Ian Wienand b0d27692de Refactor adns variables ... Firstly, my understanding of "adns" is that it's short for authoritative-dns; i.e. things related to our main non-recursive DNS servers for the zones we manage. The "a" is useful to distinguish this from any sort of other dns services we might run for CI, etc. The way we do this is with a "hidden" server that applies updates from config management, which then notifies secondary public servers which do a zone transfer from the primary. They're all "authoritative" in the sense they're not for general recursive queries. As mentioned in Ibd8063e92ad7ff9ee683dcc7dfcc115a0b19dcaa, we currently have 3 groups adns : the hidden primary bind server ns : the secondary public authoratitive servers dns : both of the above This proposes a refactor into the following 3 groups adns-primary : hidden primary bind server adns-secondary : the secondary public authoritative servers adns : both of the above This is meant to be a no-op; I just feel like this makes it a bit clearer as to the "lay of the land" with these servers. It will need some considering of the hiera variables on bridge if we merge. Change-Id: I9ffef52f27bd23ceeec07fe0f45f9fee08b5559a		2023-03-10 09:36:01 +11:00
..
accessbot	Update accessbot config to use OFTC	2021-05-28 18:37:33 +00:00
add-inventory-known-hosts	bridge: Disable writing known_hosts files	2022-11-21 15:29:56 +11:00
afs-release	afs-release: better info when can not get lockfile	2022-10-11 10:53:02 +11:00
afsmon	afsmon: install python3-pip	2020-02-12 16:39:11 +11:00
apache-ua-filter	Block another bogus crawler botnet UA	2023-03-08 19:18:31 +00:00
base	Merge "Don't install phased package updates with apt"	2022-11-03 00:12:28 +00:00
borg-backup	Borg ignore ansible tmp files	2022-05-05 08:36:20 -07:00
borg-backup-server	borg-backup-server: build borg users betterer	2022-11-23 08:26:28 +11:00
codesearch	codesearch: Add robots.txt	2020-11-20 19:13:32 +11:00
configure-kubectl	Configure .kube/config on bridge	2019-02-06 15:43:19 -08:00
configure-openstacksdk	Farewell limestone	2023-02-13 23:54:59 +00:00
create-venv	pip: use latest instead of upgrade	2022-12-06 17:28:09 +11:00
disable-puppet-agent	Stop running mcollective	2020-05-05 15:00:04 -05:00
dstat-logger	dstat-logger: redirect stdout to /dev/null	2021-03-24 22:23:13 +00:00
edit-secrets-script	edit-secrets: configure gpg-agent/emacs	2022-11-03 10:07:20 +11:00
etherpad	etherpad: redirect container logs	2022-11-09 07:46:15 +11:00
gerrit	Fix infra-prod-service-review file matchers	2023-03-03 11:47:02 -08:00
gerritbot	Run gerritbot with a user that will be shared with matrix-gerritbot	2021-11-05 11:24:05 -07:00
gitea	Update gitea to 1.18.3	2023-01-23 08:42:16 -08:00
gitea-git-repos	gitea-git-repos: remove #!/usr/bin/env python	2022-11-23 08:26:28 +11:00
gitea-lb	gitea-haproxy: issue liveness check to HEAD /	2022-03-08 09:46:59 +11:00
gitea-set-org-logos	gitea-set-org-logos: use -T on mariadb command	2022-11-23 08:26:28 +11:00
grafana	Revert "Pin version of grafana-oss container"	2022-08-24 14:19:48 +10:00
graphite	graphite: fix xFilesFactor	2022-06-28 18:41:17 +10:00
haproxy	Merge "gitea-lb: test ssl connections during testing too"	2022-08-04 07:19:03 +00:00
import-gpg-key	reprepro: convert to Ansible	2020-10-19 14:06:57 +11:00
install-ansible	Refactor adns variables	2023-03-10 09:36:01 +11:00
install-ansible-roles	puppet: don't run module install steps multiple times	2020-09-03 09:23:05 +10:00
install-apt-repo	Vendor the apt repo gpg keys used for Zuul	2020-05-20 13:17:09 -07:00
install-borg	install-borg: update to borg 1.1.18	2022-08-10 10:14:56 +10:00
install-certcheck	Generate ssl check list directly from letsencrypt variables	2020-05-20 14:27:14 +10:00
install-docker	Merge "install-docker: remove apt-key cleanup"	2023-03-01 06:31:47 +00:00
install-kubectl	Remove snap cleanup tasks	2020-04-16 12:45:36 -05:00
install-launch-node	Merge "launch: Automatically do RAX rdns updates when launching nodes"	2022-12-21 23:09:39 +00:00
install-podman	Run a gerrit container on review-dev01	2019-10-29 08:29:17 +09:00
iptables	iptables: handle hosts in allowed groups not having an ipv6 address	2023-01-12 21:48:22 +11:00
jaeger	Fix jaeger badger config and uid	2022-09-28 14:22:58 -07:00
jitsi-meet	Fix jitsi meet jvb connection info and cert CN	2022-09-16 15:43:48 -07:00
