system-config/playbooks/roles
Ian Wienand 0746dc187b nameserver: Allow master server to notify via ipv6
Logs show that the nameservers are being notified via ipv6 and
rejecting the request:

  nsd[18851]: notify for acme.opendev.org. \
   from 2001:4800:7819:104:be76:4eff:fe04:43d0 refused, no acl matches.

Modify the nsd ACL to allow the ipv6 of the master to trigger updates.
This is important for the letsencrypt process, where we need the
acme.opendev.org domain updated in a timely fashion so that TXT
authentication works.

Change-Id: I785f9636dd05e15b8ffd211845f439be7e8344a3
2020-10-28 09:26:14 +00:00
..
accessbot Split eavesdrop into its own playbook 2020-04-23 14:34:28 -05:00
afs-release Add a new docs.airshipit.org vhost on static01 2020-03-20 19:09:13 +00:00
afsmon afsmon: install python3-pip 2020-02-12 16:39:11 +11:00
apache-ua-filter Block restricted user agents for the tarballs site 2020-10-16 17:45:12 +00:00
backup Update bup excludes for zuul-scheduler 2020-05-07 08:44:58 -07:00
backup-server Exclude disabled group from backup-server loop 2020-04-11 14:53:20 -05:00
base Remove Ubuntu Xenial ARM64 base testing 2020-10-08 14:31:31 +11:00
borg-backup borg-backup: use unique mark in .ssh/config 2020-10-20 11:43:39 +11:00
borg-backup-server Add borg-backup roles 2020-07-21 17:36:50 +10:00
configure-kubectl Configure .kube/config on bridge 2019-02-06 15:43:19 -08:00
configure-openstacksdk Update the limestone cert in our clouds.yaml 2020-08-25 15:25:25 -07:00
disable-puppet-agent Stop running mcollective 2020-05-05 15:00:04 -05:00
edit-secrets-script Add edit-secrets script to bridge.o.o 2019-02-27 08:45:11 -08:00
etherpad Don't recompress db backups 2020-10-19 07:06:47 -07:00
gerrit Add gerrit static files that were lost in ansiblification 2020-10-09 10:38:45 -07:00
gerritbot Couple of gerritbot role cleanups 2020-08-10 10:42:20 -07:00
gitea Don't recompress db backups 2020-10-19 07:06:47 -07:00
gitea-git-repos Make gitea description update failures nonfatal 2020-09-30 10:15:04 -07:00
grafana Grafana container deployment 2020-07-03 07:17:22 +10:00
graphite graphite: add cleanup job 2020-09-29 16:20:11 +10:00
haproxy Remove the tcplog option from haproxy configs 2020-06-30 22:22:28 +00:00
import-gpg-key reprepro: convert to Ansible 2020-10-19 14:06:57 +11:00
install-ansible Cleanup graphite01 2020-09-30 11:55:24 +10:00
install-ansible-roles puppet: don't run module install steps multiple times 2020-09-03 09:23:05 +10:00
install-apt-repo Vendor the apt repo gpg keys used for Zuul 2020-05-20 13:17:09 -07:00
install-borg install-borg: bump to latest version 2020-10-12 15:07:38 +11:00
install-certcheck Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
install-docker Add dev packages on arm64 for docker-compose installation 2020-09-08 13:01:34 -07:00
install-kubectl Remove snap cleanup tasks 2020-04-16 12:45:36 -05:00
install-osc-container Use openstackclient from container 2020-04-23 07:46:28 -05:00
install-podman Run a gerrit container on review-dev01 2019-10-29 08:29:17 +09:00
iptables Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
jitsi-meet Merge "Indicate firefox is suboptimal in meetpad" 2020-06-03 17:48:46 +00:00
letsencrypt-acme-sh-install ansible-lint : disable 503 2020-03-06 09:57:00 +11:00
letsencrypt-config-certcheck Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
letsencrypt-create-certs Cleanup graphite01 2020-09-30 11:55:24 +10:00
letsencrypt-install-txt-record Handle offline hosts in LE role 2020-01-08 10:21:53 -08:00
letsencrypt-request-certs Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
logrotate reprepro: convert to Ansible 2020-10-19 14:06:57 +11:00
master-nameserver Don't log the public loop on master-nameserver 2020-04-08 16:38:15 -05:00
mirror Update mirror apache configs to 2.4 acl primitives 2020-10-16 12:35:42 -07:00
mirror-update mirror-update: publish reprepro logs 2020-10-27 16:44:26 +11:00
nameserver nameserver: Allow master server to notify via ipv6 2020-10-28 09:26:14 +00:00
nodepool-base Revert "Revert "Add Zookeeper TLS support"" 2020-07-15 15:45:48 -07:00
nodepool-base-legacy Add initial Ansible for nodepool hosts 2020-03-06 14:02:52 +11:00
nodepool-builder Increate nodepool builder upload workers from 4 to 8 2020-08-04 12:36:01 -07:00
nodepool-launcher Add stop and start playbooks for nodepool 2020-06-16 15:48:47 -05:00
pip3 Install pip3 for docker-compose installation 2020-04-17 13:28:03 -07:00
puppet-run puppet: don't run module install steps multiple times 2020-09-03 09:23:05 +10:00
puppet-setup-ansible install-ansible: move install_modules.sh to puppet-setup-ansible 2020-09-03 09:28:16 +10:00
rax-dns-backup rax-dns-backup: fix copy file typo 2020-06-17 09:29:11 +10:00
registry Install docker-compose from pypi 2020-04-16 12:08:00 -07:00
reprepro reprepro: deploy Ubuntu keys 2020-10-28 11:29:26 +11:00
root-keys roles: Add README.rst and lint 2018-08-23 21:34:42 +10:00
static Merge "Update static Apache configs to 2.4 ACL primitives" 2020-10-16 21:06:28 +00:00
sync-project-config Stop logging the rsync of puppet 2020-04-30 16:11:42 -05:00
vos-release Add missing newline in vos_release.sudo 2019-11-21 19:08:30 +00:00
zk-ca Zookeeper: listen on plain and TLS ports 2020-06-17 10:38:59 -07:00
zookeeper Zookeeper: listen on plain and TLS ports 2020-06-17 10:38:59 -07:00
zuul Revert "Revert "Add Zookeeper TLS support"" 2020-07-15 15:45:48 -07:00
zuul-executor Start zuul-executor after afsd and /afs is mounted 2020-07-27 18:47:52 +00:00
zuul-merger Fix a few missing zuul_user usages 2020-05-23 09:05:16 -05:00
zuul-preview Install docker-compose from pypi 2020-04-16 12:08:00 -07:00
zuul-scheduler Fix a few missing zuul_user usages 2020-05-23 09:05:16 -05:00
zuul-status-backup Add --fail flag to zuul status backup curl 2020-04-28 08:33:05 -05:00
zuul-user Split eavesdrop into its own playbook 2020-04-23 14:34:28 -05:00
zuul-web zuul-web: fix zuul.openstack.org location match 2020-09-15 08:34:10 +10:00
set-hostname Split eavesdrop into its own playbook 2020-04-23 14:34:28 -05:00