:(0,s.jsx)(r.code,{className:"language-bash",children:"helm install cert-manager jetstack/cert-manager \\\n --namespace cert-manager \\\n --create-namespace \\\n --version v1.14.4\n"})}),"\n",(0,s.jsx)(r.h2,{id:"registry-auth-scenarios",children:"Registry Auth Scenarios"}),"\n",(0,s.jsx)(r.h3,{id:"global-registry",children:"Global Registry"}),"\n",(0,s.jsx)(r.h4,{id:"uninstall-carbide-images-on-rancher-private-registry",children:"Uninstall Carbide Images on Rancher (Private Registry)"}),"\n",(0,s.jsx)(r.p,{children:"If using your own registry, you simply need to collect the necessary images for Rancher and overwrite those images in your registry."}),"\n",(0,s.jsx)(r.p,{children:"As pods cycle, the new image should propagate across the cluster."}),"\n",(0,s.jsx)(r.h4,{id:"uninstall-carbide-images-on-rancher-docker-hub",children:"Uninstall Carbide Images on Rancher (Docker Hub)"}),"\n",(0,s.jsx)(r.p,{children:"If wanting to use upgrade Docker Hub images for Rancher:"}),"\n",(0,s.jsxs)(r.ol,{children:["\n",(0,s.jsx)(r.li,{children:"Log into Rancher and configure the default administrator password."}),"\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"\u2630 > Global Settings"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Go to the setting called ",(0,s.jsx)(r.code,{children:"system-default-registry"})," and choose ",(0,s.jsx)(r.strong,{children:"\u22ee > Edit Setting"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Click the ",(0,s.jsx)(r.code,{children:"Use the default value"})," button."]}),"\n"]}),"\n",(0,s.jsxs)(r.p,{children:[(0,s.jsx)(r.strong,{children:"Result:"})," Rancher will use your private registry to pull system images."]}),"\n",(0,s.jsx)(r.h4,{id:"reverting-downstream-clusters-to-use-dockerhub-images",children:"Reverting Downstream Clusters to use DockerHub Images"}),"\n",(0,s.jsx)(r.p,{children:"If you want to revert downstream RKE2/K3s clusters to use DockerHub images:"}),"\n",(0,s.jsxs)(r.ol,{children:["\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"\u2630 > Cluster Management"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["On the ",(0,s.jsx)(r.strong,{children:"Clusters"})," page, select the 3-dot button to the right for downstream cluster you'd like to revert, and select ",(0,s.jsx)(r.strong,{children:"Edit Config"}),"."]}),"\n",(0,s.jsx)(r.li,{children:"."}),"\n",(0,s.jsxs)(r.li,{children:["In the ",(0,s.jsx)(r.strong,{children:"Cluster Configuration"})," go to the ",(0,s.jsx)(r.strong,{children:"Registries"})," tab and click ",(0,s.jsx)(r.strong,{children:"Use default global registry for Rancher System Container Images"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"Save"}),"."]}),"\n"]}),"\n",(0,s.jsxs)(r.p,{children:[(0,s.jsx)(r.strong,{children:"Result:"})," The cluster will update nodepools to use DockerHub images."]}),"\n",(0,s.jsxs)(r.h3,{id:"manual-registriesyaml-configuration-rke2k3s",children:["Manual ",(0,s.jsx)(r.code,{children:"registries.yaml"})," configuration (",(0,s.jsx)(r.code,{children:"RKE2"}),"/",(0,s.jsx)(r.code,{children:"k3s"}),")"]}),"\n",(0,s.jsxs)(r.p,{children:["See the ",(0,s.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/uninstall-kubernetes",children:"RKE2/K3s Uninstall"})," documentation."]}),"\n",(0,s.jsxs)(r.h3,{id:"reverting-rancher-chart",children:["Reverting ",(0,s.jsx)(r.code,{children:"Rancher"})," Chart"]}),"\n",(0,s.jsxs)(r.p,{children:["Follow Rancher's ",(0,s.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.7/en/installation/install-rancher-on-k8s",children:"Installation Guide"}),", you can revert to using DockerHub images by removing values from the Helm upgrade command."]}),"\n",(0,s.jsx)(r.pre,{children:(0,s.jsx)(r.code,{className:"language-bash",children:"helm upgrade rancher rancher-latest/rancher \\\n --namespace cattle-system \\\n --set hostname=rancher.my.org \\\n --set replicas=3\n"})})]})}function h(e={}){const{wrapper:r}={...(0,t.R)(),...e.components};return r?(0,s.jsx)(r,{...e,children:(0,s.jsx)(d,{...e})}):d(e)}},8453:(e,r,n)=>{n.d(r,{R:()=>i,x:()=>l});var s=n(6540);const t={},a=s.createContext(t);function i(e){const r=s.useContext(a);return s.useMemo((function(){return"function"==typeof e?e(r):{...r,...e}}),[r,e])}function l(e){let r;return r=e.disableParentContext?"function"==typeof e.components?e.components(t):e.components||t:i(e.components),s.createElement(a.Provider,{value:r},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/09127693.968a6b56.js b/assets/js/09127693.968a6b56.js new file mode 100644 index 0000000..5189063 --- /dev/null +++ b/assets/js/09127693.968a6b56.js @@ -0,0 +1 @@ +"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[620],{4981:(e,r,n)=>{n.r(r),n.d(r,{assets:()=>o,contentTitle:()=>a,default:()=>h,frontMatter:()=>i,metadata:()=>l,toc:()=>c});var s=n(4848),t=n(8453);const i={},a="Rancher Uninstall",l={id:"registry-docs/uninstall-rancher",title:"Rancher Uninstall",description:"This page will walk you through how to uninstall Carbide Registry Images from Rancher, both for its own components and downstream Rancher Kubernetes clusters (RKE2/K3s).",source:"@site/docs/registry-docs/uninstall-rancher.md",sourceDirName:"registry-docs",slug:"/registry-docs/uninstall-rancher",permalink:"/carbide-docs/docs/registry-docs/uninstall-rancher",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/uninstall-rancher.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"RKE2/K3s Uninstall",permalink:"/carbide-docs/docs/registry-docs/uninstall-kubernetes"},next:{title:"Introduction",permalink:"/carbide-docs/docs/stigatron-docs/introduction"}},o={},c=[{value:"Reverting Cert Manager",id:"reverting-cert-manager",level:2},{value:"Using Your Own Registry",id:"using-your-own-registry",level:3},{value:"Using Docker Hub Images",id:"using-docker-hub-images",level:3},{value:"Registry Auth Scenarios",id:"registry-auth-scenarios",level:2},{value:"Global Registry",id:"global-registry",level:3},{value:"Uninstall Carbide Images on Rancher (Private Registry)",id:"uninstall-carbide-images-on-rancher-private-registry",level:4},{value:"Uninstall Carbide Images on Rancher (Docker Hub)",id:"uninstall-carbide-images-on-rancher-docker-hub",level:4},{value:"Reverting Downstream Clusters to use DockerHub Images",id:"reverting-downstream-clusters-to-use-dockerhub-images",level:4},{value:"Manual registries.yaml configuration (RKE2/k3s)",id:"manual-registriesyaml-configuration-rke2k3s",level:3},{value:"Reverting Rancher Chart",id:"reverting-rancher-chart",level:3}];function d(e){const r={a:"a",code:"code",h1:"h1",h2:"h2",h3:"h3",h4:"h4",header:"header",li:"li",ol:"ol",p:"p",pre:"pre",strong:"strong",...(0,t.R)(),...e.components};return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsx)(r.header,{children:(0,s.jsx)(r.h1,{id:"rancher-uninstall",children:"Rancher Uninstall"})}),"\n",(0,s.jsx)(r.p,{children:"This page will walk you through how to uninstall Carbide Registry Images from Rancher, both for its own components and downstream Rancher Kubernetes clusters (RKE2/K3s)."}),"\n",(0,s.jsx)(r.h2,{id:"reverting-cert-manager",children:"Reverting Cert Manager"}),"\n",(0,s.jsx)(r.p,{children:"As Rancher has a dependency on Cert Manager, you'll need to update your Helm install of Cert Manager to use the default images."}),"\n",(0,s.jsx)(r.h3,{id:"using-your-own-registry",children:"Using Your Own Registry"}),"\n",(0,s.jsxs)(r.p,{children:["If using your own registry, you simply need to ",(0,s.jsx)(r.a,{href:"https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images#2-collect-the-cert-manager-image",children:"collect"})," the necessary images for cert-manager and overwrite those images in your registry."]}),"\n",(0,s.jsx)(r.p,{children:"As pods cycle, the new image should propagate across the cluster."}),"\n",(0,s.jsx)(r.h3,{id:"using-docker-hub-images",children:"Using Docker Hub Images"}),"\n",(0,s.jsx)(r.p,{children:"If you want to go back to using Docker Hub images directly, you'll need to upgrade the cert-manager installation to revert pointing to the private registry hosting the Carbide images:"}),"\n",(0,s.jsx)(r.pre,{children:(0,s.jsx)(r.code,{className:"language-bash",children:"helm install cert-manager jetstack/cert-manager \\\n --namespace cert-manager \\\n --create-namespace \\\n --version v1.14.4\n"})}),"\n",(0,s.jsx)(r.h2,{id:"registry-auth-scenarios",children:"Registry Auth Scenarios"}),"\n",(0,s.jsx)(r.h3,{id:"global-registry",children:"Global Registry"}),"\n",(0,s.jsx)(r.h4,{id:"uninstall-carbide-images-on-rancher-private-registry",children:"Uninstall Carbide Images on Rancher (Private Registry)"}),"\n",(0,s.jsx)(r.p,{children:"If using your own registry, you simply need to collect the necessary images for Rancher and overwrite those images in your registry."}),"\n",(0,s.jsx)(r.p,{children:"As pods cycle, the new image should propagate across the cluster."}),"\n",(0,s.jsx)(r.h4,{id:"uninstall-carbide-images-on-rancher-docker-hub",children:"Uninstall Carbide Images on Rancher (Docker Hub)"}),"\n",(0,s.jsx)(r.p,{children:"If wanting to use upgrade Docker Hub images for Rancher:"}),"\n",(0,s.jsxs)(r.ol,{children:["\n",(0,s.jsx)(r.li,{children:"Log into Rancher and configure the default administrator password."}),"\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"\u2630 > Global Settings"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Go to the setting called ",(0,s.jsx)(r.code,{children:"system-default-registry"})," and choose ",(0,s.jsx)(r.strong,{children:"\u22ee > Edit Setting"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Click the ",(0,s.jsx)(r.code,{children:"Use the default value"})," button."]}),"\n"]}),"\n",(0,s.jsxs)(r.p,{children:[(0,s.jsx)(r.strong,{children:"Result:"})," Rancher will use your private registry to pull system images."]}),"\n",(0,s.jsx)(r.h4,{id:"reverting-downstream-clusters-to-use-dockerhub-images",children:"Reverting Downstream Clusters to use DockerHub Images"}),"\n",(0,s.jsx)(r.p,{children:"If you want to revert downstream RKE2/K3s clusters to use DockerHub images:"}),"\n",(0,s.jsxs)(r.ol,{children:["\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"\u2630 > Cluster Management"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["On the ",(0,s.jsx)(r.strong,{children:"Clusters"})," page, select the 3-dot button to the right for downstream cluster you'd like to revert, and select ",(0,s.jsx)(r.strong,{children:"Edit Config"}),"."]}),"\n",(0,s.jsx)(r.li,{children:"."}),"\n",(0,s.jsxs)(r.li,{children:["In the ",(0,s.jsx)(r.strong,{children:"Cluster Configuration"})," go to the ",(0,s.jsx)(r.strong,{children:"Registries"})," tab and click ",(0,s.jsx)(r.strong,{children:"Use default global registry for Rancher System Container Images"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"Save"}),"."]}),"\n"]}),"\n",(0,s.jsxs)(r.p,{children:[(0,s.jsx)(r.strong,{children:"Result:"})," The cluster will update nodepools to use DockerHub images."]}),"\n",(0,s.jsxs)(r.h3,{id:"manual-registriesyaml-configuration-rke2k3s",children:["Manual ",(0,s.jsx)(r.code,{children:"registries.yaml"})," configuration (",(0,s.jsx)(r.code,{children:"RKE2"}),"/",(0,s.jsx)(r.code,{children:"k3s"}),")"]}),"\n",(0,s.jsxs)(r.p,{children:["See the ",(0,s.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/uninstall-kubernetes",children:"RKE2/K3s Uninstall"})," documentation."]}),"\n",(0,s.jsxs)(r.h3,{id:"reverting-rancher-chart",children:["Reverting ",(0,s.jsx)(r.code,{children:"Rancher"})," Chart"]}),"\n",(0,s.jsxs)(r.p,{children:["Follow Rancher's ",(0,s.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.7/en/installation/install-rancher-on-k8s",children:"Installation Guide"}),", you can revert to using DockerHub images by removing values from the Helm upgrade command."]}),"\n",(0,s.jsx)(r.pre,{children:(0,s.jsx)(r.code,{className:"language-bash",children:"helm upgrade rancher rancher-latest/rancher \\\n --namespace cattle-system \\\n --set hostname=rancher.my.org \\\n --set replicas=3\n"})})]})}function h(e={}){const{wrapper:r}={...(0,t.R)(),...e.components};return r?(0,s.jsx)(r,{...e,children:(0,s.jsx)(d,{...e})}):d(e)}},8453:(e,r,n)=>{n.d(r,{R:()=>a,x:()=>l});var s=n(6540);const t={},i=s.createContext(t);function a(e){const r=s.useContext(i);return s.useMemo((function(){return"function"==typeof e?e(r):{...r,...e}}),[r,e])}function l(e){let r;return r=e.disableParentContext?"function"==typeof e.components?e.components(t):e.components||t:a(e.components),s.createElement(i.Provider,{value:r},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/3106553b.4e7cdc3b.js b/assets/js/3106553b.4e7cdc3b.js new file mode 100644 index 0000000..2d4f2a6 --- /dev/null +++ b/assets/js/3106553b.4e7cdc3b.js @@ -0,0 +1 @@ +"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[764],{4706:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>c,contentTitle:()=>o,default:()=>u,frontMatter:()=>i,metadata:()=>a,toc:()=>l});var n=t(4848),s=t(8453);const i={},o="RKE2/K3s Uninstall",a={id:"registry-docs/uninstall-kubernetes",title:"RKE2/K3s Uninstall",description:"K3s",source:"@site/docs/registry-docs/uninstall-kubernetes.md",sourceDirName:"registry-docs",slug:"/registry-docs/uninstall-kubernetes",permalink:"/carbide-docs/docs/registry-docs/uninstall-kubernetes",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/uninstall-kubernetes.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"Enforcement",permalink:"/carbide-docs/docs/registry-docs/enforcement"},next:{title:"Rancher Uninstall",permalink:"/carbide-docs/docs/registry-docs/uninstall-rancher"}},c={},l=[{value:"K3s",id:"k3s",level:2},{value:"Reverting to DockerHub Images (Private Registry)",id:"reverting-to-dockerhub-images-private-registry",level:3},{value:"Reverting to DockerHub Images (Directly)",id:"reverting-to-dockerhub-images-directly",level:3},{value:"RKE2",id:"rke2",level:2},{value:"Reverting to DockerHub Images (Private Registry)",id:"reverting-to-dockerhub-images-private-registry-1",level:3},{value:"Reverting to DockerHub Images (Directly)",id:"reverting-to-dockerhub-images-directly-1",level:3}];function d(e){const r={a:"a",code:"code",h1:"h1",h2:"h2",h3:"h3",header:"header",p:"p",pre:"pre",strong:"strong",...(0,s.R)(),...e.components};return(0,n.jsxs)(n.Fragment,{children:[(0,n.jsx)(r.header,{children:(0,n.jsx)(r.h1,{id:"rke2k3s-uninstall",children:"RKE2/K3s Uninstall"})}),"\n",(0,n.jsx)(r.h2,{id:"k3s",children:"K3s"}),"\n",(0,n.jsx)(r.h3,{id:"reverting-to-dockerhub-images-private-registry",children:"Reverting to DockerHub Images (Private Registry)"}),"\n",(0,n.jsxs)(r.p,{children:["If using a private registry, to revert from using the Carbide Secured Images to the normal Rancher images, you simply need to follow the docs to pull the normal images and overwrite them in your registry: ",(0,n.jsx)(r.a,{href:"https://docs.k3s.io/installation/airgap",children:"https://docs.k3s.io/installation/airgap"})]}),"\n",(0,n.jsx)(r.p,{children:"Upon restart of your pods, they should be utilizing the upstream images."}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"NOTE"}),": If you've configured enforcement using Kubewarden or Kyverno, be sure to disable/uninstall to avoid policy enforcement blocking DockerHub images."]}),"\n",(0,n.jsx)(r.h3,{id:"reverting-to-dockerhub-images-directly",children:"Reverting to DockerHub Images (Directly)"}),"\n",(0,n.jsxs)(r.p,{children:["If you want to revert to using images directly from Docker Hub, you'll need to delete the ",(0,n.jsx)(r.code,{children:"registries.yaml"})," configuration file made ",(0,n.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/configuration/kubernetes#usage-with-k3s",children:"here"}),"."]}),"\n",(0,n.jsxs)(r.p,{children:["You will also need to unset the ",(0,n.jsx)(r.code,{children:"system-default-registry"})," configuration when installing K3s by re-running the ",(0,n.jsx)(r.code,{children:"curl"})," command used to install K3s on each node, with the parameter unset."]}),"\n",(0,n.jsx)(r.p,{children:"For instance, if you originally ran the following when using Carbide images:"}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --flannel-backend none" K3S_TOKEN=12345 sh - --system-default-registry \n'})}),"\n",(0,n.jsx)(r.p,{children:"You'd need to run:"}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --flannel-backend none" K3S_TOKEN=12345 sh -\n'})}),"\n",(0,n.jsx)(r.h2,{id:"rke2",children:"RKE2"}),"\n",(0,n.jsx)(r.h3,{id:"reverting-to-dockerhub-images-private-registry-1",children:"Reverting to DockerHub Images (Private Registry)"}),"\n",(0,n.jsxs)(r.p,{children:["If using a private registry, to revert from using the Carbide Secured Images to the normal Rancher images, you simply need to follow the docs to pull the normal images and overwrite them in your registry: ",(0,n.jsx)(r.a,{href:"https://docs.rke2.io/install/airgap",children:"https://docs.rke2.io/install/airgap"})]}),"\n",(0,n.jsx)(r.p,{children:"Upon restart of your pods, they should be utilizing the upstream images."}),"\n",(0,n.jsx)(r.h3,{id:"reverting-to-dockerhub-images-directly-1",children:"Reverting to DockerHub Images (Directly)"}),"\n",(0,n.jsxs)(r.p,{children:["If you want to revert to using images directly from Docker Hub, you'll need to delete the ",(0,n.jsx)(r.code,{children:"registries.yaml"})," configuration file made ",(0,n.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/configuration/kubernetes#usage-with-rke2",children:"here"}),"."]}),"\n",(0,n.jsxs)(r.p,{children:["You'll also need to clean up the ",(0,n.jsx)(r.code,{children:"system-default-registry"})," key/value from your ",(0,n.jsx)(r.code,{children:"/etc/rancher/rke2/config.yaml"})," file on each node, and restart rke2."]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:"# /etc/rancher/rke2/config.yaml\nnode-name: controlplane1\nwrite-kubeconfig-mode: 0640\n...\n"})}),"\n",(0,n.jsxs)(r.p,{children:["To restart controlplane nodes, run: ",(0,n.jsx)(r.code,{children:"systemctl restart rke2-server"}),"\nTo restart agents, run: ",(0,n.jsx)(r.code,{children:"systemctl restart rke2-agent"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"NOTE:"})," For controlplane nodes, be sure to restart them one at a time."]})]})}function u(e={}){const{wrapper:r}={...(0,s.R)(),...e.components};return r?(0,n.jsx)(r,{...e,children:(0,n.jsx)(d,{...e})}):d(e)}},8453:(e,r,t)=>{t.d(r,{R:()=>o,x:()=>a});var n=t(6540);const s={},i=n.createContext(s);function o(e){const r=n.useContext(i);return n.useMemo((function(){return"function"==typeof e?e(r):{...r,...e}}),[r,e])}function a(e){let r;return r=e.disableParentContext?"function"==typeof e.components?e.components(s):e.components||s:o(e.components),n.createElement(i.Provider,{value:r},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/3106553b.f9a2b218.js b/assets/js/3106553b.f9a2b218.js deleted file mode 100644 index 9cc40b1..0000000 --- a/assets/js/3106553b.f9a2b218.js +++ /dev/null @@ -1 +0,0 @@ -"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[764],{4706:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>c,contentTitle:()=>o,default:()=>u,frontMatter:()=>i,metadata:()=>a,toc:()=>l});var n=t(4848),s=t(8453);const i={},o="RKE2/K3s Uninstall",a={id:"registry-docs/uninstall-kubernetes",title:"RKE2/K3s Uninstall",description:"K3s",source:"@site/docs/registry-docs/uninstall-kubernetes.md",sourceDirName:"registry-docs",slug:"/registry-docs/uninstall-kubernetes",permalink:"/carbide-docs/docs/registry-docs/uninstall-kubernetes",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/uninstall-kubernetes.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"Enforcement",permalink:"/carbide-docs/docs/registry-docs/enforcement"},next:{title:"Rancher Manager Uninstall",permalink:"/carbide-docs/docs/registry-docs/uninstall-rancher"}},c={},l=[{value:"K3s",id:"k3s",level:2},{value:"Reverting to DockerHub Images (Private Registry)",id:"reverting-to-dockerhub-images-private-registry",level:3},{value:"Reverting to DockerHub Images (Directly)",id:"reverting-to-dockerhub-images-directly",level:3},{value:"RKE2",id:"rke2",level:2},{value:"Reverting to DockerHub Images (Private Registry)",id:"reverting-to-dockerhub-images-private-registry-1",level:3},{value:"Reverting to DockerHub Images (Directly)",id:"reverting-to-dockerhub-images-directly-1",level:3}];function d(e){const r={a:"a",code:"code",h1:"h1",h2:"h2",h3:"h3",header:"header",p:"p",pre:"pre",strong:"strong",...(0,s.R)(),...e.components};return(0,n.jsxs)(n.Fragment,{children:[(0,n.jsx)(r.header,{children:(0,n.jsx)(r.h1,{id:"rke2k3s-uninstall",children:"RKE2/K3s Uninstall"})}),"\n",(0,n.jsx)(r.h2,{id:"k3s",children:"K3s"}),"\n",(0,n.jsx)(r.h3,{id:"reverting-to-dockerhub-images-private-registry",children:"Reverting to DockerHub Images (Private Registry)"}),"\n",(0,n.jsxs)(r.p,{children:["If using a private registry, to revert from using the Carbide Secured Images to the normal Rancher images, you simply need to follow the docs to pull the normal images and overwrite them in your registry: ",(0,n.jsx)(r.a,{href:"https://docs.k3s.io/installation/airgap",children:"https://docs.k3s.io/installation/airgap"})]}),"\n",(0,n.jsx)(r.p,{children:"Upon restart of your pods, they should be utilizing the upstream images."}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"NOTE"}),": If you've configured enforcement using Kubewarden or Kyverno, be sure to disable/uninstall to avoid policy enforcement blocking DockerHub images."]}),"\n",(0,n.jsx)(r.h3,{id:"reverting-to-dockerhub-images-directly",children:"Reverting to DockerHub Images (Directly)"}),"\n",(0,n.jsxs)(r.p,{children:["If you want to revert to using images directly from Docker Hub, you'll need to delete the ",(0,n.jsx)(r.code,{children:"registries.yaml"})," configuration file made ",(0,n.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/configuration/kubernetes#usage-with-k3s",children:"here"}),"."]}),"\n",(0,n.jsxs)(r.p,{children:["You will also need to unset the ",(0,n.jsx)(r.code,{children:"system-default-registry"})," configuration when installing K3s by re-running the ",(0,n.jsx)(r.code,{children:"curl"})," command used to install K3s on each node, with the parameter unset."]}),"\n",(0,n.jsx)(r.p,{children:"For instance, if you originally ran the following when using Carbide images:"}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --flannel-backend none" K3S_TOKEN=12345 sh - --system-default-registry \n'})}),"\n",(0,n.jsx)(r.p,{children:"You'd need to run:"}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --flannel-backend none" K3S_TOKEN=12345 sh -\n'})}),"\n",(0,n.jsx)(r.h2,{id:"rke2",children:"RKE2"}),"\n",(0,n.jsx)(r.h3,{id:"reverting-to-dockerhub-images-private-registry-1",children:"Reverting to DockerHub Images (Private Registry)"}),"\n",(0,n.jsxs)(r.p,{children:["If using a private registry, to revert from using the Carbide Secured Images to the normal Rancher images, you simply need to follow the docs to pull the normal images and overwrite them in your registry: ",(0,n.jsx)(r.a,{href:"https://docs.rke2.io/install/airgap",children:"https://docs.rke2.io/install/airgap"})]}),"\n",(0,n.jsx)(r.p,{children:"Upon restart of your pods, they should be utilizing the upstream images."}),"\n",(0,n.jsx)(r.h3,{id:"reverting-to-dockerhub-images-directly-1",children:"Reverting to DockerHub Images (Directly)"}),"\n",(0,n.jsxs)(r.p,{children:["If you want to revert to using images directly from Docker Hub, you'll need to delete the ",(0,n.jsx)(r.code,{children:"registries.yaml"})," configuration file made ",(0,n.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/configuration/kubernetes#usage-with-rke2",children:"here"}),"."]}),"\n",(0,n.jsxs)(r.p,{children:["You'll also need to clean up the ",(0,n.jsx)(r.code,{children:"system-default-registry"})," key/value from your ",(0,n.jsx)(r.code,{children:"/etc/rancher/rke2/config.yaml"})," file on each node, and restart rke2."]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:"# /etc/rancher/rke2/config.yaml\nnode-name: controlplane1\nwrite-kubeconfig-mode: 0640\n...\n"})}),"\n",(0,n.jsxs)(r.p,{children:["To restart controlplane nodes, run: ",(0,n.jsx)(r.code,{children:"systemctl restart rke2-server"}),"\nTo restart agents, run: ",(0,n.jsx)(r.code,{children:"systemctl restart rke2-agent"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"NOTE:"})," For controlplane nodes, be sure to restart them one at a time."]})]})}function u(e={}){const{wrapper:r}={...(0,s.R)(),...e.components};return r?(0,n.jsx)(r,{...e,children:(0,n.jsx)(d,{...e})}):d(e)}},8453:(e,r,t)=>{t.d(r,{R:()=>o,x:()=>a});var n=t(6540);const s={},i=n.createContext(s);function o(e){const r=n.useContext(i);return n.useMemo((function(){return"function"==typeof e?e(r):{...r,...e}}),[r,e])}function a(e){let r;return r=e.disableParentContext?"function"==typeof e.components?e.components(s):e.components||s:o(e.components),n.createElement(i.Provider,{value:r},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/47410d18.77edd55b.js b/assets/js/47410d18.77edd55b.js deleted file mode 100644 index e30ecad..0000000 --- a/assets/js/47410d18.77edd55b.js +++ /dev/null @@ -1 +0,0 @@ -"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[882],{3342:(e,n,r)=>{r.r(n),r.d(n,{assets:()=>l,contentTitle:()=>o,default:()=>u,frontMatter:()=>a,metadata:()=>s,toc:()=>c});var t=r(4848),i=r(8453);const a={},o="Enforcement",s={id:"registry-docs/enforcement",title:"Enforcement",description:"This page will walk you through configuring a few example policy enforcement engines to validate your cluster images against our public key. This should ensure only the images from our hardened registry are allowed to run.",source:"@site/docs/registry-docs/enforcement.md",sourceDirName:"registry-docs",slug:"/registry-docs/enforcement",permalink:"/carbide-docs/docs/registry-docs/enforcement",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/enforcement.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"Rancher Manager Configuration",permalink:"/carbide-docs/docs/registry-docs/configuration/rancher"},next:{title:"RKE2/K3s Uninstall",permalink:"/carbide-docs/docs/registry-docs/uninstall-kubernetes"}},l={},c=[{value:"Kubewarden Enforcement",id:"kubewarden-enforcement",level:2},{value:"Installation",id:"installation",level:3},{value:"Private Registry",id:"private-registry",level:3},{value:"Copying Policy Artifact to a Registry (Connected Environments)",id:"copying-policy-artifact-to-a-registry-connected-environments",level:3},{value:"Saving Policy Artifact (Airgapped Environments)",id:"saving-policy-artifact-airgapped-environments",level:3},{value:"Loading Policy Artifact to a Registry (Airgapped Environments)",id:"loading-policy-artifact-to-a-registry-airgapped-environments",level:3},{value:"Creating the Policy",id:"creating-the-policy",level:3},{value:"Kyverno Enforcement",id:"kyverno-enforcement",level:2},{value:"Installation",id:"installation-1",level:3},{value:"Private Registry",id:"private-registry-1",level:3},{value:"Creating the Policy",id:"creating-the-policy-1",level:3},{value:"OPA Gatekeeper Enforcement",id:"opa-gatekeeper-enforcement",level:2}];function d(e){const n={a:"a",code:"code",h1:"h1",h2:"h2",h3:"h3",header:"header",p:"p",pre:"pre",...(0,i.R)(),...e.components};return(0,t.jsxs)(t.Fragment,{children:[(0,t.jsx)(n.header,{children:(0,t.jsx)(n.h1,{id:"enforcement",children:"Enforcement"})}),"\n",(0,t.jsx)(n.p,{children:"This page will walk you through configuring a few example policy enforcement engines to validate your cluster images against our public key. This should ensure only the images from our hardened registry are allowed to run."}),"\n",(0,t.jsx)(n.h2,{id:"kubewarden-enforcement",children:"Kubewarden Enforcement"}),"\n",(0,t.jsx)(n.h3,{id:"installation",children:"Installation"}),"\n",(0,t.jsx)(n.p,{children:"To install Kubewarden, run the following commands, substituting your registry information:"}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-bash",children:'# add and update the helm chart repository\nhelm repo add kubewarden https://charts.kubewarden.io\nhelm repo update\n\n# install the crds helm chart\nhelm install --wait -n kubewarden --create-namespace kubewarden-crds kubewarden/kubewarden-crds\n\n# install the controller helm chart\nhelm install --wait -n kubewarden kubewarden-controller kubewarden/kubewarden-controller --set "common.cattle.systemDefaultRegistry="\n\n# install the defaults helm chart\nhelm install --wait -n kubewarden kubewarden-defaults kubewarden/kubewarden-defaults --set "common.cattle.systemDefaultRegistry=" kubewarden/kubewarden-defaults\n'})}),"\n",(0,t.jsxs)(n.p,{children:["For more information about installing Kubewarden, see the ",(0,t.jsx)(n.a,{href:"https://docs.kubewarden.io/quick-start#installation",children:"docs"}),"."]}),"\n",(0,t.jsx)(n.h3,{id:"private-registry",children:"Private Registry"}),"\n",(0,t.jsxs)(n.p,{children:["If your Rancher system images are in a private registry requiring authentication, you'll need to configure your Kubewarden policy-server with a ",(0,t.jsx)(n.a,{href:"https://docs.kubewarden.io/operator-manual/policy-servers/private-registry",children:"Pull Secret"})," in order for it to validate the signature."]}),"\n",(0,t.jsx)(n.h3,{id:"copying-policy-artifact-to-a-registry-connected-environments",children:"Copying Policy Artifact to a Registry (Connected Environments)"}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-bash",children:"# fetch the image from the carbide secured registry\nhauler store add image rgcrprod.azurecr.us/policies/verify-image-signatures:v0.1.7 --key carbide-key.pub --platform linux/amd64\n\n# copy the content from the hauler store to your registry\nhauler store copy --username --password registry://\n"})}),"\n",(0,t.jsx)(n.h3,{id:"saving-policy-artifact-airgapped-environments",children:"Saving Policy Artifact (Airgapped Environments)"}),"\n",(0,t.jsx)(n.p,{children:"Use the below script, substituting your registry, to both validate and save locally the policy artifact:"}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-bash",children:"# fetch the image from the carbide secured registry\nhauler store add image rgcrprod.azurecr.us/policies/verify-image-signatures:v0.1.7 --key carbide-key.pub --platform linux/amd64\n\n# save and output the content from the hauler store to tarball\nhauler store save --filename kubewarden-policy.tar.zst\n"})}),"\n",(0,t.jsx)(n.h3,{id:"loading-policy-artifact-to-a-registry-airgapped-environments",children:"Loading Policy Artifact to a Registry (Airgapped Environments)"}),"\n",(0,t.jsx)(n.p,{children:"Use the below script, substituting your registry, to load the policy artifact:"}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-bash",children:"# load the content from the tarball to the hauler store\nhauler store load kubewarden-policy.tar.zst\n\n# copy the content from the hauler store to your registry\nhauler store copy --username --password registry://\n"})}),"\n",(0,t.jsx)(n.h3,{id:"creating-the-policy",children:"Creating the Policy"}),"\n",(0,t.jsxs)(n.p,{children:["After installing/configuring Kubewarden and copying the policy to your registry, apply the following ClusterAdmissionPolicy (substituting ",(0,t.jsx)(n.code,{children:""})," with your registry domain):"]}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-yaml",children:"apiVersion: policies.kubewarden.io/v1\nkind: ClusterAdmissionPolicy\nmetadata:\n name: verify-image-signatures\nspec:\n module: /policies/verify-image-signatures:v0.1.7\n rules:\n - apiGroups: ['', 'apps', 'batch']\n apiVersions: ['v1']\n resources:\n [\n 'pods',\n 'deployments',\n 'statefulsets',\n 'replicationcontrollers',\n 'jobs',\n 'cronjobs',\n ]\n operations:\n - CREATE\n - UPDATE\n mutating: true\n settings:\n signatures:\n - image: '/carbide/*'\n pubKeys:\n - |\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n - image: '/jetstack/*'\n pubKeys:\n - |\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n - image: '/rancher/*'\n pubKeys:\n - |\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n - image: '/longhornio/*'\n pubKeys:\n - |\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n - image: '/neuvector/*'\n pubKeys:\n - |\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n"})}),"\n",(0,t.jsx)(n.h2,{id:"kyverno-enforcement",children:"Kyverno Enforcement"}),"\n",(0,t.jsx)(n.h3,{id:"installation-1",children:"Installation"}),"\n",(0,t.jsxs)(n.p,{children:["See the docs on how to install ",(0,t.jsx)(n.a,{href:"https://kyverno.io/docs/installation",children:"Kyverno"})," onto your cluster."]}),"\n",(0,t.jsx)(n.h3,{id:"private-registry-1",children:"Private Registry"}),"\n",(0,t.jsxs)(n.p,{children:["If your Rancher system images are in a private registry requiring authentication, you'll need to configure your Kyverno policy-server with a ",(0,t.jsx)(n.a,{href:"https://kyverno.io/policies/other/require_imagepullsecrets/require_imagepullsecrets",children:"Pull Secret"})," in order for it to validate the signature."]}),"\n",(0,t.jsx)(n.h3,{id:"creating-the-policy-1",children:"Creating the Policy"}),"\n",(0,t.jsxs)(n.p,{children:["After installing/configuring Kyverno, apply the following Policy (substituting ",(0,t.jsx)(n.code,{children:""})," with your registry domain):"]}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-yaml",children:"apiVersion: kyverno.io/v1\nkind: Policy\nmetadata:\n name: verify-image-signatures\nspec:\n validationFailureAction: enforce\n background: false\n webhookTimeoutSeconds: 30\n failurePolicy: Fail\n rules:\n - name: check-image\n match:\n any:\n - resources:\n kinds:\n - Pod\n - Deployment\n verifyImages:\n - imageReferences:\n - '/carbide/*'\n - '/jetstack/*'\n - '/rancher/*'\n - '/longhornio/*'\n - '/neuvector/*'\n attestors:\n - count: 1\n entries:\n - keys:\n publicKeys: |-\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n"})}),"\n",(0,t.jsx)(n.h2,{id:"opa-gatekeeper-enforcement",children:"OPA Gatekeeper Enforcement"}),"\n",(0,t.jsxs)(n.p,{children:["Gatekeeper can be used to verify image signatures through its ",(0,t.jsx)(n.a,{href:"https://open-policy-agent.github.io/gatekeeper/website/docs/externaldata",children:"External Data Provider"}),"."]})]})}function u(e={}){const{wrapper:n}={...(0,i.R)(),...e.components};return n?(0,t.jsx)(n,{...e,children:(0,t.jsx)(d,{...e})}):d(e)}},8453:(e,n,r)=>{r.d(n,{R:()=>o,x:()=>s});var t=r(6540);const i={},a=t.createContext(i);function o(e){const n=t.useContext(a);return t.useMemo((function(){return"function"==typeof e?e(n):{...n,...e}}),[n,e])}function s(e){let n;return n=e.disableParentContext?"function"==typeof e.components?e.components(i):e.components||i:o(e.components),t.createElement(a.Provider,{value:n},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/47410d18.eb4488ff.js b/assets/js/47410d18.eb4488ff.js new file mode 100644 index 0000000..9ddddf9 --- /dev/null +++ b/assets/js/47410d18.eb4488ff.js @@ -0,0 +1 @@ +"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[882],{3342:(e,n,r)=>{r.r(n),r.d(n,{assets:()=>l,contentTitle:()=>o,default:()=>u,frontMatter:()=>a,metadata:()=>s,toc:()=>c});var t=r(4848),i=r(8453);const a={},o="Enforcement",s={id:"registry-docs/enforcement",title:"Enforcement",description:"This page will walk you through configuring a few example policy enforcement engines to validate your cluster images against our public key. This should ensure only the images from our hardened registry are allowed to run.",source:"@site/docs/registry-docs/enforcement.md",sourceDirName:"registry-docs",slug:"/registry-docs/enforcement",permalink:"/carbide-docs/docs/registry-docs/enforcement",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/enforcement.