kerberos-kdc	Merge "kerberos-kdc: quote some integers to avoid string/int confusion"	2021-03-22 22:56:26 +00:00
keycloak	Pull keycloak from quay.io	2022-05-04 13:08:28 -07:00
letsencrypt-acme-sh-install	letsencrypt: pin acme.sh to 3.0.5	2022-11-29 13:11:51 +11:00
letsencrypt-config-certcheck	letsencrypt-request-certs: refactor certcheck list	2022-11-23 08:26:28 +11:00
letsencrypt-create-certs	Add gitea13 and gitea14 to inventory	2023-03-08 11:50:36 -08:00
letsencrypt-install-txt-record	letsencrypt: build txt record lists betterer	2022-11-23 08:26:28 +11:00
letsencrypt-request-certs	letsencrypt-request-certs: refactor certcheck list	2022-11-23 08:26:28 +11:00
limnoria	Update HTML channel logs every 15 minutes	2021-06-28 14:32:35 +00:00
lodgeit	Switch lodgeit to run under a dedicated user	2021-11-19 09:11:38 -08:00
logrotate	reprepro: convert to Ansible	2020-10-19 14:06:57 +11:00
mailman	mailman: add variable for matching UAs in Apache	2023-01-11 15:47:20 +11:00
mailman3	mailman: set web auto field size to "AutoField"	2023-02-10 08:31:04 +11:00
mailman-list	Use newlist's automate option	2021-12-15 17:42:58 +00:00
mailman-site	mailman: add variable for matching UAs in Apache	2023-01-11 15:47:20 +11:00
master-nameserver	bind9 : drop obsolete option for later versions	2023-03-09 16:37:32 +11:00
matrix-eavesdrop	Move #zuul from OFTC to Matrix	2021-08-20 14:44:44 -07:00
matrix-gerritbot	Update gerritbot-matrix version to include wipness	2022-04-12 14:41:53 +00:00
mirror	Correct (again) how ansible-galaxy proxy is configured	2023-01-16 14:21:40 +01:00
mirror-update	mirror-update: Add Fedora 37	2023-03-06 15:30:49 +11:00
nameserver	nameserver: Allow master server to notify via ipv6	2020-10-28 09:26:14 +00:00
nodepool-base	nodepool-base: use ipv4 ZK addresses if we don't have an ipv6 address	2023-01-12 21:50:17 +11:00
nodepool-base-legacy	Add initial Ansible for nodepool hosts	2020-03-06 14:02:52 +11:00
nodepool-builder	Publish raw images on our nodepool builders	2023-02-28 09:50:01 -08:00
nodepool-launcher	Auto update nodepool launchers	2022-06-16 08:23:17 -07:00
openafs-db-server	openafs-<db|file>-server: fix role name	2021-02-10 13:49:12 +11:00
openafs-file-server	openafs-<db|file>-server: fix role name	2021-02-10 13:49:12 +11:00
openafs-server-config	openafs-server-config: install UserList	2021-03-30 09:49:53 +11:00
opendev-ca	Correct internal tracing server cert name	2022-09-28 10:38:41 -07:00
pip3	Use versioned get-pip.py URL for Ubuntu Bionic	2022-01-30 15:37:58 +00:00
ptgbot	ptgbot: have apache cache backend	2021-10-15 11:23:24 +11:00
puppet-run	puppet: don't run module install steps multiple times	2020-09-03 09:23:05 +10:00
puppet-setup-ansible	install-ansible: move install_modules.sh to puppet-setup-ansible	2020-09-03 09:28:16 +10:00
rax-dns-backup	rax-dns-backup: fix parsing	2022-11-21 11:44:07 +11:00
refstack	refstack: don't chown db directory	2021-11-05 09:39:29 +11:00
registry	Adds support for running zuul-registry as a non-root user	2022-03-03 09:06:51 -08:00
reprepro	Merge "mirror-update: make jobs interactive by default"	2023-01-17 19:27:20 +00:00
root-keys	roles: Add README.rst and lint	2018-08-23 21:34:42 +10:00
run-selenium	run-selenium: Use latest tag on firefox image	2022-10-11 10:53:00 +11:00
static	Redirect openstack-infra specs to opendev docs	2022-09-09 15:20:28 +00:00
statusbot	statusbot: add mastodon config options	2022-11-16 11:02:07 +11:00
sync-project-config	Revert "Update to tip of master in periodic jobs"	2022-11-03 16:40:54 +11:00
vos-release	Add missing newline in vos_release.sudo	2019-11-21 19:08:30 +00:00
zookeeper	Upgrade zookeeper from 3.6 to 3.7	2022-11-02 09:55:12 -07:00
zuul	Export Zuul traces to Jaeger	2022-09-22 15:06:46 -07:00
zuul-executor	Use docker-compose exec -T with ansible tasks	2022-12-12 08:03:19 -08:00
zuul-lb	Do more robust checks against zuul-web with haproxy	2022-03-04 14:17:51 -08:00
zuul-merger	Use docker-compose exec -T with ansible tasks	2022-12-12 08:03:19 -08:00
zuul-preview	Install docker-compose from pypi	2020-04-16 12:08:00 -07:00
zuul-scheduler	Replace zuul cli command with zuul-admin	2022-06-10 09:14:34 +02:00
zuul-status-backup	Add --fail flag to zuul status backup curl	2020-04-28 08:33:05 -05:00
zuul-user	Split eavesdrop into its own playbook	2020-04-23 14:34:28 -05:00
zuul-web	zuul-*: use multiline formatter	2021-12-13 14:54:16 +11:00
set-hostname	Split eavesdrop into its own playbook	2020-04-23 14:34:28 -05:00