Merge "Designate rndc configuration"

tripleo_ansible/releasenotes/notes/add_designate_rndc_configuration-00a84578acfb4df5.yaml

@@ -0,0 +1,5 @@
+---
+features:
+  - |
+    Add ``designate_rndc_config`` role for distributing rndc key information
+    where necessary for designate.

tripleo_ansible/roles/designate_rndc_config/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+designate_rndc_key_file_path: '/var/lib/config-data/puppet-generated/designate/etc/designate/private'

tripleo_ansible/roles/designate_rndc_config/meta/main.yml

@@ -0,0 +1,42 @@
+---
+# Copyright 2021 Red Hat, Inc.
+# All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+
+galaxy_info:
+  author: OpenStack
+  description: TripleO OpenStack Role -- designate_bind_pool
+  company: Red Hat
+  license: Apache-2.0
+  min_ansible_version: 2.7
+  #
+  # Provide a list of supported platforms, and for each platform a list of versions.
+  # If you don't wish to enumerate all versions for a particular platform, use 'all'.
+  # To view available platforms and versions (or releases), visit:
+  # https://galaxy.ansible.com/api/v1/platforms/
+  #
+  platforms:
+    - name: CentOS
+      versions:
+        - 7
+        - 8
+
+  galaxy_tags:
+    - tripleo
+
+
+# List your role dependencies here, one per line. Be sure to remove the '[]' above,
+# if you add dependencies to this list.
+# dependencies:

tripleo_ansible/roles/designate_rndc_config/tasks/main.yml

@@ -0,0 +1,13 @@
+---
+# XXX (beagles) which permissions?
+- name: ensure rndc key path exists
+  become: true
+  file:
+      path: "{{ designate_rndc_key_file_path }}"
+      state: directory
+
+- name: create rndc key files for each bind instance
+  become: true
+  template:
+      src: rndc.key.j2
+      dest: "{{ designate_rndc_key_file_path }}/rndc.key"

tripleo_ansible/roles/designate_rndc_config/templates/rndc.key.j2

@@ -0,0 +1,4 @@
+key "rndc-key" {
+        algorithm hmac-sha256;
+        secret "{{ designate_rndc_key }}";
+};