sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

++

Browse Source
This commit is contained in:
ivan 2026-07-31 14:54:33 +05:00
parent 0d0b2cc5f8
commit d6a830db05
24 changed files with 46 additions and 166 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apps/attachments/base/helmrelease.yaml
View File

@ -87,9 +87,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: attachments
vault.hashicorp.com/agent-inject-secret-attachments-db: secrets/data/postgresql/apps/attachments
vault.hashicorp.com/agent-inject-secret-attachments-db: secrets/data/apps/attachments/postgres
vault.hashicorp.com/agent-inject-template-attachments-db: |-
{{- with secret "secrets/data/postgresql/apps/attachments" -}}
{{- with secret "secrets/data/apps/attachments/postgres" -}}
DATABASE_HOST={{ index .Data.data "host" }}
DATABASE_PORT={{ index .Data.data "port" }}
DATABASE_NAME={{ index .Data.data "database" }}

4
apps/bim/base/backend.yaml
View File

@ -186,9 +186,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: bim
vault.hashicorp.com/agent-inject-secret-bim-postgresql: secrets/data/postgresql/apps/bim
vault.hashicorp.com/agent-inject-secret-bim-postgresql: secrets/data/apps/bim/postgres
vault.hashicorp.com/agent-inject-template-bim-postgresql: |-
{{- with secret "secrets/data/postgresql/apps/bim" -}}
{{- with secret "secrets/data/apps/bim/postgres" -}}
POSTGRES_ADDRESS=postgresql.bim.svc.cluster.local
POSTGRES_ADDRESS_2=postgresql.bim.svc.cluster.local
POSTGRES_ADDRESS_3=postgresql.bim.svc.cluster.local

4
apps/comparisons/base/backend.yaml
View File

@ -244,9 +244,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: comparisons
vault.hashicorp.com/agent-inject-secret-comparisons-db: secrets/data/postgresql/apps/comparisons
vault.hashicorp.com/agent-inject-secret-comparisons-db: secrets/data/apps/comparisons/postgres
vault.hashicorp.com/agent-inject-template-comparisons-db: |-
{{- with secret "secrets/data/postgresql/apps/comparisons" -}}
{{- with secret "secrets/data/apps/comparisons/postgres" -}}
DATABASE_HOST=postgresql.comparisons.svc.cluster.local
DATABASE_PORT=5432
DATABASE_DB=comparisons_db

4
apps/contracts/base/helmrelease.yaml
View File

@ -90,9 +90,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: contracts
vault.hashicorp.com/agent-inject-secret-contracts-db: secrets/data/postgresql/apps/contracts
vault.hashicorp.com/agent-inject-secret-contracts-db: secrets/data/apps/contracts/postgres
vault.hashicorp.com/agent-inject-template-contracts-db: |-
{{- with secret "secrets/data/postgresql/apps/contracts" -}}
{{- with secret "secrets/data/apps/contracts/postgres" -}}
DB_URL=postgresql://{{ index .Data.data "username" }}:{{ index .Data.data "password" }}@postgresql.contracts.svc.cluster.local:5432/contracts_db?sslmode=disable
{{- end -}}
vault.hashicorp.com/agent-inject-secret-contracts-jwt-public: secrets/data/vault/common/rsa_keys

4
apps/drawings/base/backend.yaml
View File

@ -119,9 +119,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: drawings
vault.hashicorp.com/agent-inject-secret-drawings-db: secrets/data/postgresql/apps/drawings
vault.hashicorp.com/agent-inject-secret-drawings-db: secrets/data/apps/drawings/postgres
vault.hashicorp.com/agent-inject-template-drawings-db: |-
{{- with secret "secrets/data/postgresql/apps/drawings" -}}
{{- with secret "secrets/data/apps/drawings/postgres" -}}
POSTGRES_ADDRESS=postgresql.drawings.svc.cluster.local:5432
POSTGRES_DB=drawings_db
POSTGRES_USER={{ index .Data.data "username" }}

