Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Create a QA zone

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2015-12-01 17:18:41 +00:00
parent c29548915a
commit 10c836943e
1 changed files with 128 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

128
roles/dns/files/named.conf
View file

@ -23,6 +23,7 @@ acl "everyone" { 0.0.0.0/0; ::0/0; };
acl "ns_redhat" { 66.187.233.210; 209.132.183.2; 66.187.229.10; }; acl "ns_redhat" { 66.187.233.210; 209.132.183.2; 66.187.229.10; };
// //
acl "phx2net" { 10.4.124.128/25; 10.5.78.0/24; 10.5.79.0/24; 10.5.125.0/24; 10.5.126.0/24; 10.5.127.0/24; }; acl "phx2net" { 10.4.124.128/25; 10.5.78.0/24; 10.5.79.0/24; 10.5.125.0/24; 10.5.126.0/24; 10.5.127.0/24; };
acl "qanet" { 10.5.124.128/25 10.5.131.0/24 };
acl "rh-slaves" { 172.16.52.28; 10.11.255.27; 10.11.255.3; }; acl "rh-slaves" { 172.16.52.28; 10.11.255.27; 10.11.255.3; };
acl "rh" { 10.0.0.0/8; }; acl "rh" { 10.0.0.0/8; };
// //
@ -227,6 +228,133 @@ view "PHX2" {
include "/etc/named/zones.conf"; include "/etc/named/zones.conf";
}; };
view "QA" {
match-clients { 10.5.123.128/25; 10.5.131.0/24; };
allow-recursion { localhost; qanet; rh-slaves; rh; };
recursion yes;
// no rate-limit on internal requests
rate-limit {
exempt-clients { qanet; };
};
zone "beaker-project.org" {
type forward;
forward only;
forwarders { 10.5.26.20; 10.5.26.21; };
};
zone "88.5.10.in-addr.arpa" {
type forward;
forward only;
forwarders { 10.5.26.20; 10.5.26.21; };
};
zone "4.10.in-addr.arpa" {
type forward;
forward only;
forwarders { 10.5.26.20; 10.5.26.21; };
};
zone "5.10.in-addr.arpa" {
type forward;
forward only;
forwarders { 10.5.26.20; 10.5.26.21; };
};
zone "10.in-addr.arpa" {
type forward;
forward only;
forwarders { 10.5.26.20; 10.5.26.21; };
};
zone "186.132.209.in-addr.arpa." {
type forward;
forward only;
forwarders { 10.5.26.20; 10.5.26.21; };
};
zone "qa.fedoraproject.org" {
type master;
file "/var/named/master/built/qa.fedoraproject.org";
};
zone "phx2.fedoraproject.org" {
type master;
file "/var/named/master/built/phx2.fedoraproject.org";
};
zone "mgmt.fedoraproject.org" {
type master;
file "/var/named/master/built/mgmt.fedoraproject.org";
};
zone "arm.fedoraproject.org" {
type master;
file "/var/named/master/built/arm.fedoraproject.org";
};
zone "78.5.10.in-addr.arpa" {
type master;
file "/var/named/master/built/78.5.10.in-addr.arpa";
};
zone "79.5.10.in-addr.arpa" {
type master;
file "/var/named/master/built/79.5.10.in-addr.arpa";
};
zone "124.5.10.in-addr.arpa" {
type master;
file "/var/named/master/built/124.5.10.in-addr.arpa";
};
zone "125.5.10.in-addr.arpa" {
type master;
file "/var/named/master/built/125.5.10.in-addr.arpa";
};
zone "126.5.10.in-addr.arpa" {
type master;
file "/var/named/master/built/126.5.10.in-addr.arpa";
};
zone "127.5.10.in-addr.arpa" {
type master;
file "/var/named/master/built/127.5.10.in-addr.arpa";
};
zone "128.5.10.in-addr.arpa" {
type master;
file "/var/named/master/built/128.5.10.in-addr.arpa";
};
zone "130.5.10.in-addr.arpa" {
type master;
file "/var/named/master/built/130.5.10.in-addr.arpa";
};
zone "131.5.10.in-addr.arpa" {
type master;
file "/var/named/master/built/131.5.10.in-addr.arpa";
};
zone "fedoraproject.org" {
type master;
file "/var/named/master/built/QA/fedoraproject.org.signed";
};
zone "cloud.fedoraproject.org" {
type master;
file "/var/named/master/built/QA/cloud.fedoraproject.org.signed";
};
zone "getfedora.org" {
type master;
file "/var/named/master/built/QA/getfedora.org.signed";
};
include "/etc/named/zones.conf";
};
// The zones // The zones
view "NA" { view "NA" {