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"Rancher Configuration",permalink:"/carbide-docs/docs/registry-docs/configuration/rancher"},next:{title:"RKE2/K3s Uninstall",permalink:"/carbide-docs/docs/registry-docs/uninstall-kubernetes"}},l={},c=[{value:"Kubewarden Enforcement",id:"kubewarden-enforcement",level:2},{value:"Installation",id:"installation",level:3},{value:"Private Registry",id:"private-registry",level:3},{value:"Copying Policy Artifact to a Registry (Connected Environments)",id:"copying-policy-artifact-to-a-registry-connected-environments",level:3},{value:"Saving Policy Artifact (Airgapped Environments)",id:"saving-policy-artifact-airgapped-environments",level:3},{value:"Loading Policy Artifact to a Registry (Airgapped Environments)",id:"loading-policy-artifact-to-a-registry-airgapped-environments",level:3},{value:"Creating the Policy",id:"creating-the-policy",level:3},{value:"Kyverno Enforcement",id:"kyverno-enforcement",level:2},{value:"Installation",id:"installation-1",level:3},{value:"Private Registry",id:"private-registry-1",level:3},{value:"Creating the Policy",id:"creating-the-policy-1",level:3},{value:"OPA Gatekeeper Enforcement",id:"opa-gatekeeper-enforcement",level:2}];function d(e){const n={a:"a",code:"code",h1:"h1",h2:"h2",h3:"h3",header:"header",p:"p",pre:"pre",...(0,i.R)(),...e.components};return(0,t.jsxs)(t.Fragment,{children:[(0,t.jsx)(n.header,{children:(0,t.jsx)(n.h1,{id:"enforcement",children:"Enforcement"})}),"\n",(0,t.jsx)(n.p,{children:"This page will walk you through configuring a few example policy enforcement engines to validate your cluster images against our public key. This should ensure only the images from our hardened registry are allowed to run."}),"\n",(0,t.jsx)(n.h2,{id:"kubewarden-enforcement",children:"Kubewarden Enforcement"}),"\n",(0,t.jsx)(n.h3,{id:"installation",children:"Installation"}),"\n",(0,t.jsx)(n.p,{children:"To install Kubewarden, run the following commands, substituting your registry information:"}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-bash",children:'# add and update the helm chart repository\nhelm repo add kubewarden https://charts.kubewarden.io\nhelm repo update\n\n# install the crds helm chart\nhelm install --wait -n kubewarden --create-namespace kubewarden-crds kubewarden/kubewarden-crds\n\n# install the controller helm chart\nhelm install --wait -n kubewarden kubewarden-controller kubewarden/kubewarden-controller --set "common.cattle.systemDefaultRegistry="\n\n# install the defaults helm chart\nhelm install --wait -n kubewarden kubewarden-defaults kubewarden/kubewarden-defaults --set "common.cattle.systemDefaultRegistry=" kubewarden/kubewarden-defaults\n'})}),"\n",(0,t.jsxs)(n.p,{children:["For more information about installing Kubewarden, see the ",(0,t.jsx)(n.a,{href:"https://docs.kubewarden.io/quick-start#installation",children:"docs"}),"."]}),"\n",(0,t.jsx)(n.h3,{id:"private-registry",children:"Private Registry"}),"\n",(0,t.jsxs)(n.p,{children:["If your Rancher system images are in a private registry requiring authentication, you'll need to configure your Kubewarden policy-server with a ",(0,t.jsx)(n.a,{href:"https://docs.kubewarden.io/operator-manual/policy-servers/private-registry",children:"Pull Secret"})," in order for it to validate the signature."]}),"\n",(0,t.jsx)(n.h3,{id:"copying-policy-artifact-to-a-registry-connected-environments",children:"Copying Policy Artifact to a Registry (Connected Environments)"}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-bash",children:"# fetch the image from the carbide secured registry\nhauler store add image rgcrprod.azurecr.us/policies/verify-image-signatures:v0.1.7 --key carbide-key.pub --platform linux/amd64\n\n# copy the content from the hauler store to your registry\nhauler store copy --username --password registry://\n"})}),"\n",(0,t.jsx)(n.h3,{id:"saving-policy-artifact-airgapped-environments",children:"Saving Policy Artifact (Airgapped Environments)"}),"\n",(0,t.jsx)(n.p,{children:"Use the below script, substituting your registry, to both validate and save locally the policy artifact:"}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-bash",children:"# fetch the image from the carbide secured registry\nhauler store add image rgcrprod.azurecr.us/policies/verify-image-signatures:v0.1.7 --key carbide-key.pub --platform linux/amd64\n\n# save and output the content from the hauler store to tarball\nhauler store save --filename kubewarden-policy.tar.zst\n"})}),"\n",(0,t.jsx)(n.h3,{id:"loading-policy-artifact-to-a-registry-airgapped-environments",children:"Loading Policy Artifact to a Registry (Airgapped Environments)"}),"\n",(0,t.jsx)(n.p,{children:"Use the below script, substituting your registry, to load the policy artifact:"}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-bash",children:"# load the content from the tarball to the hauler store\nhauler store load kubewarden-policy.tar.zst\n\n# copy the content from the hauler store to your registry\nhauler store copy --username --password registry://\n"})}),"\n",(0,t.jsx)(n.h3,{id:"creating-the-policy",children:"Creating the Policy"}),"\n",(0,t.jsxs)(n.p,{children:["After installing/configuring Kubewarden and copying the policy to your registry, apply the following ClusterAdmissionPolicy (substituting ",(0,t.jsx)(n.code,{children:""})," with your registry domain):"]}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-yaml",children:"apiVersion: policies.kubewarden.io/v1\nkind: ClusterAdmissionPolicy\nmetadata:\n name: verify-image-signatures\nspec:\n module: /policies/verify-image-signatures:v0.1.7\n rules:\n - apiGroups: ['', 'apps', 'batch']\n apiVersions: ['v1']\n resources:\n [\n 'pods',\n 'deployments',\n 'statefulsets',\n 'replicationcontrollers',\n 'jobs',\n 'cronjobs',\n ]\n operations:\n - CREATE\n - UPDATE\n mutating: true\n settings:\n signatures:\n - image: '/carbide/*'\n pubKeys:\n - |\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n - image: '/jetstack/*'\n pubKeys:\n - |\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n - image: '/rancher/*'\n pubKeys:\n - |\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n - image: '/longhornio/*'\n pubKeys:\n - |\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n - image: '/neuvector/*'\n pubKeys:\n - |\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n"})}),"\n",(0,t.jsx)(n.h2,{id:"kyverno-enforcement",children:"Kyverno Enforcement"}),"\n",(0,t.jsx)(n.h3,{id:"installation-1",children:"Installation"}),"\n",(0,t.jsxs)(n.p,{children:["See the docs on how to install ",(0,t.jsx)(n.a,{href:"https://kyverno.io/docs/installation",children:"Kyverno"})," onto your cluster."]}),"\n",(0,t.jsx)(n.h3,{id:"private-registry-1",children:"Private Registry"}),"\n",(0,t.jsxs)(n.p,{children:["If your Rancher system images are in a private registry requiring authentication, you'll need to configure your Kyverno policy-server with a ",(0,t.jsx)(n.a,{href:"https://kyverno.io/policies/other/require_imagepullsecrets/require_imagepullsecrets",children:"Pull Secret"})," in order for it to validate the signature."]}),"\n",(0,t.jsx)(n.h3,{id:"creating-the-policy-1",children:"Creating the Policy"}),"\n",(0,t.jsxs)(n.p,{children:["After installing/configuring Kyverno, apply the following Policy (substituting ",(0,t.jsx)(n.code,{children:""})," with your registry domain):"]}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-yaml",children:"apiVersion: kyverno.io/v1\nkind: Policy\nmetadata:\n name: verify-image-signatures\nspec:\n validationFailureAction: enforce\n background: false\n webhookTimeoutSeconds: 30\n failurePolicy: Fail\n rules:\n - name: check-image\n match:\n any:\n - resources:\n kinds:\n - Pod\n - Deployment\n verifyImages:\n - imageReferences:\n - '/carbide/*'\n - '/jetstack/*'\n - '/rancher/*'\n - '/longhornio/*'\n - '/neuvector/*'\n attestors:\n - count: 1\n entries:\n - keys:\n publicKeys: |-\n -----BEGIN PUBLIC KEY-----\n MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5zlXeLmRxBHbVmDRZpnCFdzKhyKO\n tCAZva7CLlk/6gxvCM0QkIKznfaGTRMMYTaHMdQSau6yulDLlpokA++i8Q==\n -----END PUBLIC KEY-----\n"})}),"\n",(0,t.jsx)(n.h2,{id:"opa-gatekeeper-enforcement",children:"OPA Gatekeeper Enforcement"}),"\n",(0,t.jsxs)(n.p,{children:["Gatekeeper can be used to verify image signatures through its ",(0,t.jsx)(n.a,{href:"https://open-policy-agent.github.io/gatekeeper/website/docs/externaldata",children:"External Data Provider"}),"."]})]})}function u(e={}){const{wrapper:n}={...(0,i.R)(),...e.components};return n?(0,t.jsx)(n,{...e,children:(0,t.jsx)(d,{...e})}):d(e)}},8453:(e,n,r)=>{r.d(n,{R:()=>o,x:()=>s});var t=r(6540);const i={},a=t.createContext(i);function o(e){const n=t.useContext(a);return t.useMemo((function(){return"function"==typeof e?e(n):{...n,...e}}),[n,e])}function s(e){let n;return n=e.disableParentContext?"function"==typeof e.components?e.components(i):e.components||i:o(e.components),t.createElement(a.Provider,{value:n},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/501d4186.30b95c8c.js b/assets/js/501d4186.30b95c8c.js new file mode 100644 index 0000000..aa33302 --- /dev/null +++ b/assets/js/501d4186.30b95c8c.js @@ -0,0 +1 @@ +"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[140],{1693:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>c,contentTitle:()=>o,default:()=>h,frontMatter:()=>r,metadata:()=>a,toc:()=>d});var i=n(4848),s=n(8453);const r={},o="Introduction",a={id:"stigatron-docs/introduction",title:"Introduction",description:"This section will walk through installation and usage of the STIGATRON component of Rancher Government Carbide.",source:"@site/docs/stigatron-docs/introduction.md",sourceDirName:"stigatron-docs",slug:"/stigatron-docs/introduction",permalink:"/carbide-docs/docs/stigatron-docs/introduction",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/stigatron-docs/introduction.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"Rancher Uninstall",permalink:"/carbide-docs/docs/registry-docs/uninstall-rancher"},next:{title:"Prerequisites",permalink:"/carbide-docs/docs/stigatron-docs/prereqs"}},c={},d=[{value:"What is STIGATRON?",id:"what-is-stigatron",level:2},{value:"IOC Expectations",id:"ioc-expectations",level:2}];function l(e){const t={a:"a",code:"code",h1:"h1",h2:"h2",header:"header",li:"li",ol:"ol",p:"p",ul:"ul",...(0,s.R)(),...e.components};return(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(t.header,{children:(0,i.jsx)(t.h1,{id:"introduction",children:"Introduction"})}),"\n",(0,i.jsx)(t.p,{children:"This section will walk through installation and usage of the STIGATRON component of Rancher Government Carbide."}),"\n",(0,i.jsx)(t.h2,{id:"what-is-stigatron",children:"What is STIGATRON?"}),"\n",(0,i.jsx)(t.p,{children:"Our Federal/Government-driven Kubernetes Distribution, RKE2, is the first Kubernetes distribution outside of the upstream project to obtain full DISA STIG Certification."}),"\n",(0,i.jsx)(t.p,{children:"STIGATRON was developed to alleviate the pain points of traditional management and maintenance of assessing system compliance, with features including:"}),"\n",(0,i.jsxs)(t.ol,{children:["\n",(0,i.jsx)(t.li,{children:"STIGATRON provides the ability to perform a real-time scan against all downstream clusters being managed by Rancher."}),"\n",(0,i.jsx)(t.li,{children:"These scans will provide a mapping of the current state of the cluster against the controls with the RKE2 DISA STIG."}),"\n",(0,i.jsx)(t.li,{children:"Users can visualize the results of these scans from the Rancher UI by accessing the MITRE Heimdall2 interface. This provides current compliance status, tree maps mapping to NIST 800-53 controls, and a detailed breakdown of each check performed, including the commands executed, the output of those commands, and what steps can be performed to mitigate any failures."}),"\n",(0,i.jsxs)(t.li,{children:["Users can also export the scan results into the common formats required by Cyber Systems within the federal space. This includes ",(0,i.jsx)(t.code,{children:"XCCDF"})," and ",(0,i.jsx)(t.code,{children:"results.json"}),"."]}),"\n"]}),"\n",(0,i.jsx)(t.h2,{id:"ioc-expectations",children:"IOC Expectations"}),"\n",(0,i.jsx)(t.p,{children:"As our product is still at Initial Operation Capability (IOC), there are some expectations to level-set:"}),"\n",(0,i.jsxs)(t.ul,{children:["\n",(0,i.jsx)(t.li,{children:"Installation and packaging is still in progress and improving."}),"\n"]}),"\n",(0,i.jsxs)(t.p,{children:["If you see issues and areas for improvement, please submit Github issues ",(0,i.jsx)(t.a,{href:"https://github.com/rancherfederal/carbide-charts/issues",children:"here"}),"."]})]})}function h(e={}){const{wrapper:t}={...(0,s.R)(),...e.components};return t?(0,i.jsx)(t,{...e,children:(0,i.jsx)(l,{...e})}):l(e)}},8453:(e,t,n)=>{n.d(t,{R:()=>o,x:()=>a});var i=n(6540);const s={},r=i.createContext(s);function o(e){const t=i.useContext(r);return i.useMemo((function(){return"function"==typeof e?e(t):{...t,...e}}),[t,e])}function a(e){let t;return t=e.disableParentContext?"function"==typeof e.components?e.components(s):e.components||s:o(e.components),i.createElement(r.Provider,{value:t},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/501d4186.e12672aa.js b/assets/js/501d4186.e12672aa.js deleted file mode 100644 index df48e80..0000000 --- a/assets/js/501d4186.e12672aa.js +++ /dev/null @@ -1 +0,0 @@ -"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[140],{1693:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>c,contentTitle:()=>o,default:()=>h,frontMatter:()=>r,metadata:()=>a,toc:()=>d});var i=n(4848),s=n(8453);const r={},o="Introduction",a={id:"stigatron-docs/introduction",title:"Introduction",description:"This section will walk through installation and usage of the STIGATRON component of Rancher Government Carbide.",source:"@site/docs/stigatron-docs/introduction.md",sourceDirName:"stigatron-docs",slug:"/stigatron-docs/introduction",permalink:"/carbide-docs/docs/stigatron-docs/introduction",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/stigatron-docs/introduction.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"Rancher Manager Uninstall",permalink:"/carbide-docs/docs/registry-docs/uninstall-rancher"},next:{title:"Prerequisites",permalink:"/carbide-docs/docs/stigatron-docs/prereqs"}},c={},d=[{value:"What is STIGATRON?",id:"what-is-stigatron",level:2},{value:"IOC Expectations",id:"ioc-expectations",level:2}];function l(e){const t={a:"a",code:"code",h1:"h1",h2:"h2",header:"header",li:"li",ol:"ol",p:"p",ul:"ul",...(0,s.R)(),...e.components};return(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(t.header,{children:(0,i.jsx)(t.h1,{id:"introduction",children:"Introduction"})}),"\n",(0,i.jsx)(t.p,{children:"This section will walk through installation and usage of the STIGATRON component of Rancher Government Carbide."}),"\n",(0,i.jsx)(t.h2,{id:"what-is-stigatron",children:"What is STIGATRON?"}),"\n",(0,i.jsx)(t.p,{children:"Our Federal/Government-driven Kubernetes Distribution, RKE2, is the first Kubernetes distribution outside of the upstream project to obtain full DISA STIG Certification."}),"\n",(0,i.jsx)(t.p,{children:"STIGATRON was developed to alleviate the pain points of traditional management and maintenance of assessing system compliance, with features including:"}),"\n",(0,i.jsxs)(t.ol,{children:["\n",(0,i.jsx)(t.li,{children:"STIGATRON provides the ability to perform a real-time scan against all downstream clusters being managed by Rancher."}),"\n",(0,i.jsx)(t.li,{children:"These scans will provide a mapping of the current state of the cluster against the controls with the RKE2 DISA STIG."}),"\n",(0,i.jsx)(t.li,{children:"Users can visualize the results of these scans from the Rancher UI by accessing the MITRE Heimdall2 interface. This provides current compliance status, tree maps mapping to NIST 800-53 controls, and a detailed breakdown of each check performed, including the commands executed, the output of those commands, and what steps can be performed to mitigate any failures."}),"\n",(0,i.jsxs)(t.li,{children:["Users can also export the scan results into the common formats required by Cyber Systems within the federal space. This includes ",(0,i.jsx)(t.code,{children:"XCCDF"})," and ",(0,i.jsx)(t.code,{children:"results.json"}),"."]}),"\n"]}),"\n",(0,i.jsx)(t.h2,{id:"ioc-expectations",children:"IOC Expectations"}),"\n",(0,i.jsx)(t.p,{children:"As our product is still at Initial Operation Capability (IOC), there are some expectations to level-set:"}),"\n",(0,i.jsxs)(t.ul,{children:["\n",(0,i.jsx)(t.li,{children:"Installation and packaging is still in progress and improving."}),"\n"]}),"\n",(0,i.jsxs)(t.p,{children:["If you see issues and areas for improvement, please submit Github issues ",(0,i.jsx)(t.a,{href:"https://github.com/rancherfederal/carbide-charts/issues",children:"here"}),"."]})]})}function h(e={}){const{wrapper:t}={...(0,s.R)(),...e.components};return t?(0,i.jsx)(t,{...e,children:(0,i.jsx)(l,{...e})}):l(e)}},8453:(e,t,n)=>{n.d(t,{R:()=>o,x:()=>a});var i=n(6540);const s={},r=i.createContext(s);function o(e){const t=i.useContext(r);return i.useMemo((function(){return"function"==typeof e?e(t):{...t,...e}}),[t,e])}function a(e){let t;return t=e.disableParentContext?"function"==typeof e.components?e.components(s):e.components||s:o(e.components),i.createElement(r.Provider,{value:t},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/c0c2b7bb.89953d49.js b/assets/js/c0c2b7bb.89953d49.js deleted file mode 100644 index e164d52..0000000 --- a/assets/js/c0c2b7bb.89953d49.js +++ /dev/null @@ -1 +0,0 @@ -"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[132],{6131:e=>{e.exports=JSON.parse('{"version":{"pluginId":"default","version":"current","label":"Next","banner":null,"badge":false,"noIndex":false,"className":"docs-version-current","isLast":true,"docsSidebars":{"tutorialSidebar":[{"type":"link","label":"Introduction","href":"/carbide-docs/docs/intro","docId":"intro","unlisted":false},{"type":"category","label":"Carbide Image Registry","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"Architecture","href":"/carbide-docs/docs/registry-docs/architecture","docId":"registry-docs/architecture","unlisted":false},{"type":"link","label":"Carbide Helm Charts","href":"/carbide-docs/docs/registry-docs/carbide-charts","docId":"registry-docs/carbide-charts","unlisted":false},{"type":"category","label":"configuration","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"RKE2/K3s Configuration","href":"/carbide-docs/docs/registry-docs/configuration/kubernetes","docId":"registry-docs/configuration/kubernetes","unlisted":false},{"type":"link","label":"Rancher Manager Configuration","href":"/carbide-docs/docs/registry-docs/configuration/rancher","docId":"registry-docs/configuration/rancher","unlisted":false}]},{"type":"link","label":"Copying Images to a Registry","href":"/carbide-docs/docs/registry-docs/copying-images","docId":"registry-docs/copying-images","unlisted":false},{"type":"link","label":"Downloading the Images","href":"/carbide-docs/docs/registry-docs/downloading-images","docId":"registry-docs/downloading-images","unlisted":false},{"type":"link","label":"Enforcement","href":"/carbide-docs/docs/registry-docs/enforcement","docId":"registry-docs/enforcement","unlisted":false},{"type":"link","label":"Introduction","href":"/carbide-docs/docs/registry-docs/introduction","docId":"registry-docs/introduction","unlisted":false},{"type":"link","label":"Loading Images to a Registry","href":"/carbide-docs/docs/registry-docs/loading-images","docId":"registry-docs/loading-images","unlisted":false},{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/registry-docs/prereqs","docId":"registry-docs/prereqs","unlisted":false},{"type":"link","label":"Release Cadence","href":"/carbide-docs/docs/registry-docs/release-cadence","docId":"registry-docs/release-cadence","unlisted":false},{"type":"link","label":"RKE2/K3s Uninstall","href":"/carbide-docs/docs/registry-docs/uninstall-kubernetes","docId":"registry-docs/uninstall-kubernetes","unlisted":false},{"type":"link","label":"Rancher Manager Uninstall","href":"/carbide-docs/docs/registry-docs/uninstall-rancher","docId":"registry-docs/uninstall-rancher","unlisted":false},{"type":"link","label":"Validating Images","href":"/carbide-docs/docs/registry-docs/validating-images","docId":"registry-docs/validating-images","unlisted":false}],"href":"/carbide-docs/docs/category/carbide-image-registry"},{"type":"category","label":"Airgapped Docs","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"Installation","href":"/carbide-docs/docs/airgapped-docs/installation","docId":"airgapped-docs/installation","unlisted":false},{"type":"link","label":"Introduction","href":"/carbide-docs/docs/airgapped-docs/introduction","docId":"airgapped-docs/introduction","unlisted":false},{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/airgapped-docs/prereqs","docId":"airgapped-docs/prereqs","unlisted":false},{"type":"link","label":"Uninstall","href":"/carbide-docs/docs/airgapped-docs/uninstall","docId":"airgapped-docs/uninstall","unlisted":false}],"href":"/carbide-docs/docs/category/airgapped-docs"},{"type":"category","label":"STIGATRON Security Operator","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"Creating STIGATRON Scans","href":"/carbide-docs/docs/stigatron-docs/create-scan","docId":"stigatron-docs/create-scan","unlisted":false},{"type":"link","label":"Installation","href":"/carbide-docs/docs/stigatron-docs/installation","docId":"stigatron-docs/installation","unlisted":false},{"type":"link","label":"Introduction","href":"/carbide-docs/docs/stigatron-docs/introduction","docId":"stigatron-docs/introduction","unlisted":false},{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/stigatron-docs/prereqs","docId":"stigatron-docs/prereqs","unlisted":false},{"type":"link","label":"Uninstall","href":"/carbide-docs/docs/stigatron-docs/uninstall","docId":"stigatron-docs/uninstall","unlisted":false},{"type":"link","label":"Using MITRE Heimdall","href":"/carbide-docs/docs/stigatron-docs/using-heimdall","docId":"stigatron-docs/using-heimdall","unlisted":false}],"href":"/carbide-docs/docs/category/stigatron-security-operator"},{"type":"link","label":"Feedback","href":"/carbide-docs/docs/feedback","docId":"feedback","unlisted":false},{"type":"link","label":"Known Limitations & Caveats","href":"/carbide-docs/docs/known-limits","docId":"known-limits","unlisted":false}],"carbideSidebar":[{"type":"link","label":"Introduction","href":"/carbide-docs/docs/intro","docId":"intro","unlisted":false},{"type":"category","label":"Carbide Secured Registry (CSR)","collapsed":false,"items":[{"type":"link","label":"Introduction","href":"/carbide-docs/docs/registry-docs/introduction","docId":"registry-docs/introduction","unlisted":false},{"type":"link","label":"Architecture","href":"/carbide-docs/docs/registry-docs/architecture","docId":"registry-docs/architecture","unlisted":false},{"type":"link","label":"Release Cadence","href":"/carbide-docs/docs/registry-docs/release-cadence","docId":"registry-docs/release-cadence","unlisted":false},{"type":"category","label":"Installation","items":[{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/registry-docs/prereqs","docId":"registry-docs/prereqs","unlisted":false},{"type":"link","label":"Validating Images","href":"/carbide-docs/docs/registry-docs/validating-images","docId":"registry-docs/validating-images","unlisted":false},{"type":"category","label":"Seeding a Registry","items":[{"type":"category","label":"Connected Environments","items":[{"type":"link","label":"Copying Images to a Registry","href":"/carbide-docs/docs/registry-docs/copying-images","docId":"registry-docs/copying-images","unlisted":false}],"collapsed":true,"collapsible":true},{"type":"category","label":"Airgapped Environments","items":[{"type":"link","label":"Downloading the Images","href":"/carbide-docs/docs/registry-docs/downloading-images","docId":"registry-docs/downloading-images","unlisted":false},{"type":"link","label":"Loading Images to a Registry","href":"/carbide-docs/docs/registry-docs/loading-images","docId":"registry-docs/loading-images","unlisted":false}],"collapsed":true,"collapsible":true}],"collapsed":true,"collapsible":true}],"collapsed":true,"collapsible":true},{"type":"link","label":"Helm Charts","href":"/carbide-docs/docs/registry-docs/carbide-charts","docId":"registry-docs/carbide-charts","unlisted":false},{"type":"category","label":"Configuration","items":[{"type":"link","label":"RKE2/K3s Configuration","href":"/carbide-docs/docs/registry-docs/configuration/kubernetes","docId":"registry-docs/configuration/kubernetes","unlisted":false},{"type":"link","label":"Rancher Manager Configuration","href":"/carbide-docs/docs/registry-docs/configuration/rancher","docId":"registry-docs/configuration/rancher","unlisted":false}],"collapsed":true,"collapsible":true},{"type":"link","label":"Enforcement","href":"/carbide-docs/docs/registry-docs/enforcement","docId":"registry-docs/enforcement","unlisted":false},{"type":"category","label":"Uninstall","items":[{"type":"link","label":"RKE2/K3s Uninstall","href":"/carbide-docs/docs/registry-docs/uninstall-kubernetes","docId":"registry-docs/uninstall-kubernetes","unlisted":false},{"type":"link","label":"Rancher Manager Uninstall","href":"/carbide-docs/docs/registry-docs/uninstall-rancher","docId":"registry-docs/uninstall-rancher","unlisted":false}],"collapsed":true,"collapsible":true}],"collapsible":true},{"type":"category","label":"STIGATRON","collapsed":false,"items":[{"type":"link","label":"Introduction","href":"/carbide-docs/docs/stigatron-docs/introduction","docId":"stigatron-docs/introduction","unlisted":false},{"type":"category","label":"Installation","items":[{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/stigatron-docs/prereqs","docId":"stigatron-docs/prereqs","unlisted":false},{"type":"link","label":"Installation","href":"/carbide-docs/docs/stigatron-docs/installation","docId":"stigatron-docs/installation","unlisted":false}],"collapsed":true,"collapsible":true},{"type":"category","label":"Using STIGATRON","items":[{"type":"link","label":"Creating STIGATRON Scans","href":"/carbide-docs/docs/stigatron-docs/create-scan","docId":"stigatron-docs/create-scan","unlisted":false},{"type":"link","label":"Using MITRE Heimdall","href":"/carbide-docs/docs/stigatron-docs/using-heimdall","docId":"stigatron-docs/using-heimdall","unlisted":false}],"collapsed":true,"collapsible":true},{"type":"link","label":"Uninstall","href":"/carbide-docs/docs/stigatron-docs/uninstall","docId":"stigatron-docs/uninstall","unlisted":false}],"collapsible":true},{"type":"category","label":"Airgapped Docs","collapsed":false,"items":[{"type":"link","label":"Introduction","href":"/carbide-docs/docs/airgapped-docs/introduction","docId":"airgapped-docs/introduction","unlisted":false},{"type":"category","label":"Installation","items":[{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/airgapped-docs/prereqs","docId":"airgapped-docs/prereqs","unlisted":false},{"type":"link","label":"Installation","href":"/carbide-docs/docs/airgapped-docs/installation","docId":"airgapped-docs/installation","unlisted":false}],"collapsed":true,"collapsible":true},{"type":"link","label":"Uninstall","href":"/carbide-docs/docs/airgapped-docs/uninstall","docId":"airgapped-docs/uninstall","unlisted":false}],"collapsible":true},{"type":"link","label":"Known Limitations & Caveats","href":"/carbide-docs/docs/known-limits","docId":"known-limits","unlisted":false},{"type":"link","label":"Feedback","href":"/carbide-docs/docs/feedback","docId":"feedback","unlisted":false}]},"docs":{"airgapped-docs/installation":{"id":"airgapped-docs/installation","title":"Installation","description":"Downstream Clusters","sidebar":"carbideSidebar"},"airgapped-docs/introduction":{"id":"airgapped-docs/introduction","title":"Introduction","description":"This page will walk through installation and usage of the Airgapped Docs component of Rancher Government Carbide.","sidebar":"carbideSidebar"},"airgapped-docs/prereqs":{"id":"airgapped-docs/prereqs","title":"Prerequisites","description":"In order to utilize Airgapped Docs, you will need the following prerequisites:","sidebar":"carbideSidebar"},"airgapped-docs/uninstall":{"id":"airgapped-docs/uninstall","title":"Uninstall","description":"Downstream Clusters","sidebar":"carbideSidebar"},"feedback":{"id":"feedback","title":"Feedback","description":"Feedback is critical to us to continue to improve our tools and help you with your mission.","sidebar":"carbideSidebar"},"intro":{"id":"intro","title":"Introduction","description":"Carbide is Rancher Government\'s hardened distribution of the SUSE Rancher product portfolio. Carbide is exclusively offered to our US Government and partnering customers that value security above all else.","sidebar":"carbideSidebar"},"known-limits":{"id":"known-limits","title":"Known Limitations & Caveats","description":"While we continue to improve Carbide from the feedback and requirements from our customers, we strive to remain agile in our development. With that, below are the known limitations and caveats with the Secured Registry. We intend to work diligently to address these as Carbide continues to evolve.","sidebar":"carbideSidebar"},"registry-docs/architecture":{"id":"registry-docs/architecture","title":"Architecture","description":"This page will walk through the architecture of the Carbide Secured Registry (CSR), including both of the pipelines related to the CSR, as well as typical usage of the images.","sidebar":"carbideSidebar"},"registry-docs/carbide-charts":{"id":"registry-docs/carbide-charts","title":"Carbide Helm Charts","description":"Along with our secured images, we also provide helm charts through the CSR to install various components of the Carbide product suite. These charts include the necessary components to run STIGATRON, an airgapped copy of all Rancher product docs, and a custom build of Rancher with our white-labeling.","sidebar":"carbideSidebar"},"registry-docs/configuration/kubernetes":{"id":"registry-docs/configuration/kubernetes","title":"RKE2/K3s Configuration","description":"This page will walk you through how to configure Rancher Kubernetes distributions (K3s, RKE2) to utilize the secured images instead of the upstream Docker hub images.","sidebar":"carbideSidebar"},"registry-docs/configuration/rancher":{"id":"registry-docs/configuration/rancher","title":"Rancher Manager Configuration","description":"This page will walk you through how to configure Rancher Manager to use images from the CSR instead of the upstream Docker Hub images. This will apply to both its own components and downstream Rancher Kubernetes clusters (RKE2/K3s).","sidebar":"carbideSidebar"},"registry-docs/copying-images":{"id":"registry-docs/copying-images","title":"Copying Images to a Registry","description":"This page will walk you through copying our secured images into your own registry for later use.","sidebar":"carbideSidebar"},"registry-docs/downloading-images":{"id":"registry-docs/downloading-images","title":"Downloading the Images","description":"This page will walk you through locally downloading our secured images from our hardened registry, as well as packaging them to move over an airgap into your registry.","sidebar":"carbideSidebar"},"registry-docs/enforcement":{"id":"registry-docs/enforcement","title":"Enforcement","description":"This page will walk you through configuring a few example policy enforcement engines to validate your cluster images against our public key. This should ensure only the images from our hardened registry are allowed to run.","sidebar":"carbideSidebar"},"registry-docs/introduction":{"id":"registry-docs/introduction","title":"Introduction","description":"This page will walk through benefits of the hardened registry and what exactly the hardened registry provides.","sidebar":"carbideSidebar"},"registry-docs/loading-images":{"id":"registry-docs/loading-images","title":"Loading Images to a Registry","description":"This page will walk you through seeding your registry with downloaded images from the CSR for all Rancher components.","sidebar":"carbideSidebar"},"registry-docs/prereqs":{"id":"registry-docs/prereqs","title":"Prerequisites","description":"Below are all the things you need to get started with the Hardened Container Registry. As we improve and streamline the process, this list could evolve.","sidebar":"carbideSidebar"},"registry-docs/release-cadence":{"id":"registry-docs/release-cadence","title":"Release Cadence","description":"This page will walk through how the pipelines are currently configured to execute, and future plans.","sidebar":"carbideSidebar"},"registry-docs/uninstall-kubernetes":{"id":"registry-docs/uninstall-kubernetes","title":"RKE2/K3s Uninstall","description":"K3s","sidebar":"carbideSidebar"},"registry-docs/uninstall-rancher":{"id":"registry-docs/uninstall-rancher","title":"Rancher Manager Uninstall","description":"This page will walk you through how to uninstall Carbide Registry Images from Rancher Manager both for its own components and downstream Rancher Kubernetes clusters (RKE2/K3s).","sidebar":"carbideSidebar"},"registry-docs/validating-images":{"id":"registry-docs/validating-images","title":"Validating Images","description":"This will guide you through validating the signatures and attestations of each image in the secured registry, as well as how to download artifacts about the image (Software Bill of Materials, Vulnerability Scan, Cryptographic Signature, etc...).","sidebar":"carbideSidebar"},"stigatron-docs/create-scan":{"id":"stigatron-docs/create-scan","title":"Creating STIGATRON Scans","description":"1. After installing STIGATRON on your downstream cluster, when you navigate to that downstream cluster, you should see STIGATRON on the left navigation menu. Click there.","sidebar":"carbideSidebar"},"stigatron-docs/installation":{"id":"stigatron-docs/installation","title":"Installation","description":"Local Cluster","sidebar":"carbideSidebar"},"stigatron-docs/introduction":{"id":"stigatron-docs/introduction","title":"Introduction","description":"This section will walk through installation and usage of the STIGATRON component of Rancher Government Carbide.","sidebar":"carbideSidebar"},"stigatron-docs/prereqs":{"id":"stigatron-docs/prereqs","title":"Prerequisites","description":"In order to utilize STIGATRON, you will need the following prerequisites:","sidebar":"carbideSidebar"},"stigatron-docs/uninstall":{"id":"stigatron-docs/uninstall","title":"Uninstall","description":"Local Cluster","sidebar":"carbideSidebar"},"stigatron-docs/using-heimdall":{"id":"stigatron-docs/using-heimdall","title":"Using