882b730fdf
This modernises the openstack-infra documentation by switching to openstackdocstheme. Update dependencies as required. To remove non-relevant stuff from conf.py, I have just taken the demo file from openstackdocstheme and lightly modified it. It seems later sphinx has included it's own ":file:" role which now conflicts. Change it it ":cgit_file:" in our documentation. Remove the custom header template which no longer applies. Add the post-2.0-pbr sphinx-based warning-as-error, which fixes the original problem that I actually noticed that errors could slip through the gate tests :) Change-Id: Ic7bec57b971bb4c75fc839e7269d1f69a576b85c
39 lines
875 B
ReStructuredText
39 lines
875 B
ReStructuredText
:title: DNS
|
|
|
|
.. _dns:
|
|
|
|
DNS
|
|
###
|
|
|
|
The project runs authoritative DNS servers for any constituent
|
|
projects that wish to use them. The servers run NSD.
|
|
|
|
At a Glance
|
|
===========
|
|
|
|
:Hosts:
|
|
* ns1.openstack.org
|
|
* ns2.openstack.org
|
|
:Puppet:
|
|
* :cgit_file:`manifests/site.pp`
|
|
:Projects:
|
|
* https://github.com/icann-dns/puppet-nsd
|
|
* https://www.nlnetlabs.nl/projects/nsd/
|
|
|
|
Adding a Zone
|
|
=============
|
|
|
|
To add a new zone, add an entry to :cgit_file:`manifests/site.pp`,
|
|
:cgit_file:`modules/openstack_project/manifests/master_nameserver.pp` and
|
|
create a new git repository to hold the contents of the zone.
|
|
|
|
Run::
|
|
|
|
dnssec-keygen -a RSASHA256 -b 2048 -3 example.net
|
|
dnssec-keygen -a RSASHA256 -b 2048 -3 -fk example.net
|
|
|
|
And add the resulting files to the `dnssec_keys` key in the
|
|
`group/adns.yaml` private hiera file on puppetmaster.
|
|
|
|
.. note:: This section will be expanded.
|