system-config/playbooks/roles/master-nameserver
Ian Wienand 66ceb321a6 master-nameserver: Add unmanaged domains; add acme.opendev.org
This adds the concept of an unmanaged domain; for unmanaged domains we
will write out the zone file only if it doesn't already exist.

acme.opendev.org is added as an unmanaged domain.  It will be managed
by other ansible roles which add TXT records for ACME authentication.
The initial template comes from the dependent change, and this ensures
the bind configuration is always valid.

For flexibility and testing purposes, we allow passing an extra
refspec and version to the git checkout.  This is one way to pull in
changes for speculative CI runs (I looked into having the hosts under
test checkout from Zuul; but by the time we're 3-ansible call's deep
on the DNS hosts-under-test it's a real pain.  For the amount of times
we update this, it's easier to just allow a speculative change that
can take a gerrit URL; for an example see [1])

[1] https://review.openstack.org/#/c/641155/10/playbooks/group_vars/dns.yaml

Testing is enhanced to check for zone files and correct configuration
stanzas.

Depends-On: https://review.openstack.org/641154
Depends-On: https://review.openstack.org/641168
Change-Id: I9ef5cfc850c3458c63aff46cfaa0d49a5d194e87
2019-03-27 14:22:59 +11:00
..
handlers Configure adns1.opendev.org server via ansible 2018-11-02 13:49:38 -07:00
tasks master-nameserver: Add unmanaged domains; add acme.opendev.org 2019-03-27 14:22:59 +11:00
templates Configure adns1.opendev.org server via ansible 2018-11-02 13:49:38 -07:00
README.rst master-nameserver: Add unmanaged domains; add acme.opendev.org 2019-03-27 14:22:59 +11:00

Configure a hidden master nameserver

This role installs and configures bind9 to be a hidden master nameserver.

Role Variables