4
apps/flows/base/backend.yaml
View File

@ -217,9 +217,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: flows
vault.hashicorp.com/agent-inject-secret-flows-postgresql: secrets/data/postgresql/apps/flows
vault.hashicorp.com/agent-inject-secret-flows-postgresql: secrets/data/apps/flows/postgres
vault.hashicorp.com/agent-inject-template-flows-postgresql: |-
{{- with secret "secrets/data/postgresql/apps/flows" -}}
{{- with secret "secrets/data/apps/flows/postgres" -}}
PG_DB={{ index .Data.data "database" }}
PG_LOGIN={{ index .Data.data "username" }}
PG_HOST={{ index .Data.data "host" }}

4
apps/flows/base/celery.yaml
View File

@ -202,9 +202,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: flows
vault.hashicorp.com/agent-inject-secret-flows-postgresql: secrets/data/postgresql/apps/flows
vault.hashicorp.com/agent-inject-secret-flows-postgresql: secrets/data/apps/flows/postgres
vault.hashicorp.com/agent-inject-template-flows-postgresql: |-
{{- with secret "secrets/data/postgresql/apps/flows" -}}
{{- with secret "secrets/data/apps/flows/postgres" -}}
PG_DB=flows_db
PG_LOGIN={{ index .Data.data "username" }}
PG_HOST=postgresql.flows.svc.cluster.local

120
apps/inspections/base/backend-deployment.yaml
View File

@ -1,120 +0,0 @@
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: inspections-backend
namespace: inspections
labels:
app: inspections-backend
spec:
replicas: 1
selector:
matchLabels:
app: inspections-backend
template:
metadata:
labels:
app: inspections-backend
annotations:
traffic.sidecar.istio.io/excludeOutboundPorts: "8200"
vault.hashicorp.com/agent-init-first: "true"
vault.hashicorp.com/agent-inject: "true"
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: inspections
vault.hashicorp.com/agent-inject-secret-inspections-db: secrets/data/postgresql/apps/inspections
vault.hashicorp.com/agent-inject-template-inspections-db: |-
{{- with secret "secrets/data/postgresql/apps/inspections" -}}
DATABASE_HOST=postgresql.inspections.svc.cluster.local
DATABASE_PORT=5432
DATABASE_NAME=inspections_db
DATABASE_USER={{ index .Data.data "username" }}
DATABASE_PASSWORD={{ index .Data.data "password" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-inspections-kafka: secrets/data/kafka/apps/inspections
vault.hashicorp.com/agent-inject-template-inspections-kafka: |-
{{- with secret "secrets/data/kafka/apps/inspections" -}}
KAFKA_HOST={{ index .Data.data.auth "bootstrap_servers" }}
KAFKA_USERNAME={{ index .Data.data "username" }}
KAFKA_PASSWORD={{ index .Data.data "password" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-inspections-django-auth: secrets/data/vault/common/django_auth
vault.hashicorp.com/agent-inject-template-inspections-django-auth: |-
{{- with secret "secrets/data/vault/common/django_auth" -}}
SAREX_BACKEND_AUTH={{ index .Data.data "key" }}
{{- end -}}
spec:
serviceAccountName: inspections-vault
containers:
- name: inspections-backend
image: cr.yandex/crp3ccidau046kdj8g9q/sarex-inspections:production_1a33f6f4
imagePullPolicy: IfNotPresent
command: ["/bin/bash", "-ec"]
args:
- |
set -a
[ -f /vault/secrets/inspections-db ] && . /vault/secrets/inspections-db
[ -f /vault/secrets/inspections-kafka ] && . /vault/secrets/inspections-kafka
[ -f /vault/secrets/inspections-django-auth ] && . /vault/secrets/inspections-django-auth
set +a
exec ./entrypoint.sh
ports:
- name: http
containerPort: 8000
protocol: TCP
env:
- name: DEBUG
value: "false"
- name: SERVICE_URL
value: https://srx.wb.ru
- name: HTTP_APP_HOST
value: 0.0.0.0
- name: HTTP_APP_PORT
value: "8000"
- name: HTTP_APP_ROOT_PATH
value: /inspections
- name: HTTP_APP_WORKERS
value: "3"
- name: HTTP_APP_ADMIN_ENABLE
value: "true"
- name: KAFKA_SSL_CAFILE
value: /usr/local/share/ca-certificates/Yandex/YandexInternalRootCA.crt
- name: KAFKA_EAV_ASSETS_TOPIC
value: assets_broadcast
- name: JWT_AUTH_ENABLE
value: "true"
- name: NOTIFICATIONS_ENABLE
value: "true"
- name: NOTIFICATIONS_EMAIL_FROM
value: hello@sarex.io
- name: SAREX_BACKEND_URL
value: https://srx.wb.ru
- name: SAREX_BACKEND_TIMEOUT
value: "30"
- name: EAV_URL
value: http://eav-service.eav
- name: EAV_TIMEOUT
value: "30"
- name: WORKFLOWS_URL
value: http://workflows-service.processing-prod
- name: WORKFLOWS_TIMEOUT
value: "30"
- name: WORKFLOWS_EMAIL_DOCKER_IMAGE
value: cr.yandex/crp3ccidau046kdj8g9q/notification:email
- name: MOBILE_APP_CURRENT_VERSION
value: 1.0.0
- name: MOBILE_APP_RECOMMENDED_VERSION
value: 1.0.0
- name: MOBILE_APP_REQUIRED_VERSION
value: 1.0.0
- name: MAILER_URL
value: http://mailer-service.mailer:8000
- name: MAILER_TIMEOUT
value: "30"
resources:
requests:
cpu: "25m"
memory: 128Mi
imagePullSecrets:
- name: regcred

