Merge "Add dns servers"

doc/source/dns.rst

@@ -0,0 +1,29 @@
+:title: DNS
+
+.. _dns:
+
+DNS
+###
+
+The project runs authoritative DNS servers for any constituent
+projects that wish to use them.  The servers run NSD.
+
+At a Glance
+===========
+
+:Hosts:
+  * ns1.openstack.org
+  * ns2.openstack.org
+:Puppet:
+  * :file:`manifests/site.pp`
+:Projects:
+  * https://github.com/icann-dns/puppet-nsd
+  * https://www.nlnetlabs.nl/projects/nsd/
+
+Adding a Zone
+=============
+
+To add a new zone, add an entry to :file:`manifests/site.pp`, and
+create a new git repository to hold the contents of the zone.
+
+.. note:: This section will be expanded.

doc/source/systems.rst

@@ -8,6 +8,7 @@ Major Systems
 
    cacti
    certificate_authority
+   dns
    gerrit
    grafana
    grafyaml

manifests/site.pp

@@ -845,6 +845,24 @@ node /^status\d*\.openstack\.org$/ {
   }
 }
 
+# Node-OS: xenial
+node /^ns\d+\.openstack\.org$/ {
+  $group = 'ns'
+
+  class { 'openstack_project::server':
+    sysadmins                 => hiera('sysadmins', []),
+    iptables_public_udp_ports => [53],
+  }
+
+  class { '::nsd':
+    zones => {
+      'master_zones' => {
+        'zones' => ['zuul-ci.org'],
+      },
+    }
+  }
+}
+
 # Node-OS: trusty
 node 'nodepool.openstack.org' {
   $group = 'nodepool'

modules.env

@@ -58,6 +58,7 @@ SOURCE_MODULES["https://github.com/dalen/puppet-dnsquery"]="2.0.1"
 SOURCE_MODULES["https://github.com/deric/puppet-zookeeper"]="v0.5.5"
 SOURCE_MODULES["https://github.com/duritong/puppet-sysctl"]="v0.0.11"
 # initfact is a dep of biemond-wildfly
+SOURCE_MODULES["https://github.com/icann-dns/puppet-nsd"]="0.1.10"
 SOURCE_MODULES["https://github.com/jethrocarr/puppet-initfact"]="1.0.1"
 SOURCE_MODULES["https://github.com/jfryman/puppet-selinux"]="v0.2.5"
 SOURCE_MODULES["https://github.com/maestrodev/puppet-wget"]="v1.6.0"