MITRE Heimdall","description":"1. To export scan results to common formats, select the Export button in the upper-left.","sidebar":"carbideSidebar"}}}}')}}]); \ No newline at end of file diff --git a/assets/js/c0c2b7bb.cda266e9.js b/assets/js/c0c2b7bb.cda266e9.js new file mode 100644 index 0000000..94d827c --- /dev/null +++ b/assets/js/c0c2b7bb.cda266e9.js @@ -0,0 +1 @@ +"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[132],{6131:e=>{e.exports=JSON.parse('{"version":{"pluginId":"default","version":"current","label":"Next","banner":null,"badge":false,"noIndex":false,"className":"docs-version-current","isLast":true,"docsSidebars":{"tutorialSidebar":[{"type":"link","label":"Introduction","href":"/carbide-docs/docs/intro","docId":"intro","unlisted":false},{"type":"category","label":"Carbide Image Registry","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"Architecture","href":"/carbide-docs/docs/registry-docs/architecture","docId":"registry-docs/architecture","unlisted":false},{"type":"link","label":"Carbide Helm Charts","href":"/carbide-docs/docs/registry-docs/carbide-charts","docId":"registry-docs/carbide-charts","unlisted":false},{"type":"category","label":"configuration","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"RKE2/K3s Configuration","href":"/carbide-docs/docs/registry-docs/configuration/kubernetes","docId":"registry-docs/configuration/kubernetes","unlisted":false},{"type":"link","label":"Rancher Configuration","href":"/carbide-docs/docs/registry-docs/configuration/rancher","docId":"registry-docs/configuration/rancher","unlisted":false}]},{"type":"link","label":"Copying Images to a Registry","href":"/carbide-docs/docs/registry-docs/copying-images","docId":"registry-docs/copying-images","unlisted":false},{"type":"link","label":"Downloading the Images","href":"/carbide-docs/docs/registry-docs/downloading-images","docId":"registry-docs/downloading-images","unlisted":false},{"type":"link","label":"Enforcement","href":"/carbide-docs/docs/registry-docs/enforcement","docId":"registry-docs/enforcement","unlisted":false},{"type":"link","label":"Introduction","href":"/carbide-docs/docs/registry-docs/introduction","docId":"registry-docs/introduction","unlisted":false},{"type":"link","label":"Loading Images to a Registry","href":"/carbide-docs/docs/registry-docs/loading-images","docId":"registry-docs/loading-images","unlisted":false},{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/registry-docs/prereqs","docId":"registry-docs/prereqs","unlisted":false},{"type":"link","label":"Release Cadence","href":"/carbide-docs/docs/registry-docs/release-cadence","docId":"registry-docs/release-cadence","unlisted":false},{"type":"link","label":"RKE2/K3s Uninstall","href":"/carbide-docs/docs/registry-docs/uninstall-kubernetes","docId":"registry-docs/uninstall-kubernetes","unlisted":false},{"type":"link","label":"Rancher Uninstall","href":"/carbide-docs/docs/registry-docs/uninstall-rancher","docId":"registry-docs/uninstall-rancher","unlisted":false},{"type":"link","label":"Validating Images","href":"/carbide-docs/docs/registry-docs/validating-images","docId":"registry-docs/validating-images","unlisted":false}],"href":"/carbide-docs/docs/category/carbide-image-registry"},{"type":"category","label":"Airgapped Docs","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"Installation","href":"/carbide-docs/docs/airgapped-docs/installation","docId":"airgapped-docs/installation","unlisted":false},{"type":"link","label":"Introduction","href":"/carbide-docs/docs/airgapped-docs/introduction","docId":"airgapped-docs/introduction","unlisted":false},{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/airgapped-docs/prereqs","docId":"airgapped-docs/prereqs","unlisted":false},{"type":"link","label":"Uninstall","href":"/carbide-docs/docs/airgapped-docs/uninstall","docId":"airgapped-docs/uninstall","unlisted":false}],"href":"/carbide-docs/docs/category/airgapped-docs"},{"type":"category","label":"STIGATRON Security Operator","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"Creating STIGATRON Scans","href":"/carbide-docs/docs/stigatron-docs/create-scan","docId":"stigatron-docs/create-scan","unlisted":false},{"type":"link","label":"Installation","href":"/carbide-docs/docs/stigatron-docs/installation","docId":"stigatron-docs/installation","unlisted":false},{"type":"link","label":"Introduction","href":"/carbide-docs/docs/stigatron-docs/introduction","docId":"stigatron-docs/introduction","unlisted":false},{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/stigatron-docs/prereqs","docId":"stigatron-docs/prereqs","unlisted":false},{"type":"link","label":"Uninstall","href":"/carbide-docs/docs/stigatron-docs/uninstall","docId":"stigatron-docs/uninstall","unlisted":false},{"type":"link","label":"Using MITRE Heimdall","href":"/carbide-docs/docs/stigatron-docs/using-heimdall","docId":"stigatron-docs/using-heimdall","unlisted":false}],"href":"/carbide-docs/docs/category/stigatron-security-operator"},{"type":"link","label":"Feedback","href":"/carbide-docs/docs/feedback","docId":"feedback","unlisted":false},{"type":"link","label":"Known Limitations & Caveats","href":"/carbide-docs/docs/known-limits","docId":"known-limits","unlisted":false}],"carbideSidebar":[{"type":"link","label":"Introduction","href":"/carbide-docs/docs/intro","docId":"intro","unlisted":false},{"type":"category","label":"Carbide Secured Registry (CSR)","collapsed":false,"items":[{"type":"link","label":"Introduction","href":"/carbide-docs/docs/registry-docs/introduction","docId":"registry-docs/introduction","unlisted":false},{"type":"link","label":"Architecture","href":"/carbide-docs/docs/registry-docs/architecture","docId":"registry-docs/architecture","unlisted":false},{"type":"link","label":"Release Cadence","href":"/carbide-docs/docs/registry-docs/release-cadence","docId":"registry-docs/release-cadence","unlisted":false},{"type":"category","label":"Installation","items":[{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/registry-docs/prereqs","docId":"registry-docs/prereqs","unlisted":false},{"type":"link","label":"Validating Images","href":"/carbide-docs/docs/registry-docs/validating-images","docId":"registry-docs/validating-images","unlisted":false},{"type":"category","label":"Seeding a Registry","items":[{"type":"category","label":"Connected Environments","items":[{"type":"link","label":"Copying Images to a Registry","href":"/carbide-docs/docs/registry-docs/copying-images","docId":"registry-docs/copying-images","unlisted":false}],"collapsed":true,"collapsible":true},{"type":"category","label":"Airgapped Environments","items":[{"type":"link","label":"Downloading the Images","href":"/carbide-docs/docs/registry-docs/downloading-images","docId":"registry-docs/downloading-images","unlisted":false},{"type":"link","label":"Loading Images to a Registry","href":"/carbide-docs/docs/registry-docs/loading-images","docId":"registry-docs/loading-images","unlisted":false}],"collapsed":true,"collapsible":true}],"collapsed":true,"collapsible":true}],"collapsed":true,"collapsible":true},{"type":"link","label":"Helm Charts","href":"/carbide-docs/docs/registry-docs/carbide-charts","docId":"registry-docs/carbide-charts","unlisted":false},{"type":"category","label":"Configuration","items":[{"type":"link","label":"RKE2/K3s Configuration","href":"/carbide-docs/docs/registry-docs/configuration/kubernetes","docId":"registry-docs/configuration/kubernetes","unlisted":false},{"type":"link","label":"Rancher Configuration","href":"/carbide-docs/docs/registry-docs/configuration/rancher","docId":"registry-docs/configuration/rancher","unlisted":false}],"collapsed":true,"collapsible":true},{"type":"link","label":"Enforcement","href":"/carbide-docs/docs/registry-docs/enforcement","docId":"registry-docs/enforcement","unlisted":false},{"type":"category","label":"Uninstall","items":[{"type":"link","label":"RKE2/K3s Uninstall","href":"/carbide-docs/docs/registry-docs/uninstall-kubernetes","docId":"registry-docs/uninstall-kubernetes","unlisted":false},{"type":"link","label":"Rancher Uninstall","href":"/carbide-docs/docs/registry-docs/uninstall-rancher","docId":"registry-docs/uninstall-rancher","unlisted":false}],"collapsed":true,"collapsible":true}],"collapsible":true},{"type":"category","label":"STIGATRON","collapsed":false,"items":[{"type":"link","label":"Introduction","href":"/carbide-docs/docs/stigatron-docs/introduction","docId":"stigatron-docs/introduction","unlisted":false},{"type":"category","label":"Installation","items":[{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/stigatron-docs/prereqs","docId":"stigatron-docs/prereqs","unlisted":false},{"type":"link","label":"Installation","href":"/carbide-docs/docs/stigatron-docs/installation","docId":"stigatron-docs/installation","unlisted":false}],"collapsed":true,"collapsible":true},{"type":"category","label":"Using STIGATRON","items":[{"type":"link","label":"Creating STIGATRON Scans","href":"/carbide-docs/docs/stigatron-docs/create-scan","docId":"stigatron-docs/create-scan","unlisted":false},{"type":"link","label":"Using MITRE Heimdall","href":"/carbide-docs/docs/stigatron-docs/using-heimdall","docId":"stigatron-docs/using-heimdall","unlisted":false}],"collapsed":true,"collapsible":true},{"type":"link","label":"Uninstall","href":"/carbide-docs/docs/stigatron-docs/uninstall","docId":"stigatron-docs/uninstall","unlisted":false}],"collapsible":true},{"type":"category","label":"Airgapped Docs","collapsed":false,"items":[{"type":"link","label":"Introduction","href":"/carbide-docs/docs/airgapped-docs/introduction","docId":"airgapped-docs/introduction","unlisted":false},{"type":"category","label":"Installation","items":[{"type":"link","label":"Prerequisites","href":"/carbide-docs/docs/airgapped-docs/prereqs","docId":"airgapped-docs/prereqs","unlisted":false},{"type":"link","label":"Installation","href":"/carbide-docs/docs/airgapped-docs/installation","docId":"airgapped-docs/installation","unlisted":false}],"collapsed":true,"collapsible":true},{"type":"link","label":"Uninstall","href":"/carbide-docs/docs/airgapped-docs/uninstall","docId":"airgapped-docs/uninstall","unlisted":false}],"collapsible":true},{"type":"link","label":"Known Limitations & Caveats","href":"/carbide-docs/docs/known-limits","docId":"known-limits","unlisted":false},{"type":"link","label":"Feedback","href":"/carbide-docs/docs/feedback","docId":"feedback","unlisted":false}]},"docs":{"airgapped-docs/installation":{"id":"airgapped-docs/installation","title":"Installation","description":"Downstream Clusters","sidebar":"carbideSidebar"},"airgapped-docs/introduction":{"id":"airgapped-docs/introduction","title":"Introduction","description":"This page will walk through installation and usage of the Airgapped Docs component of Rancher Government Carbide.","sidebar":"carbideSidebar"},"airgapped-docs/prereqs":{"id":"airgapped-docs/prereqs","title":"Prerequisites","description":"In order to utilize Airgapped Docs, you will need the following prerequisites:","sidebar":"carbideSidebar"},"airgapped-docs/uninstall":{"id":"airgapped-docs/uninstall","title":"Uninstall","description":"Downstream Clusters","sidebar":"carbideSidebar"},"feedback":{"id":"feedback","title":"Feedback","description":"Feedback is critical to us to continue to improve our tools and help you with your mission.","sidebar":"carbideSidebar"},"intro":{"id":"intro","title":"Introduction","description":"Carbide is Rancher Government\'s hardened distribution of the SUSE Rancher product portfolio. Carbide is exclusively offered to our US Government and partnering customers that value security above all else.","sidebar":"carbideSidebar"},"known-limits":{"id":"known-limits","title":"Known Limitations & Caveats","description":"While we continue to improve Carbide from the feedback and requirements from our customers, we strive to remain agile in our development. With that, below are the known limitations and caveats with the Secured Registry. We intend to work diligently to address these as Carbide continues to evolve.","sidebar":"carbideSidebar"},"registry-docs/architecture":{"id":"registry-docs/architecture","title":"Architecture","description":"This page will walk through the architecture of the Carbide Secured Registry (CSR), including both of the pipelines related to the CSR, as well as typical usage of the images.","sidebar":"carbideSidebar"},"registry-docs/carbide-charts":{"id":"registry-docs/carbide-charts","title":"Carbide Helm Charts","description":"Along with our secured images, we also provide helm charts through the CSR to install various components of the Carbide product suite. These charts include the necessary components to run STIGATRON, an airgapped copy of all Rancher product docs, and a custom build of Rancher with our white-labeling.","sidebar":"carbideSidebar"},"registry-docs/configuration/kubernetes":{"id":"registry-docs/configuration/kubernetes","title":"RKE2/K3s Configuration","description":"This page will walk you through how to configure Rancher Kubernetes distributions (K3s, RKE2) to utilize the secured images instead of the upstream Docker hub images.","sidebar":"carbideSidebar"},"registry-docs/configuration/rancher":{"id":"registry-docs/configuration/rancher","title":"Rancher Configuration","description":"This page will walk you through how to configure Rancher to use images from the CSR instead of the upstream Docker Hub images. This will apply to both its own components and downstream Rancher Kubernetes clusters (RKE2/K3s).","sidebar":"carbideSidebar"},"registry-docs/copying-images":{"id":"registry-docs/copying-images","title":"Copying Images to a Registry","description":"This page will walk you through copying our secured images into your own registry for later use.","sidebar":"carbideSidebar"},"registry-docs/downloading-images":{"id":"registry-docs/downloading-images","title":"Downloading the Images","description":"This page will walk you through locally downloading our secured images from our hardened registry, as well as packaging them to move over an airgap into your registry.","sidebar":"carbideSidebar"},"registry-docs/enforcement":{"id":"registry-docs/enforcement","title":"Enforcement","description":"This page will walk you through configuring a few example policy enforcement engines to validate your cluster images against our public key. This should ensure only the images from our hardened registry are allowed to run.","sidebar":"carbideSidebar"},"registry-docs/introduction":{"id":"registry-docs/introduction","title":"Introduction","description":"This page will walk through benefits of the hardened registry and what exactly the hardened registry provides.","sidebar":"carbideSidebar"},"registry-docs/loading-images":{"id":"registry-docs/loading-images","title":"Loading Images to a Registry","description":"This page will walk you through seeding your registry with downloaded images from the CSR for all Rancher components.","sidebar":"carbideSidebar"},"registry-docs/prereqs":{"id":"registry-docs/prereqs","title":"Prerequisites","description":"Below are all the things you need to get started with the Hardened Container Registry. As we improve and streamline the process, this list could evolve.","sidebar":"carbideSidebar"},"registry-docs/release-cadence":{"id":"registry-docs/release-cadence","title":"Release Cadence","description":"This page will walk through how the pipelines are currently configured to execute, and future plans.","sidebar":"carbideSidebar"},"registry-docs/uninstall-kubernetes":{"id":"registry-docs/uninstall-kubernetes","title":"RKE2/K3s Uninstall","description":"K3s","sidebar":"carbideSidebar"},"registry-docs/uninstall-rancher":{"id":"registry-docs/uninstall-rancher","title":"Rancher Uninstall","description":"This page will walk you through how to uninstall Carbide Registry Images from Rancher, both for its own components and downstream Rancher Kubernetes clusters (RKE2/K3s).","sidebar":"carbideSidebar"},"registry-docs/validating-images":{"id":"registry-docs/validating-images","title":"Validating Images","description":"This will guide you through validating the signatures and attestations of each image in the secured registry, as well as how to download artifacts about the image (Software Bill of Materials, Vulnerability Scan, Cryptographic Signature, etc...).","sidebar":"carbideSidebar"},"stigatron-docs/create-scan":{"id":"stigatron-docs/create-scan","title":"Creating STIGATRON Scans","description":"1. After installing STIGATRON on your downstream cluster, when you navigate to that downstream cluster, you should see STIGATRON on the left navigation menu. Click there.","sidebar":"carbideSidebar"},"stigatron-docs/installation":{"id":"stigatron-docs/installation","title":"Installation","description":"Local Cluster","sidebar":"carbideSidebar"},"stigatron-docs/introduction":{"id":"stigatron-docs/introduction","title":"Introduction","description":"This section will walk through installation and usage of the STIGATRON component of Rancher Government Carbide.","sidebar":"carbideSidebar"},"stigatron-docs/prereqs":{"id":"stigatron-docs/prereqs","title":"Prerequisites","description":"In order to utilize STIGATRON, you will need the following prerequisites:","sidebar":"carbideSidebar"},"stigatron-docs/uninstall":{"id":"stigatron-docs/uninstall","title":"Uninstall","description":"Local Cluster","sidebar":"carbideSidebar"},"stigatron-docs/using-heimdall":{"id":"stigatron-docs/using-heimdall","title":"Using MITRE Heimdall","description":"1. To export scan results to common formats, select the Export button in the upper-left.","sidebar":"carbideSidebar"}}}}')}}]); \ No newline at end of file diff --git a/assets/js/e675c224.9efd144f.js b/assets/js/e675c224.9efd144f.js deleted file mode 100644 index 031144c..0000000 --- a/assets/js/e675c224.9efd144f.js +++ /dev/null @@ -1 +0,0 @@ -"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[875],{4167:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>o,contentTitle:()=>a,default:()=>d,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var n=t(4848),i=t(8453);const s={},a="Rancher Manager Configuration",l={id:"registry-docs/configuration/rancher",title:"Rancher Manager Configuration",description:"This page will walk you through how to configure Rancher Manager to use images from the CSR instead of the upstream Docker Hub images. This will apply to both its own components and downstream Rancher Kubernetes clusters (RKE2/K3s).",source:"@site/docs/registry-docs/configuration/rancher.md",sourceDirName:"registry-docs/configuration",slug:"/registry-docs/configuration/rancher",permalink:"/carbide-docs/docs/registry-docs/configuration/rancher",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/configuration/rancher.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"RKE2/K3s Configuration",permalink:"/carbide-docs/docs/registry-docs/configuration/kubernetes"},next:{title:"Enforcement",permalink:"/carbide-docs/docs/registry-docs/enforcement"}},o={},c=[{value:"Compatibility Matrix",id:"compatibility-matrix",level:2},{value:"Preliminary Setup",id:"preliminary-setup",level:3},{value:"Configuring Cert Manager",id:"configuring-cert-manager",level:4},{value:"Registry Auth Strategies",id:"registry-auth-strategies",level:2},{value:"Global Registry (Rancher)",id:"global-registry-rancher",level:3},{value:"Existing Rancher Installations",id:"existing-rancher-installations",level:4},{value:"Setting a Private Registry with No Credentials as the Default Registry",id:"setting-a-private-registry-with-no-credentials-as-the-default-registry",level:5},{value:"Setting a Private Registry with Credentials when Deploying a Cluster",id:"setting-a-private-registry-with-credentials-when-deploying-a-cluster",level:5},{value:"New Rancher Installations",id:"new-rancher-installations",level:4},{value:"Authenticated Registry (Manual registries.yaml)",id:"authenticated-registry-manual-registriesyaml",level:3}];function h(e){const r={a:"a",blockquote:"blockquote",code:"code",h1:"h1",h2:"h2",h3:"h3",h4:"h4",h5:"h5",header:"header",li:"li",ol:"ol",p:"p",pre:"pre",strong:"strong",table:"table",tbody:"tbody",td:"td",th:"th",thead:"thead",tr:"tr",...(0,i.R)(),...e.components};return(0,n.jsxs)(n.Fragment,{children:[(0,n.jsx)(r.header,{children:(0,n.jsx)(r.h1,{id:"rancher-manager-configuration",children:"Rancher Manager Configuration"})}),"\n",(0,n.jsx)(r.p,{children:"This page will walk you through how to configure Rancher Manager to use images from the CSR instead of the upstream Docker Hub images. This will apply to both its own components and downstream Rancher Kubernetes clusters (RKE2/K3s)."}),"\n",(0,n.jsxs)(r.blockquote,{children:["\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"NOTE"}),": Due to current limitations of cloud providers, this project will not work for managing Cloud Provider clusters (AKS, EKS, GKE). If you're currently using Rancher to manage those workloads, do not use this project. We intend to improve this experience in the future."]}),"\n"]}),"\n",(0,n.jsx)(r.h2,{id:"compatibility-matrix",children:"Compatibility Matrix"}),"\n",(0,n.jsxs)(r.table,{children:[(0,n.jsx)(r.thead,{children:(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.th,{children:"Infra"}),(0,n.jsx)(r.th,{children:"Provisioner"}),(0,n.jsx)(r.th,{children:"Registry Auth Strategy"}),(0,n.jsx)(r.th,{children:"Test Status"})]})}),(0,n.jsxs)(r.tbody,{children:[(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Any"}),(0,n.jsx)(r.td,{children:"Rancher (Cloud provisioner)"}),(0,n.jsx)(r.td,{children:"Global Registry (Rancher)"}),(0,n.jsx)(r.td,{children:"Validated"})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Any"}),(0,n.jsx)(r.td,{children:"Rancher (Custom provisioner)"}),(0,n.jsx)(r.td,{children:"Authenticated Registry (Manual registries.yaml)"}),(0,n.jsx)(r.td,{children:"Validated"})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Any"}),(0,n.jsx)(r.td,{children:"Self Installation"}),(0,n.jsx)(r.td,{children:"Global Registry (Rancher)"}),(0,n.jsx)(r.td,{children:"Validated"})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Any"}),(0,n.jsx)(r.td,{children:"Imported Cluster"}),(0,n.jsx)(r.td,{children:"Unknown"}),(0,n.jsx)(r.td,{})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"AWS-EKS"}),(0,n.jsx)(r.td,{children:"Rancher"}),(0,n.jsx)(r.td,{children:"ECR (public or private)"}),(0,n.jsx)(r.td,{})]})]})]}),"\n",(0,n.jsx)(r.h3,{id:"preliminary-setup",children:"Preliminary Setup"}),"\n",(0,n.jsx)(r.p,{children:"As Rancher has a dependency on Cert Manager, you'll need to update/install Cert Manager with the images provided by the CSR."}),"\n",(0,n.jsxs)(r.p,{children:["If you're following Rancher's ",(0,n.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.6/en/installation/install-rancher-on-k8s/#4-install-cert-manager",children:"Connected"})," installation instructions, you'll need to follow the next steps to use the Carbide Secured Registry (CSR) images for cert-manager."]}),"\n",(0,n.jsxs)(r.p,{children:["If using the ",(0,n.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.6/en/installation/other-installation-methods/air-gap/install-rancher/#1-add-the-cert-manager-repo",children:"Airgapped"})," installation instructions, make sure you've pulled the images to your local/airgapped registry."]}),"\n",(0,n.jsx)(r.h4,{id:"configuring-cert-manager",children:"Configuring Cert Manager"}),"\n",(0,n.jsxs)(r.p,{children:["Follow Rancher's ",(0,n.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.6/en/installation/install-rancher-on-k8s/#4-install-cert-manager",children:"Connected"})," installation instructions, but using the following steps instead of the ",(0,n.jsx)(r.code,{children:"helm install"})," command from the docs."]}),"\n",(0,n.jsxs)(r.p,{children:["After adding the Cert Manager repo and installing the CRDs, use the following to create a temporary ",(0,n.jsx)(r.code,{children:"values.yaml"})," for your chart, subsituting your registry domain:"]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{children:"cat < /tmp/values.yaml\nimage:\n registry: \n repository: jetstack/cert-manager-controller\n\nwebhook:\n image:\n registry: \n repository: jetstack/cert-manager-webhook\n\ncainjector:\n image:\n registry: \n repository: jetstack/cert-manager-cainjector\n\nstartupapicheck:\n image:\n registry: \n repository: jetstack/cert-manager-startupapicheck\n\nacmesolver:\n image:\n registry: \n repository: jetstack/cert-manager-acmesolver\nEOT\n"})}),"\n",(0,n.jsxs)(r.p,{children:["Then use the following ",(0,n.jsx)(r.code,{children:"helm install"})," command to use the images:"]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{children:"helm install cert-manager jetstack/cert-manager \\\n --namespace cert-manager \\\n --create-namespace \\\n --version v1.14.4 \\\n -f /tmp/values.yaml\n"})}),"\n",(0,n.jsx)(r.h2,{id:"registry-auth-strategies",children:"Registry Auth Strategies"}),"\n",(0,n.jsx)(r.h3,{id:"global-registry-rancher",children:"Global Registry (Rancher)"}),"\n",(0,n.jsx)(r.h4,{id:"existing-rancher-installations",children:"Existing Rancher Installations"}),"\n",(0,n.jsx)(r.h5,{id:"setting-a-private-registry-with-no-credentials-as-the-default-registry",children:"Setting a Private Registry with No Credentials as the Default Registry"}),"\n",(0,n.jsxs)(r.ol,{children:["\n",(0,n.jsx)(r.li,{children:"Log into Rancher and configure the default administrator password."}),"\n",(0,n.jsxs)(r.li,{children:["Click ",(0,n.jsx)(r.strong,{children:"\u2630 > Global Settings"}),"."]}),"\n",(0,n.jsxs)(r.li,{children:["Go to the setting called ",(0,n.jsx)(r.code,{children:"system-default-registry"})," and choose ",(0,n.jsx)(r.strong,{children:"\u22ee > Edit Setting"}),"."]}),"\n",(0,n.jsxs)(r.li,{children:["Change the value to your registry (e.g. ",(0,n.jsx)(r.code,{children:"registry.yourdomain.com:port"}),"). Do not prefix the registry with ",(0,n.jsx)(r.code,{children:"http://"})," or ",(0,n.jsx)(r.code,{children:"https://"}),"."]}),"\n"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Result:"})," Rancher will use your private registry to pull system images."]}),"\n",(0,n.jsx)(r.h5,{id:"setting-a-private-registry-with-credentials-when-deploying-a-cluster",children:"Setting a Private Registry with Credentials when Deploying a Cluster"}),"\n",(0,n.jsx)(r.p,{children:"You can follow these steps to configure a private registry when you create a cluster:"}),"\n",(0,n.jsxs)(r.ol,{children:["\n",(0,n.jsxs)(r.li,{children:["Click ",(0,n.jsx)(r.strong,{children:"\u2630 > Cluster Management"}),"."]}),"\n",(0,n.jsxs)(r.li,{children:["On the ",(0,n.jsx)(r.strong,{children:"Clusters"})," page, click ",(0,n.jsx)(r.strong,{children:"Create"}),"."]}),"\n",(0,n.jsx)(r.li,{children:"Choose a cluster type."}),"\n",(0,n.jsxs)(r.li,{children:["In the ",(0,n.jsx)(r.strong,{children:"Cluster Configuration"})," go to the ",(0,n.jsx)(r.strong,{children:"Registries"})," tab and click ",(0,n.jsx)(r.strong,{children:"Pull images for Rancher from a private registry"}),"."]}),"\n",(0,n.jsx)(r.li,{children:"Enter the registry hostname and credentials."}),"\n",(0,n.jsxs)(r.li,{children:["Click ",(0,n.jsx)(r.strong,{children:"Create"}),"."]}),"\n"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Result:"})," The new cluster will be able to pull images from the private registry."]}),"\n",(0,n.jsx)(r.h4,{id:"new-rancher-installations",children:"New Rancher Installations"}),"\n",(0,n.jsxs)(r.p,{children:["Follow Rancher's ",(0,n.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.5/en/installation/install-rancher-on-k8s",children:"Installation Guide"}),", making sure to use the carbide chart obtained in the previous ",(0,n.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/carbide-charts",children:"helm chart"})," section."]}),"\n",(0,n.jsx)(r.p,{children:"When installing Rancher, to utilize the private registry, you'll need to set the following values in your helm values:"}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:"helm install rancher carbide-charts/rancher \\\n --namespace cattle-system \\\n --set hostname=rancher.my.org \\\n --set replicas=3 \\\n --set rancherImage=/rancher/rancher\n --set systemDefaultRegistry=\n"})}),"\n",(0,n.jsxs)(r.blockquote,{children:["\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"NOTE:"})," This requires configuring RKE2/K3s ",(0,n.jsx)(r.code,{children:"registries.yaml"})," to work. See the ",(0,n.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/configuration/kubernetes",children:"RKE2/K3s configuration"})," section for more details."]}),"\n"]}),"\n",(0,n.jsx)(r.h3,{id:"authenticated-registry-manual-registriesyaml",children:"Authenticated Registry (Manual registries.yaml)"}),"\n",(0,n.jsxs)(r.p,{children:["See the ",(0,n.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/configuration/kubernetes",children:"RKE2/K3s configuration"})," section for more details."]})]})}function d(e={}){const{wrapper:r}={...(0,i.R)(),...e.components};return r?(0,n.jsx)(r,{...e,children:(0,n.jsx)(h,{...e})}):h(e)}},8453:(e,r,t)=>{t.d(r,{R:()=>a,x:()=>l});var n=t(6540);const i={},s=n.createContext(i);function a(e){const r=n.useContext(s);return n.useMemo((function(){return"function"==typeof e?e(r):{...r,...e}}),[r,e])}function l(e){let r;return r=e.disableParentContext?"function"==typeof e.components?e.components(i):e.components||i:a(e.components),n.createElement(s.Provider,{value:r},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/e675c224.ff1aa0ba.js b/assets/js/e675c224.ff1aa0ba.js new file mode 100644 index 0000000..6a96178 --- /dev/null +++ b/assets/js/e675c224.ff1aa0ba.js @@ -0,0 +1 @@ +"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[875],{4167:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>c,contentTitle:()=>a,default:()=>h,frontMatter:()=>s,metadata:()=>l,toc:()=>o});var n=t(4848),i=t(8453);const s={},a="Rancher Configuration",l={id:"registry-docs/configuration/rancher",title:"Rancher Configuration",description:"This page will walk you through how to configure Rancher to use images from the CSR instead of the upstream Docker Hub images. This will apply to both its own components and downstream Rancher Kubernetes clusters (RKE2/K3s).",source:"@site/docs/registry-docs/configuration/rancher.md",sourceDirName:"registry-docs/configuration",slug:"/registry-docs/configuration/rancher",permalink:"/carbide-docs/docs/registry-docs/configuration/rancher",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/configuration/rancher.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"RKE2/K3s Configuration",permalink:"/carbide-docs/docs/registry-docs/configuration/kubernetes"},next:{title:"Enforcement",permalink:"/carbide-docs/docs/registry-docs/enforcement"}},c={},o=[{value:"Compatibility Matrix",id:"compatibility-matrix",level:2},{value:"Preliminary Setup",id:"preliminary-setup",level:3},{value:"Configuring Cert Manager",id:"configuring-cert-manager",level:4},{value:"Registry Auth Strategies",id:"registry-auth-strategies",level:2},{value:"Global Registry (Rancher)",id:"global-registry-rancher",level:3},{value:"Existing Rancher Installations",id:"existing-rancher-installations",level:4},{value:"Setting a Private Registry with No Credentials as the Default Registry",id:"setting-a-private-registry-with-no-credentials-as-the-default-registry",level:5},{value:"Setting a Private Registry with Credentials when Deploying a Cluster",id:"setting-a-private-registry-with-credentials-when-deploying-a-cluster",level:5},{value:"New Rancher Installations",id:"new-rancher-installations",level:4},{value:"Authenticated Registry (Manual registries.yaml)",id:"authenticated-registry-manual-registriesyaml",level:3}];function d(e){const r={a:"a",blockquote:"blockquote",code:"code",h1:"h1",h2:"h2",h3:"h3",h4:"h4",h5:"h5",header:"header",li:"li",ol:"ol",p:"p",pre:"pre",strong:"strong",table:"table",tbody:"tbody",td:"td",th:"th",thead:"thead",tr:"tr",...(0,i.R)(),...e.components};return(0,n.jsxs)(n.Fragment,{children:[(0,n.jsx)(r.header,{children:(0,n.jsx)(r.h1,{id:"rancher-configuration",children:"Rancher Configuration"})}),"\n",(0,n.jsx)(r.p,{children:"This page will walk you through how to configure Rancher to use images from the CSR instead of the upstream Docker Hub images. This will apply to both its own components and downstream Rancher Kubernetes clusters (RKE2/K3s)."}),"\n",(0,n.jsxs)(r.blockquote,{children:["\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"NOTE"}),": Due to current limitations of cloud providers, this project will not work for managing Cloud Provider clusters (AKS, EKS, GKE). If you're currently using Rancher to manage those workloads, do not use this project. We intend to improve this experience in the future."]}),"\n"]}),"\n",(0,n.jsx)(r.h2,{id:"compatibility-matrix",children:"Compatibility Matrix"}),"\n",(0,n.jsxs)(r.table,{children:[(0,n.jsx)(r.thead,{children:(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.th,{children:"Infra"}),(0,n.jsx)(r.th,{children:"Provisioner"}),(0,n.jsx)(r.th,{children:"Registry Auth Strategy"}),(0,n.jsx)(r.th,{children:"Test Status"})]})}),(0,n.jsxs)(r.tbody,{children:[(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Any"}),(0,n.jsx)(r.td,{children:"Rancher (Cloud provisioner)"}),(0,n.jsx)(r.td,{children:"Global Registry (Rancher)"}),(0,n.jsx)(r.td,{children:"Validated"})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Any"}),(0,n.jsx)(r.td,{children:"Rancher (Custom provisioner)"}),(0,n.jsx)(r.td,{children:"Authenticated Registry (Manual registries.yaml)"}),(0,n.jsx)(r.td,{children:"Validated"})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Any"}),(0,n.jsx)(r.td,{children:"Self Installation"}),(0,n.jsx)(r.td,{children:"Global Registry (Rancher)"}),(0,n.jsx)(r.td,{children:"Validated"})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Any"}),(0,n.jsx)(r.td,{children:"Imported Cluster"}),(0,n.jsx)(r.td,{children:"Unknown"}),(0,n.jsx)(r.td,{})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"AWS-EKS"}),(0,n.jsx)(r.td,{children:"Rancher"}),(0,n.jsx)(r.td,{children:"ECR (public or private)"}),(0,n.jsx)(r.td,{})]})]})]}),"\n",(0,n.jsx)(r.h3,{id:"preliminary-setup",children:"Preliminary Setup"}),"\n",(0,n.jsx)(r.p,{children:"As Rancher has a dependency on Cert Manager, you'll need to update/install Cert Manager with the images provided by the CSR."}),"\n",(0,n.jsxs)(r.p,{children:["If you're following Rancher's ",(0,n.jsx)(r.a,{href:"https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster#4-install-cert-manager",children:"connected installation"})," instructions, you'll need to follow the steps below to use the Carbide Secured Registry (CSR) images for cert-manager."]}),"\n",(0,n.jsxs)(r.p,{children:["If using the ",(0,n.jsx)(r.a,{href:"https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",children:"airgapped installation"})," instructions, make sure you've pulled the images to your local/airgapped registry."]}),"\n",(0,n.jsx)(r.h4,{id:"configuring-cert-manager",children:"Configuring Cert Manager"}),"\n",(0,n.jsxs)(r.p,{children:["Follow Rancher's ",(0,n.jsx)(r.a,{href:"https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster#4-install-cert-manager",children:"connected installation"})," instructions, but using the following steps instead of the ",(0,n.jsx)(r.code,{children:"helm install"})," command from the docs."]