Add static01.opendev.org

Add this host for serving content from AFS.

The

 _acme-challenge.governance.openstack.org
 _acme-challenge.security.openstack.org

CNAMES should be in place for creating the certificates (added with
Ie1b92f06b71aa6069fe831b26ba1cc272ce4562c).

Also add a cert for the base server (static.opendev.org) since we
added the DNS entries for it.

Change-Id: I55e0ac7487b02f9a816ac486ed01b73f82b391a5
Story: #2006598
Task: #37757
Depends-On: https://review.opendev.org/704469

inventory/openstack.yaml

@@ -695,6 +695,13 @@ all:
         region_name: DFW
       public_v4: 104.130.246.32
       public_v6: 2001:4800:7819:103:be76:4eff:fe04:9229
+    static01.opendev.org:
+      ansible_host: 2001:4800:7818:101:be76:4eff:fe04:7c28
+      location:
+        cloud: openstackci-rax
+        region_name: DFW
+      public_v4: 23.253.245.150
+      public_v6: 2001:4800:7818:101:be76:4eff:fe04:7c28
     static.openstack.org:
       ansible_host: 2001:4800:7817:104:be76:4eff:fe05:dbee
       location:

playbooks/host_vars/static01.opendev.org.yaml

@@ -1,5 +1,8 @@
 ansible_python_interpreter: python3
 letsencrypt_certs:
+  static01-opendev-org-main:
+    - static.opendev.org
+    - static01.opendev.org
   static01-governance-openstack-org:
     - governance.openstack.org
   static01-security-openstack-org:

playbooks/roles/letsencrypt-create-certs/handlers/main.yaml

@@ -35,6 +35,9 @@
   include_tasks: roles/letsencrypt-create-certs/handlers/restart_zuul_registry.yaml
 
 # Static
+- name: letsencrypt updated static01-opendev-org-main
+  include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
+
 - name: letsencrypt updated static01-governance-openstack-org
   include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml