opendev/system-config
Code Issues Proposed changes

Remove old DNS servers

Browse Source 
Remove adns1/ns1/ns2 which are no longer in use.  Switch the primary
master to adns02; the secondaries ns03/ns04 will now update from
there.

Change-Id: I700a514dd2b72b2632e8d0668251f52907008d44
Depends-On: https://review.opendev.org/c/opendev/zone-opendev.org/+/880709
This commit is contained in:
Ian Wienand 2023-04-18 17:02:54 +10:00
parent c476aec78f
commit 436f956140
No known key found for this signature in database
5 changed files with 7 additions and 52 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
doc/source/dns.rst
View File

@ -8,7 +8,7 @@ DNS
The project runs authoritative DNS servers for any constituent
projects that wish to use them.
Bind is run on a hidden master (`adns01.opendev.org`) which handles
Bind is run on a hidden master (`adns02.opendev.org`) which handles
automatic DNSSEC zone signing. Any changes to the zone files are
deployed here.
@ -20,9 +20,9 @@ At a Glance
===========
:Hosts:
* adns01.opendev.org
* ns1.opendev.org
* ns2.opendev.org
* adns02.opendev.org
* ns03.opendev.org
* ns04.opendev.org
:Ansible:
* :git_file:`inventory/service/group_vars/adns.yaml`
* :git_file:`inventory/service/group_vars/adns-primary.yaml`

3
hiera/common.yaml
View File

@ -1,7 +1,6 @@
---
infra_apache_serveradmin: noc@openstack.org
cacti_hosts:
- adns1.opendev.org
- adns02.opendev.org
- afs01.dfw.openstack.org
- afs02.dfw.openstack.org
@ -38,8 +37,6 @@ cacti_hosts:
- nl02.opendev.org
- nl03.opendev.org
- nl04.opendev.org
- ns1.opendev.org
- ns2.opendev.org
- ns03.opendev.org
- ns04.opendev.org
- paste.openstack.org