}),"\n",(0,n.jsxs)(r.p,{children:["After adding the Cert Manager repo and installing the CRDs, use the following to create a temporary ",(0,n.jsx)(r.code,{children:"values.yaml"})," for your chart, subsituting your registry domain:"]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{children:"cat < /tmp/values.yaml\nimage:\n registry: \n repository: jetstack/cert-manager-controller\n\nwebhook:\n image:\n registry: \n repository: jetstack/cert-manager-webhook\n\ncainjector:\n image:\n registry: \n repository: jetstack/cert-manager-cainjector\n\nstartupapicheck:\n image:\n registry: \n repository: jetstack/cert-manager-startupapicheck\n\nacmesolver:\n image:\n registry: \n repository: jetstack/cert-manager-acmesolver\nEOT\n"})}),"\n",(0,n.jsxs)(r.p,{children:["Then use the following ",(0,n.jsx)(r.code,{children:"helm install"})," command to use the images:"]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{children:"helm install cert-manager jetstack/cert-manager \\\n --namespace cert-manager \\\n --create-namespace \\\n --version v1.14.4 \\\n -f /tmp/values.yaml\n"})}),"\n",(0,n.jsx)(r.h2,{id:"registry-auth-strategies",children:"Registry Auth Strategies"}),"\n",(0,n.jsx)(r.h3,{id:"global-registry-rancher",children:"Global Registry (Rancher)"}),"\n",(0,n.jsx)(r.h4,{id:"existing-rancher-installations",children:"Existing Rancher Installations"}),"\n",(0,n.jsx)(r.h5,{id:"setting-a-private-registry-with-no-credentials-as-the-default-registry",children:"Setting a Private Registry with No Credentials as the Default Registry"}),"\n",(0,n.jsxs)(r.ol,{children:["\n",(0,n.jsx)(r.li,{children:"Log into Rancher and configure the default administrator password."}),"\n",(0,n.jsxs)(r.li,{children:["Click ",(0,n.jsx)(r.strong,{children:"\u2630 > Global Settings"}),"."]}),"\n",(0,n.jsxs)(r.li,{children:["Go to the setting called ",(0,n.jsx)(r.code,{children:"system-default-registry"})," and choose ",(0,n.jsx)(r.strong,{children:"\u22ee > Edit Setting"}),"."]}),"\n",(0,n.jsxs)(r.li,{children:["Change the value to your registry (e.g. ",(0,n.jsx)(r.code,{children:"registry.yourdomain.com:port"}),"). Do not prefix the registry with ",(0,n.jsx)(r.code,{children:"http://"})," or ",(0,n.jsx)(r.code,{children:"https://"}),"."]}),"\n"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Result:"})," Rancher will use your private registry to pull system images."]}),"\n",(0,n.jsx)(r.h5,{id:"setting-a-private-registry-with-credentials-when-deploying-a-cluster",children:"Setting a Private Registry with Credentials when Deploying a Cluster"}),"\n",(0,n.jsx)(r.p,{children:"You can follow these steps to configure a private registry when you create a cluster:"}),"\n",(0,n.jsxs)(r.ol,{children:["\n",(0,n.jsxs)(r.li,{children:["Click ",(0,n.jsx)(r.strong,{children:"\u2630 > Cluster Management"}),"."]}),"\n",(0,n.jsxs)(r.li,{children:["On the ",(0,n.jsx)(r.strong,{children:"Clusters"})," page, click ",(0,n.jsx)(r.strong,{children:"Create"}),"."]}),"\n",(0,n.jsx)(r.li,{children:"Choose a cluster type."}),"\n",(0,n.jsxs)(r.li,{children:["In the ",(0,n.jsx)(r.strong,{children:"Cluster Configuration"})," go to the ",(0,n.jsx)(r.strong,{children:"Registries"})," tab and click ",(0,n.jsx)(r.strong,{children:"Pull images for Rancher from a private registry"}),"."]}),"\n",(0,n.jsx)(r.li,{children:"Enter the registry hostname and credentials."}),"\n",(0,n.jsxs)(r.li,{children:["Click ",(0,n.jsx)(r.strong,{children:"Create"}),"."]}),"\n"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Result:"})," The new cluster will be able to pull images from the private registry."]}),"\n",(0,n.jsx)(r.h4,{id:"new-rancher-installations",children:"New Rancher Installations"}),"\n",(0,n.jsxs)(r.p,{children:["Follow Rancher's ",(0,n.jsx)(r.a,{href:"https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster",children:"Installation Guide"}),", making sure to use the carbide chart obtained in the previous ",(0,n.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/carbide-charts",children:"helm chart"})," section."]}),"\n",(0,n.jsx)(r.p,{children:"When installing Rancher, to utilize the private registry, you'll need to set the following values in your helm values:"}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:"helm install rancher carbide-charts/rancher \\\n --namespace cattle-system \\\n --set hostname=rancher.my.org \\\n --set replicas=3 \\\n --set rancherImage=/rancher/rancher\n --set systemDefaultRegistry=\n"})}),"\n",(0,n.jsxs)(r.blockquote,{children:["\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"NOTE:"})," This requires configuring RKE2/K3s ",(0,n.jsx)(r.code,{children:"registries.yaml"})," to work. See the ",(0,n.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/configuration/kubernetes",children:"RKE2/K3s configuration"})," section for more details."]}),"\n"]}),"\n",(0,n.jsx)(r.h3,{id:"authenticated-registry-manual-registriesyaml",children:"Authenticated Registry (Manual registries.yaml)"}),"\n",(0,n.jsxs)(r.p,{children:["See the ",(0,n.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/configuration/kubernetes",children:"RKE2/K3s configuration"})," section for more details."]})]})}function h(e={}){const{wrapper:r}={...(0,i.R)(),...e.components};return r?(0,n.jsx)(r,{...e,children:(0,n.jsx)(d,{...e})}):d(e)}},8453:(e,r,t)=>{t.d(r,{R:()=>a,x:()=>l});var n=t(6540);const i={},s=n.createContext(i);function a(e){const r=n.useContext(s);return n.useMemo((function(){return"function"==typeof e?e(r):{...r,...e}}),[r,e])}function l(e){let r;return r=e.disableParentContext?"function"==typeof e.components?e.components(i):e.components||i:a(e.components),n.createElement(s.Provider,{value:r},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/ec1c321e.c4d62af5.js b/assets/js/ec1c321e.c4d62af5.js new file mode 100644 index 0000000..9f8ce95 --- /dev/null +++ b/assets/js/ec1c321e.c4d62af5.js @@ -0,0 +1 @@ +"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[490],{7188:(e,r,s)=>{s.r(r),s.d(r,{assets:()=>a,contentTitle:()=>c,default:()=>h,frontMatter:()=>t,metadata:()=>o,toc:()=>d});var n=s(4848),i=s(8453);const t={},c="RKE2/K3s Configuration",o={id:"registry-docs/configuration/kubernetes",title:"RKE2/K3s Configuration",description:"This page will walk you through how to configure Rancher Kubernetes distributions (K3s, RKE2) to utilize the secured images instead of the upstream Docker hub images.",source:"@site/docs/registry-docs/configuration/kubernetes.md",sourceDirName:"registry-docs/configuration",slug:"/registry-docs/configuration/kubernetes",permalink:"/carbide-docs/docs/registry-docs/configuration/kubernetes",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/configuration/kubernetes.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"Helm Charts",permalink:"/carbide-docs/docs/registry-docs/carbide-charts"},next:{title:"Rancher Configuration",permalink:"/carbide-docs/docs/registry-docs/configuration/rancher"}},a={},d=[{value:"Usage with k3s",id:"usage-with-k3s",level:3},{value:"Usage with rke2",id:"usage-with-rke2",level:3},{value:"registries.yaml Strategy Approaches",id:"registriesyaml-strategy-approaches",level:4},{value:"Example cloud-init (RKE2)",id:"example-cloud-init-rke2",level:4}];function l(e){const r={a:"a",code:"code",h1:"h1",h3:"h3",h4:"h4",header:"header",p:"p",pre:"pre",table:"table",tbody:"tbody",td:"td",th:"th",thead:"thead",tr:"tr",...(0,i.R)(),...e.components};return(0,n.jsxs)(n.Fragment,{children:[(0,n.jsx)(r.header,{children:(0,n.jsx)(r.h1,{id:"rke2k3s-configuration",children:"RKE2/K3s Configuration"})}),"\n",(0,n.jsx)(r.p,{children:"This page will walk you through how to configure Rancher Kubernetes distributions (K3s, RKE2) to utilize the secured images instead of the upstream Docker hub images."}),"\n",(0,n.jsxs)(r.h3,{id:"usage-with-k3s",children:["Usage with ",(0,n.jsx)(r.code,{children:"k3s"})]}),"\n",(0,n.jsxs)(r.p,{children:["To modify the system images that ",(0,n.jsx)(r.code,{children:"k3s"})," uses upon bootstrapping, configure k3s' mirror settings as described ",(0,n.jsx)(r.a,{href:"https://rancher.com/docs/k3s/latest/en/installation/private-registry/#mirrors",children:"here"}),"."]}),"\n",(0,n.jsx)(r.p,{children:"The full configuration using your authenticated registry is below:"}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-yaml",children:'# /etc/rancher/k3s/registries.yaml\nmirrors:\n docker.io:\n endpoint:\n - "https://"\n\nconfigs:\n "":\n auth:\n username: \n password: \n'})}),"\n",(0,n.jsxs)(r.p,{children:["You will also need to utilize the ",(0,n.jsx)(r.code,{children:"system-default-registry"})," flag when installing K3s to ensure it uses the registry. For instance:"]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:"curl -sfL https://get.k3s.io | sh -s - --system-default-registry=\n"})}),"\n",(0,n.jsxs)(r.h3,{id:"usage-with-rke2",children:["Usage with ",(0,n.jsx)(r.code,{children:"rke2"})]}),"\n",(0,n.jsxs)(r.p,{children:["Similar to ",(0,n.jsx)(r.code,{children:"k3s"}),", the Carbide Secured Registry (CSR) images are pulled upon bootstrapping by configuring ",(0,n.jsx)(r.code,{children:"rke2"}),"'s mirroring configuration as described ",(0,n.jsx)(r.a,{href:"https://rke2.io",children:"here"}),"."]}),"\n",(0,n.jsx)(r.p,{children:"The full configuration using the shared alpha account is below:"}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-yaml",children:'# /etc/rancher/rke2/registries.yaml\nmirrors:\n docker.io:\n endpoint:\n - "https://"\n\nconfigs:\n "":\n auth:\n username: \n password: \n'})}),"\n",(0,n.jsxs)(r.p,{children:["You will also need to utilize the ",(0,n.jsx)(r.code,{children:"system-default-registry"})," flag when installing RKE2 to ensure it uses the registry. For instance, if using the configuration file:"]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:"# /etc/rancher/rke2/config.yaml\nnode-name: controlplane1\nwrite-kubeconfig-mode: 0640\nsystem-default-registry: \n...\n"})}),"\n",(0,n.jsxs)(r.h4,{id:"registriesyaml-strategy-approaches",children:[(0,n.jsx)(r.code,{children:"registries.yaml"})," Strategy Approaches"]}),"\n",(0,n.jsxs)(r.table,{children:[(0,n.jsx)(r.thead,{children:(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.th,{children:"Scenario"}),(0,n.jsx)(r.th,{children:"Best practice"})]})}),(0,n.jsxs)(r.tbody,{children:[(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Use of a 'golden machine image'"}),(0,n.jsxs)(r.td,{children:["Pre-configure ",(0,n.jsx)(r.code,{children:"registries.yaml"})," on golden machine image before host provisioning"]})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Rancher provisioned cluster"}),(0,n.jsxs)(r.td,{children:["Embed a ",(0,n.jsx)(r.code,{children:"cloud-init"})," file into cluster provisioning (Example below)"]})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Ansible/Saltstack/Manual"}),(0,n.jsxs)(r.td,{children:["Pre-configure ",(0,n.jsx)(r.code,{children:"registries.yaml"})," on host before cluster provisioning"]})]})]})]}),"\n",(0,n.jsxs)(r.h4,{id:"example-cloud-init-rke2",children:["Example ",(0,n.jsx)(r.code,{children:"cloud-init"})," (",(0,n.jsx)(r.code,{children:"RKE2"}),")"]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-yaml",children:'# cloud-init\n\nruncmd:\n - mkdir /etc/rancher/rke2\nwrite_files:\n - path: /etc/rancher/rke2/registries.yaml\n content: |\n mirrors:\n docker.io:\n endpoint:\n - "https://"\n\n configs:\n "":\n auth:\n username: \n password: \n permissions: \'0644\'\n'})})]})}function h(e={}){const{wrapper:r}={...(0,i.R)(),...e.components};return r?(0,n.jsx)(r,{...e,children:(0,n.jsx)(l,{...e})}):l(e)}},8453:(e,r,s)=>{s.d(r,{R:()=>c,x:()=>o});var n=s(6540);const i={},t=n.createContext(i);function c(e){const r=n.useContext(t);return n.useMemo((function(){return"function"==typeof e?e(r):{...r,...e}}),[r,e])}function o(e){let r;return r=e.disableParentContext?"function"==typeof e.components?e.components(i):e.components||i:c(e.components),n.createElement(t.Provider,{value:r},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/ec1c321e.efacf539.js b/assets/js/ec1c321e.efacf539.js deleted file mode 100644 index 7ccf5c9..0000000 --- a/assets/js/ec1c321e.efacf539.js +++ /dev/null @@ -1 +0,0 @@ -"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[490],{7188:(e,r,s)=>{s.r(r),s.d(r,{assets:()=>a,contentTitle:()=>c,default:()=>h,frontMatter:()=>t,metadata:()=>o,toc:()=>d});var n=s(4848),i=s(8453);const t={},c="RKE2/K3s Configuration",o={id:"registry-docs/configuration/kubernetes",title:"RKE2/K3s Configuration",description:"This page will walk you through how to configure Rancher Kubernetes distributions (K3s, RKE2) to utilize the secured images instead of the upstream Docker hub images.",source:"@site/docs/registry-docs/configuration/kubernetes.md",sourceDirName:"registry-docs/configuration",slug:"/registry-docs/configuration/kubernetes",permalink:"/carbide-docs/docs/registry-docs/configuration/kubernetes",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/configuration/kubernetes.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"Helm Charts",permalink:"/carbide-docs/docs/registry-docs/carbide-charts"},next:{title:"Rancher Manager Configuration",permalink:"/carbide-docs/docs/registry-docs/configuration/rancher"}},a={},d=[{value:"Usage with k3s",id:"usage-with-k3s",level:3},{value:"Usage with rke2",id:"usage-with-rke2",level:3},{value:"registries.yaml Strategy Approaches",id:"registriesyaml-strategy-approaches",level:4},{value:"Example cloud-init (RKE2)",id:"example-cloud-init-rke2",level:4}];function l(e){const r={a:"a",code:"code",h1:"h1",h3:"h3",h4:"h4",header:"header",p:"p",pre:"pre",table:"table",tbody:"tbody",td:"td",th:"th",thead:"thead",tr:"tr",...(0,i.R)(),...e.components};return(0,n.jsxs)(n.Fragment,{children:[(0,n.jsx)(r.header,{children:(0,n.jsx)(r.h1,{id:"rke2k3s-configuration",children:"RKE2/K3s Configuration"})}),"\n",(0,n.jsx)(r.p,{children:"This page will walk you through how to configure Rancher Kubernetes distributions (K3s, RKE2) to utilize the secured images instead of the upstream Docker hub images."}),"\n",(0,n.jsxs)(r.h3,{id:"usage-with-k3s",children:["Usage with ",(0,n.jsx)(r.code,{children:"k3s"})]}),"\n",(0,n.jsxs)(r.p,{children:["To modify the system images that ",(0,n.jsx)(r.code,{children:"k3s"})," uses upon bootstrapping, configure k3s' mirror settings as described ",(0,n.jsx)(r.a,{href:"https://rancher.com/docs/k3s/latest/en/installation/private-registry/#mirrors",children:"here"}),"."]}),"\n",(0,n.jsx)(r.p,{children:"The full configuration using your authenticated registry is below:"}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-yaml",children:'# /etc/rancher/k3s/registries.yaml\nmirrors:\n docker.io:\n endpoint:\n - "https://"\n\nconfigs:\n "":\n auth:\n username: \n password: \n'})}),"\n",(0,n.jsxs)(r.p,{children:["You will also need to utilize the ",(0,n.jsx)(r.code,{children:"system-default-registry"})," flag when installing K3s to ensure it uses the registry. For instance:"]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:"curl -sfL https://get.k3s.io | sh -s - --system-default-registry=\n"})}),"\n",(0,n.jsxs)(r.h3,{id:"usage-with-rke2",children:["Usage with ",(0,n.jsx)(r.code,{children:"rke2"})]}),"\n",(0,n.jsxs)(r.p,{children:["Similar to ",(0,n.jsx)(r.code,{children:"k3s"}),", the Carbide Secured Registry (CSR) images are pulled upon bootstrapping by configuring ",(0,n.jsx)(r.code,{children:"rke2"}),"'s mirroring configuration as described ",(0,n.jsx)(r.a,{href:"https://rke2.io",children:"here"}),"."]}),"\n",(0,n.jsx)(r.p,{children:"The full configuration using the shared alpha account is below:"}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-yaml",children:'# /etc/rancher/rke2/registries.yaml\nmirrors:\n docker.io:\n endpoint:\n - "https://"\n\nconfigs:\n "":\n auth:\n username: \n password: \n'})}),"\n",(0,n.jsxs)(r.p,{children:["You will also need to utilize the ",(0,n.jsx)(r.code,{children:"system-default-registry"})," flag when installing RKE2 to ensure it uses the registry. For instance, if using the configuration file:"]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:"# /etc/rancher/rke2/config.yaml\nnode-name: controlplane1\nwrite-kubeconfig-mode: 0640\nsystem-default-registry: \n...\n"})}),"\n",(0,n.jsxs)(r.h4,{id:"registriesyaml-strategy-approaches",children:[(0,n.jsx)(r.code,{children:"registries.yaml"})," Strategy Approaches"]}),"\n",(0,n.jsxs)(r.table,{children:[(0,n.jsx)(r.thead,{children:(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.th,{children:"Scenario"}),(0,n.jsx)(r.th,{children:"Best practice"})]})}),(0,n.jsxs)(r.tbody,{children:[(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Use of a 'golden machine image'"}),(0,n.jsxs)(r.td,{children:["Pre-configure ",(0,n.jsx)(r.code,{children:"registries.yaml"})," on golden machine image before host provisioning"]})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Rancher provisioned cluster"}),(0,n.jsxs)(r.td,{children:["Embed a ",(0,n.jsx)(r.code,{children:"cloud-init"})," file into cluster provisioning (Example below)"]})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:"Ansible/Saltstack/Manual"}),(0,n.jsxs)(r.td,{children:["Pre-configure ",(0,n.jsx)(r.code,{children:"registries.yaml"})," on host before cluster provisioning"]})]})]})]}),"\n",(0,n.jsxs)(r.h4,{id:"example-cloud-init-rke2",children:["Example ",(0,n.jsx)(r.code,{children:"cloud-init"})," (",(0,n.jsx)(r.code,{children:"RKE2"}),")"]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-yaml",children:'# cloud-init\n\nruncmd:\n - mkdir /etc/rancher/rke2\nwrite_files:\n - path: /etc/rancher/rke2/registries.yaml\n content: |\n mirrors:\n docker.io:\n endpoint:\n - "https://"\n\n configs:\n "":\n auth:\n username: \n password: \n permissions: \'0644\'\n'})})]})}function h(e={}){const{wrapper:r}={...(0,i.R)(),...e.components};return r?(0,n.jsx)(r,{...e,children:(0,n.jsx)(l,{...e})}):l(e)}},8453:(e,r,s)=>{s.d(r,{R:()=>c,x:()=>o});var n=s(6540);const i={},t=n.createContext(i);function c(e){const r=n.useContext(t);return n.useMemo((function(){return"function"==typeof e?e(r):{...r,...e}}),[r,e])}function o(e){let r;return r=e.disableParentContext?"function"==typeof e.components?e.components(i):e.components||i:c(e.components),n.createElement(t.Provider,{value:r},e.children)}}}]); \ No newline at end of file diff --git a/assets/js/main.06c1dfb9.js b/assets/js/main.68fc1e7a.js similarity index 99% rename from assets/js/main.06c1dfb9.js rename to assets/js/main.68fc1e7a.js index 5e118aa..dacd106 100644 --- a/assets/js/main.06c1dfb9.js +++ b/assets/js/main.68fc1e7a.js @@ -1,2 +1,2 @@ -/*! For license information please see main.06c1dfb9.js.LICENSE.txt */ -(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[792],{8328:(e,t,n)=>{"use strict";n.d(t,{A:()=>p});n(6540);var r=n(3259),o=n.n(r),a=n(4054);const i={"04b54eed":[()=>n.e(978).then(n.bind(n,895)),"@site/docs/registry-docs/copying-images.md",895],"09127693":[()=>n.e(620).then(n.bind(n,4981)),"@site/docs/registry-docs/uninstall-rancher.md",4981],"0b222e5a":[()=>n.e(24).then(n.bind(n,6625)),"@site/docs/stigatron-docs/installation.md",6625],"0e384e19":[()=>n.e(976).then(n.bind(n,619)),"@site/docs/intro.md",619],"103b4c9d":[()=>n.e(599).then(n.bind(n,260)),"@site/docs/registry-docs/release-cadence.md",260],"14eb3368":[()=>Promise.all([n.e(869),n.e(969)]).then(n.bind(n,7247)),"@theme/DocCategoryGeneratedIndexPage",7247],17896441:[()=>Promise.all([n.e(869),n.e(401)]).then(n.bind(n,1714)),"@theme/DocItem",1714],"182f8820":[()=>n.e(18).then(n.t.bind(n,2586,19)),"@generated/docusaurus-plugin-content-docs/default/p/carbide-docs-docs-category-stigatron-security-operator-5d3.json",2586],"1fc35beb":[()=>n.e(128).then(n.bind(n,4796)),"@site/docs/registry-docs/architecture.md",4796],"2296e6d4":[()=>n.e(999).then(n.bind(n,7143)),"@site/docs/registry-docs/prereqs.md",7143],"3106553b":[()=>n.e(764).then(n.bind(n,4706)),"@site/docs/registry-docs/uninstall-kubernetes.md",4706],"3e5cfc22":[()=>n.e(898).then(n.t.bind(n,4939,19)),"@generated/docusaurus-plugin-content-docs/default/p/carbide-docs-docs-category-carbide-image-registry-c15.json",4939],"47410d18":[()=>n.e(882).then(n.bind(n,3342)),"@site/docs/registry-docs/enforcement.md",3342],"501d4186":[()=>n.e(140).then(n.bind(n,1693)),"@site/docs/stigatron-docs/introduction.md",1693],"5e95c892":[()=>n.e(647).then(n.bind(n,7121)),"@theme/DocsRoot",7121],"5e9f5e1a":[()=>Promise.resolve().then(n.bind(n,4784)),"@generated/docusaurus.config",4784],"617854b0":[()=>n.e(748).then(n.bind(n,3303)),"@site/docs/registry-docs/introduction.md",3303],"630fbf92":[()=>n.e(61).then(n.bind(n,9720)),"@site/docs/stigatron-docs/using-heimdall.md",9720],"638a4428":[()=>n.e(417).then(n.bind(n,5514)),"@site/docs/registry-docs/downloading-images.md",5514],"648a5409":[()=>n.e(774).then(n.bind(n,197)),"@site/docs/registry-docs/validating-images.md",197],"71fae5cf":[()=>n.e(625).then(n.bind(n,429)),"@site/docs/airgapped-docs/prereqs.md",429],"730aff30":[()=>n.e(857).then(n.bind(n,4386)),"@site/docs/registry-docs/loading-images.md",4386],"7f029640":[()=>n.e(791).then(n.bind(n,265)),"@site/docs/registry-docs/carbide-charts.md",265],"8fc29581":[()=>n.e(721).then(n.bind(n,4755)),"@site/docs/known-limits.md",4755],a7456010:[()=>n.e(235).then(n.t.bind(n,8552,19)),"@generated/docusaurus-plugin-content-pages/default/__plugin.json",8552],a7bd4aaa:[()=>n.e(98).then(n.bind(n,1723)),"@theme/DocVersionRoot",1723],a94703ab:[()=>Promise.all([n.e(869),n.e(48)]).then(n.bind(n,1377)),"@theme/DocRoot",1377],aaed30b0:[()=>n.e(269).then(n.bind(n,1431)),"@site/docs/airgapped-docs/uninstall.md",1431],aba21aa0:[()=>n.e(742).then(n.t.bind(n,7093,19)),"@generated/docusaurus-plugin-content-docs/default/__plugin.json",7093],c0c2b7bb:[()=>n.e(132).then(n.t.bind(n,6131,19)),"@generated/docusaurus-plugin-content-docs/default/p/carbide-docs-docs-5ee.json",6131],c3e6124d:[()=>n.e(941).then(n.bind(n,1098)),"@site/docs/feedback.md",1098],c4f5d8e4:[()=>Promise.all([n.e(869),n.e(634)]).then(n.bind(n,6467)),"@site/src/pages/index.js",6467],de29c8b2:[()=>n.e(356).then(n.bind(n,9887)),"@site/docs/stigatron-docs/create-scan.md",9887],e0eaaed1:[()=>n.e(353).then(n.bind(n,8503)),"@site/docs/stigatron-docs/uninstall.md",8503],e26d4f29:[()=>n.e(825).then(n.t.bind(n,5421,19)),"@generated/docusaurus-plugin-content-docs/default/p/carbide-docs-docs-category-airgapped-docs-d73.json",5421],e4cbdf04:[()=>n.e(505).then(n.bind(n,749)),"@site/docs/airgapped-docs/introduction.md",749],e675c224:[()=>n.e(875).then(n.bind(n,4167)),"@site/docs/registry-docs/configuration/rancher.md",4167],ec1c321e:[()=>n.e(490).then(n.bind(n,7188)),"@site/docs/registry-docs/configuration/kubernetes.md",7188],f7fe5857:[()=>n.e(238).then(n.bind(n,8785)),"@site/docs/airgapped-docs/installation.md",8785],fafd341c:[()=>n.e(927).then(n.bind(n,7997)),"@site/docs/stigatron-docs/prereqs.md",7997]};var l=n(4848);function s(e){let{error:t,retry:n,pastDelay:r}=e;return t?(0,l.jsxs)("div",{style:{textAlign:"center",color:"#fff",backgroundColor:"#fa383e",borderColor:"#fa383e",borderStyle:"solid",borderRadius:"0.25rem",borderWidth:"1px",boxSizing:"border-box",display:"block",padding:"1rem",flex:"0 0 50%",marginLeft:"25%",marginRight:"25%",marginTop:"5rem",maxWidth:"50%",width:"100%"},children:[(0,l.jsx)("p",{children:String(t)}),(0,l.jsx)("div",{children:(0,l.jsx)("button",{type:"button",onClick:n,children:"Retry"})})]}):r?(0,l.jsx)("div",{style:{display:"flex",justifyContent:"center",alignItems:"center",height:"100vh"},children:(0,l.jsx)("svg",{id:"loader",style:{width:128,height:110,position:"absolute",top:"calc(100vh - 64%)"},viewBox:"0 0 45 45",xmlns:"http://www.w3.org/2000/svg",stroke:"#61dafb",children:(0,l.jsxs)("g",{fill:"none",fillRule:"evenodd",transform:"translate(1 1)",strokeWidth:"2",children:[(0,l.jsxs)("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0",children:[(0,l.jsx)("animate",{attributeName:"r",begin:"1.5s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),(0,l.jsx)("animate",{attributeName:"stroke-opacity",begin:"1.5s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),(0,l.jsx)("animate",{attributeName:"stroke-width",begin:"1.5s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})]}),(0,l.jsxs)("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0",children:[(0,l.jsx)("animate",{attributeName:"r",begin:"3s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),(0,l.jsx)("animate",{attributeName:"stroke-opacity",begin:"3s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),(0,l.jsx)("animate",{attributeName:"stroke-width",begin:"3s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})]}),(0,l.jsx)("circle",{cx:"22",cy:"22",r:"8",children:(0,l.jsx)("animate",{attributeName:"r",begin:"0s",dur:"1.5s",values:"6;1;2;3;4;5;6",calcMode:"linear",repeatCount:"indefinite"})})]})})}):null}var c=n(6921),u=n(3102);function d(e,t){if("*"===e)return o()({loading:s,loader:()=>n.e(237).then(n.bind(n,2237)),modules:["@theme/NotFound"],webpack:()=>[2237],render(e,t){const n=e.default;return(0,l.jsx)(u.W,{value:{plugin:{name:"native",id:"default"}},children:(0,l.jsx)(n,{...t})})}});const r=a[`${e}-${t}`],d={},p=[],f=[],h=(0,c.A)(r);return Object.entries(h).forEach((e=>{let[t,n]=e;const r=i[n];r&&(d[t]=r[0],p.push(r[1]),f.push(r[2]))})),o().Map({loading:s,loader:d,modules:p,webpack:()=>f,render(t,n){const o=JSON.parse(JSON.stringify(r));Object.entries(t).forEach((t=>{let[n,r]=t;const a=r.default;if(!a)throw new Error(`The page component at ${e} doesn't have a default export. This makes it impossible to render anything. Consider default-exporting a React component.`);"object"!=typeof a&&"function"!=typeof a||Object.keys(r).filter((e=>"default"!==e)).forEach((e=>{a[e]=r[e]}));let i=o;const l=n.split(".");l.slice(0,-1).forEach((e=>{i=i[e]})),i[l[l.length-1]]=a}));const a=o.__comp;delete o.__comp;const i=o.__context;delete o.__context;const s=o.__props;return delete o.__props,(0,l.jsx)(u.W,{value:i,children:(0,l.jsx)(a,{...o,...s,...n})})}})}const p=[{path:"/carbide-docs/docs",component:d("/carbide-docs/docs","153"),routes:[{path:"/carbide-docs/docs",component:d("/carbide-docs/docs","884"),routes:[{path:"/carbide-docs/docs",component:d("/carbide-docs/docs","009"),routes:[{path:"/carbide-docs/docs/airgapped-docs/installation",component:d("/carbide-docs/docs/airgapped-docs/installation","3fc"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/airgapped-docs/introduction",component:d("/carbide-docs/docs/airgapped-docs/introduction","7bf"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/airgapped-docs/prereqs",component:d("/carbide-docs/docs/airgapped-docs/prereqs","2b9"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/airgapped-docs/uninstall",component:d("/carbide-docs/docs/airgapped-docs/uninstall","250"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/category/airgapped-docs",component:d("/carbide-docs/docs/category/airgapped-docs","9f8"),exact:!0,sidebar:"tutorialSidebar"},{path:"/carbide-docs/docs/category/carbide-image-registry",component:d("/carbide-docs/docs/category/carbide-image-registry","5cf"),exact:!0,sidebar:"tutorialSidebar"},{path:"/carbide-docs/docs/category/stigatron-security-operator",component:d("/carbide-docs/docs/category/stigatron-security-operator","86f"),exact:!0,sidebar:"tutorialSidebar"},{path:"/carbide-docs/docs/feedback",component:d("/carbide-docs/docs/feedback","b80"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/intro",component:d("/carbide-docs/docs/intro","765"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/known-limits",component:d("/carbide-docs/docs/known-limits","1b3"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/architecture",component:d("/carbide-docs/docs/registry-docs/architecture","013"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/carbide-charts",component:d("/carbide-docs/docs/registry-docs/carbide-charts","9cb"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/configuration/kubernetes",component:d("/carbide-docs/docs/registry-docs/configuration/kubernetes","fd1"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/configuration/rancher",component:d("/carbide-docs/docs/registry-docs/configuration/rancher","470"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/copying-images",component:d("/carbide-docs/docs/registry-docs/copying-images","030"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/downloading-images",component:d("/carbide-docs/docs/registry-docs/downloading-images","851"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/enforcement",component:d("/carbide-docs/docs/registry-docs/enforcement","e6a"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/introduction",component:d("/carbide-docs/docs/registry-docs/introduction","446"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/loading-images",component:d("/carbide-docs/docs/registry-docs/loading-images","a17"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/prereqs",component:d("/carbide-docs/docs/registry-docs/prereqs","5ea"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/release-cadence",component:d("/carbide-docs/docs/registry-docs/release-cadence","9a1"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/uninstall-kubernetes",component:d("/carbide-docs/docs/registry-docs/uninstall-kubernetes","bb9"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/uninstall-rancher",component:d("/carbide-docs/docs/registry-docs/uninstall-rancher","da1"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/registry-docs/validating-images",component:d("/carbide-docs/docs/registry-docs/validating-images","a4b"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/stigatron-docs/create-scan",component:d("/carbide-docs/docs/stigatron-docs/create-scan","694"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/stigatron-docs/installation",component:d("/carbide-docs/docs/stigatron-docs/installation","ee4"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/stigatron-docs/introduction",component:d("/carbide-docs/docs/stigatron-docs/introduction","ed0"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/stigatron-docs/prereqs",component:d("/carbide-docs/docs/stigatron-docs/prereqs","7e3"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/stigatron-docs/uninstall",component:d("/carbide-docs/docs/stigatron-docs/uninstall","f50"),exact:!0,sidebar:"carbideSidebar"},{path:"/carbide-docs/docs/stigatron-docs/using-heimdall",component:d("/carbide-docs/docs/stigatron-docs/using-heimdall","3f7"),exact:!0,sidebar:"carbideSidebar"}]}]}]},{path:"/carbide-docs/",component:d("/carbide-docs/","91e"),exact:!0},{path:"*",component:d("*")}]},6125:(e,t,n)=>{"use strict";n.d(t,{o:()=>a,x:()=>i});var r=n(6540),o=n(4848);const a=r.createContext(!1);function i(e){let{children:t}=e;const[n,i]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{i(!0)}),[]),(0,o.jsx)(a.Provider,{value:n,children:t})}},7815:(e,t,n)=>{"use strict";var r=n(6540),o=n(5338),a=n(545),i=n(4625),l=n(4784),s=n(8193);const c=[n(119),n(6134),n(6294),n(1043)];var u=n(8328),d=n(6347),p=n(2831),f=n(4848);function h(e){let{children:t}=e;return(0,f.jsx)(f.Fragment,{children:t})}var g=n(5260),m=n(4586),y=n(6025),b=n(6342),v=n(1003),w=n(2131),k=n(4090);var x=n(440),S=n(1463);function E(){const{i18n:{currentLocale:e,defaultLocale:t,localeConfigs:n}}=(0,m.A)(),r=(0,w.o)(),o=n[e].htmlLang,a=e=>e.replace("-","_");return(0,f.jsxs)(g.A,{children:[Object.entries(n).map((e=>{let[t,{htmlLang:n}]=e;return(0,f.jsx)("link",{rel:"alternate",href:r.createUrl({locale:t,fullyQualified:!0}),hrefLang:n},t)})),(0,f.jsx)("link",{rel:"alternate",href:r.createUrl({locale:t,fullyQualified:!0}),hrefLang:"x-default"}),(0,f.jsx)("meta",{property:"og:locale",content:a(o)}),Object.values(n).filter((e=>o!==e.htmlLang)).map((e=>(0,f.jsx)("meta",{property:"og:locale:alternate",content:a(e.htmlLang)},`meta-og-${e.htmlLang}`)))]})}function _(e){let{permalink:t}=e;const{siteConfig:{url:n}}=(0,m.A)(),r=function(){const{siteConfig:{url:e,baseUrl:t,trailingSlash:n}}=(0,m.A)(),{pathname:r}=(0,d.zy)();return e+(0,x.Ks)((0,y.Ay)(r),{trailingSlash:n,baseUrl:t})}(),o=t?`${n}${t}`:r;return(0,f.jsxs)(g.A,{children:[(0,f.jsx)("meta",{property:"og:url",content:o}),(0,f.jsx)("link",{rel:"canonical",href:o})]})}function C(){const{i18n:{currentLocale:e}}=(0,m.A)(),{metadata:t,image:n}=(0,b.p)();return(0,f.jsxs)(f.Fragment,{children:[(0,f.jsxs)(g.A,{children:[(0,f.jsx)("meta",{name:"twitter:card",content:"summary_large_image"}),(0,f.jsx)("body",{className:k.w})]}),n&&(0,f.jsx)(v.be,{image:n}),(0,f.jsx)(_,{}),(0,f.jsx)(E,{}),(0,f.jsx)(S.A,{tag:"default",locale:e}),(0,f.jsx)(g.A,{children:t.map(((e,t)=>(0,f.jsx)("meta",{...e},t)))})]})}const A=new Map;var T=n(6125),j=n(6988),N=n(205);function R(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),r=1;r{const r=t.default?.[e]??t[e];return r?.(...n)}));return()=>o.forEach((e=>e?.()))}const O=function(e){let{children:t,location:n,previousLocation:r}=e;return(0,N.A)((()=>{r!==n&&(!function(e){let{location:t,previousLocation:n}=e;if(!n)return;const r=t.pathname===n.pathname,o=t.hash===n.hash,a=t.search===n.search;if(r&&o&&!a)return;const{hash:i}=t;if(i){const e=decodeURIComponent(i.substring(1)),t=document.getElementById(e);t?.scrollIntoView()}else window.scrollTo(0,0)}({location:n,previousLocation:r}),R("onRouteDidUpdate",{previousLocation:r,location:n}))}),[r,n]),t};function P(e){const t=Array.from(new Set([e,decodeURI(e)])).map((e=>(0,p.u)(u.A,e))).flat();return Promise.all(t.map((e=>e.route.component.preload?.())))}class L extends r.Component{previousLocation;routeUpdateCleanupCb;constructor(e){super(e),this.previousLocation=null,this.routeUpdateCleanupCb=s.A.canUseDOM?R("onRouteUpdate",{previousLocation:null,location:this.props.location}):()=>{},this.state={nextRouteHasLoaded:!0}}shouldComponentUpdate(e,t){if(e.location===this.props.location)return t.nextRouteHasLoaded;const n=e.location;return this.previousLocation=this.props.location,this.setState({nextRouteHasLoaded:!1}),this.routeUpdateCleanupCb=R("onRouteUpdate",{previousLocation:this.previousLocation,location:n}),P(n.pathname).then((()=>{this.routeUpdateCleanupCb(),this.setState({nextRouteHasLoaded:!0})})).catch((e=>{console.warn(e),window.location.reload()})),!1}render(){const{children:e,location:t}=this.props;return(0,f.jsx)(O,{previousLocation:this.previousLocation,location:t,children:(0,f.jsx)(d.qh,{location:t,render:()=>e})})}}const I=L,D="__docusaurus-base-url-issue-banner-suggestion-container";function M(e){return`\ndocument.addEventListener('DOMContentLoaded', function maybeInsertBanner() {\n var shouldInsert = typeof window['docusaurus'] === 'undefined';\n shouldInsert && insertBanner();\n});\n\nfunction insertBanner() {\n var bannerContainer = document.createElement('div');\n bannerContainer.id = '__docusaurus-base-url-issue-banner-container';\n var bannerHtml = ${JSON.stringify(function(e){return`\n
\n

Your Docusaurus site did not load properly.

\n

A very common reason is a wrong site baseUrl configuration.