4
apps/inspections/base/backend.yaml
View File

@ -212,9 +212,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: inspections
vault.hashicorp.com/agent-inject-secret-inspections-db: secrets/data/postgresql/apps/inspections
vault.hashicorp.com/agent-inject-secret-inspections-db: secrets/data/apps/inspections/postgres
vault.hashicorp.com/agent-inject-template-inspections-db: |-
{{- with secret "secrets/data/postgresql/apps/inspections" -}}
{{- with secret "secrets/data/apps/inspections/postgres" -}}
DATABASE_HOST=postgresql.inspections.svc.cluster.local
DATABASE_PORT=5432
DATABASE_NAME=inspections_db

4
apps/issues/base/backend.yaml
View File

@ -188,9 +188,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: issues
vault.hashicorp.com/agent-inject-secret-issues-db: secrets/data/postgresql/apps/issues
vault.hashicorp.com/agent-inject-secret-issues-db: secrets/data/apps/issues/postgres
vault.hashicorp.com/agent-inject-template-issues-db: |-
{{- with secret "secrets/data/postgresql/apps/issues" -}}
{{- with secret "secrets/data/apps/issues/postgres" -}}
DATABASE_PORT=5432
DATABASE_HOST=postgresql.issues.svc.cluster.local
DATABASE_USER={{ index .Data.data "username" }}

4
apps/issues/base/celery.yaml
View File

@ -173,9 +173,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: issues
vault.hashicorp.com/agent-inject-secret-issues-db: secrets/data/postgresql/apps/issues
vault.hashicorp.com/agent-inject-secret-issues-db: secrets/data/apps/issues/postgres
vault.hashicorp.com/agent-inject-template-issues-db: |-
{{- with secret "secrets/data/postgresql/apps/issues" -}}
{{- with secret "secrets/data/apps/issues/postgres" -}}
DATABASE_PORT=5432
DATABASE_HOST=postgresql.issues.svc.cluster.local
DATABASE_USER={{ index .Data.data "username" }}

4
apps/mapper/base/backend.yaml
View File

@ -147,9 +147,9 @@ spec:
{{- with secret "secrets/data/vault/common/django_auth" -}}
MAPPER_DJANGO_TOKEN={{ index .Data.data "key" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-mapper-db: secrets/data/postgresql/apps/mapper
vault.hashicorp.com/agent-inject-secret-mapper-db: secrets/data/apps/mapper/postgres
vault.hashicorp.com/agent-inject-template-mapper-db: |-
{{- with secret "secrets/data/postgresql/apps/mapper" -}}
{{- with secret "secrets/data/apps/mapper/postgres" -}}
MAPPER_DB_USER={{ index .Data.data "username" }}
MAPPER_DB_PASSWORD={{ index .Data.data "password" }}
MAPPER_DB_HOST=postgresql.mapper.svc.cluster.local

