
This will allow us to create new nameservers in the opendev.org domain. We will replace the existing servers once these are bootstrapped. Some lines are commented pending server creation. Change-Id: If71e3f87a9d7a83d80cff053874c84411b248515
915 B
915 B
- title
-
DNS
DNS
The project runs authoritative DNS servers for any constituent projects that wish to use them. The servers run NSD.
At a Glance
- Hosts
-
- ns1.openstack.org
- ns2.openstack.org
- ns1.opendev.org
- ns2.opendev.org
- Puppet
-
- :cgit_file:`manifests/site.pp`
- Projects
Adding a Zone
To add a new zone, add an entry to :cgit_file:`manifests/site.pp, :cgit_file:`modules/openstack_project/manifests/master_nameserver.pp and create a new git repository to hold the contents of the zone.
Run:
dnssec-keygen -a RSASHA256 -b 2048 -3 example.net
dnssec-keygen -a RSASHA256 -b 2048 -3 -fk example.net
And add the resulting files to the dnssec_keys key in the group/adns.yaml private hiera file on puppetmaster.
Note
This section will be expanded.