\n

Current configured baseUrl = ${e} ${"/"===e?" (default value)":""}

\n

We suggest trying baseUrl =

\n
\n`}(e)).replace(/{let{route:t}=e;return!0===t.exact})))return A.set(e.pathname,e.pathname),e;const t=e.pathname.trim().replace(/(?:\/index)?\.html$/,"")||"/";return A.set(e.pathname,t),{...e,pathname:t}}((0,d.zy)());return(0,f.jsx)(I,{location:e,children:H})}function W(){return(0,f.jsx)($.A,{children:(0,f.jsx)(j.l,{children:(0,f.jsxs)(T.x,{children:[(0,f.jsxs)(h,{children:[(0,f.jsx)(B,{}),(0,f.jsx)(C,{}),(0,f.jsx)(z,{}),(0,f.jsx)(G,{})]}),(0,f.jsx)(q,{})]})})})}var V=n(4054);const K=function(e){try{return document.createElement("link").relList.supports(e)}catch{return!1}}("prefetch")?function(e){return new Promise(((t,n)=>{if("undefined"==typeof document)return void n();const r=document.createElement("link");r.setAttribute("rel","prefetch"),r.setAttribute("href",e),r.onload=()=>t(),r.onerror=()=>n();const o=document.getElementsByTagName("head")[0]??document.getElementsByName("script")[0]?.parentNode;o?.appendChild(r)}))}:function(e){return new Promise(((t,n)=>{const r=new XMLHttpRequest;r.open("GET",e,!0),r.withCredentials=!0,r.onload=()=>{200===r.status?t():n()},r.send(null)}))};var Q=n(6921);const Y=new Set,J=new Set,Z=()=>navigator.connection?.effectiveType.includes("2g")||navigator.connection?.saveData,X={prefetch:e=>{if(!(e=>!Z()&&!J.has(e)&&!Y.has(e))(e))return!1;Y.add(e);const t=(0,p.u)(u.A,e).flatMap((e=>{return t=e.route.path,Object.entries(V).filter((e=>{let[n]=e;return n.replace(/-[^-]+$/,"")===t})).flatMap((e=>{let[,t]=e;return Object.values((0,Q.A)(t))}));var t}));return Promise.all(t.map((e=>{const t=n.gca(e);return t&&!t.includes("undefined")?K(t).catch((()=>{})):Promise.resolve()})))},preload:e=>!!(e=>!Z()&&!J.has(e))(e)&&(J.add(e),P(e))},ee=Object.freeze(X);function te(e){let{children:t}=e;return"hash"===l.default.future.experimental_router?(0,f.jsx)(i.I9,{children:t}):(0,f.jsx)(i.Kd,{children:t})}const ne=Boolean(!0);if(s.A.canUseDOM){window.docusaurus=ee;const e=document.getElementById("__docusaurus"),t=(0,f.jsx)(a.vd,{children:(0,f.jsx)(te,{children:(0,f.jsx)(W,{})})}),n=(e,t)=>{console.error("Docusaurus React Root onRecoverableError:",e,t)},i=()=>{if(window.docusaurusRoot)window.docusaurusRoot.render(t);else if(ne)window.docusaurusRoot=o.hydrateRoot(e,t,{onRecoverableError:n});else{const r=o.createRoot(e,{onRecoverableError:n});r.render(t),window.docusaurusRoot=r}};P(window.location.pathname).then((()=>{(0,r.startTransition)(i)}))}},6988:(e,t,n)=>{"use strict";n.d(t,{o:()=>d,l:()=>p});var r=n(6540),o=n(4784);const a=JSON.parse('{"docusaurus-plugin-content-docs":{"default":{"path":"/carbide-docs/docs","versions":[{"name":"current","label":"Next","isLast":true,"path":"/carbide-docs/docs","mainDocId":"intro","docs":[{"id":"airgapped-docs/installation","path":"/carbide-docs/docs/airgapped-docs/installation","sidebar":"carbideSidebar"},{"id":"airgapped-docs/introduction","path":"/carbide-docs/docs/airgapped-docs/introduction","sidebar":"carbideSidebar"},{"id":"airgapped-docs/prereqs","path":"/carbide-docs/docs/airgapped-docs/prereqs","sidebar":"carbideSidebar"},{"id":"airgapped-docs/uninstall","path":"/carbide-docs/docs/airgapped-docs/uninstall","sidebar":"carbideSidebar"},{"id":"feedback","path":"/carbide-docs/docs/feedback","sidebar":"carbideSidebar"},{"id":"intro","path":"/carbide-docs/docs/intro","sidebar":"carbideSidebar"},{"id":"known-limits","path":"/carbide-docs/docs/known-limits","sidebar":"carbideSidebar"},{"id":"registry-docs/architecture","path":"/carbide-docs/docs/registry-docs/architecture","sidebar":"carbideSidebar"},{"id":"registry-docs/carbide-charts","path":"/carbide-docs/docs/registry-docs/carbide-charts","sidebar":"carbideSidebar"},{"id":"registry-docs/configuration/kubernetes","path":"/carbide-docs/docs/registry-docs/configuration/kubernetes","sidebar":"carbideSidebar"},{"id":"registry-docs/configuration/rancher","path":"/carbide-docs/docs/registry-docs/configuration/rancher","sidebar":"carbideSidebar"},{"id":"registry-docs/copying-images","path":"/carbide-docs/docs/registry-docs/copying-images","sidebar":"carbideSidebar"},{"id":"registry-docs/downloading-images","path":"/carbide-docs/docs/registry-docs/downloading-images","sidebar":"carbideSidebar"},{"id":"registry-docs/enforcement","path":"/carbide-docs/docs/registry-docs/enforcement","sidebar":"carbideSidebar"},{"id":"registry-docs/introduction","path":"/carbide-docs/docs/registry-docs/introduction","sidebar":"carbideSidebar"},{"id":"registry-docs/loading-images","path":"/carbide-docs/docs/registry-docs/loading-images","sidebar":"carbideSidebar"},{"id":"registry-docs/prereqs","path":"/carbide-docs/docs/registry-docs/prereqs","sidebar":"carbideSidebar"},{"id":"registry-docs/release-cadence","path":"/carbide-docs/docs/registry-docs/release-cadence","sidebar":"carbideSidebar"},{"id":"registry-docs/uninstall-kubernetes","path":"/carbide-docs/docs/registry-docs/uninstall-kubernetes","sidebar":"carbideSidebar"},{"id":"registry-docs/uninstall-rancher","path":"/carbide-docs/docs/registry-docs/uninstall-rancher","sidebar":"carbideSidebar"},{"id":"registry-docs/validating-images","path":"/carbide-docs/docs/registry-docs/validating-images","sidebar":"carbideSidebar"},{"id":"stigatron-docs/create-scan","path":"/carbide-docs/docs/stigatron-docs/create-scan","sidebar":"carbideSidebar"},{"id":"stigatron-docs/installation","path":"/carbide-docs/docs/stigatron-docs/installation","sidebar":"carbideSidebar"},{"id":"stigatron-docs/introduction","path":"/carbide-docs/docs/stigatron-docs/introduction","sidebar":"carbideSidebar"},{"id":"stigatron-docs/prereqs","path":"/carbide-docs/docs/stigatron-docs/prereqs","sidebar":"carbideSidebar"},{"id":"stigatron-docs/uninstall","path":"/carbide-docs/docs/stigatron-docs/uninstall","sidebar":"carbideSidebar"},{"id":"stigatron-docs/using-heimdall","path":"/carbide-docs/docs/stigatron-docs/using-heimdall","sidebar":"carbideSidebar"},{"id":"/category/carbide-image-registry","path":"/carbide-docs/docs/category/carbide-image-registry","sidebar":"tutorialSidebar"},{"id":"/category/airgapped-docs","path":"/carbide-docs/docs/category/airgapped-docs","sidebar":"tutorialSidebar"},{"id":"/category/stigatron-security-operator","path":"/carbide-docs/docs/category/stigatron-security-operator","sidebar":"tutorialSidebar"}],"draftIds":[],"sidebars":{"tutorialSidebar":{"link":{"path":"/carbide-docs/docs/intro","label":"intro"}},"carbideSidebar":{"link":{"path":"/carbide-docs/docs/intro","label":"intro"}}}}],"breadcrumbs":true}},"docusaurus-lunr-search":{"default":{"fileNames":{"searchDoc":"search-doc-1730404253031.json","lunrIndex":"lunr-index-1730404253031.json"}}}}'),i=JSON.parse('{"defaultLocale":"en","locales":["en"],"path":"i18n","currentLocale":"en","localeConfigs":{"en":{"label":"English","direction":"ltr","htmlLang":"en","calendar":"gregory","path":"en"}}}');var l=n(2654);const s=JSON.parse('{"docusaurusVersion":"3.5.2","siteVersion":"0.1.1","pluginVersions":{"docusaurus-plugin-content-docs":{"type":"package","name":"@docusaurus/plugin-content-docs","version":"3.5.2"},"docusaurus-plugin-content-blog":{"type":"package","name":"@docusaurus/plugin-content-blog","version":"3.5.2"},"docusaurus-plugin-content-pages":{"type":"package","name":"@docusaurus/plugin-content-pages","version":"3.5.2"},"docusaurus-plugin-sitemap":{"type":"package","name":"@docusaurus/plugin-sitemap","version":"3.5.2"},"docusaurus-theme-classic":{"type":"package","name":"@docusaurus/theme-classic","version":"3.5.2"},"docusaurus-lunr-search":{"type":"package","name":"docusaurus-lunr-search","version":"3.5.0"}}}');var c=n(4848);const u={siteConfig:o.default,siteMetadata:s,globalData:a,i18n:i,codeTranslations:l},d=r.createContext(u);function p(e){let{children:t}=e;return(0,c.jsx)(d.Provider,{value:u,children:t})}},7489:(e,t,n)=>{"use strict";n.d(t,{A:()=>g});var r=n(6540),o=n(8193),a=n(5260),i=n(440),l=n(7907),s=n(3102),c=n(4848);function u(e){let{error:t,tryAgain:n}=e;return(0,c.jsxs)("div",{style:{display:"flex",flexDirection:"column",justifyContent:"center",alignItems:"flex-start",minHeight:"100vh",width:"100%",maxWidth:"80ch",fontSize:"20px",margin:"0 auto",padding:"1rem"},children:[(0,c.jsx)("h1",{style:{fontSize:"3rem"},children:"This page crashed"}),(0,c.jsx)("button",{type:"button",onClick:n,style:{margin:"1rem 0",fontSize:"2rem",cursor:"pointer",borderRadius:20,padding:"1rem"},children:"Try again"}),(0,c.jsx)(d,{error:t})]})}function d(e){let{error:t}=e;const n=(0,i.rA)(t).map((e=>e.message)).join("\n\nCause:\n");return(0,c.jsx)("p",{style:{whiteSpace:"pre-wrap"},children:n})}function p(e){let{children:t}=e;return(0,c.jsx)(s.W,{value:{plugin:{name:"docusaurus-core-error-boundary",id:"default"}},children:t})}function f(e){let{error:t,tryAgain:n}=e;return(0,c.jsx)(p,{children:(0,c.jsxs)(g,{fallback:()=>(0,c.jsx)(u,{error:t,tryAgain:n}),children:[(0,c.jsx)(a.A,{children:(0,c.jsx)("title",{children:"Page Error"})}),(0,c.jsx)(l.A,{children:(0,c.jsx)(u,{error:t,tryAgain:n})})]})})}const h=e=>(0,c.jsx)(f,{...e});class g extends r.Component{constructor(e){super(e),this.state={error:null}}componentDidCatch(e){o.A.canUseDOM&&this.setState({error:e})}render(){const{children:e}=this.props,{error:t}=this.state;if(t){const e={error:t,tryAgain:()=>this.setState({error:null})};return(this.props.fallback??h)(e)}return e??null}}},8193:(e,t,n)=>{"use strict";n.d(t,{A:()=>o});const r="undefined"!=typeof window&&"document"in window&&"createElement"in window.document,o={canUseDOM:r,canUseEventListeners:r&&("addEventListener"in window||"attachEvent"in window),canUseIntersectionObserver:r&&"IntersectionObserver"in window,canUseViewport:r&&"screen"in window}},5260:(e,t,n)=>{"use strict";n.d(t,{A:()=>a});n(6540);var r=n(545),o=n(4848);function a(e){return(0,o.jsx)(r.mg,{...e})}},8774:(e,t,n)=>{"use strict";n.d(t,{A:()=>f});var r=n(6540),o=n(4625),a=n(440),i=n(4586),l=n(6654),s=n(8193),c=n(3427),u=n(6025),d=n(4848);function p(e,t){let{isNavLink:n,to:p,href:f,activeClassName:h,isActive:g,"data-noBrokenLinkCheck":m,autoAddBaseUrl:y=!0,...b}=e;const{siteConfig:v}=(0,i.A)(),{trailingSlash:w,baseUrl:k}=v,x=v.future.experimental_router,{withBaseUrl:S}=(0,u.hH)(),E=(0,c.A)(),_=(0,r.useRef)(null);(0,r.useImperativeHandle)(t,(()=>_.current));const C=p||f;const A=(0,l.A)(C),T=C?.replace("pathname://","");let j=void 0!==T?(N=T,y&&(e=>e.startsWith("/"))(N)?S(N):N):void 0;var N;"hash"===x&&j?.startsWith("./")&&(j=j?.slice(1)),j&&A&&(j=(0,a.Ks)(j,{trailingSlash:w,baseUrl:k}));const R=(0,r.useRef)(!1),O=n?o.k2:o.N_,P=s.A.canUseIntersectionObserver,L=(0,r.useRef)(),I=()=>{R.current||null==j||(window.docusaurus.preload(j),R.current=!0)};(0,r.useEffect)((()=>(!P&&A&&s.A.canUseDOM&&null!=j&&window.docusaurus.prefetch(j),()=>{P&&L.current&&L.current.disconnect()})),[L,j,P,A]);const D=j?.startsWith("#")??!1,M=!b.target||"_self"===b.target,F=!j||!A||!M||D&&"hash"!==x;m||!D&&F||E.collectLink(j),b.id&&E.collectAnchor(b.id);const z={};return F?(0,d.jsx)("a",{ref:_,href:j,...C&&!A&&{target:"_blank",rel:"noopener noreferrer"},...b,...z}):(0,d.jsx)(O,{...b,onMouseEnter:I,onTouchStart:I,innerRef:e=>{_.current=e,P&&e&&A&&(L.current=new window.IntersectionObserver((t=>{t.forEach((t=>{e===t.target&&(t.isIntersecting||t.intersectionRatio>0)&&(L.current.unobserve(e),L.current.disconnect(),null!=j&&window.docusaurus.prefetch(j))}))})),L.current.observe(e))},to:j,...n&&{isActive:g,activeClassName:h},...z})}const f=r.forwardRef(p)},1312:(e,t,n)=>{"use strict";n.d(t,{A:()=>c,T:()=>s});var r=n(6540),o=n(4848);function a(e,t){const n=e.split(/(\{\w+\})/).map(((e,n)=>{if(n%2==1){const n=t?.[e.slice(1,-1)];if(void 0!==n)return n}return e}));return n.some((e=>(0,r.isValidElement)(e)))?n.map(((e,t)=>(0,r.isValidElement)(e)?r.cloneElement(e,{key:t}):e)).filter((e=>""!==e)):n.join("")}var i=n(2654);function l(e){let{id:t,message:n}=e;if(void 0===t&&void 0===n)throw new Error("Docusaurus translation declarations must have at least a translation id or a default translation message");return i[t??n]??n??t}function s(e,t){let{message:n,id:r}=e;return a(l({message:n,id:r}),t)}function c(e){let{children:t,id:n,values:r}=e;if(t&&"string"!=typeof t)throw console.warn("Illegal children",t),new Error("The Docusaurus component only accept simple string values");const i=l({message:t,id:n});return(0,o.jsx)(o.Fragment,{children:a(i,r)})}},7065:(e,t,n)=>{"use strict";n.d(t,{W:()=>r});const r="default"},6654:(e,t,n)=>{"use strict";function r(e){return/^(?:\w*:|\/\/)/.test(e)}function o(e){return void 0!==e&&!r(e)}n.d(t,{A:()=>o,z:()=>r})},6025:(e,t,n)=>{"use strict";n.d(t,{Ay:()=>l,hH:()=>i});var r=n(6540),o=n(4586),a=n(6654);function i(){const{siteConfig:e}=(0,o.A)(),{baseUrl:t,url:n}=e,i=e.future.experimental_router,l=(0,r.useCallback)(((e,r)=>function(e){let{siteUrl:t,baseUrl:n,url:r,options:{forcePrependBaseUrl:o=!1,absolute:i=!1}={},router:l}=e;if(!r||r.startsWith("#")||(0,a.z)(r))return r;if("hash"===l)return r.startsWith("/")?`.${r}`:`./${r}`;if(o)return n+r.replace(/^\//,"");if(r===n.replace(/\/$/,""))return n;const s=r.startsWith(n)?r:n+r.replace(/^\//,"");return i?t+s:s}({siteUrl:n,baseUrl:t,url:e,options:r,router:i})),[n,t,i]);return{withBaseUrl:l}}function l(e,t){void 0===t&&(t={});const{withBaseUrl:n}=i();return n(e,t)}},3427:(e,t,n)=>{"use strict";n.d(t,{A:()=>i});var r=n(6540);n(4848);const o=r.createContext({collectAnchor:()=>{},collectLink:()=>{}}),a=()=>(0,r.useContext)(o);function i(){return a()}},4586:(e,t,n)=>{"use strict";n.d(t,{A:()=>a});var r=n(6540),o=n(6988);function a(){return(0,r.useContext)(o.o)}},6588:(e,t,n)=>{"use strict";n.d(t,{P_:()=>i,kh:()=>a});var r=n(4586),o=n(7065);function a(e,t){void 0===t&&(t={});const n=function(){const{globalData:e}=(0,r.A)();return e}()[e];if(!n&&t.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin.`);return n}function i(e,t,n){void 0===t&&(t=o.W),void 0===n&&(n={});const r=a(e),i=r?.[t];if(!i&&n.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin with id "${t}".`);return i}},2303:(e,t,n)=>{"use strict";n.d(t,{A:()=>a});var r=n(6540),o=n(6125);function a(){return(0,r.useContext)(o.o)}},205:(e,t,n)=>{"use strict";n.d(t,{A:()=>o});var r=n(6540);const o=n(8193).A.canUseDOM?r.useLayoutEffect:r.useEffect},6921:(e,t,n)=>{"use strict";n.d(t,{A:()=>o});const r=e=>"object"==typeof e&&!!e&&Object.keys(e).length>0;function o(e){const t={};return function e(n,o){Object.entries(n).forEach((n=>{let[a,i]=n;const l=o?`${o}.${a}`:a;r(i)?e(i,l):t[l]=i}))}(e),t}},3102:(e,t,n)=>{"use strict";n.d(t,{W:()=>i,o:()=>a});var r=n(6540),o=n(4848);const a=r.createContext(null);function i(e){let{children:t,value:n}=e;const i=r.useContext(a),l=(0,r.useMemo)((()=>function(e){let{parent:t,value:n}=e;if(!t){if(!n)throw new Error("Unexpected: no Docusaurus route context found");if(!("plugin"in n))throw new Error("Unexpected: Docusaurus topmost route context has no `plugin` attribute");return n}const r={...t.data,...n?.data};return{plugin:t.plugin,data:r}}({parent:i,value:n})),[i,n]);return(0,o.jsx)(a.Provider,{value:l,children:t})}},3886:(e,t,n)=>{"use strict";n.d(t,{VQ:()=>m,g1:()=>b});var r=n(6540),o=n(8295),a=n(7065),i=n(6342),l=n(679),s=n(9532),c=n(4848);const u=e=>`docs-preferred-version-${e}`,d={save:(e,t,n)=>{(0,l.Wf)(u(e),{persistence:t}).set(n)},read:(e,t)=>(0,l.Wf)(u(e),{persistence:t}).get(),clear:(e,t)=>{(0,l.Wf)(u(e),{persistence:t}).del()}},p=e=>Object.fromEntries(e.map((e=>[e,{preferredVersionName:null}])));const f=r.createContext(null);function h(){const e=(0,o.Gy)(),t=(0,i.p)().docs.versionPersistence,n=(0,r.useMemo)((()=>Object.keys(e)),[e]),[a,l]=(0,r.useState)((()=>p(n)));(0,r.useEffect)((()=>{l(function(e){let{pluginIds:t,versionPersistence:n,allDocsData:r}=e;function o(e){const t=d.read(e,n);return r[e].versions.some((e=>e.name===t))?{preferredVersionName:t}:(d.clear(e,n),{preferredVersionName:null})}return Object.fromEntries(t.map((e=>[e,o(e)])))}({allDocsData:e,versionPersistence:t,pluginIds:n}))}),[e,t,n]);return[a,(0,r.useMemo)((()=>({savePreferredVersion:function(e,n){d.save(e,t,n),l((t=>({...t,[e]:{preferredVersionName:n}})))}})),[t])]}function g(e){let{children:t}=e;const n=h();return(0,c.jsx)(f.Provider,{value:n,children:t})}function m(e){let{children:t}=e;return(0,c.jsx)(g,{children:t})}function y(){const e=(0,r.useContext)(f);if(!e)throw new s.dV("DocsPreferredVersionContextProvider");return e}function b(e){void 0===e&&(e=a.W);const t=(0,o.ht)(e),[n,i]=y(),{preferredVersionName:l}=n[e];return{preferredVersion:t.versions.find((e=>e.name===l))??null,savePreferredVersionName:(0,r.useCallback)((t=>{i.savePreferredVersion(e,t)}),[i,e])}}},609:(e,t,n)=>{"use strict";n.d(t,{V:()=>s,t:()=>c});var r=n(6540),o=n(9532),a=n(4848);const i=Symbol("EmptyContext"),l=r.createContext(i);function s(e){let{children:t,name:n,items:o}=e;const i=(0,r.useMemo)((()=>n&&o?{name:n,items:o}:null),[n,o]);return(0,a.jsx)(l.Provider,{value:i,children:t})}function c(){const e=(0,r.useContext)(l);if(e===i)throw new o.dV("DocsSidebarProvider");return e}},4718:(e,t,n)=>{"use strict";n.d(t,{d1:()=>C,Nr:()=>f,w8:()=>y,$S:()=>h,cC:()=>p,B5:()=>_,Vd:()=>x,QB:()=>E,fW:()=>S,OF:()=>k,Y:()=>v});var r=n(6540),o=n(6347),a=n(2831),i=n(8295),l=n(9169);function s(e){return Array.from(new Set(e))}var c=n(3886),u=n(3025),d=n(609);function p(e){const t=(0,u.r)();if(!e)return;const n=t.docs[e];if(!n)throw new Error(`no version doc found by id=${e}`);return n}function f(e){return"link"!==e.type||e.unlisted?"category"===e.type?function(e){if(e.href&&!e.linkUnlisted)return e.href;for(const t of e.items){const e=f(t);if(e)return e}}(e):void 0:e.href}function h(){const{pathname:e}=(0,o.zy)(),t=(0,d.t)();if(!t)throw new Error("Unexpected: cant find current sidebar in context");const n=w({sidebarItems:t.items,pathname:e,onlyCategories:!0}).slice(-1)[0];if(!n)throw new Error(`${e} is not associated with a category. useCurrentSidebarCategory() should only be used on category index pages.`);return n}const g=(e,t)=>void 0!==e&&(0,l.ys)(e,t),m=(e,t)=>e.some((e=>y(e,t)));function y(e,t){return"link"===e.type?g(e.href,t):"category"===e.type&&(g(e.href,t)||m(e.items,t))}function b(e,t){switch(e.type){case"category":return y(e,t)||e.items.some((e=>b(e,t)));case"link":return!e.unlisted||y(e,t);default:return!0}}function v(e,t){return(0,r.useMemo)((()=>e.filter((e=>b(e,t)))),[e,t])}function w(e){let{sidebarItems:t,pathname:n,onlyCategories:r=!1}=e;const o=[];return function e(t){for(const a of t)if("category"===a.type&&((0,l.ys)(a.href,n)||e(a.items))||"link"===a.type&&(0,l.ys)(a.href,n)){return r&&"category"!==a.type||o.unshift(a),!0}return!1}(t),o}function k(){const e=(0,d.t)(),{pathname:t}=(0,o.zy)(),n=(0,i.vT)()?.pluginData.breadcrumbs;return!1!==n&&e?w({sidebarItems:e.items,pathname:t}):null}function x(e){const{activeVersion:t}=(0,i.zK)(e),{preferredVersion:n}=(0,c.g1)(e),o=(0,i.r7)(e);return(0,r.useMemo)((()=>s([t,n,o].filter(Boolean))),[t,n,o])}function S(e,t){const n=x(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.sidebars?Object.entries(e.sidebars):[])),r=t.find((t=>t[0]===e));if(!r)throw new Error(`Can't find any sidebar with id "${e}" in version${n.length>1?"s":""} ${n.map((e=>e.name)).join(", ")}".\nAvailable sidebar ids are:\n- ${t.map((e=>e[0])).join("\n- ")}`);return r[1]}),[e,n])}function E(e,t){const n=x(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.docs)),r=t.find((t=>t.id===e));if(!r){if(n.flatMap((e=>e.draftIds)).includes(e))return null;throw new Error(`Couldn't find any doc with id "${e}" in version${n.length>1?"s":""} "${n.map((e=>e.name)).join(", ")}".\nAvailable doc ids are:\n- ${s(t.map((e=>e.id))).join("\n- ")}`)}return r}),[e,n])}function _(e){let{route:t}=e;const n=(0,o.zy)(),r=(0,u.r)(),i=t.routes,l=i.find((e=>(0,o.B6)(n.pathname,e)));if(!l)return null;const s=l.sidebar,c=s?r.docsSidebars[s]:void 0;return{docElement:(0,a.v)(i),sidebarName:s,sidebarItems:c}}function C(e){return e.filter((e=>!("category"===e.type||"link"===e.type)||!!f(e)))}},3025:(e,t,n)=>{"use strict";n.d(t,{n:()=>l,r:()=>s});var r=n(6540),o=n(9532),a=n(4848);const i=r.createContext(null);function l(e){let{children:t,version:n}=e;return(0,a.jsx)(i.Provider,{value:n,children:t})}function s(){const e=(0,r.useContext)(i);if(null===e)throw new o.dV("DocsVersionProvider");return e}},8295:(e,t,n)=>{"use strict";n.d(t,{zK:()=>f,vT:()=>u,Gy:()=>s,HW:()=>h,ht:()=>c,r7:()=>p,jh:()=>d});var r=n(6347),o=n(6588);const a=e=>e.versions.find((e=>e.isLast));function i(e,t){const n=function(e,t){return[...e.versions].sort(((e,t)=>e.path===t.path?0:e.path.includes(t.path)?-1:t.path.includes(e.path)?1:0)).find((e=>!!(0,r.B6)(t,{path:e.path,exact:!1,strict:!1})))}(e,t),o=n?.docs.find((e=>!!(0,r.B6)(t,{path:e.path,exact:!0,strict:!1})));return{activeVersion:n,activeDoc:o,alternateDocVersions:o?function(t){const n={};return e.versions.forEach((e=>{e.docs.forEach((r=>{r.id===t&&(n[e.name]=r)}))})),n}(o.id):{}}}const l={},s=()=>(0,o.kh)("docusaurus-plugin-content-docs")??l,c=e=>{try{return(0,o.P_)("docusaurus-plugin-content-docs",e,{failfast:!0})}catch(t){throw new Error("You are using a feature of the Docusaurus docs plugin, but this plugin does not seem to be enabled"+("Default"===e?"":` (pluginId=${e}`),{cause:t})}};function u(e){void 0===e&&(e={});const t=s(),{pathname:n}=(0,r.zy)();return function(e,t,n){void 0===n&&(n={});const o=Object.entries(e).sort(((e,t)=>t[1].path.localeCompare(e[1].path))).find((e=>{let[,n]=e;return!!(0,r.B6)(t,{path:n.path,exact:!1,strict:!1})})),a=o?{pluginId:o[0],pluginData:o[1]}:void 0;if(!a&&n.failfast)throw new Error(`Can't find active docs plugin for "${t}" pathname, while it was expected to be found. Maybe you tried to use a docs feature that can only be used on a docs-related page? Existing docs plugin paths are: ${Object.values(e).map((e=>e.path)).join(", ")}`);return a}(t,n,e)}function d(e){return c(e).versions}function p(e){const t=c(e);return a(t)}function f(e){const t=c(e),{pathname:n}=(0,r.zy)();return i(t,n)}function h(e){const t=c(e),{pathname:n}=(0,r.zy)();return function(e,t){const n=a(e);return{latestDocSuggestion:i(e,t).alternateDocVersions[n.name],latestVersionSuggestion:n}}(t,n)}},6294:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>a});var r=n(5947),o=n.n(r);o().configure({showSpinner:!1});const a={onRouteUpdate(e){let{location:t,previousLocation:n}=e;if(n&&t.pathname!==n.pathname){const e=window.setTimeout((()=>{o().start()}),200);return()=>window.clearTimeout(e)}},onRouteDidUpdate(){o().done()}}},6134:(e,t,n)=>{"use strict";var r=n(1765),o=n(4784);!function(e){const{themeConfig:{prism:t}}=o.default,{additionalLanguages:r}=t;globalThis.Prism=e,r.forEach((e=>{"php"===e&&n(9700),n(8692)(`./prism-${e}`)})),delete globalThis.Prism}(r.My)},1107:(e,t,n)=>{"use strict";n.d(t,{A:()=>u});n(6540);var r=n(4164),o=n(1312),a=n(6342),i=n(8774),l=n(3427);const s={anchorWithStickyNavbar:"anchorWithStickyNavbar_LWe7",anchorWithHideOnScrollNavbar:"anchorWithHideOnScrollNavbar_WYt5"};var c=n(4848);function u(e){let{as:t,id:n,...u}=e;const d=(0,l.A)(),{navbar:{hideOnScroll:p}}=(0,a.p)();if("h1"===t||!n)return(0,c.jsx)(t,{...u,id:void 0});d.collectAnchor(n);const f=(0,o.T)({id:"theme.common.headingLinkTitle",message:"Direct link to {heading}",description:"Title for link to heading"},{heading:"string"==typeof u.children?u.children:n});return(0,c.jsxs)(t,{...u,className:(0,r.A)("anchor",p?s.anchorWithHideOnScrollNavbar:s.anchorWithStickyNavbar,u.className),id:n,children:[u.children,(0,c.jsx)(i.A,{className:"hash-link",to:`#${n}`,"aria-label":f,title:f,children:"\u200b"})]})}},3186:(e,t,n)=>{"use strict";n.d(t,{A:()=>a});n(6540);const r={iconExternalLink:"iconExternalLink_nPIU"};var o=n(4848);function a(e){let{width:t=13.5,height:n=13.5}=e;return(0,o.jsx)("svg",{width:t,height:n,"aria-hidden":"true",viewBox:"0 0 24 24",className:r.iconExternalLink,children:(0,o.jsx)("path",{fill:"currentColor",d:"M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"})})}},7907:(e,t,n)=>{"use strict";n.d(t,{A:()=>vt});var r=n(6540),o=n(4164),a=n(7489),i=n(1003),l=n(6347),s=n(1312),c=n(5062),u=n(4848);const d="__docusaurus_skipToContent_fallback";function p(e){e.setAttribute("tabindex","-1"),e.focus(),e.removeAttribute("tabindex")}function f(){const e=(0,r.useRef)(null),{action:t}=(0,l.W6)(),n=(0,r.useCallback)((e=>{e.preventDefault();const t=document.querySelector("main:first-of-type")??document.getElementById(d);t&&p(t)}),[]);return(0,c.$)((n=>{let{location:r}=n;e.current&&!r.hash&&"PUSH"===t&&p(e.current)})),{containerRef:e,onClick:n}}const h=(0,s.T)({id:"theme.common.skipToMainContent",description:"The skip to content label used for accessibility, allowing to rapidly navigate to main content with keyboard tab/enter navigation",message:"Skip to main content"});function g(e){const t=e.children??h,{containerRef:n,onClick:r}=f();return(0,u.jsx)("div",{ref:n,role:"region","aria-label":h,children:(0,u.jsx)("a",{...e,href:`#${d}`,onClick:r,children:t})})}var m=n(7559),y=n(4090);const b={skipToContent:"skipToContent_fXgn"};function v(){return(0,u.jsx)(g,{className:b.skipToContent})}var w=n(6342),k=n(5041);function x(e){let{width:t=21,height:n=21,color:r="currentColor",strokeWidth:o=1.2,className:a,...i}=e;return(0,u.jsx)("svg",{viewBox:"0 0 15 15",width:t,height:n,...i,children:(0,u.jsx)("g",{stroke:r,strokeWidth:o,children:(0,u.jsx)("path",{d:"M.75.75l13.5 13.5M14.25.75L.75 14.25"})})})}const S={closeButton:"closeButton_CVFx"};function E(e){return(0,u.jsx)("button",{type:"button","aria-label":(0,s.T)({id:"theme.AnnouncementBar.closeButtonAriaLabel",message:"Close",description:"The ARIA label for close button of announcement bar"}),...e,className:(0,o.A)("clean-btn close",S.closeButton,e.className),children:(0,u.jsx)(x,{width:14,height:14,strokeWidth:3.1})})}const _={content:"content_knG7"};function C(e){const{announcementBar:t}=(0,w.p)(),{content:n}=t;return(0,u.jsx)("div",{...e,className:(0,o.A)(_.content,e.className),dangerouslySetInnerHTML:{__html:n}})}const A={announcementBar:"announcementBar_mb4j",announcementBarPlaceholder:"announcementBarPlaceholder_vyr4",announcementBarClose:"announcementBarClose_gvF7",announcementBarContent:"announcementBarContent_xLdY"};function T(){const{announcementBar:e}=(0,w.p)(),{isActive:t,close:n}=(0,k.M)();if(!t)return null;const{backgroundColor:r,textColor:o,isCloseable:a}=e;return(0,u.jsxs)("div",{className:A.announcementBar,style:{backgroundColor:r,color:o},role:"banner",children:[a&&(0,u.jsx)("div",{className:A.announcementBarPlaceholder}),(0,u.jsx)(C,{className:A.announcementBarContent}),a&&(0,u.jsx)(E,{onClick:n,className:A.announcementBarClose})]})}var j=n(9876),N=n(3104);var R=n(9532),O=n(5600);const P=r.createContext(null);function L(e){let{children:t}=e;const n=function(){const e=(0,j.M)(),t=(0,O.YL)(),[n,o]=(0,r.useState)(!1),a=null!==t.component,i=(0,R.ZC)(a);return(0,r.useEffect)((()=>{a&&!i&&o(!0)}),[a,i]),(0,r.useEffect)((()=>{a?e.shown||o(!0):o(!1)}),[e.shown,a]),(0,r.useMemo)((()=>[n,o]),[n])}();return(0,u.jsx)(P.Provider,{value:n,children:t})}function I(e){if(e.component){const t=e.component;return(0,u.jsx)(t,{...e.props})}}function D(){const e=(0,r.useContext)(P);if(!e)throw new R.dV("NavbarSecondaryMenuDisplayProvider");const[t,n]=e,o=(0,r.useCallback)((()=>n(!1)),[n]),a=(0,O.YL)();return(0,r.useMemo)((()=>({shown:t,hide:o,content:I(a)})),[o,a,t])}function M(e){let{header:t,primaryMenu:n,secondaryMenu:r}=e;const{shown:a}=D();return(0,u.jsxs)("div",{className:"navbar-sidebar",children:[t,(0,u.jsxs)("div",{className:(0,o.A)("navbar-sidebar__items",{"navbar-sidebar__items--show-secondary":a}),children:[(0,u.jsx)("div",{className:"navbar-sidebar__item menu",children:n}),(0,u.jsx)("div",{className:"navbar-sidebar__item menu",children:r})]})]})}var F=n(5293),z=n(2303);function B(e){return(0,u.jsx)("svg",{viewBox:"0 0 24 24",width:24,height:24,...e,children:(0,u.jsx)("path",{fill:"currentColor",d:"M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"})})}function $(e){return(0,u.jsx)("svg",{viewBox:"0 0 24 24",width:24,height:24,...e,children:(0,u.jsx)("path",{fill:"currentColor",d:"M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"})})}const U={toggle:"toggle_vylO",toggleButton:"toggleButton_gllP",darkToggleIcon:"darkToggleIcon_wfgR",lightToggleIcon:"lightToggleIcon_pyhR",toggleButtonDisabled:"toggleButtonDisabled_aARS"};function q(e){let{className:t,buttonClassName:n,value:r,onChange:a}=e;const i=(0,z.A)(),l=(0,s.T)({message:"Switch between dark and light mode (currently {mode})",id:"theme.colorToggle.ariaLabel",description:"The ARIA label for the navbar color mode toggle"},{mode:"dark"===r?