4
apps/message-hub/base/message-hub.yaml
View File

@ -148,9 +148,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: message-hub
vault.hashicorp.com/agent-inject-secret-message-hub-db: secrets/data/postgresql/apps/message-hub
vault.hashicorp.com/agent-inject-secret-message-hub-db: secrets/data/apps/message-hub/postgres
vault.hashicorp.com/agent-inject-template-message-hub-db: |-
{{- with secret "secrets/data/postgresql/apps/message-hub" -}}
{{- with secret "secrets/data/apps/message-hub/postgres" -}}
DB_USERNAME={{ index .Data.data "username" }}
DB_PASSWORD={{ index .Data.data "password" }}
DB_DATABASE=pm_db

4
apps/pm/base/backend.yaml
View File

@ -220,9 +220,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: pm
vault.hashicorp.com/agent-inject-secret-pm-db: secrets/data/postgresql/apps/pm
vault.hashicorp.com/agent-inject-secret-pm-db: secrets/data/apps/pm/postgres
vault.hashicorp.com/agent-inject-template-pm-db: |-
{{- with secret "secrets/data/postgresql/apps/pm" -}}
{{- with secret "secrets/data/apps/pm/postgres" -}}
DB_USERNAME={{ index .Data.data "username" }}
DB_PASSWORD={{ index .Data.data "password" }}
DB_DATABASE=pm_db

4
apps/pm/base/celery.yaml
View File

@ -203,9 +203,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: pm
vault.hashicorp.com/agent-inject-secret-pm-db: secrets/data/postgresql/apps/pm
vault.hashicorp.com/agent-inject-secret-pm-db: secrets/data/apps/pm/postgres
vault.hashicorp.com/agent-inject-template-pm-db: |-
{{- with secret "secrets/data/postgresql/apps/pm" -}}
{{- with secret "secrets/data/apps/pm/postgres" -}}
DB_USERNAME={{ index .Data.data "username" }}
DB_PASSWORD={{ index .Data.data "password" }}
DB_DATABASE=pm_db

4
apps/processing/base/api.yaml
View File

@ -139,9 +139,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: processing
vault.hashicorp.com/agent-inject-secret-processing-postgresql: secrets/data/postgresql/apps/processing
vault.hashicorp.com/agent-inject-secret-processing-postgresql: secrets/data/apps/processing/postgres
vault.hashicorp.com/agent-inject-template-processing-postgresql: |-
{{- with secret "secrets/data/postgresql/apps/processing" -}}
{{- with secret "secrets/data/apps/processing/postgres" -}}
POSTGRES_ADDRESS=postgresql.processing.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_USER={{ index .Data.data "username" }}

4
apps/processing/base/engine-low.yaml
View File

@ -399,9 +399,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: processing
vault.hashicorp.com/agent-inject-secret-processing-postgresql: secrets/data/postgresql/apps/processing
vault.hashicorp.com/agent-inject-secret-processing-postgresql: secrets/data/apps/processing/postgres
vault.hashicorp.com/agent-inject-template-processing-postgresql: |-
{{- with secret "secrets/data/postgresql/apps/processing" -}}
{{- with secret "secrets/data/apps/processing/postgres" -}}
POSTGRES_ADDRESS=postgresql.processing.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_USER={{ index .Data.data "username" }}

4
apps/processing/base/engine.yaml
View File

@ -391,9 +391,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: processing
vault.hashicorp.com/agent-inject-secret-processing-postgresql: secrets/data/postgresql/apps/processing
vault.hashicorp.com/agent-inject-secret-processing-postgresql: secrets/data/apps/processing/postgres
vault.hashicorp.com/agent-inject-template-processing-postgresql: |-
{{- with secret "secrets/data/postgresql/apps/processing" -}}
{{- with secret "secrets/data/apps/processing/postgres" -}}
POSTGRES_ADDRESS=postgresql.processing.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_USER={{ index .Data.data "username" }}