33
inventory/base/hosts.yaml
View File

@ -1,16 +1,5 @@
all:
hosts:
adns1.opendev.org:
ansible_host: 104.239.146.24
location:
cloud: openstackci-rax
region_name: DFW
public_v4: 104.239.146.24
public_v6: 2001:4800:7819:104:be76:4eff:fe04:43d0
host_keys:
- 'ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJhNOmxKAcM5+P2FONlrSq6oEp9tKGoFy42gDBqdDlqmiskANu9IrCbpAxbSo3a5eCsdixVSK7O0bG9kA9VbYgM='
- 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzmllJ2v20az3YEDwtslhjExKOSPtSjG/OCIE1Y8/1tt25WVt5bTwZifNrYw6r+3bOHeZ47IdZOvUzWq2KZDxJKGrfzToFU5LQfz+p6S+q0O7WGgDwY2MBxSY7QxgWf0S3H4KPxg4T9lmXMakjBiS3y6g7e5WJOY4jsvbtPf94xLxiOLG8jt/+2BABkHPTYrPbJEAJcZXy4lMkMb3AeZH6xTg5lB889690hLQfbgym3jiLkwrloxZQ5q1jL3lOsc9lGPElxcuBwH8WbSD1iw1qlUVtsMHub7rSk/39EcJjK7TDKUbO02IDEMlo2a8BTUi7rViz7QNIuQMk+vwiv3Sr'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAhNq/59Rc5dIZLScfcGGw45Jp9UVx0980XiBLpY3MMf'
adns02.opendev.org:
ansible_host: 104.239.136.158
location:
@ -566,28 +555,6 @@ all:
- 'ssh-rsa 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'
- 'ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBKsn/AsbXB708dzc4YeKFDTwRY6Z9dtjkMRWqr4nbhIz9ZlUxZb/xqwHdpBvBw0uZ4Hp9tEC9ZpVLefeCMdZBrc='
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFIJlwjkk23o66fxe3AzedfsHx3zTKfyWV65OKlxMdcw'
ns1.opendev.org:
ansible_host: 104.239.140.165
location:
cloud: openstackci-rax
region_name: DFW
public_v4: 104.239.140.165
public_v6: 2001:4800:7819:104:be76:4eff:fe04:38f0
host_keys:
- 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJVim2m42pZdUD0pz14bmIGNnWmUvr4SCIM7RmX4wjy6Shty0hBKHB9VrBOg+PHxE0P8KX3TsKysr7qZsVTWYBLRJSOJ6gjVm/0N8OMC3noAiR/fQd5d4a+LP0KyY1KvbvOKKrAa4FXsFUJXB1Yt359BxBe6+3MEBWHoVMv6Lrb92Sm7i0FpW3W/o6UpGYCtfFAT65Kaz7iM0hiDnm7rb6V1/lKu8K17brBPPCaxJLc2s7aZWt8viNBu0tfIK8LK1bevRdu1rDfCFHM7QswnbDHzW+Uf47TjnZDwNlZw/0x97+16Wz4aR6YfMqmWdgZh5AVJQKgNBs4sXuBrLs4L5'
- 'ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBI6BCBBo4tBXtDNEqDdMyw5rmYeZeUPQ4zw/XRvuNVZNvQv035w2UyRShUXFeolFniRkffnyqfMB8f61EUgSuYI='
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPS0n96kufpvGcFdTkvERZOg/15Bgp9Y14ivWoRD3a8f'
ns2.opendev.org:
ansible_host: 162.253.55.16
location:
cloud: openstackci-vexxhost
region_name: ca-ymq-1
public_v4: 162.253.55.16
public_v6: 2604:e100:1:0:f816:3eff:fe2c:7447
host_keys:
- 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDX3+pHRBQGNg3csn73kCdVLmO7vhG9KuuI6pInfwSA3BR5SaN7x/4koUniKk/FP0SzeQUCV3cvvC4R15h1aDre1pBdMV+kf+pQxcnnPVV086g9QsxJIofGjadi7c/bB9gQw/h06k4wQPYh4qwGMLii++ZnHkJ1zCGmXmZ6wAbeXpyNKkexVwIfYYrbcmal6vn3wgACo36YuxvPxJzVnFuQXD3/FA1DFwVxGymg5sBatrw3ETXlJfAp2uVi9edJtq2OoLaWkqIQpMvT4wYeWG4TyJpJ4Yh9cvUDTLzsOX45/mHd2RTXBgalsBSQCpa8xcZOLRlEsxPezis3SJS2iFB'
- 'ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBKvhZ3Gi4/ScUwbH9jZNeDv6t1uONiUvopOYd5kQ4zsL9TIjHO50zr+BFcopRquH1fvwTcqLYxpNU1yCBM1mZ+A='
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGZBH0qkdPnBdqZ+KWA/N06EmTG+i0GtaMvj070GfqN/'
ns03.opendev.org:
ansible_host: 104.239.145.127
location:

10
inventory/service/group_vars/adns-primary.yaml
View File

@ -6,21 +6,11 @@ dns_repos:
- name: zone-gating.dev
url: https://opendev.org/opendev/zone-gating.dev
dns_notify:
# ns1.opendev.org
- 104.239.140.165
# ns2.opendev.org
- 162.253.55.16
# ns03.opendev.org
- 104.239.145.127
# ns04.opendev.org
- 162.253.55.23
iptables_extra_allowed_hosts:
- protocol: tcp
port: 53
hostname: ns1.opendev.org
- protocol: tcp
port: 53
hostname: ns2.opendev.org
- protocol: tcp
port: 53
hostname: ns03.opendev.org

5
inventory/service/group_vars/adns-secondary.yaml
View File

@ -1,5 +1,6 @@
dns_master_ipv4: 104.239.146.24
dns_master_ipv6: 2001:4800:7819:104:be76:4eff:fe04:43d0
# adns02.opendev.org
dns_master_ipv4: 104.239.136.158
dns_master_ipv6: 2001:4801:7827:102:397b:de86:1265:fe84
iptables_extra_public_tcp_ports:
- 53