(0,s.T)({message:"dark mode",id:"theme.colorToggle.ariaLabel.mode.dark",description:"The name for the dark color mode"}):(0,s.T)({message:"light mode",id:"theme.colorToggle.ariaLabel.mode.light",description:"The name for the light color mode"})});return(0,u.jsx)("div",{className:(0,o.A)(U.toggle,t),children:(0,u.jsxs)("button",{className:(0,o.A)("clean-btn",U.toggleButton,!i&&U.toggleButtonDisabled,n),type:"button",onClick:()=>a("dark"===r?"light":"dark"),disabled:!i,title:l,"aria-label":l,"aria-live":"polite",children:[(0,u.jsx)(B,{className:(0,o.A)(U.toggleIcon,U.lightToggleIcon)}),(0,u.jsx)($,{className:(0,o.A)(U.toggleIcon,U.darkToggleIcon)})]})})}const H=r.memo(q),G={darkNavbarColorModeToggle:"darkNavbarColorModeToggle_X3D1"};function W(e){let{className:t}=e;const n=(0,w.p)().navbar.style,r=(0,w.p)().colorMode.disableSwitch,{colorMode:o,setColorMode:a}=(0,F.G)();return r?null:(0,u.jsx)(H,{className:t,buttonClassName:"dark"===n?G.darkNavbarColorModeToggle:void 0,value:o,onChange:a})}var V=n(3465);function K(){return(0,u.jsx)(V.A,{className:"navbar__brand",imageClassName:"navbar__logo",titleClassName:"navbar__title text--truncate"})}function Q(){const e=(0,j.M)();return(0,u.jsx)("button",{type:"button","aria-label":(0,s.T)({id:"theme.docs.sidebar.closeSidebarButtonAriaLabel",message:"Close navigation bar",description:"The ARIA label for close button of mobile sidebar"}),className:"clean-btn navbar-sidebar__close",onClick:()=>e.toggle(),children:(0,u.jsx)(x,{color:"var(--ifm-color-emphasis-600)"})})}function Y(){return(0,u.jsxs)("div",{className:"navbar-sidebar__brand",children:[(0,u.jsx)(K,{}),(0,u.jsx)(W,{className:"margin-right--md"}),(0,u.jsx)(Q,{})]})}var J=n(8774),Z=n(6025),X=n(6654);function ee(e,t){return void 0!==e&&void 0!==t&&new RegExp(e,"gi").test(t)}var te=n(3186);function ne(e){let{activeBasePath:t,activeBaseRegex:n,to:r,href:o,label:a,html:i,isDropdownLink:l,prependBaseUrlToHref:s,...c}=e;const d=(0,Z.Ay)(r),p=(0,Z.Ay)(t),f=(0,Z.Ay)(o,{forcePrependBaseUrl:!0}),h=a&&o&&!(0,X.A)(o),g=i?{dangerouslySetInnerHTML:{__html:i}}:{children:(0,u.jsxs)(u.Fragment,{children:[a,h&&(0,u.jsx)(te.A,{...l&&{width:12,height:12}})]})};return o?(0,u.jsx)(J.A,{href:s?f:o,...c,...g}):(0,u.jsx)(J.A,{to:d,isNavLink:!0,...(t||n)&&{isActive:(e,t)=>n?ee(n,t.pathname):t.pathname.startsWith(p)},...c,...g})}function re(e){let{className:t,isDropdownItem:n=!1,...r}=e;const a=(0,u.jsx)(ne,{className:(0,o.A)(n?"dropdown__link":"navbar__item navbar__link",t),isDropdownLink:n,...r});return n?(0,u.jsx)("li",{children:a}):a}function oe(e){let{className:t,isDropdownItem:n,...r}=e;return(0,u.jsx)("li",{className:"menu__list-item",children:(0,u.jsx)(ne,{className:(0,o.A)("menu__link",t),...r})})}function ae(e){let{mobile:t=!1,position:n,...r}=e;const o=t?oe:re;return(0,u.jsx)(o,{...r,activeClassName:r.activeClassName??(t?"menu__link--active":"navbar__link--active")})}var ie=n(1422),le=n(9169),se=n(4586);const ce="dropdownNavbarItemMobile_S0Fm";function ue(e,t){return e.some((e=>function(e,t){return!!(0,le.ys)(e.to,t)||!!ee(e.activeBaseRegex,t)||!(!e.activeBasePath||!t.startsWith(e.activeBasePath))}(e,t)))}function de(e){let{items:t,position:n,className:a,onClick:i,...l}=e;const s=(0,r.useRef)(null),[c,d]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{const e=e=>{s.current&&!s.current.contains(e.target)&&d(!1)};return document.addEventListener("mousedown",e),document.addEventListener("touchstart",e),document.addEventListener("focusin",e),()=>{document.removeEventListener("mousedown",e),document.removeEventListener("touchstart",e),document.removeEventListener("focusin",e)}}),[s]),(0,u.jsxs)("div",{ref:s,className:(0,o.A)("navbar__item","dropdown","dropdown--hoverable",{"dropdown--right":"right"===n,"dropdown--show":c}),children:[(0,u.jsx)(ne,{"aria-haspopup":"true","aria-expanded":c,role:"button",href:l.to?void 0:"#",className:(0,o.A)("navbar__link",a),...l,onClick:l.to?void 0:e=>e.preventDefault(),onKeyDown:e=>{"Enter"===e.key&&(e.preventDefault(),d(!c))},children:l.children??l.label}),(0,u.jsx)("ul",{className:"dropdown__menu",children:t.map(((e,t)=>(0,r.createElement)(Re,{isDropdownItem:!0,activeClassName:"dropdown__link--active",...e,key:t})))})]})}function pe(e){let{items:t,className:n,position:a,onClick:i,...s}=e;const c=function(){const{siteConfig:{baseUrl:e}}=(0,se.A)(),{pathname:t}=(0,l.zy)();return t.replace(e,"/")}(),d=ue(t,c),{collapsed:p,toggleCollapsed:f,setCollapsed:h}=(0,ie.u)({initialState:()=>!d});return(0,r.useEffect)((()=>{d&&h(!d)}),[c,d,h]),(0,u.jsxs)("li",{className:(0,o.A)("menu__list-item",{"menu__list-item--collapsed":p}),children:[(0,u.jsx)(ne,{role:"button",className:(0,o.A)(ce,"menu__link menu__link--sublist menu__link--sublist-caret",n),...s,onClick:e=>{e.preventDefault(),f()},children:s.children??s.label}),(0,u.jsx)(ie.N,{lazy:!0,as:"ul",className:"menu__list",collapsed:p,children:t.map(((e,t)=>(0,r.createElement)(Re,{mobile:!0,isDropdownItem:!0,onClick:i,activeClassName:"menu__link--active",...e,key:t})))})]})}function fe(e){let{mobile:t=!1,...n}=e;const r=t?pe:de;return(0,u.jsx)(r,{...n})}var he=n(2131);function ge(e){let{width:t=20,height:n=20,...r}=e;return(0,u.jsx)("svg",{viewBox:"0 0 24 24",width:t,height:n,"aria-hidden":!0,...r,children:(0,u.jsx)("path",{fill:"currentColor",d:"M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"})})}const me="iconLanguage_nlXk";function ye(e){var t,n,r="";if("string"==typeof e||"number"==typeof e)r+=e;else if("object"==typeof e)if(Array.isArray(e))for(t=0;t{if(!e.state?.highlightState||0===e.state.highlightState.wordToHighlight.length)return;a(e.state.highlightState);const{highlightState:n,...r}=e.state;t.replace({...e,state:r})}),[e.state?.highlightState,t,e]),(0,r.useEffect)((()=>{if(0===o.wordToHighlight.length)return;const e=document.getElementsByTagName("article")[0]??document.getElementsByTagName("main")[0];if(!e)return;const t=new(ke())(e),n={ignoreJoiners:!0};return t.mark(o.wordToHighlight,n),()=>t.unmark(n)}),[o,n]),null}const Se=e=>{const t=(0,r.useRef)(!1),o=(0,r.useRef)(null),[a,i]=(0,r.useState)(!1),s=(0,l.W6)(),{siteConfig:c={}}=(0,se.A)(),d=(c.plugins||[]).find((e=>Array.isArray(e)&&"string"==typeof e[0]&&e[0].includes("docusaurus-lunr-search"))),p=(0,z.A)(),{baseUrl:f}=c,h=d&&d[1]?.assetUrl||f,g=(0,ve.P_)("docusaurus-lunr-search"),m=()=>{t.current||(Promise.all([fetch(`${h}${g.fileNames.searchDoc}`).then((e=>e.json())),fetch(`${h}${g.fileNames.lunrIndex}`).then((e=>e.json())),Promise.all([n.e(591),n.e(577)]).then(n.bind(n,5765)),Promise.all([n.e(869),n.e(278)]).then(n.bind(n,9278))]).then((e=>{let[t,n,{default:r}]=e;const{searchDocs:o,options:a}=t;o&&0!==o.length&&(((e,t,n,r)=>{new n({searchDocs:e,searchIndex:t,baseUrl:f,inputSelector:"#search_input_react",handleSelected:(e,t,n)=>{const o=n.url||"/";document.createElement("a").href=o,e.setVal(""),t.target.blur();let a="";if(r.highlightResult)try{const e=(n.text||n.subcategory||n.title).match(new RegExp("\\w*","g"));if(e&&e.length>0){const t=document.createElement("div");t.innerHTML=e[0],a=t.textContent}}catch(i){console.log(i)}s.push(o,{highlightState:{wordToHighlight:a}})},maxHits:r.maxHits})})(o,n,r,a),i(!0))})),t.current=!0)},y=(0,r.useCallback)((t=>{o.current.contains(t.target)||o.current.focus(),e.handleSearchBarToggle&&e.handleSearchBarToggle(!e.isSearchBarExpanded)}),[e.isSearchBarExpanded]);let b;return p&&(m(),b=window.navigator.platform.startsWith("Mac")?"Search \u2318+K":"Search Ctrl+K"),(0,r.useEffect)((()=>{e.autoFocus&&a&&o.current.focus()}),[a]),(0,u.jsxs)("div",{className:"navbar__search",children:[(0,u.jsx)("span",{"aria-label":"expand searchbar",role:"button",className:be("search-icon",{"search-icon-hidden":e.isSearchBarExpanded}),onClick:y,onKeyDown:y,tabIndex:0}),(0,u.jsx)("input",{id:"search_input_react",type:"search",placeholder:a?b:"Loading...","aria-label":"Search",className:be("navbar__search-input",{"search-bar-expanded":e.isSearchBarExpanded},{"search-bar":!e.isSearchBarExpanded}),onClick:m,onMouseOver:m,onFocus:y,onBlur:y,ref:o,disabled:!a}),(0,u.jsx)(xe,{})]},"search-box")},Ee={navbarSearchContainer:"navbarSearchContainer_Bca1"};function _e(e){let{children:t,className:n}=e;return(0,u.jsx)("div",{className:(0,o.A)(n,Ee.navbarSearchContainer),children:t})}var Ce=n(8295),Ae=n(4718);var Te=n(3886);function je(e,t){return t.alternateDocVersions[e.name]??function(e){return e.docs.find((t=>t.id===e.mainDocId))}(e)}const Ne={default:ae,localeDropdown:function(e){let{mobile:t,dropdownItemsBefore:n,dropdownItemsAfter:r,queryString:o="",...a}=e;const{i18n:{currentLocale:i,locales:c,localeConfigs:d}}=(0,se.A)(),p=(0,he.o)(),{search:f,hash:h}=(0,l.zy)(),g=[...n,...c.map((e=>{const n=`${`pathname://${p.createUrl({locale:e,fullyQualified:!1})}`}${f}${h}${o}`;return{label:d[e].label,lang:d[e].htmlLang,to:n,target:"_self",autoAddBaseUrl:!1,className:e===i?t?"menu__link--active":"dropdown__link--active":""}})),...r],m=t?(0,s.T)({message:"Languages",id:"theme.navbar.mobileLanguageDropdown.label",description:"The label for the mobile language switcher dropdown"}):d[i].label;return(0,u.jsx)(fe,{...a,mobile:t,label:(0,u.jsxs)(u.Fragment,{children:[(0,u.jsx)(ge,{className:me}),m]}),items:g})},search:function(e){let{mobile:t,className:n}=e;return t?null:(0,u.jsx)(_e,{className:n,children:(0,u.jsx)(Se,{})})},dropdown:fe,html:function(e){let{value:t,className:n,mobile:r=!1,isDropdownItem:a=!1}=e;const i=a?"li":"div";return(0,u.jsx)(i,{className:(0,o.A)({navbar__item:!r&&!a,"menu__list-item":r},n),dangerouslySetInnerHTML:{__html:t}})},doc:function(e){let{docId:t,label:n,docsPluginId:r,...o}=e;const{activeDoc:a}=(0,Ce.zK)(r),i=(0,Ae.QB)(t,r),l=a?.path===i?.path;return null===i||i.unlisted&&!l?null:(0,u.jsx)(ae,{exact:!0,...o,isActive:()=>l||!!a?.sidebar&&a.sidebar===i.sidebar,label:n??i.id,to:i.path})},docSidebar:function(e){let{sidebarId:t,label:n,docsPluginId:r,...o}=e;const{activeDoc:a}=(0,Ce.zK)(r),i=(0,Ae.fW)(t,r).link;if(!i)throw new Error(`DocSidebarNavbarItem: Sidebar with ID "${t}" doesn't have anything to be linked to.`);return(0,u.jsx)(ae,{exact:!0,...o,isActive:()=>a?.sidebar===t,label:n??i.label,to:i.path})},docsVersion:function(e){let{label:t,to:n,docsPluginId:r,...o}=e;const a=(0,Ae.Vd)(r)[0],i=t??a.label,l=n??(e=>e.docs.find((t=>t.id===e.mainDocId)))(a).path;return(0,u.jsx)(ae,{...o,label:i,to:l})},docsVersionDropdown:function(e){let{mobile:t,docsPluginId:n,dropdownActiveClassDisabled:r,dropdownItemsBefore:o,dropdownItemsAfter:a,...i}=e;const{search:c,hash:d}=(0,l.zy)(),p=(0,Ce.zK)(n),f=(0,Ce.jh)(n),{savePreferredVersionName:h}=(0,Te.g1)(n),g=[...o,...f.map((function(e){const t=je(e,p);return{label:e.label,to:`${t.path}${c}${d}`,isActive:()=>e===p.activeVersion,onClick:()=>h(e.name)}})),...a],m=(0,Ae.Vd)(n)[0],y=t&&g.length>1?(0,s.T)({id:"theme.navbar.mobileVersionsDropdown.label",message:"Versions",description:"The label for the navbar versions dropdown on mobile view"}):m.label,b=t&&g.length>1?void 0:je(m,p).path;return g.length<=1?(0,u.jsx)(ae,{...i,mobile:t,label:y,to:b,isActive:r?()=>!1:void 0}):(0,u.jsx)(fe,{...i,mobile:t,label:y,to:b,items:g,isActive:r?()=>!1:void 0})}};function Re(e){let{type:t,...n}=e;const r=function(e,t){return e&&"default"!==e?e:"items"in t?"dropdown":"default"}(t,n),o=Ne[r];if(!o)throw new Error(`No NavbarItem component found for type "${t}".`);return(0,u.jsx)(o,{...n})}function Oe(){const e=(0,j.M)(),t=(0,w.p)().navbar.items;return(0,u.jsx)("ul",{className:"menu__list",children:t.map(((t,n)=>(0,r.createElement)(Re,{mobile:!0,...t,onClick:()=>e.toggle(),key:n})))})}function Pe(e){return(0,u.jsx)("button",{...e,type:"button",className:"clean-btn navbar-sidebar__back",children:(0,u.jsx)(s.A,{id:"theme.navbar.mobileSidebarSecondaryMenu.backButtonLabel",description:"The label of the back button to return to main menu, inside the mobile navbar sidebar secondary menu (notably used to display the docs sidebar)",children:"\u2190 Back to main menu"})})}function Le(){const e=0===(0,w.p)().navbar.items.length,t=D();return(0,u.jsxs)(u.Fragment,{children:[!e&&(0,u.jsx)(Pe,{onClick:()=>t.hide()}),t.content]})}function Ie(){const e=(0,j.M)();var t;return void 0===(t=e.shown)&&(t=!0),(0,r.useEffect)((()=>(document.body.style.overflow=t?"hidden":"visible",()=>{document.body.style.overflow="visible"})),[t]),e.shouldRender?(0,u.jsx)(M,{header:(0,u.jsx)(Y,{}),primaryMenu:(0,u.jsx)(Oe,{}),secondaryMenu:(0,u.jsx)(Le,{})}):null}const De={navbarHideable:"navbarHideable_m1mJ",navbarHidden:"navbarHidden_jGov"};function Me(e){return(0,u.jsx)("div",{role:"presentation",...e,className:(0,o.A)("navbar-sidebar__backdrop",e.className)})}function Fe(e){let{children:t}=e;const{navbar:{hideOnScroll:n,style:a}}=(0,w.p)(),i=(0,j.M)(),{navbarRef:l,isNavbarVisible:d}=function(e){const[t,n]=(0,r.useState)(e),o=(0,r.useRef)(!1),a=(0,r.useRef)(0),i=(0,r.useCallback)((e=>{null!==e&&(a.current=e.getBoundingClientRect().height)}),[]);return(0,N.Mq)(((t,r)=>{let{scrollY:i}=t;if(!e)return;if(i=l?n(!1):i+c{if(!e)return;const r=t.location.hash;if(r?document.getElementById(r.substring(1)):void 0)return o.current=!0,void n(!1);n(!0)})),{navbarRef:i,isNavbarVisible:t}}(n);return(0,u.jsxs)("nav",{ref:l,"aria-label":(0,s.T)({id:"theme.NavBar.navAriaLabel",message:"Main",description:"The ARIA label for the main navigation"}),className:(0,o.A)("navbar","navbar--fixed-top",n&&[De.navbarHideable,!d&&De.navbarHidden],{"navbar--dark":"dark"===a,"navbar--primary":"primary"===a,"navbar-sidebar--show":i.shown}),children:[t,(0,u.jsx)(Me,{onClick:i.toggle}),(0,u.jsx)(Ie,{})]})}var ze=n(440);const Be={errorBoundaryError:"errorBoundaryError_a6uf",errorBoundaryFallback:"errorBoundaryFallback_VBag"};function $e(e){return(0,u.jsx)("button",{type:"button",...e,children:(0,u.jsx)(s.A,{id:"theme.ErrorPageContent.tryAgain",description:"The label of the button to try again rendering when the React error boundary captures an error",children:"Try again"})})}function Ue(e){let{error:t}=e;const n=(0,ze.rA)(t).map((e=>e.message)).join("\n\nCause:\n");return(0,u.jsx)("p",{className:Be.errorBoundaryError,children:n})}class qe extends r.Component{componentDidCatch(e,t){throw this.props.onError(e,t)}render(){return this.props.children}}const He="right";function Ge(e){let{width:t=30,height:n=30,className:r,...o}=e;return(0,u.jsx)("svg",{className:r,width:t,height:n,viewBox:"0 0 30 30","aria-hidden":"true",...o,children:(0,u.jsx)("path",{stroke:"currentColor",strokeLinecap:"round",strokeMiterlimit:"10",strokeWidth:"2",d:"M4 7h22M4 15h22M4 23h22"})})}function We(){const{toggle:e,shown:t}=(0,j.M)();return(0,u.jsx)("button",{onClick:e,"aria-label":(0,s.T)({id:"theme.docs.sidebar.toggleSidebarButtonAriaLabel",message:"Toggle navigation bar",description:"The ARIA label for hamburger menu button of mobile navigation"}),"aria-expanded":t,className:"navbar__toggle clean-btn",type:"button",children:(0,u.jsx)(Ge,{})})}const Ve={colorModeToggle:"colorModeToggle_DEke"};function Ke(e){let{items:t}=e;return(0,u.jsx)(u.Fragment,{children:t.map(((e,t)=>(0,u.jsx)(qe,{onError:t=>new Error(`A theme navbar item failed to render.\nPlease double-check the following navbar item (themeConfig.navbar.items) of your Docusaurus config:\n${JSON.stringify(e,null,2)}`,{cause:t}),children:(0,u.jsx)(Re,{...e})},t)))})}function Qe(e){let{left:t,right:n}=e;return(0,u.jsxs)("div",{className:"navbar__inner",children:[(0,u.jsx)("div",{className:"navbar__items",children:t}),(0,u.jsx)("div",{className:"navbar__items navbar__items--right",children:n})]})}function Ye(){const e=(0,j.M)(),t=(0,w.p)().navbar.items,[n,r]=function(e){function t(e){return"left"===(e.position??He)}return[e.filter(t),e.filter((e=>!t(e)))]}(t),o=t.find((e=>"search"===e.type));return(0,u.jsx)(Qe,{left:(0,u.jsxs)(u.Fragment,{children:[!e.disabled&&(0,u.jsx)(We,{}),(0,u.jsx)(K,{}),(0,u.jsx)(Ke,{items:n})]}),right:(0,u.jsxs)(u.Fragment,{children:[(0,u.jsx)(Ke,{items:r}),(0,u.jsx)(W,{className:Ve.colorModeToggle}),!o&&(0,u.jsx)(_e,{children:(0,u.jsx)(Se,{})})]})})}function Je(){return(0,u.jsx)(Fe,{children:(0,u.jsx)(Ye,{})})}function Ze(e){let{item:t}=e;const{to:n,href:r,label:o,prependBaseUrlToHref:a,...i}=t,l=(0,Z.Ay)(n),s=(0,Z.Ay)(r,{forcePrependBaseUrl:!0});return(0,u.jsxs)(J.A,{className:"footer__link-item",...r?{href:a?s:r}:{to:l},...i,children:[o,r&&!(0,X.A)(r)&&(0,u.jsx)(te.A,{})]})}function Xe(e){let{item:t}=e;return t.html?(0,u.jsx)("li",{className:"footer__item",dangerouslySetInnerHTML:{__html:t.html}}):(0,u.jsx)("li",{className:"footer__item",children:(0,u.jsx)(Ze,{item:t})},t.href??t.to)}function et(e){let{column:t}=e;return(0,u.jsxs)("div",{className:"col footer__col",children:[(0,u.jsx)("div",{className:"footer__title",children:t.title}),(0,u.jsx)("ul",{className:"footer__items clean-list",children:t.items.map(((e,t)=>(0,u.jsx)(Xe,{item:e},t)))})]})}function tt(e){let{columns:t}=e;return(0,u.jsx)("div",{className:"row footer__links",children:t.map(((e,t)=>(0,u.jsx)(et,{column:e},t)))})}function nt(){return(0,u.jsx)("span",{className:"footer__link-separator",children:"\xb7"})}function rt(e){let{item:t}=e;return t.html?(0,u.jsx)("span",{className:"footer__link-item",dangerouslySetInnerHTML:{__html:t.html}}):(0,u.jsx)(Ze,{item:t})}function ot(e){let{links:t}=e;return(0,u.jsx)("div",{className:"footer__links text--center",children:(0,u.jsx)("div",{className:"footer__links",children:t.map(((e,n)=>(0,u.jsxs)(r.Fragment,{children:[(0,u.jsx)(rt,{item:e}),t.length!==n+1&&(0,u.jsx)(nt,{})]},n)))})})}function at(e){let{links:t}=e;return function(e){return"title"in e[0]}(t)?(0,u.jsx)(tt,{columns:t}):(0,u.jsx)(ot,{links:t})}var it=n(1122);const lt="footerLogoLink_BH7S";function st(e){let{logo:t}=e;const{withBaseUrl:n}=(0,Z.hH)(),r={light:n(t.src),dark:n(t.srcDark??t.src)};return(0,u.jsx)(it.A,{className:(0,o.A)("footer__logo",t.className),alt:t.alt,sources:r,width:t.width,height:t.height,style:t.style})}function ct(e){let{logo:t}=e;return t.href?(0,u.jsx)(J.A,{href:t.href,className:lt,target:t.target,children:(0,u.jsx)(st,{logo:t})}):(0,u.jsx)(st,{logo:t})}function ut(e){let{copyright:t}=e;return(0,u.jsx)("div",{className:"footer__copyright",dangerouslySetInnerHTML:{__html:t}})}function dt(e){let{style:t,links:n,logo:r,copyright:a}=e;return(0,u.jsx)("footer",{className:(0,o.A)("footer",{"footer--dark":"dark"===t}),children:(0,u.jsxs)("div",{className:"container container-fluid",children:[n,(r||a)&&(0,u.jsxs)("div",{className:"footer__bottom text--center",children:[r&&(0,u.jsx)("div",{className:"margin-bottom--sm",children:r}),a]})]})})}function pt(){const{footer:e}=(0,w.p)();if(!e)return null;const{copyright:t,links:n,logo:r,style:o}=e;return(0,u.jsx)(dt,{style:o,links:n&&n.length>0&&(0,u.jsx)(at,{links:n}),logo:r&&(0,u.jsx)(ct,{logo:r}),copyright:t&&(0,u.jsx)(ut,{copyright:t})})}const ft=r.memo(pt),ht=(0,R.fM)([F.a,k.o,N.Tv,Te.VQ,i.Jx,function(e){let{children:t}=e;return(0,u.jsx)(O.y_,{children:(0,u.jsx)(j.e,{children:(0,u.jsx)(L,{children:t})})})}]);function gt(e){let{children:t}=e;return(0,u.jsx)(ht,{children:t})}var mt=n(1107);function yt(e){let{error:t,tryAgain:n}=e;return(0,u.jsx)("main",{className:"container margin-vert--xl",children:(0,u.jsx)("div",{className:"row",children:(0,u.jsxs)("div",{className:"col col--6 col--offset-3",children:[(0,u.jsx)(mt.A,{as:"h1",className:"hero__title",children:(0,u.jsx)(s.A,{id:"theme.ErrorPageContent.title",description:"The title of the fallback page when the page crashed",children:"This page crashed."})}),(0,u.jsx)("div",{className:"margin-vert--lg",children:(0,u.jsx)($e,{onClick:n,className:"button button--primary shadow--lw"})}),(0,u.jsx)("hr",{}),(0,u.jsx)("div",{className:"margin-vert--md",children:(0,u.jsx)(Ue,{error:t})})]})})})}const bt={mainWrapper:"mainWrapper_z2l0"};function vt(e){const{children:t,noFooter:n,wrapperClassName:r,title:l,description:s}=e;return(0,y.J)(),(0,u.jsxs)(gt,{children:[(0,u.jsx)(i.be,{title:l,description:s}),(0,u.jsx)(v,{}),(0,u.jsx)(T,{}),(0,u.jsx)(Je,{}),(0,u.jsx)("div",{id:d,className:(0,o.A)(m.G.wrapper.main,bt.mainWrapper,r),children:(0,u.jsx)(a.A,{fallback:e=>(0,u.jsx)(yt,{...e}),children:t})}),!n&&(0,u.jsx)(ft,{})]})}},3465:(e,t,n)=>{"use strict";n.d(t,{A:()=>u});n(6540);var r=n(8774),o=n(6025),a=n(4586),i=n(6342),l=n(1122),s=n(4848);function c(e){let{logo:t,alt:n,imageClassName:r}=e;const a={light:(0,o.Ay)(t.src),dark:(0,o.Ay)(t.srcDark||t.src)},i=(0,s.jsx)(l.A,{className:t.className,sources:a,height:t.height,width:t.width,alt:n,style:t.style});return r?(0,s.jsx)("div",{className:r,children:i}):i}function u(e){const{siteConfig:{title:t}}=(0,a.A)(),{navbar:{title:n,logo:l}}=(0,i.p)(),{imageClassName:u,titleClassName:d,...p}=e,f=(0,o.Ay)(l?.href||"/"),h=n?"":t,g=l?.alt??h;return(0,s.jsxs)(r.A,{to:f,...p,...l?.target&&{target:l.target},children:[l&&(0,s.jsx)(c,{logo:l,alt:g,imageClassName:u}),null!=n&&(0,s.jsx)("b",{className:d,children:n})]})}},1463:(e,t,n)=>{"use strict";n.d(t,{A:()=>a});n(6540);var r=n(5260),o=n(4848);function a(e){let{locale:t,version:n,tag:a}=e;const i=t;return(0,o.jsxs)(r.A,{children:[t&&(0,o.jsx)("meta",{name:"docusaurus_locale",content:t}),n&&(0,o.jsx)("meta",{name:"docusaurus_version",content:n}),a&&(0,o.jsx)("meta",{name:"docusaurus_tag",content:a}),i&&(0,o.jsx)("meta",{name:"docsearch:language",content:i}),n&&(0,o.jsx)("meta",{name:"docsearch:version",content:n}),a&&(0,o.jsx)("meta",{name:"docsearch:docusaurus_tag",content:a})]})}},1122:(e,t,n)=>{"use strict";n.d(t,{A:()=>u});var r=n(6540),o=n(4164),a=n(2303),i=n(5293);const l={themedComponent:"themedComponent_mlkZ","themedComponent--light":"themedComponent--light_NVdE","themedComponent--dark":"themedComponent--dark_xIcU"};var s=n(4848);function c(e){let{className:t,children:n}=e;const c=(0,a.A)(),{colorMode:u}=(0,i.G)();return(0,s.jsx)(s.Fragment,{children:(c?"dark"===u?["dark"]:["light"]:["light","dark"]).map((e=>{const a=n({theme:e,className:(0,o.A)(t,l.themedComponent,l[`themedComponent--${e}`])});return(0,s.jsx)(r.Fragment,{children:a},e)}))})}function u(e){const{sources:t,className:n,alt:r,...o}=e;return(0,s.jsx)(c,{className:n,children:e=>{let{theme:n,className:a}=e;return(0,s.jsx)("img",{src:t[n],alt:r,className:a,...o})}})}},1422:(e,t,n)=>{"use strict";n.d(t,{N:()=>y,u:()=>c});var r=n(6540),o=n(8193),a=n(205),i=n(3109),l=n(4848);const s="ease-in-out";function c(e){let{initialState:t}=e;const[n,o]=(0,r.useState)(t??!1),a=(0,r.useCallback)((()=>{o((e=>!e))}),[]);return{collapsed:n,setCollapsed:o,toggleCollapsed:a}}const u={display:"none",overflow:"hidden",height:"0px"},d={display:"block",overflow:"visible",height:"auto"};function p(e,t){const n=t?u:d;e.style.display=n.display,e.style.overflow=n.overflow,e.style.height=n.height}function f(e){let{collapsibleRef:t,collapsed:n,animation:o}=e;const a=(0,r.useRef)(!1);(0,r.useEffect)((()=>{const e=t.current;function r(){const t=e.scrollHeight,n=o?.duration??function(e){if((0,i.O)())return 1;const t=e/36;return Math.round(10*(4+15*t**.25+t/5))}(t);return{transition:`height ${n}ms ${o?.easing??s}`,height:`${t}px`}}function l(){const t=r();e.style.transition=t.transition,e.style.height=t.height}if(!a.current)return p(e,n),void(a.current=!0);return e.style.willChange="height",function(){const t=requestAnimationFrame((()=>{n?(l(),requestAnimationFrame((()=>{e.style.height=u.height,e.style.overflow=u.overflow}))):(e.style.display="block",requestAnimationFrame((()=>{l()})))}));return()=>cancelAnimationFrame(t)}()}),[t,n,o])}function h(e){if(!o.A.canUseDOM)return e?u:d}function g(e){let{as:t="div",collapsed:n,children:o,animation:a,onCollapseTransitionEnd:i,className:s,disableSSRStyle:c}=e;const u=(0,r.useRef)(null);return f({collapsibleRef:u,collapsed:n,animation:a}),(0,l.jsx)(t,{ref:u,style:c?void 0:h(n),onTransitionEnd:e=>{"height"===e.propertyName&&(p(u.current,n),i?.(n))},className:s,children:o})}function m(e){let{collapsed:t,...n}=e;const[o,i]=(0,r.useState)(!t),[s,c]=(0,r.useState)(t);return(0,a.A)((()=>{t||i(!0)}),[t]),(0,a.A)((()=>{o&&c(t)}),[o,t]),o?(0,l.jsx)(g,{...n,collapsed:s}):null}function y(e){let{lazy:t,...n}=e;const r=t?m:g;return(0,l.jsx)(r,{...n})}},5041:(e,t,n)=>{"use strict";n.d(t,{M:()=>g,o:()=>h});var r=n(6540),o=n(2303),a=n(679),i=n(9532),l=n(6342),s=n(4848);const c=(0,a.Wf)("docusaurus.announcement.dismiss"),u=(0,a.Wf)("docusaurus.announcement.id"),d=()=>"true"===c.get(),p=e=>c.set(String(e)),f=r.createContext(null);function h(e){let{children:t}=e;const n=function(){const{announcementBar:e}=(0,l.p)(),t=(0,o.A)(),[n,a]=(0,r.useState)((()=>!!t&&d()));(0,r.useEffect)((()=>{a(d())}),[]);const i=(0,r.useCallback)((()=>{p(!0),a(!0)}),[]);return(0,r.useEffect)((()=>{if(!e)return;const{id:t}=e;let n=u.get();"annoucement-bar"===n&&(n="announcement-bar");const r=t!==n;u.set(t),r&&p(!1),!r&&d()||a(!1)}),[e]),(0,r.useMemo)((()=>({isActive:!!e&&!n,close:i})),[e,n,i])}();return(0,s.jsx)(f.Provider,{value:n,children:t})}function g(){const e=(0,r.useContext)(f);if(!e)throw new i.dV("AnnouncementBarProvider");return e}},5293:(e,t,n)=>{"use strict";n.d(t,{G:()=>y,a:()=>m});var r=n(6540),o=n(8193),a=n(9532),i=n(679),l=n(6342),s=n(4848);const c=r.createContext(void 0),u="theme",d=(0,i.Wf)(u),p={light:"light",dark:"dark"},f=e=>e===p.dark?p.dark:p.light,h=e=>o.A.canUseDOM?f(document.documentElement.getAttribute("data-theme")):f(e),g=e=>{d.set(f(e))};function m(e){let{children:t}=e;const n=function(){const{colorMode:{defaultMode:e,disableSwitch:t,respectPrefersColorScheme:n}}=(0,l.p)(),[o,a]=(0,r.useState)(h(e));(0,r.useEffect)((()=>{t&&d.del()}),[t]);const i=(0,r.useCallback)((function(t,r){void 0===r&&(r={});const{persist:o=!0}=r;t?(a(t),o&&g(t)):(a(n?window.matchMedia("(prefers-color-scheme: dark)").matches?p.dark:p.light:e),d.del())}),[n,e]);(0,r.useEffect)((()=>{document.documentElement.setAttribute("data-theme",f(o))}),[o]),(0,r.useEffect)((()=>{if(t)return;const e=e=>{if(e.key!==u)return;const t=d.get();null!==t&&i(f(t))};return window.addEventListener("storage",e),()=>window.removeEventListener("storage",e)}),[t,i]);const s=(0,r.useRef)(!1);return(0,r.useEffect)((()=>{if(t&&!n)return;const e=window.matchMedia("(prefers-color-scheme: dark)"),r=()=>{window.matchMedia("print").matches||s.current?s.current=window.matchMedia("print").matches:i(null)};return e.addListener(r),()=>e.removeListener(r)}),[i,t,n]),(0,r.useMemo)((()=>({colorMode:o,setColorMode:i,get isDarkTheme(){return o===p.dark},setLightTheme(){i(p.light)},setDarkTheme(){i(p.dark)}})),[o,i])}();return(0,s.jsx)(c.Provider,{value:n,children:t})}function y(){const e=(0,r.useContext)(c);if(null==e)throw new a.dV("ColorModeProvider","Please see https://docusaurus.io/docs/api/themes/configuration#use-color-mode.");return e}},9876:(e,t,n)=>{"use strict";n.d(t,{e:()=>f,M:()=>h});var r=n(6540),o=n(5600),a=n(4581),i=n(6347),l=n(9532);function s(e){!function(e){const t=(0,i.W6)(),n=(0,l._q)(e);(0,r.useEffect)((()=>t.block(((e,t)=>n(e,t)))),[t,n])}(((t,n)=>{if("POP"===n)return e(t,n)}))}var c=n(6342),u=n(4848);const d=r.createContext(void 0);function p(){const e=function(){const e=(0,o.YL)(),{items:t}=(0,c.p)().navbar;return 0===t.length&&!e.component}(),t=(0,a.l)(),n=!e&&"mobile"===t,[i,l]=(0,r.useState)(!1);s((()=>{if(i)return l(!1),!1}));const u=(0,r.useCallback)((()=>{l((e=>!e))}),[]);return(0,r.useEffect)((()=>{"desktop"===t&&l(!1)}),[t]),(0,r.useMemo)((()=>({disabled:e,shouldRender:n,toggle:u,shown:i})),[e,n,u,i])}function f(e){let{children:t}=e;const n=p();return(0,u.jsx)(d.Provider,{value:n,children:t})}function h(){const e=r.useContext(d);if(void 0===e)throw new l.dV("NavbarMobileSidebarProvider");return e}},5600:(e,t,n)=>{"use strict";n.d(t,{GX:()=>c,YL:()=>s,y_:()=>l});var r=n(6540),o=n(9532),a=n(4848);const i=r.createContext(null);function l(e){let{children:t}=e;const n=(0,r.useState)({component:null,props:null});return(0,a.jsx)(i.Provider,{value:n,children:t})}function s(){const e=(0,r.useContext)(i);if(!e)throw new o.dV("NavbarSecondaryMenuContentProvider");return e[0]}function c(e){let{component:t,props:n}=e;const a=(0,r.useContext)(i);if(!a)throw new o.dV("NavbarSecondaryMenuContentProvider");const[,l]=a,s=(0,o.Be)(n);return(0,r.useEffect)((()=>{l({component:t,props:s})}),[l,t,s]),(0,r.useEffect)((()=>()=>l({component:null,props:null})),[l]),null}},4090:(e,t,n)=>{"use strict";n.d(t,{w:()=>o,J:()=>a});var r=n(6540);const o="navigation-with-keyboard";function a(){(0,r.useEffect)((()=>{function e(e){"keydown"===e.type&&"Tab"===e.key&&document.body.classList.add(o),"mousedown"===e.type&&document.body.classList.remove(o)}return document.addEventListener("keydown",e),document.addEventListener("mousedown",e),()=>{document.body.classList.remove(o),document.removeEventListener("keydown",e),document.removeEventListener("mousedown",e)}}),[])}},4581:(e,t,n)=>{"use strict";n.d(t,{l:()=>l});var r=n(6540),o=n(8193);const a={desktop:"desktop",mobile:"mobile",ssr:"ssr"},i=996;function l(e){let{desktopBreakpoint:t=i}=void 0===e?