4
apps/resources/base/backend-deployment.yaml
View File

@ -21,9 +21,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: resources
vault.hashicorp.com/agent-inject-secret-resources-db: secrets/data/postgresql/apps/resources
vault.hashicorp.com/agent-inject-secret-resources-db: secrets/data/apps/resources/postgres
vault.hashicorp.com/agent-inject-template-resources-db: |-
{{- with secret "secrets/data/postgresql/apps/resources" -}}
{{- with secret "secrets/data/apps/resources/postgres" -}}
DATABASE_HOST=postgresql.resources.svc.cluster.local
DATABASE_PORT=5432
DATABASE_NAME=resources_db

4
apps/subscriptions/base/backend-deployment.yaml
View File

@ -22,9 +22,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: subscriptions
vault.hashicorp.com/agent-inject-secret-subscriptions-postgresql: secrets/data/postgresql/apps/subscriptions
vault.hashicorp.com/agent-inject-secret-subscriptions-postgresql: secrets/data/apps/subscriptions/postgres
vault.hashicorp.com/agent-inject-template-subscriptions-postgresql: |-
{{- with secret "secrets/data/postgresql/apps/subscriptions" -}}
{{- with secret "secrets/data/apps/subscriptions/postgres" -}}
DATABASE_HOST=postgresql.subscriptions.svc.cluster.local
DATABASE_PORT=5432
DATABASE_NAME=subscriptions_db

4
apps/system-log/base/api.yaml
View File

@ -179,9 +179,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: system-log
vault.hashicorp.com/agent-inject-secret-system-log-postgresql: secrets/data/postgresql/apps/system-log
vault.hashicorp.com/agent-inject-secret-system-log-postgresql: secrets/data/apps/system-log/postgres
vault.hashicorp.com/agent-inject-template-system-log-postgresql: |-
{{- with secret "secrets/data/postgresql/apps/system-log" -}}
{{- with secret "secrets/data/apps/system-log/postgres" -}}
POSTGRES_ADDRESS=postgresql.system-log.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_DB=system_log_db

4
apps/system-log/base/worker.yaml
View File

@ -155,9 +155,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: system-log
vault.hashicorp.com/agent-inject-secret-system-log-postgresql: secrets/data/postgresql/apps/system-log
vault.hashicorp.com/agent-inject-secret-system-log-postgresql: secrets/data/apps/system-log/postgres
vault.hashicorp.com/agent-inject-template-system-log-postgresql: |-
{{- with secret "secrets/data/postgresql/apps/system-log" -}}
{{- with secret "secrets/data/apps/system-log/postgres" -}}
POSTGRES_ADDRESS=postgresql.system-log.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_DB=system_log_db

4
apps/transmittal/base/backend.yaml
View File

@ -355,9 +355,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: transmittal
vault.hashicorp.com/agent-inject-secret-transmittal-db: secrets/data/postgresql/apps/transmittal
vault.hashicorp.com/agent-inject-secret-transmittal-db: secrets/data/apps/transmittal/postgres
vault.hashicorp.com/agent-inject-template-transmittal-db: |-
{{- with secret "secrets/data/postgresql/apps/transmittal" -}}
{{- with secret "secrets/data/apps/transmittal/postgres" -}}
TRANSMITTAL_SERVICE_DATABASE__USER={{ index .Data.data "username" }}
TRANSMITTAL_SERVICE_DATABASE__PASSWORD={{ index .Data.data "password" }}
TRANSMITTAL_SERVICE_DATABASE__HOST=postgresql.transmittal.svc.cluster.local

4
apps/transmittal/base/worker.yaml
View File

@ -340,9 +340,9 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: transmittal
vault.hashicorp.com/agent-inject-secret-transmittal-db: secrets/data/postgresql/apps/transmittal
vault.hashicorp.com/agent-inject-secret-transmittal-db: secrets/data/apps/transmittal/postgres
vault.hashicorp.com/agent-inject-template-transmittal-db: |-
{{- with secret "secrets/data/postgresql/apps/transmittal" -}}
{{- with secret "secrets/data/apps/transmittal/postgres" -}}
TRANSMITTAL_SERVICE_DATABASE__USER={{ index .Data.data "username" }}
TRANSMITTAL_SERVICE_DATABASE__PASSWORD={{ index .Data.data "password" }}
TRANSMITTAL_SERVICE_DATABASE__HOST=postgresql.transmittal.svc.cluster.local