{}:e;const[n,l]=(0,r.useState)((()=>"ssr"));return(0,r.useEffect)((()=>{function e(){l(function(e){if(!o.A.canUseDOM)throw new Error("getWindowSize() should only be called after React hydration");return window.innerWidth>e?a.desktop:a.mobile}(t))}return e(),window.addEventListener("resize",e),()=>{window.removeEventListener("resize",e)}}),[t]),n}},7559:(e,t,n)=>{"use strict";n.d(t,{G:()=>r});const r={page:{blogListPage:"blog-list-page",blogPostPage:"blog-post-page",blogTagsListPage:"blog-tags-list-page",blogTagPostListPage:"blog-tags-post-list-page",blogAuthorsListPage:"blog-authors-list-page",blogAuthorsPostsPage:"blog-authors-posts-page",docsDocPage:"docs-doc-page",docsTagsListPage:"docs-tags-list-page",docsTagDocListPage:"docs-tags-doc-list-page",mdxPage:"mdx-page"},wrapper:{main:"main-wrapper",blogPages:"blog-wrapper",docsPages:"docs-wrapper",mdxPages:"mdx-wrapper"},common:{editThisPage:"theme-edit-this-page",lastUpdated:"theme-last-updated",backToTopButton:"theme-back-to-top-button",codeBlock:"theme-code-block",admonition:"theme-admonition",unlistedBanner:"theme-unlisted-banner",draftBanner:"theme-draft-banner",admonitionType:e=>`theme-admonition-${e}`},layout:{},docs:{docVersionBanner:"theme-doc-version-banner",docVersionBadge:"theme-doc-version-badge",docBreadcrumbs:"theme-doc-breadcrumbs",docMarkdown:"theme-doc-markdown",docTocMobile:"theme-doc-toc-mobile",docTocDesktop:"theme-doc-toc-desktop",docFooter:"theme-doc-footer",docFooterTagsRow:"theme-doc-footer-tags-row",docFooterEditMetaRow:"theme-doc-footer-edit-meta-row",docSidebarContainer:"theme-doc-sidebar-container",docSidebarMenu:"theme-doc-sidebar-menu",docSidebarItemCategory:"theme-doc-sidebar-item-category",docSidebarItemLink:"theme-doc-sidebar-item-link",docSidebarItemCategoryLevel:e=>`theme-doc-sidebar-item-category-level-${e}`,docSidebarItemLinkLevel:e=>`theme-doc-sidebar-item-link-level-${e}`},blog:{blogFooterTagsRow:"theme-blog-footer-tags-row",blogFooterEditMetaRow:"theme-blog-footer-edit-meta-row"},pages:{pageFooterEditMetaRow:"theme-pages-footer-edit-meta-row"}}},3109:(e,t,n)=>{"use strict";function r(){return window.matchMedia("(prefers-reduced-motion: reduce)").matches}n.d(t,{O:()=>r})},1003:(e,t,n)=>{"use strict";n.d(t,{e3:()=>f,be:()=>d,Jx:()=>h});var r=n(6540),o=n(4164),a=n(5260),i=n(3102);function l(){const e=r.useContext(i.o);if(!e)throw new Error("Unexpected: no Docusaurus route context found");return e}var s=n(6025),c=n(4586);var u=n(4848);function d(e){let{title:t,description:n,keywords:r,image:o,children:i}=e;const l=function(e){const{siteConfig:t}=(0,c.A)(),{title:n,titleDelimiter:r}=t;return e?.trim().length?`${e.trim()} ${r} ${n}`:n}(t),{withBaseUrl:d}=(0,s.hH)(),p=o?d(o,{absolute:!0}):void 0;return(0,u.jsxs)(a.A,{children:[t&&(0,u.jsx)("title",{children:l}),t&&(0,u.jsx)("meta",{property:"og:title",content:l}),n&&(0,u.jsx)("meta",{name:"description",content:n}),n&&(0,u.jsx)("meta",{property:"og:description",content:n}),r&&(0,u.jsx)("meta",{name:"keywords",content:Array.isArray(r)?r.join(","):r}),p&&(0,u.jsx)("meta",{property:"og:image",content:p}),p&&(0,u.jsx)("meta",{name:"twitter:image",content:p}),i]})}const p=r.createContext(void 0);function f(e){let{className:t,children:n}=e;const i=r.useContext(p),l=(0,o.A)(i,t);return(0,u.jsxs)(p.Provider,{value:l,children:[(0,u.jsx)(a.A,{children:(0,u.jsx)("html",{className:l})}),n]})}function h(e){let{children:t}=e;const n=l(),r=`plugin-${n.plugin.name.replace(/docusaurus-(?:plugin|theme)-(?:content-)?/gi,"")}`;const a=`plugin-id-${n.plugin.id}`;return(0,u.jsx)(f,{className:(0,o.A)(r,a),children:t})}},9532:(e,t,n)=>{"use strict";n.d(t,{Be:()=>c,ZC:()=>l,_q:()=>i,dV:()=>s,fM:()=>u});var r=n(6540),o=n(205),a=n(4848);function i(e){const t=(0,r.useRef)(e);return(0,o.A)((()=>{t.current=e}),[e]),(0,r.useCallback)((function(){return t.current(...arguments)}),[])}function l(e){const t=(0,r.useRef)();return(0,o.A)((()=>{t.current=e})),t.current}class s extends Error{constructor(e,t){super(),this.name="ReactContextError",this.message=`Hook ${this.stack?.split("\n")[1]?.match(/at (?:\w+\.)?(?\w+)/)?.groups.name??""} is called outside the <${e}>. ${t??""}`}}function c(e){const t=Object.entries(e);return t.sort(((e,t)=>e[0].localeCompare(t[0]))),(0,r.useMemo)((()=>e),t.flat())}function u(e){return t=>{let{children:n}=t;return(0,a.jsx)(a.Fragment,{children:e.reduceRight(((e,t)=>(0,a.jsx)(t,{children:e})),n)})}}},9169:(e,t,n)=>{"use strict";n.d(t,{Dt:()=>l,ys:()=>i});var r=n(6540),o=n(8328),a=n(4586);function i(e,t){const n=e=>(!e||e.endsWith("/")?e:`${e}/`)?.toLowerCase();return n(e)===n(t)}function l(){const{baseUrl:e}=(0,a.A)().siteConfig;return(0,r.useMemo)((()=>function(e){let{baseUrl:t,routes:n}=e;function r(e){return e.path===t&&!0===e.exact}function o(e){return e.path===t&&!e.exact}return function e(t){if(0===t.length)return;return t.find(r)||e(t.filter(o).flatMap((e=>e.routes??[])))}(n)}({routes:o.A,baseUrl:e})),[e])}},3104:(e,t,n)=>{"use strict";n.d(t,{Mq:()=>p,Tv:()=>c,gk:()=>f});var r=n(6540),o=n(8193),a=n(2303),i=(n(205),n(9532)),l=n(4848);const s=r.createContext(void 0);function c(e){let{children:t}=e;const n=function(){const e=(0,r.useRef)(!0);return(0,r.useMemo)((()=>({scrollEventsEnabledRef:e,enableScrollEvents:()=>{e.current=!0},disableScrollEvents:()=>{e.current=!1}})),[])}();return(0,l.jsx)(s.Provider,{value:n,children:t})}function u(){const e=(0,r.useContext)(s);if(null==e)throw new i.dV("ScrollControllerProvider");return e}const d=()=>o.A.canUseDOM?{scrollX:window.pageXOffset,scrollY:window.pageYOffset}:null;function p(e,t){void 0===t&&(t=[]);const{scrollEventsEnabledRef:n}=u(),o=(0,r.useRef)(d()),a=(0,i._q)(e);(0,r.useEffect)((()=>{const e=()=>{if(!n.current)return;const e=d();a(e,o.current),o.current=e},t={passive:!0};return e(),window.addEventListener("scroll",e,t),()=>window.removeEventListener("scroll",e,t)}),[a,n,...t])}function f(){const e=(0,r.useRef)(null),t=(0,a.A)()&&"smooth"===getComputedStyle(document.documentElement).scrollBehavior;return{startScroll:n=>{e.current=t?function(e){return window.scrollTo({top:e,behavior:"smooth"}),()=>{}}(n):function(e){let t=null;const n=document.documentElement.scrollTop>e;return function r(){const o=document.documentElement.scrollTop;(n&&o>e||!n&&ot&&cancelAnimationFrame(t)}(n)},cancelScroll:()=>e.current?.()}}},679:(e,t,n)=>{"use strict";n.d(t,{Wf:()=>c});n(6540);const r=JSON.parse('{"N":"localStorage","M":""}'),o=r.N;function a(e){let{key:t,oldValue:n,newValue:r,storage:o}=e;if(n===r)return;const a=document.createEvent("StorageEvent");a.initStorageEvent("storage",!1,!1,t,n,r,window.location.href,o),window.dispatchEvent(a)}function i(e){if(void 0===e&&(e=o),"undefined"==typeof window)throw new Error("Browser storage is not available on Node.js/Docusaurus SSR process.");if("none"===e)return null;try{return window[e]}catch(n){return t=n,l||(console.warn("Docusaurus browser storage is not available.\nPossible reasons: running Docusaurus in an iframe, in an incognito browser session, or using too strict browser privacy settings.",t),l=!0),null}var t}let l=!1;const s={get:()=>null,set:()=>{},del:()=>{},listen:()=>()=>{}};function c(e,t){const n=`${e}${r.M}`;if("undefined"==typeof window)return function(e){function t(){throw new Error(`Illegal storage API usage for storage key "${e}".\nDocusaurus storage APIs are not supposed to be called on the server-rendering process.\nPlease only call storage APIs in effects and event handlers.`)}return{get:t,set:t,del:t,listen:t}}(n);const o=i(t?.persistence);return null===o?s:{get:()=>{try{return o.getItem(n)}catch(e){return console.error(`Docusaurus storage error, can't get key=${n}`,e),null}},set:e=>{try{const t=o.getItem(n);o.setItem(n,e),a({key:n,oldValue:t,newValue:e,storage:o})}catch(t){console.error(`Docusaurus storage error, can't set ${n}=${e}`,t)}},del:()=>{try{const e=o.getItem(n);o.removeItem(n),a({key:n,oldValue:e,newValue:null,storage:o})}catch(e){console.error(`Docusaurus storage error, can't delete key=${n}`,e)}},listen:e=>{try{const t=t=>{t.storageArea===o&&t.key===n&&e(t)};return window.addEventListener("storage",t),()=>window.removeEventListener("storage",t)}catch(t){return console.error(`Docusaurus storage error, can't listen for changes of key=${n}`,t),()=>{}}}}}},2131:(e,t,n)=>{"use strict";n.d(t,{o:()=>i});var r=n(4586),o=n(6347),a=n(440);function i(){const{siteConfig:{baseUrl:e,url:t,trailingSlash:n},i18n:{defaultLocale:i,currentLocale:l}}=(0,r.A)(),{pathname:s}=(0,o.zy)(),c=(0,a.Ks)(s,{trailingSlash:n,baseUrl:e}),u=l===i?e:e.replace(`/${l}/`,"/"),d=c.replace(e,"");return{createUrl:function(e){let{locale:n,fullyQualified:r}=e;return`${r?t:""}${function(e){return e===i?`${u}`:`${u}${e}/`}(n)}${d}`}}}},5062:(e,t,n)=>{"use strict";n.d(t,{$:()=>i});var r=n(6540),o=n(6347),a=n(9532);function i(e){const t=(0,o.zy)(),n=(0,a.ZC)(t),i=(0,a._q)(e);(0,r.useEffect)((()=>{n&&t!==n&&i({location:t,previousLocation:n})}),[i,t,n])}},6342:(e,t,n)=>{"use strict";n.d(t,{p:()=>o});var r=n(4586);function o(){return(0,r.A)().siteConfig.themeConfig}},2983:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.addTrailingSlash=o,t.default=function(e,t){const{trailingSlash:n,baseUrl:r}=t;if(e.startsWith("#"))return e;if(void 0===n)return e;const[i]=e.split(/[#?]/),l="/"===i||i===r?i:(s=i,c=n,c?o(s):a(s));var s,c;return e.replace(i,l)},t.addLeadingSlash=function(e){return(0,r.addPrefix)(e,"/")},t.removeTrailingSlash=a;const r=n(2566);function o(e){return e.endsWith("/")?e:`${e}/`}function a(e){return(0,r.removeSuffix)(e,"/")}},253:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=function e(t){if(t.cause)return[t,...e(t.cause)];return[t]}},440:(e,t,n)=>{"use strict";t.rA=t.Ks=void 0;const r=n(1635);var o=n(2983);Object.defineProperty(t,"Ks",{enumerable:!0,get:function(){return r.__importDefault(o).default}});var a=n(2566);var i=n(253);Object.defineProperty(t,"rA",{enumerable:!0,get:function(){return i.getErrorCausalChain}})},2566:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.addPrefix=function(e,t){return e.startsWith(t)?e:`${t}${e}`},t.removeSuffix=function(e,t){if(""===t)return e;return e.endsWith(t)?e.slice(0,-t.length):e},t.addSuffix=function(e,t){return e.endsWith(t)?e:`${e}${t}`},t.removePrefix=function(e,t){return e.startsWith(t)?e.slice(t.length):e}},1513:(e,t,n)=>{"use strict";n.d(t,{zR:()=>w,TM:()=>C,yJ:()=>f,sC:()=>T,AO:()=>p});var r=n(8168);function o(e){return"/"===e.charAt(0)}function a(e,t){for(var n=t,r=n+1,o=e.length;r=0;p--){var f=i[p];"."===f?a(i,p):".."===f?(a(i,p),d++):d&&(a(i,p),d--)}if(!c)for(;d--;d)i.unshift("..");!c||""===i[0]||i[0]&&o(i[0])||i.unshift("");var h=i.join("/");return n&&"/"!==h.substr(-1)&&(h+="/"),h};var l=n(1561);function s(e){return"/"===e.charAt(0)?e:"/"+e}function c(e){return"/"===e.charAt(0)?e.substr(1):e}function u(e,t){return function(e,t){return 0===e.toLowerCase().indexOf(t.toLowerCase())&&-1!=="/?#".indexOf(e.charAt(t.length))}(e,t)?e.substr(t.length):e}function d(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function p(e){var t=e.pathname,n=e.search,r=e.hash,o=t||"/";return n&&"?"!==n&&(o+="?"===n.charAt(0)?n:"?"+n),r&&"#"!==r&&(o+="#"===r.charAt(0)?r:"#"+r),o}function f(e,t,n,o){var a;"string"==typeof e?(a=function(e){var t=e||"/",n="",r="",o=t.indexOf("#");-1!==o&&(r=t.substr(o),t=t.substr(0,o));var a=t.indexOf("?");return-1!==a&&(n=t.substr(a),t=t.substr(0,a)),{pathname:t,search:"?"===n?"":n,hash:"#"===r?"":r}}(e),a.state=t):(void 0===(a=(0,r.A)({},e)).pathname&&(a.pathname=""),a.search?"?"!==a.search.charAt(0)&&(a.search="?"+a.search):a.search="",a.hash?"#"!==a.hash.charAt(0)&&(a.hash="#"+a.hash):a.hash="",void 0!==t&&void 0===a.state&&(a.state=t));try{a.pathname=decodeURI(a.pathname)}catch(l){throw l instanceof URIError?new URIError('Pathname "'+a.pathname+'" could not be decoded. This is likely caused by an invalid percent-encoding.'):l}return n&&(a.key=n),o?a.pathname?"/"!==a.pathname.charAt(0)&&(a.pathname=i(a.pathname,o.pathname)):a.pathname=o.pathname:a.pathname||(a.pathname="/"),a}function h(){var e=null;var t=[];return{setPrompt:function(t){return e=t,function(){e===t&&(e=null)}},confirmTransitionTo:function(t,n,r,o){if(null!=e){var a="function"==typeof e?e(t,n):e;"string"==typeof a?"function"==typeof r?r(a,o):o(!0):o(!1!==a)}else o(!0)},appendListener:function(e){var n=!0;function r(){n&&e.apply(void 0,arguments)}return t.push(r),function(){n=!1,t=t.filter((function(e){return e!==r}))}},notifyListeners:function(){for(var e=arguments.length,n=new Array(e),r=0;rt?n.splice(t,n.length-t,o):n.push(o),d({action:r,location:o,index:t,entries:n})}}))},replace:function(e,t){var r="REPLACE",o=f(e,t,g(),w.location);u.confirmTransitionTo(o,r,n,(function(e){e&&(w.entries[w.index]=o,d({action:r,location:o}))}))},go:v,goBack:function(){v(-1)},goForward:function(){v(1)},canGo:function(e){var t=w.index+e;return t>=0&&t{"use strict";var r=n(4363),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},a={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},i={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?i:l[e.$$typeof]||o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=i;var c=Object.defineProperty,u=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,p=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,h=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(h){var o=f(n);o&&o!==h&&e(t,o,r)}var i=u(n);d&&(i=i.concat(d(n)));for(var l=s(t),g=s(n),m=0;m{"use strict";e.exports=function(e,t,n,r,o,a,i,l){if(!e){var s;if(void 0===t)s=new Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var c=[n,r,o,a,i,l],u=0;(s=new Error(t.replace(/%s/g,(function(){return c[u++]})))).name="Invariant Violation"}throw s.framesToPop=1,s}}},4634:e=>{e.exports=Array.isArray||function(e){return"[object Array]"==Object.prototype.toString.call(e)}},689:function(e){e.exports=function(){"use strict";var e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},t=function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")},n=function(){function e(e,t){for(var n=0;n1&&void 0!==arguments[1])||arguments[1],o=arguments.length>2&&void 0!==arguments[2]?arguments[2]:[],a=arguments.length>3&&void 0!==arguments[3]?arguments[3]:5e3;t(this,e),this.ctx=n,this.iframes=r,this.exclude=o,this.iframesTimeout=a}return n(e,[{key:"getContexts",value:function(){var e=[];return(void 0!==this.ctx&&this.ctx?NodeList.prototype.isPrototypeOf(this.ctx)?Array.prototype.slice.call(this.ctx):Array.isArray(this.ctx)?this.ctx:"string"==typeof this.ctx?Array.prototype.slice.call(document.querySelectorAll(this.ctx)):[this.ctx]:[]).forEach((function(t){var n=e.filter((function(e){return e.contains(t)})).length>0;-1!==e.indexOf(t)||n||e.push(t)})),e}},{key:"getIframeContents",value:function(e,t){var n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:function(){},r=void 0;try{var o=e.contentWindow;if(r=o.document,!o||!r)throw new Error("iframe inaccessible")}catch(a){n()}r&&t(r)}},{key:"isIframeBlank",value:function(e){var t="about:blank",n=e.getAttribute("src").trim();return e.contentWindow.location.href===t&&n!==t&&n}},{key:"observeIframeLoad",value:function(e,t,n){var r=this,o=!1,a=null,i=function i(){if(!o){o=!0,clearTimeout(a);try{r.isIframeBlank(e)||(e.removeEventListener("load",i),r.getIframeContents(e,t,n))}catch(l){n()}}};e.addEventListener("load",i),a=setTimeout(i,this.iframesTimeout)}},{key:"onIframeReady",value:function(e,t,n){try{"complete"===e.contentWindow.document.readyState?this.isIframeBlank(e)?this.observeIframeLoad(e,t,n):this.getIframeContents(e,t,n):this.observeIframeLoad(e,t,n)}catch(r){n()}}},{key:"waitForIframes",value:function(e,t){var n=this,r=0;this.forEachIframe(e,(function(){return!0}),(function(e){r++,n.waitForIframes(e.querySelector("html"),(function(){--r||t()}))}),(function(e){e||t()}))}},{key:"forEachIframe",value:function(t,n,r){var o=this,a=arguments.length>3&&void 0!==arguments[3]?arguments[3]:function(){},i=t.querySelectorAll("iframe"),l=i.length,s=0;i=Array.prototype.slice.call(i);var c=function(){--l<=0&&a(s)};l||c(),i.forEach((function(t){e.matches(t,o.exclude)?c():o.onIframeReady(t,(function(e){n(t)&&(s++,r(e)),c()}),c)}))}},{key:"createIterator",value:function(e,t,n){return document.createNodeIterator(e,t,n,!1)}},{key:"createInstanceOnIframe",value:function(t){return new e(t.querySelector("html"),this.iframes)}},{key:"compareNodeIframe",value:function(e,t,n){if(e.compareDocumentPosition(n)&Node.DOCUMENT_POSITION_PRECEDING){if(null===t)return!0;if(t.compareDocumentPosition(n)&Node.DOCUMENT_POSITION_FOLLOWING)return!0}return!1}},{key:"getIteratorNode",value:function(e){var t=e.previousNode();return{prevNode:t,node:(null===t||e.nextNode())&&e.nextNode()}}},{key:"checkIframeFilter",value:function(e,t,n,r){var o=!1,a=!1;return r.forEach((function(e,t){e.val===n&&(o=t,a=e.handled)})),this.compareNodeIframe(e,t,n)?(!1!==o||a?!1===o||a||(r[o].handled=!0):r.push({val:n,handled:!0}),!0):(!1===o&&r.push({val:n,handled:!1}),!1)}},{key:"handleOpenIframes",value:function(e,t,n,r){var o=this;e.forEach((function(e){e.handled||o.getIframeContents(e.val,(function(e){o.createInstanceOnIframe(e).forEachNode(t,n,r)}))}))}},{key:"iterateThroughNodes",value:function(e,t,n,r,o){for(var a=this,i=this.createIterator(t,e,r),l=[],s=[],c=void 0,u=void 0,d=function(){var e=a.getIteratorNode(i);return u=e.prevNode,c=e.node};d();)this.iframes&&this.forEachIframe(t,(function(e){return a.checkIframeFilter(c,u,e,l)}),(function(t){a.createInstanceOnIframe(t).forEachNode(e,(function(e){return s.push(e)}),r)})),s.push(c);s.forEach((function(e){n(e)})),this.iframes&&this.handleOpenIframes(l,e,n,r),o()}},{key:"forEachNode",value:function(e,t,n){var r=this,o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:function(){},a=this.getContexts(),i=a.length;i||o(),a.forEach((function(a){var l=function(){r.iterateThroughNodes(e,a,t,n,(function(){--i<=0&&o()}))};r.iframes?r.waitForIframes(a,l):l()}))}}],[{key:"matches",value:function(e,t){var n="string"==typeof t?[t]:t,r=e.matches||e.matchesSelector||e.msMatchesSelector||e.mozMatchesSelector||e.oMatchesSelector||e.webkitMatchesSelector;if(r){var o=!1;return n.every((function(t){return!r.call(e,t)||(o=!0,!1)})),o}return!1}}]),e}(),a=function(){function a(e){t(this,a),this.ctx=e,this.ie=!1;var n=window.navigator.userAgent;(n.indexOf("MSIE")>-1||n.indexOf("Trident")>-1)&&(this.ie=!0)}return n(a,[{key:"log",value:function(t){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"debug",r=this.opt.log;this.opt.debug&&"object"===(void 0===r?"undefined":e(r))&&"function"==typeof r[n]&&r[n]("mark.js: "+t)}},{key:"escapeStr",value:function(e){return e.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g,"\\$&")}},{key:"createRegExp",value:function(e){return"disabled"!==this.opt.wildcards&&(e=this.setupWildcardsRegExp(e)),e=this.escapeStr(e),Object.keys(this.opt.synonyms).length&&(e=this.createSynonymsRegExp(e)),(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.setupIgnoreJoinersRegExp(e)),this.opt.diacritics&&(e=this.createDiacriticsRegExp(e)),e=this.createMergedBlanksRegExp(e),(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.createJoinersRegExp(e)),"disabled"!==this.opt.wildcards&&(e=this.createWildcardsRegExp(e)),e=this.createAccuracyRegExp(e)}},{key:"createSynonymsRegExp",value:function(e){var t=this.opt.synonyms,n=this.opt.caseSensitive?"":"i",r=this.opt.ignoreJoiners||this.opt.ignorePunctuation.length?"\0":"";for(var o in t)if(t.hasOwnProperty(o)){var a=t[o],i="disabled"!==this.opt.wildcards?this.setupWildcardsRegExp(o):this.escapeStr(o),l="disabled"!==this.opt.wildcards?this.setupWildcardsRegExp(a):this.escapeStr(a);""!==i&&""!==l&&(e=e.replace(new RegExp("("+this.escapeStr(i)+"|"+this.escapeStr(l)+")","gm"+n),r+"("+this.processSynomyms(i)+"|"+this.processSynomyms(l)+")"+r))}return e}},{key:"processSynomyms",value:function(e){return(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.setupIgnoreJoinersRegExp(e)),e}},{key:"setupWildcardsRegExp",value:function(e){return(e=e.replace(/(?:\\)*\?/g,(function(e){return"\\"===e.charAt(0)?"?":"\x01"}))).replace(/(?:\\)*\*/g,(function(e){return"\\"===e.charAt(0)?"*":"\x02"}))}},{key:"createWildcardsRegExp",value:function(e){var t="withSpaces"===this.opt.wildcards;return e.replace(/\u0001/g,t?"[\\S\\s]?":"\\S?").replace(/\u0002/g,t?"[\\S\\s]*?":"\\S*")}},{key:"setupIgnoreJoinersRegExp",value:function(e){return e.replace(/[^(|)\\]/g,(function(e,t,n){var r=n.charAt(t+1);return/[(|)\\]/.test(r)||""===r?e:e+"\0"}))}},{key:"createJoinersRegExp",value:function(e){var t=[],n=this.opt.ignorePunctuation;return Array.isArray(n)&&n.length&&t.push(this.escapeStr(n.join(""))),this.opt.ignoreJoiners&&t.push("\\u00ad\\u200b\\u200c\\u200d"),t.length?e.split(/\u0000+/).join("["+t.join("")+"]*"):e}},{key:"createDiacriticsRegExp",value:function(e){var t=this.opt.caseSensitive?"":"i",n=this.opt.caseSensitive?["a\xe0\xe1\u1ea3\xe3\u1ea1\u0103\u1eb1\u1eaf\u1eb3\u1eb5\u1eb7\xe2\u1ea7\u1ea5\u1ea9\u1eab\u1ead\xe4\xe5\u0101\u0105","A\xc0\xc1\u1ea2\xc3\u1ea0\u0102\u1eb0\u1eae\u1eb2\u1eb4\u1eb6\xc2\u1ea6\u1ea4\u1ea8\u1eaa\u1eac\xc4\xc5\u0100\u0104","c\xe7\u0107\u010d","C\xc7\u0106\u010c","d\u0111\u010f","D\u0110\u010e","e\xe8\xe9\u1ebb\u1ebd\u1eb9\xea\u1ec1\u1ebf\u1ec3\u1ec5\u1ec7\xeb\u011b\u0113\u0119","E\xc8\xc9\u1eba\u1ebc\u1eb8\xca\u1ec0\u1ebe\u1ec2\u1ec4\u1ec6\xcb\u011a\u0112\u0118","i\xec\xed\u1ec9\u0129\u1ecb\xee\xef\u012b","I\xcc\xcd\u1ec8\u0128\u1eca\xce\xcf\u012a","l\u0142","L\u0141","n\xf1\u0148\u0144","N\xd1\u0147\u0143","o\xf2\xf3\u1ecf\xf5\u1ecd\xf4\u1ed3\u1ed1\u1ed5\u1ed7\u1ed9\u01a1\u1edf\u1ee1\u1edb\u1edd\u1ee3\xf6\xf8\u014d","O\xd2\xd3\u1ece\xd5\u1ecc\xd4\u1ed2\u1ed0\u1ed4\u1ed6\u1ed8\u01a0\u1ede\u1ee0\u1eda\u1edc\u1ee2\xd6\xd8\u014c","r\u0159","R\u0158","s\u0161\u015b\u0219\u015f","S\u0160\u015a\u0218\u015e","t\u0165\u021b\u0163","T\u0164\u021a\u0162","u\xf9\xfa\u1ee7\u0169\u1ee5\u01b0\u1eeb\u1ee9\u1eed\u1eef\u1ef1\xfb\xfc\u016f\u016b","U\xd9\xda\u1ee6\u0168\u1ee4\u01af\u1eea\u1ee8\u1eec\u1eee\u1ef0\xdb\xdc\u016e\u016a","y\xfd\u1ef3\u1ef7\u1ef9\u1ef5\xff","Y\xdd\u1ef2\u1ef6\u1ef8\u1ef4\u0178","z\u017e\u017c\u017a","Z\u017d\u017b\u0179"]:["a\xe0\xe1\u1ea3\xe3\u1ea1\u0103\u1eb1\u1eaf\u1eb3\u1eb5\u1eb7\xe2\u1ea7\u1ea5\u1ea9\u1eab\u1ead\xe4\xe5\u0101\u0105A\xc0\xc1\u1ea2\xc3\u1ea0\u0102\u1eb0\u1eae\u1eb2\u1eb4\u1eb6\xc2\u1ea6\u1ea4\u1ea8\u1eaa\u1eac\xc4\xc5\u0100\u0104","c\xe7\u0107\u010dC\xc7\u0106\u010c","d\u0111\u010fD\u0110\u010e","e\xe8\xe9\u1ebb\u1ebd\u1eb9\xea\u1ec1\u1ebf\u1ec3\u1ec5\u1ec7\xeb\u011b\u0113\u0119E\xc8\xc9\u1eba\u1ebc\u1eb8\xca\u1ec0\u1ebe\u1ec2\u1ec4\u1ec6\xcb\u011a\u0112\u0118","i\xec\xed\u1ec9\u0129\u1ecb\xee\xef\u012bI\xcc\xcd\u1ec8\u0128\u1eca\xce\xcf\u012a","l\u0142L\u0141","n\xf1\u0148\u0144N\xd1\u0147\u0143","o\xf2\xf3\u1ecf\xf5\u1ecd\xf4\u1ed3\u1ed1\u1ed5\u1ed7\u1ed9\u01a1\u1edf\u1ee1\u1edb\u1edd\u1ee3\xf6\xf8\u014dO\xd2\xd3\u1ece\xd5\u1ecc\xd4\u1ed2\u1ed0\u1ed4\u1ed6\u1ed8\u01a0\u1ede\u1ee0\u1eda\u1edc\u1ee2\xd6\xd8\u014c","r\u0159R\u0158","s\u0161\u015b\u0219\u015fS\u0160\u015a\u0218\u015e","t\u0165\u021b\u0163T\u0164\u021a\u0162","u\xf9\xfa\u1ee7\u0169\u1ee5\u01b0\u1eeb\u1ee9\u1eed\u1eef\u1ef1\xfb\xfc\u016f\u016bU\xd9\xda\u1ee6\u0168\u1ee4\u01af\u1eea\u1ee8\u1eec\u1eee\u1ef0\xdb\xdc\u016e\u016a","y\xfd\u1ef3\u1ef7\u1ef9\u1ef5\xffY\xdd\u1ef2\u1ef6\u1ef8\u1ef4\u0178","z\u017e\u017c\u017aZ\u017d\u017b\u0179"],r=[];return e.split("").forEach((function(o){n.every((function(n){if(-1!==n.indexOf(o)){if(r.indexOf(n)>-1)return!1;e=e.replace(new RegExp("["+n+"]","gm"+t),"["+n+"]"),r.push(n)}return!0}))})),e}},{key:"createMergedBlanksRegExp",value:function(e){return e.replace(/[\s]+/gim,"[\\s]+")}},{key:"createAccuracyRegExp",value:function(e){var t=this,n="!\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~\xa1\xbf",r=this.opt.accuracy,o="string"==typeof r?r:r.value,a="string"==typeof r?[]:r.limiters,i="";switch(a.forEach((function(e){i+="|"+t.escapeStr(e)})),o){case"partially":default:return"()("+e+")";case"complementary":return"()([^"+(i="\\s"+(i||this.escapeStr(n)))+"]*"+e+"[^"+i+"]*)";case"exactly":return"(^|\\s"+i+")("+e+")(?=$|\\s"+i+")"}}},{key:"getSeparatedKeywords",value:function(e){var t=this,n=[];return e.forEach((function(e){t.opt.separateWordSearch?e.split(" ").forEach((function(e){e.trim()&&-1===n.indexOf(e)&&n.push(e)})):e.trim()&&-1===n.indexOf(e)&&n.push(e)})),{keywords:n.sort((function(e,t){return t.length-e.length})),length:n.length}}},{key:"isNumeric",value:function(e){return Number(parseFloat(e))==e}},{key:"checkRanges",value:function(e){var t=this;if(!Array.isArray(e)||"[object Object]"!==Object.prototype.toString.call(e[0]))return this.log("markRanges() will only accept an array of objects"),this.opt.noMatch(e),[];var n=[],r=0;return e.sort((function(e,t){return e.start-t.start})).forEach((function(e){var o=t.callNoMatchOnInvalidRanges(e,r),a=o.start,i=o.end;o.valid&&(e.start=a,e.length=i-a,n.push(e),r=i)})),n}},{key:"callNoMatchOnInvalidRanges",value:function(e,t){var n=void 0,r=void 0,o=!1;return e&&void 0!==e.start?(r=(n=parseInt(e.start,10))+parseInt(e.length,10),this.isNumeric(e.start)&&this.isNumeric(e.length)&&r-t>0&&r-n>0?o=!0:(this.log("Ignoring invalid or overlapping range: "+JSON.stringify(e)),this.opt.noMatch(e))):(this.log("Ignoring invalid range: "+JSON.stringify(e)),this.opt.noMatch(e)),{start:n,end:r,valid:o}}},{key:"checkWhitespaceRanges",value:function(e,t,n){var r=void 0,o=!0,a=n.length,i=t-a,l=parseInt(e.start,10)-i;return(r=(l=l>a?a:l)+parseInt(e.length,10))>a&&(r=a,this.log("End range automatically set to the max value of "+a)),l<0||r-l<0||l>a||r>a?(o=!1,this.log("Invalid range: "+JSON.stringify(e)),this.opt.noMatch(e)):""===n.substring(l,r).replace(/\s+/g,"")&&(o=!1,this.log("Skipping whitespace only range: "+JSON.stringify(e)),this.opt.noMatch(e)),{start:l,end:r,valid:o}}},{key:"getTextNodes",value:function(e){var t=this,n="",r=[];this.iterator.forEachNode(NodeFilter.SHOW_TEXT,(function(e){r.push({start:n.length,end:(n+=e.textContent).length,node:e})}),(function(e){return t.matchesExclude(e.parentNode)?NodeFilter.FILTER_REJECT:NodeFilter.FILTER_ACCEPT}),(function(){e({value:n,nodes:r})}))}},{key:"matchesExclude",value:function(e){return o.matches(e,this.opt.exclude.concat(["script","style","title","head","html"]))}},{key:"wrapRangeInTextNode",value:function(e,t,n){var r=this.opt.element?this.opt.element:"mark",o=e.splitText(t),a=o.splitText(n-t),i=document.createElement(r);return i.setAttribute("data-markjs","true"),this.opt.className&&i.setAttribute("class",this.opt.className),i.textContent=o.textContent,o.parentNode.replaceChild(i,o),a}},{key:"wrapRangeInMappedTextNode",value:function(e,t,n,r,o){var a=this;e.nodes.every((function(i,l){var s=e.nodes[l+1];if(void 0===s||s.start>t){if(!r(i.node))return!1;var c=t-i.start,u=(n>i.end?i.end:n)-i.start,d=e.value.substr(0,i.start),p=e.value.substr(u+i.start);if(i.node=a.wrapRangeInTextNode(i.node,c,u),e.value=d+p,e.nodes.forEach((function(t,n){n>=l&&(e.nodes[n].start>0&&n!==l&&(e.nodes[n].start-=u),e.nodes[n].end-=u)})),n-=u,o(i.node.previousSibling,i.start),!(n>i.end))return!1;t=i.end}return!0}))}},{key:"wrapMatches",value:function(e,t,n,r,o){var a=this,i=0===t?0:t+1;this.getTextNodes((function(t){t.nodes.forEach((function(t){t=t.node;for(var o=void 0;null!==(o=e.exec(t.textContent))&&""!==o[i];)if(n(o[i],t)){var l=o.index;if(0!==i)for(var s=1;s{"use strict";n.r(t)},1043:(e,t,n)=>{"use strict";n.r(t)},5947:function(e,t,n){var r,o;r=function(){var e,t,n={version:"0.2.0"},r=n.settings={minimum:.08,easing:"ease",positionUsing:"",speed:200,trickle:!0,trickleRate:.02,trickleSpeed:800,showSpinner:!0,barSelector:'[role="bar"]',spinnerSelector:'[role="spinner"]',parent:"body",template:'
'};function o(e,t,n){return en?n:e}function a(e){return 100*(-1+e)}function i(e,t,n){var o;return(o="translate3d"===r.positionUsing?{transform:"translate3d("+a(e)+"%,0,0)"}:"translate"===r.positionUsing?{transform:"translate("+a(e)+"%,0)"}:{"margin-left":a(e)+"%"}).transition="all "+t+"ms "+n,o}n.configure=function(e){var t,n;for(t in e)void 0!==(n=e[t])&&e.hasOwnProperty(t)&&(r[t]=n);return this},n.status=null,n.set=function(e){var t=n.isStarted();e=o(e,r.minimum,1),n.status=1===e?null:e;var a=n.render(!t),c=a.querySelector(r.barSelector),u=r.speed,d=r.easing;return a.offsetWidth,l((function(t){""===r.positionUsing&&(r.positionUsing=n.getPositioningCSS()),s(c,i(e,u,d)),1===e?(s(a,{transition:"none",opacity:1}),a.offsetWidth,setTimeout((function(){s(a,{transition:"all "+u+"ms linear",opacity:0}),setTimeout((function(){n.remove(),t()}),u)}),u)):setTimeout(t,u)})),this},n.isStarted=function(){return"number"==typeof n.status},n.start=function(){n.status||n.set(0);var e=function(){setTimeout((function(){n.status&&(n.trickle(),e())}),r.trickleSpeed)};return r.trickle&&e(),this},n.done=function(e){return e||n.status?n.inc(.3+.5*Math.random()).set(1):this},n.inc=function(e){var t=n.status;return t?("number"!=typeof e&&(e=(1-t)*o(Math.random()*t,.1,.95)),t=o(t+e,0,.994),n.set(t)):n.start()},n.trickle=function(){return n.inc(Math.random()*r.trickleRate)},e=0,t=0,n.promise=function(r){return r&&"resolved"!==r.state()?(0===t&&n.start(),e++,t++,r.always((function(){0==--t?(e=0,n.done()):n.set((e-t)/e)})),this):this},n.render=function(e){if(n.isRendered())return document.getElementById("nprogress");u(document.documentElement,"nprogress-busy");var t=document.createElement("div");t.id="nprogress",t.innerHTML=r.template;var o,i=t.querySelector(r.barSelector),l=e?"-100":a(n.status||0),c=document.querySelector(r.parent);return s(i,{transition:"all 0 linear",transform:"translate3d("+l+"%,0,0)"}),r.showSpinner||(o=t.querySelector(r.spinnerSelector))&&f(o),c!=document.body&&u(c,"nprogress-custom-parent"),c.appendChild(t),t},n.remove=function(){d(document.documentElement,"nprogress-busy"),d(document.querySelector(r.parent),"nprogress-custom-parent");var e=document.getElementById("nprogress");e&&f(e)},n.isRendered=function(){return!!document.getElementById("nprogress")},n.getPositioningCSS=function(){var e=document.body.style,t="WebkitTransform"in e?"Webkit":"MozTransform"in e?"Moz":"msTransform"in e?"ms":"OTransform"in e?"O":"";return t+"Perspective"in e?"translate3d":t+"Transform"in e?"translate":"margin"};var l=function(){var e=[];function t(){var n=e.shift();n&&n(t)}return function(n){e.push(n),1==e.length&&t()}}(),s=function(){var e=["Webkit","O","Moz","ms"],t={};function n(e){return e.replace(/^-ms-/,"ms-").replace(/-([\da-z])/gi,(function(e,t){return t.toUpperCase()}))}function r(t){var n=document.body.style;if(t in n)return t;for(var r,o=e.length,a=t.charAt(0).toUpperCase()+t.slice(1);o--;)if((r=e[o]+a)in n)return r;return t}function o(e){return e=n(e),t[e]||(t[e]=r(e))}function a(e,t,n){t=o(t),e.style[t]=n}return function(e,t){var n,r,o=arguments;if(2==o.length)for(n in t)void 0!==(r=t[n])&&t.hasOwnProperty(n)&&a(e,n,r);else a(e,o[1],o[2])}}();function c(e,t){return("string"==typeof e?e:p(e)).indexOf(" "+t+" ")>=0}function u(e,t){var n=p(e),r=n+t;c(n,t)||(e.className=r.substring(1))}function d(e,t){var n,r=p(e);c(e,t)&&(n=r.replace(" "+t+" "," "),e.className=n.substring(1,n.length-1))}function p(e){return(" "+(e.className||"")+" ").replace(/\s+/gi," ")}function f(e){e&&e.parentNode&&e.parentNode.removeChild(e)}return n},void 0===(o="function"==typeof r?r.call(t,n,t,e):r)||(e.exports=o)},5302:(e,t,n)=>{var r=n(4634);e.exports=h,e.exports.parse=a,e.exports.compile=function(e,t){return s(a(e,t),t)},e.exports.tokensToFunction=s,e.exports.tokensToRegExp=f;var o=new RegExp(["(\\\\.)","([\\/.])?(?:(?:\\:(\\w+)(?:\\(((?:\\\\.|[^\\\\()])+)\\))?|\\(((?:\\\\.|[^\\\\()])+)\\))([+*?])?|(\\*))"].join("|"),"g");function a(e,t){for(var n,r=[],a=0,l=0,s="",c=t&&t.delimiter||"/";null!=(n=o.exec(e));){var d=n[0],p=n[1],f=n.index;if(s+=e.slice(l,f),l=f+d.length,p)s+=p[1];else{var h=e[l],g=n[2],m=n[3],y=n[4],b=n[5],v=n[6],w=n[7];s&&(r.push(s),s="");var k=null!=g&&null!=h&&h!==g,x="+"===v||"*"===v,S="?"===v||"*"===v,E=g||c,_=y||b,C=g||("string"==typeof r[r.length-1]?r[r.length-1]:"");r.push({name:m||a++,prefix:g||"",delimiter:E,optional:S,repeat:x,partial:k,asterisk:!!w,pattern:_?u(_):w?".*":i(E,C)})}}return l-1?"[^"+c(e)+"]+?":c(t)+"|(?:(?!"+c(t)+")[^"+c(e)+"])+?"}function l(e){return encodeURI(e).replace(/[\/?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()}))}function s(e,t){for(var n=new Array(e.length),o=0;o{e.exports&&(e.exports={core:{meta:{path:"components/prism-core.js",option:"mandatory"},core:"Core"},themes:{meta:{path:"themes/{id}.css",link:"index.html?theme={id}",exclusive:!0},prism:{title:"Default",option:"default"},"prism-dark":"Dark","prism-funky":"Funky","prism-okaidia":{title:"Okaidia",owner:"ocodia"},"prism-twilight":{title:"Twilight",owner:"remybach"},"prism-coy":{title:"Coy",owner:"tshedor"},"prism-solarizedlight":{title:"Solarized Light",owner:"hectormatos2011 "},"prism-tomorrow":{title:"Tomorrow Night",owner:"Rosey"}},languages:{meta:{path:"components/prism-{id}",noCSS:!0,examplesPath:"examples/prism-{id}",addCheckAll:!0},markup:{title:"Markup",alias:["html","xml","svg","mathml","ssml","atom","rss"],aliasTitles:{html:"HTML",xml:"XML",svg:"SVG",mathml:"MathML",ssml:"SSML",atom:"Atom",rss:"RSS"},option:"default"},css:{title:"CSS",option:"default",modify:"markup"},clike:{title:"C-like",option:"default"},javascript:{title:"JavaScript",require:"clike",modify:"markup",optional:"regex",alias:"js",option:"default"},abap:{title:"ABAP",owner:"dellagustin"},abnf:{title:"ABNF",owner:"RunDevelopment"},actionscript:{title:"ActionScript",require:"javascript",modify:"markup",owner:"Golmote"},ada:{title:"Ada",owner:"Lucretia"},agda:{title:"Agda",owner:"xy-ren"},al:{title:"AL",owner:"RunDevelopment"},antlr4:{title:"ANTLR4",alias:"g4",owner:"RunDevelopment"},apacheconf:{title:"Apache Configuration",owner:"GuiTeK"},apex:{title:"Apex",require:["clike","sql"],owner:"RunDevelopment"},apl:{title:"APL",owner:"ngn"},applescript:{title:"AppleScript",owner:"Golmote"},aql:{title:"AQL",owner:"RunDevelopment"},arduino:{title:"Arduino",require:"cpp",alias:"ino",owner:"dkern"},arff:{title:"ARFF",owner:"Golmote"},armasm:{title:"ARM Assembly",alias:"arm-asm",owner:"RunDevelopment"},arturo:{title:"Arturo",alias:"art",optional:["bash","css","javascript","markup","markdown","sql"],owner:"drkameleon"},asciidoc:{alias:"adoc",title:"AsciiDoc",owner:"Golmote"},aspnet:{title:"ASP.NET (C#)",require:["markup","csharp"],owner:"nauzilus"},asm6502:{title:"6502 Assembly",owner:"kzurawel"},asmatmel:{title:"Atmel AVR Assembly",owner:"cerkit"},autohotkey:{title:"AutoHotkey",owner:"aviaryan"},autoit:{title:"AutoIt",owner:"Golmote"},avisynth:{title:"AviSynth",alias:"avs",owner:"Zinfidel"},"avro-idl":{title:"Avro IDL",alias:"avdl",owner:"RunDevelopment"},awk:{title:"AWK",alias:"gawk",aliasTitles:{gawk:"GAWK"},owner:"RunDevelopment"},bash:{title:"Bash",alias:["sh","shell"],aliasTitles:{sh:"Shell",shell:"Shell"},owner:"zeitgeist87"},basic:{title:"BASIC",owner:"Golmote"},batch:{title:"Batch",owner:"Golmote"},bbcode:{title:"BBcode",alias:"shortcode",aliasTitles:{shortcode:"Shortcode"},owner:"RunDevelopment"},bbj:{title:"BBj",owner:"hyyan"},bicep:{title:"Bicep",owner:"johnnyreilly"},birb:{title:"Birb",require:"clike",owner:"Calamity210"},bison:{title:"Bison",require:"c",owner:"Golmote"},bnf:{title:"BNF",alias:"rbnf",aliasTitles:{rbnf:"RBNF"},owner:"RunDevelopment"},bqn:{title:"BQN",owner:"yewscion"},brainfuck:{title:"Brainfuck",owner:"Golmote"},brightscript:{title:"BrightScript",owner:"RunDevelopment"},bro:{title:"Bro",owner:"wayward710"},bsl:{title:"BSL (1C:Enterprise)",alias:"oscript",aliasTitles:{oscript:"OneScript"},owner:"Diversus23"},c:{title:"C",require:"clike",owner:"zeitgeist87"},csharp:{title:"C#",require:"clike",alias:["cs","dotnet"],owner:"mvalipour"},cpp:{title:"C++",require:"c",owner:"zeitgeist87"},cfscript:{title:"CFScript",require:"clike",alias:"cfc",owner:"mjclemente"},chaiscript:{title:"ChaiScript",require:["clike","cpp"],owner:"RunDevelopment"},cil:{title:"CIL",owner:"sbrl"},cilkc:{title:"Cilk/C",require:"c",alias:"cilk-c",owner:"OpenCilk"},cilkcpp:{title:"Cilk/C++",require:"cpp",alias:["cilk-cpp","cilk"],owner:"OpenCilk"},clojure:{title:"Clojure",owner:"troglotit"},cmake:{title:"CMake",owner:"mjrogozinski"},cobol:{title:"COBOL",owner:"RunDevelopment"},coffeescript:{title:"CoffeeScript",require:"javascript",alias:"coffee",owner:"R-osey"},concurnas:{title:"Concurnas",alias:"conc",owner:"jasontatton"},csp:{title:"Content-Security-Policy",owner:"ScottHelme"},cooklang:{title:"Cooklang",owner:"ahue"},coq:{title:"Coq",owner:"RunDevelopment"},crystal:{title:"Crystal",require:"ruby",owner:"MakeNowJust"},"css-extras":{title:"CSS Extras",require:"css",modify:"css",owner:"milesj"},csv:{title:"CSV",owner:"RunDevelopment"},cue:{title:"CUE",owner:"RunDevelopment"},cypher:{title:"Cypher",owner:"RunDevelopment"},d:{title:"D",require:"clike",owner:"Golmote"},dart:{title:"Dart",require:"clike",owner:"Golmote"},dataweave:{title:"DataWeave",owner:"machaval"},dax:{title:"DAX",owner:"peterbud"},dhall:{title:"Dhall",owner:"RunDevelopment"},diff:{title:"Diff",owner:"uranusjr"},django:{title:"Django/Jinja2",require:"markup-templating",alias:"jinja2",owner:"romanvm"},"dns-zone-file":{title:"DNS zone file",owner:"RunDevelopment",alias:"dns-zone"},docker:{title:"Docker",alias:"dockerfile",owner:"JustinBeckwith"},dot:{title:"DOT (Graphviz)",alias:"gv",optional:"markup",owner:"RunDevelopment"},ebnf:{title:"EBNF",owner:"RunDevelopment"},editorconfig:{title:"EditorConfig",owner:"osipxd"},eiffel:{title:"Eiffel",owner:"Conaclos"},ejs:{title:"EJS",require:["javascript","markup-templating"],owner:"RunDevelopment",alias:"eta",aliasTitles:{eta:"Eta"}},elixir:{title:"Elixir",owner:"Golmote"},elm:{title:"Elm",owner:"zwilias"},etlua:{title:"Embedded Lua templating",require:["lua","markup-templating"],owner:"RunDevelopment"},erb:{title:"ERB",require:["ruby","markup-templating"],owner:"Golmote"},erlang:{title:"Erlang",owner:"Golmote"},"excel-formula":{title:"Excel Formula",alias:["xlsx","xls"],owner:"RunDevelopment"},fsharp:{title:"F#",require:"clike",owner:"simonreynolds7"},factor:{title:"Factor",owner:"catb0t"},false:{title:"False",owner:"edukisto"},"firestore-security-rules":{title:"Firestore security rules",require:"clike",owner:"RunDevelopment"},flow:{title:"Flow",require:"javascript",owner:"Golmote"},fortran:{title:"Fortran",owner:"Golmote"},ftl:{title:"FreeMarker Template Language",require:"markup-templating",owner:"RunDevelopment"},gml:{title:"GameMaker Language",alias:"gamemakerlanguage",require:"clike",owner:"LiarOnce"},gap:{title:"GAP (CAS)",owner:"RunDevelopment"},gcode:{title:"G-code",owner:"RunDevelopment"},gdscript:{title:"GDScript",owner:"RunDevelopment"},gedcom:{title:"GEDCOM",owner:"Golmote"},gettext:{title:"gettext",alias:"po",owner:"RunDevelopment"},gherkin:{title:"Gherkin",owner:"hason"},git:{title:"Git",owner:"lgiraudel"},glsl:{title:"GLSL",require:"c",owner:"Golmote"},gn:{title:"GN",alias:"gni",owner:"RunDevelopment"},"linker-script":{title:"GNU Linker Script",alias:"ld",owner:"RunDevelopment"},go:{title:"Go",require:"clike",owner:"arnehormann"},"go-module":{title:"Go module",alias:"go-mod",owner:"RunDevelopment"},gradle:{title:"Gradle",require:"clike",owner:"zeabdelkhalek-badido18"},graphql:{title:"GraphQL",optional:"markdown",owner:"Golmote"},groovy:{title:"Groovy",require:"clike",owner:"robfletcher"},haml:{title:"Haml",require:"ruby",optional:["css","css-extras","coffeescript","erb","javascript","less","markdown","scss","textile"],owner:"Golmote"},handlebars:{title:"Handlebars",require:"markup-templating",alias:["hbs","mustache"],aliasTitles:{mustache:"Mustache"},owner:"Golmote"},haskell:{title:"Haskell",alias:"hs",owner:"bholst"},haxe:{title:"Haxe",require:"clike",optional:"regex",owner:"Golmote"},hcl:{title:"HCL",owner:"outsideris"},hlsl:{title:"HLSL",require:"c",owner:"RunDevelopment"},hoon:{title:"Hoon",owner:"matildepark"},http:{title:"HTTP",optional:["csp","css","hpkp","hsts","javascript","json","markup","uri"],owner:"danielgtaylor"},hpkp:{title:"HTTP Public-Key-Pins",owner:"ScottHelme"},hsts:{title:"HTTP Strict-Transport-Security",owner:"ScottHelme"},ichigojam:{title:"IchigoJam",owner:"BlueCocoa"},icon:{title:"Icon",owner:"Golmote"},"icu-message-format":{title:"ICU Message Format",owner:"RunDevelopment"},idris:{title:"Idris",alias:"idr",owner:"KeenS",require:"haskell"},ignore:{title:".ignore",owner:"osipxd",alias:["gitignore","hgignore","npmignore"],aliasTitles:{gitignore:".gitignore",hgignore:".hgignore",npmignore:".npmignore"}},inform7:{title:"Inform 7",owner:"Golmote"},ini:{title:"Ini",owner:"aviaryan"},io:{title:"Io",owner:"AlesTsurko"},j:{title:"J",owner:"Golmote"},java:{title:"Java",require:"clike",owner:"sherblot"},javadoc:{title:"JavaDoc",require:["markup","java","javadoclike"],modify:"java",optional:"scala",owner:"RunDevelopment"},javadoclike:{title:"JavaDoc-like",modify:["java","javascript","php"],owner:"RunDevelopment"},javastacktrace:{title:"Java stack trace",owner:"RunDevelopment"},jexl:{title:"Jexl",owner:"czosel"},jolie:{title:"Jolie",require:"clike",owner:"thesave"},jq:{title:"JQ",owner:"RunDevelopment"},jsdoc:{title:"JSDoc",require:["javascript","javadoclike","typescript"],modify:"javascript",optional:["actionscript","coffeescript"],owner:"RunDevelopment"},"js-extras":{title:"JS Extras",require:"javascript",modify:"javascript",optional:["actionscript","coffeescript","flow","n4js","typescript"],owner:"RunDevelopment"},json:{title:"JSON",alias:"webmanifest",aliasTitles:{webmanifest:"Web App Manifest"},owner:"CupOfTea696"},json5:{title:"JSON5",require:"json",owner:"RunDevelopment"},jsonp:{title:"JSONP",require:"json",owner:"RunDevelopment"},jsstacktrace:{title:"JS stack trace",owner:"sbrl"},"js-templates":{title:"JS Templates",require:"javascript",modify:"javascript",optional:["css","css-extras","graphql","markdown","markup","sql"],owner:"RunDevelopment"},julia:{title:"Julia",owner:"cdagnino"},keepalived:{title:"Keepalived Configure",owner:"dev-itsheng"},keyman:{title:"Keyman",owner:"mcdurdin"},kotlin:{title:"Kotlin",alias:["kt","kts"],aliasTitles:{kts:"Kotlin Script"},require:"clike",owner:"Golmote"},kumir:{title:"KuMir (\u041a\u0443\u041c\u0438\u0440)",alias:"kum",owner:"edukisto"},kusto:{title:"Kusto",owner:"RunDevelopment"},latex:{title:"LaTeX",alias:["tex","context"],aliasTitles:{tex:"TeX",context:"ConTeXt"},owner:"japborst"},latte:{title:"Latte",require:["clike","markup-templating","php"],owner:"nette"},less:{title:"Less",require:"css",optional:"css-extras",owner:"Golmote"},lilypond:{title:"LilyPond",require:"scheme",alias:"ly",owner:"RunDevelopment"},liquid:{title:"Liquid",require:"markup-templating",owner:"cinhtau"},lisp:{title:"Lisp",alias:["emacs","elisp","emacs-lisp"],owner:"JuanCaicedo"},livescript:{title:"LiveScript",owner:"Golmote"},llvm:{title:"LLVM IR",owner:"porglezomp"},log:{title:"Log file",optional:"javastacktrace",owner:"RunDevelopment"},lolcode:{title:"LOLCODE",owner:"Golmote"},lua:{title:"Lua",owner:"Golmote"},magma:{title:"Magma (CAS)",owner:"RunDevelopment"},makefile:{title:"Makefile",owner:"Golmote"},markdown:{title:"Markdown",require:"markup",optional:"yaml",alias:"md",owner:"Golmote"},"markup-templating":{title:"Markup templating",require:"markup",owner:"Golmote"},mata:{title:"Mata",owner:"RunDevelopment"},matlab:{title:"MATLAB",owner:"Golmote"},maxscript:{title:"MAXScript",owner:"RunDevelopment"},mel:{title:"MEL",owner:"Golmote"},mermaid:{title:"Mermaid",owner:"RunDevelopment"},metafont:{title:"METAFONT",owner:"LaeriExNihilo"},mizar:{title:"Mizar",owner:"Golmote"},mongodb:{title:"MongoDB",owner:"airs0urce",require:"javascript"},monkey:{title:"Monkey",owner:"Golmote"},moonscript:{title:"MoonScript",alias:"moon",owner:"RunDevelopment"},n1ql:{title:"N1QL",owner:"TMWilds"},n4js:{title:"N4JS",require:"javascript",optional:"jsdoc",alias:"n4jsd",owner:"bsmith-n4"},"nand2tetris-hdl":{title:"Nand To Tetris HDL",owner:"stephanmax"},naniscript:{title:"Naninovel Script",owner:"Elringus",alias:"nani"},nasm:{title:"NASM",owner:"rbmj"},neon:{title:"NEON",owner:"nette"},nevod:{title:"Nevod",owner:"nezaboodka"},nginx:{title:"nginx",owner:"volado"},nim:{title:"Nim",owner:"Golmote"},nix:{title:"Nix",owner:"Golmote"},nsis:{title:"NSIS",owner:"idleberg"},objectivec:{title:"Objective-C",require:"c",alias:"objc",owner:"uranusjr"},ocaml:{title:"OCaml",owner:"Golmote"},odin:{title:"Odin",owner:"edukisto"},opencl:{title:"OpenCL",require:"c",modify:["c","cpp"],owner:"Milania1"},openqasm:{title:"OpenQasm",alias:"qasm",owner:"RunDevelopment"},oz:{title:"Oz",owner:"Golmote"},parigp:{title:"PARI/GP",owner:"Golmote"},parser:{title:"Parser",require:"markup",owner:"Golmote"},pascal:{title:"Pascal",alias:"objectpascal",aliasTitles:{objectpascal:"Object Pascal"},owner:"Golmote"},pascaligo:{title:"Pascaligo",owner:"DefinitelyNotAGoat"},psl:{title:"PATROL Scripting Language",owner:"bertysentry"},pcaxis:{title:"PC-Axis",alias:"px",owner:"RunDevelopment"},peoplecode:{title:"PeopleCode",alias:"pcode",owner:"RunDevelopment"},perl:{title:"Perl",owner:"Golmote"},php:{title:"PHP",require:"markup-templating",owner:"milesj"},phpdoc:{title:"PHPDoc",require:["php","javadoclike"],modify:"php",owner:"RunDevelopment"},"php-extras":{title:"PHP Extras",require:"php",modify:"php",owner:"milesj"},"plant-uml":{title:"PlantUML",alias:"plantuml",owner:"RunDevelopment"},plsql:{title:"PL/SQL",require:"sql",owner:"Golmote"},powerquery:{title:"PowerQuery",alias:["pq","mscript"],owner:"peterbud"},powershell:{title:"PowerShell",owner:"nauzilus"},processing:{title:"Processing",require:"clike",owner:"Golmote"},prolog:{title:"Prolog",owner:"Golmote"},promql:{title:"PromQL",owner:"arendjr"},properties:{title:".properties",owner:"Golmote"},protobuf:{title:"Protocol Buffers",require:"clike",owner:"just-boris"},pug:{title:"Pug",require:["markup","javascript"],optional:["coffeescript","ejs","handlebars","less","livescript","markdown","scss","stylus","twig"],owner:"Golmote"},puppet:{title:"Puppet",owner:"Golmote"},pure:{title:"Pure",optional:["c","cpp","fortran"],owner:"Golmote"},purebasic:{title:"PureBasic",require:"clike",alias:"pbfasm",owner:"HeX0R101"},purescript:{title:"PureScript",require:"haskell",alias:"purs",owner:"sriharshachilakapati"},python:{title:"Python",alias:"py",owner:"multipetros"},qsharp:{title:"Q#",require:"clike",alias:"qs",owner:"fedonman"},q:{title:"Q (kdb+ database)",owner:"Golmote"},qml:{title:"QML",require:"javascript",owner:"RunDevelopment"},qore:{title:"Qore",require:"clike",owner:"temnroegg"},r:{title:"R",owner:"Golmote"},racket:{title:"Racket",require:"scheme",alias:"rkt",owner:"RunDevelopment"},cshtml:{title:"Razor C#",alias:"razor",require:["markup","csharp"],optional:["css","css-extras","javascript","js-extras"],owner:"RunDevelopment"},jsx:{title:"React JSX",require:["markup","javascript"],optional:["jsdoc","js-extras","js-templates"],owner:"vkbansal"},tsx:{title:"React TSX",require:["jsx","typescript"]},reason:{title:"Reason",require:"clike",owner:"Golmote"},regex:{title:"Regex",owner:"RunDevelopment"},rego:{title:"Rego",owner:"JordanSh"},renpy:{title:"Ren'py",alias:"rpy",owner:"HyuchiaDiego"},rescript:{title:"ReScript",alias:"res",owner:"vmarcosp"},rest:{title:"reST (reStructuredText)",owner:"Golmote"},rip:{title:"Rip",owner:"ravinggenius"},roboconf:{title:"Roboconf",owner:"Golmote"},robotframework:{title:"Robot Framework",alias:"robot",owner:"RunDevelopment"},ruby:{title:"Ruby",require:"clike",alias:"rb",owner:"samflores"},rust:{title:"Rust",owner:"Golmote"},sas:{title:"SAS",optional:["groovy","lua","sql"],owner:"Golmote"},sass:{title:"Sass (Sass)",require:"css",optional:"css-extras",owner:"Golmote"},scss:{title:"Sass (SCSS)",require:"css",optional:"css-extras",owner:"MoOx"},scala:{title:"Scala",require:"java",owner:"jozic"},scheme:{title:"Scheme",owner:"bacchus123"},"shell-session":{title:"Shell session",require:"bash",alias:["sh-session","shellsession"],owner:"RunDevelopment"},smali:{title:"Smali",owner:"RunDevelopment"},smalltalk:{title:"Smalltalk",owner:"Golmote"},smarty:{title:"Smarty",require:"markup-templating",optional:"php",owner:"Golmote"},sml:{title:"SML",alias:"smlnj",aliasTitles:{smlnj:"SML/NJ"},owner:"RunDevelopment"},solidity:{title:"Solidity (Ethereum)",alias:"sol",require:"clike",owner:"glachaud"},"solution-file":{title:"Solution file",alias:"sln",owner:"RunDevelopment"},soy:{title:"Soy (Closure Template)",require:"markup-templating",owner:"Golmote"},sparql:{title:"SPARQL",require:"turtle",owner:"Triply-Dev",alias:"rq"},"splunk-spl":{title:"Splunk SPL",owner:"RunDevelopment"},sqf:{title:"SQF: Status Quo Function (Arma 3)",require:"clike",owner:"RunDevelopment"},sql:{title:"SQL",owner:"multipetros"},squirrel:{title:"Squirrel",require:"clike",owner:"RunDevelopment"},stan:{title:"Stan",owner:"RunDevelopment"},stata:{title:"Stata Ado",require:["mata","java","python"],owner:"RunDevelopment"},iecst:{title:"Structured Text (IEC 61131-3)",owner:"serhioromano"},stylus:{title:"Stylus",owner:"vkbansal"},supercollider:{title:"SuperCollider",alias:"sclang",owner:"RunDevelopment"},swift:{title:"Swift",owner:"chrischares"},systemd:{title:"Systemd configuration file",owner:"RunDevelopment"},"t4-templating":{title:"T4 templating",owner:"RunDevelopment"},"t4-cs":{title:"T4 Text Templates (C#)",require:["t4-templating","csharp"],alias:"t4",owner:"RunDevelopment"},"t4-vb":{title:"T4 Text Templates (VB)",require:["t4-templating","vbnet"],owner:"RunDevelopment"},tap:{title:"TAP",owner:"isaacs",require:"yaml"},tcl:{title:"Tcl",owner:"PeterChaplin"},tt2:{title:"Template Toolkit 2",require:["clike","markup-templating"],owner:"gflohr"},textile:{title:"Textile",require:"markup",optional:"css",owner:"Golmote"},toml:{title:"TOML",owner:"RunDevelopment"},tremor:{title:"Tremor",alias:["trickle","troy"],owner:"darach",aliasTitles:{trickle:"trickle",troy:"troy"}},turtle:{title:"Turtle",alias:"trig",aliasTitles:{trig:"TriG"},owner:"jakubklimek"},twig:{title:"Twig",require:"markup-templating",owner:"brandonkelly"},typescript:{title:"TypeScript",require:"javascript",optional:"js-templates",alias:"ts",owner:"vkbansal"},typoscript:{title:"TypoScript",alias:"tsconfig",aliasTitles:{tsconfig:"TSConfig"},owner:"dkern"},unrealscript:{title:"UnrealScript",alias:["uscript","uc"],owner:"RunDevelopment"},uorazor:{title:"UO Razor Script",owner:"jaseowns"},uri:{title:"URI",alias:"url",aliasTitles:{url:"URL"},owner:"RunDevelopment"},v:{title:"V",require:"clike",owner:"taggon"},vala:{title:"Vala",require:"clike",optional:"regex",owner:"TemplarVolk"},vbnet:{title:"VB.Net",require:"basic",owner:"Bigsby"},velocity:{title:"Velocity",require:"markup",owner:"Golmote"},verilog:{title:"Verilog",owner:"a-rey"},vhdl:{title:"VHDL",owner:"a-rey"},vim:{title:"vim",owner:"westonganger"},"visual-basic":{title:"Visual Basic",alias:["vb","vba"],aliasTitles:{vba:"VBA"},owner:"Golmote"},warpscript:{title:"WarpScript",owner:"RunDevelopment"},wasm:{title:"WebAssembly",owner:"Golmote"},"web-idl":{title:"Web IDL",alias:"webidl",owner:"RunDevelopment"},wgsl:{title:"WGSL",owner:"Dr4gonthree"},wiki:{title:"Wiki markup",require:"markup",owner:"Golmote"},wolfram:{title:"Wolfram language",alias:["mathematica","nb","wl"],aliasTitles:{mathematica:"Mathematica",nb:"Mathematica Notebook"},owner:"msollami"},wren:{title:"Wren",owner:"clsource"},xeora:{title:"Xeora",require:"markup",alias:"xeoracube",aliasTitles:{xeoracube:"XeoraCube"},owner:"freakmaxi"},"xml-doc":{title:"XML doc (.net)",require:"markup",modify:["csharp","fsharp","vbnet"],owner:"RunDevelopment"},xojo:{title:"Xojo (REALbasic)",owner:"Golmote"},xquery:{title:"XQuery",require:"markup",owner:"Golmote"},yaml:{title:"YAML",alias:"yml",owner:"hason"},yang:{title:"YANG",owner:"RunDevelopment"},zig:{title:"Zig",owner:"RunDevelopment"}},plugins:{meta:{path:"plugins/{id}/prism-{id}",link:"plugins/{id}/"},"line-highlight":{title:"Line Highlight",description:"Highlights specific lines and/or line ranges."},"line-numbers":{title:"Line Numbers",description:"Line number at the beginning of code lines.",owner:"kuba-kubula"},"show-invisibles":{title:"Show Invisibles",description:"Show hidden characters such as tabs and line breaks.",optional:["autolinker","data-uri-highlight"]},autolinker:{title:"Autolinker",description:"Converts URLs and emails in code to clickable links. Parses Markdown links in comments."},wpd:{title:"WebPlatform Docs",description:'Makes tokens link to WebPlatform.org documentation. The links open in a new tab.'},"custom-class":{title:"Custom Class",description:"This plugin allows you to prefix Prism's default classes (.comment can become .namespace--comment) or replace them with your defined ones (like .editor__comment). You can even add new classes.",owner:"dvkndn",noCSS:!0},"file-highlight":{title:"File Highlight",description:"Fetch external files and highlight them with Prism. Used on the Prism website itself.",noCSS:!0},"show-language":{title:"Show Language",description:"Display the highlighted language in code blocks (inline code does not show the label).",owner:"nauzilus",noCSS:!0,require:"toolbar"},"jsonp-highlight":{title:"JSONP Highlight",description:"Fetch content with JSONP and highlight some interesting content (e.g. GitHub/Gists or Bitbucket API).",noCSS:!0,owner:"nauzilus"},"highlight-keywords":{title:"Highlight Keywords",description:"Adds special CSS classes for each keyword for fine-grained highlighting.",owner:"vkbansal",noCSS:!0},"remove-initial-line-feed":{title:"Remove initial line feed",description:"Removes the initial line feed in code blocks.",owner:"Golmote",noCSS:!0},"inline-color":{title:"Inline color",description:"Adds a small inline preview for colors in style sheets.",require:"css-extras",owner:"RunDevelopment"},previewers:{title:"Previewers",description:"Previewers for angles, colors, gradients, easing and time.",require:"css-extras",owner:"Golmote"},autoloader:{title:"Autoloader",description:"Automatically loads the needed languages to highlight the code blocks.",owner:"Golmote",noCSS:!0},"keep-markup":{title:"Keep Markup",description:"Prevents custom markup from being dropped out during highlighting.",owner:"Golmote",optional:"normalize-whitespace",noCSS:!0},"command-line":{title:"Command Line",description:"Display a command line with a prompt and, optionally, the output/response from the commands.",owner:"chriswells0"},"unescaped-markup":{title:"Unescaped Markup",description:"Write markup without having to escape anything."},"normalize-whitespace":{title:"Normalize Whitespace",description:"Supports multiple operations to normalize whitespace in code blocks.",owner:"zeitgeist87",optional:"unescaped-markup",noCSS:!0},"data-uri-highlight":{title:"Data-URI Highlight",description:"Highlights data-URI contents.",owner:"Golmote",noCSS:!0},toolbar:{title:"Toolbar",description:"Attach a toolbar for plugins to easily register buttons on the top of a code block.",owner:"mAAdhaTTah"},"copy-to-clipboard":{title:"Copy to Clipboard Button",description:"Add a button that copies the code block to the clipboard when clicked.",owner:"mAAdhaTTah",require:"toolbar",noCSS:!0},"download-button":{title:"Download Button",description:"A button in the toolbar of a code block adding a convenient way to download a code file.",owner:"Golmote",require:"toolbar",noCSS:!0},"match-braces":{title:"Match braces",description:"Highlights matching braces.",owner:"RunDevelopment"},"diff-highlight":{title:"Diff Highlight",description:"Highlights the code inside diff blocks.",owner:"RunDevelopment",require:"diff"},"filter-highlight-all":{title:"Filter highlightAll",description:"Filters the elements the highlightAll and highlightAllUnder methods actually highlight.",owner:"RunDevelopment",noCSS:!0},treeview:{title:"Treeview",description:"A language with special styles to highlight file system tree structures.",owner:"Golmote"}}})},8722:(e,t,n)=>{const r=n(6969),o=n(8380),a=new Set;function i(e){void 0===e?e=Object.keys(r.languages).filter((e=>"meta"!=e)):Array.isArray(e)||(e=[e]);const t=[...a,...Object.keys(Prism.languages)];o(r,e,t).load((e=>{if(!(e in r.languages))return void(i.silent||console.warn("Language does not exist: "+e));const t="./prism-"+e;delete n.c[n(3157).resolve(t)],delete Prism.languages[e],n(3157)(t),a.add(e)}))}i.silent=!1,e.exports=i},9700:()=>{!function(e){function t(e,t){return"___"+e.toUpperCase()+t+"___"}Object.defineProperties(e.languages["markup-templating"]={},{buildPlaceholders:{value:function(n,r,o,a){if(n.language===r){var i=n.tokenStack=[];n.code=n.code.replace(o,(function(e){if("function"==typeof a&&!a(e))return e;for(var o,l=i.length;-1!==n.code.indexOf(o=t(r,l));)++l;return i[l]=e,o})),n.grammar=e.languages.markup}}},tokenizePlaceholders:{value:function(n,r){if(n.language===r&&n.tokenStack){n.grammar=e.languages[r];var o=0,a=Object.keys(n.tokenStack);!function i(l){for(var s=0;s=a.length);s++){var c=l[s];if("string"==typeof c||c.content&&"string"==typeof c.content){var u=a[o],d=n.tokenStack[u],p="string"==typeof c?c:c.content,f=t(r,u),h=p.indexOf(f);if(h>-1){++o;var g=p.substring(0,h),m=new e.Token(r,e.tokenize(d,n.grammar),"language-"+r,d),y=p.substring(h+f.length),b=[];g&&b.push.apply(b,i([g])),b.push(m),y&&b.push.apply(b,i([y])),"string"==typeof c?l.splice.apply(l,[s,1].concat(b)):c.content=b}}else c.content&&i(c.content)}return l}(n.tokens)}}}})}(Prism)},8692:(e,t,n)=>{var r={"./":8722};function o(e){var t=a(e);return n(t)}function a(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}o.keys=function(){return Object.keys(r)},o.resolve=a,e.exports=o,o.id=8692},3157:(e,t,n)=>{var r={"./":8722};function o(e){var t=a(e);return n(t)}function a(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}o.keys=function(){return Object.keys(r)},o.resolve=a,e.exports=o,o.id=3157},8380:e=>{"use strict";var t=function(){var e=function(){};function t(e,t){Array.isArray(e)?e.forEach(t):null!=e&&t(e,0)}function n(e){for(var t={},n=0,r=e.length;n "));var l={},s=e[r];if(s){function c(t){if(!(t in e))throw new Error(r+" depends on an unknown component "+t);if(!(t in l))for(var i in o(t,a),l[t]=!0,n[t])l[i]=!0}t(s.require,c),t(s.optional,c),t(s.modify,c)}n[r]=l,a.pop()}}return function(e){var t=n[e];return t||(o(e,r),t=n[e]),t}}function o(e){for(var t in e)return!0;return!1}return function(a,i,l){var s=function(e){var t={};for(var n in e){var r=e[n];for(var o in r)if("meta"!=o){var a=r[o];t[o]="string"==typeof a?{title:a}:a}}return t}(a),c=function(e){var n;return function(r){if(r in e)return r;if(!n)for(var o in n={},e){var a=e[o];t(a&&a.alias,(function(t){if(t in n)throw new Error(t+" cannot be alias for both "+o+" and "+n[t]);if(t in e)throw new Error(t+" cannot be alias of "+o+" because it is a component.");n[t]=o}))}return n[r]||r}}(s);i=i.map(c),l=(l||[]).map(c);var u=n(i),d=n(l);i.forEach((function e(n){var r=s[n];t(r&&r.require,(function(t){t in d||(u[t]=!0,e(t))}))}));for(var p,f=r(s),h=u;o(h);){for(var g in p={},h){var m=s[g];t(m&&m.modify,(function(e){e in d&&(p[e]=!0)}))}for(var y in d)if(!(y in u))for(var b in f(y))if(b in u){p[y]=!0;break}for(var v in h=p)u[v]=!0}var w={getIds:function(){var e=[];return w.load((function(t){e.push(t)})),e},load:function(t,n){return function(t,n,r,o){var a=o?o.series:void 0,i=o?o.parallel:e,l={},s={};function c(e){if(e in l)return l[e];s[e]=!0;var o,u=[];for(var d in t(e))d in n&&u.push(d);if(0===u.length)o=r(e);else{var p=i(u.map((function(e){var t=c(e);return delete s[e],t})));a?o=a(p,(function(){return r(e)})):r(e)}return l[e]=o}for(var u in n)c(u);var d=[];for(var p in s)d.push(l[p]);return i(d)}(f,u,t,n)}};return w}}();e.exports=t},2694:(e,t,n)=>{"use strict";var r=n(6925);function o(){}function a(){}a.resetWarningCache=o,e.exports=function(){function e(e,t,n,o,a,i){if(i!==r){var l=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw l.name="Invariant Violation",l}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:a,resetWarningCache:o};return n.PropTypes=n,n}},5556:(e,t,n)=>{e.exports=n(2694)()},6925:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},2551:(e,t,n)=>{"use strict";var r=n(6540),o=n(9982);function a(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n