from bundlewrap.exceptions import NoSuchGroup defaults = { 'apt': { 'packages': { 'pdns-server': {}, 'pdns-tools': {}, 'pdns-backend-bind': {}, 'pdns-backend-pgsql': {}, }, }, 'powerdns': { 'api_key': repo.vault.password_for('{} powerdns api'.format(node.name)), }, 'postgresql': { 'users': { 'powerdns': { 'password': repo.vault.password_for('{} postgresql powerdns'.format(node.name)), }, }, 'databases': { 'powerdns': { 'owner': 'powerdns', }, }, }, } @metadata_reactor def get_ips_of_primary_nameservers(metadata): if not metadata.get('powerdns/is_secondary', False): return {} ips = set() nodes = set() for rnode in repo.nodes_in_group('dns'): if not rnode.metadata.get('powerdns/is_secondary', False): ips.update({ str(ip) for ip in repo.libs.tools.resolve_identifier(repo, rnode.name) }) nodes.add(rnode.name) return { 'powerdns': { 'my_primary_servers': { 'ips': ips, 'nodes': nodes, }, }, } @metadata_reactor def generate_dns_entries_for_nodes(metadata): results = set() for rnode in repo.nodes: node_name_split = rnode.name.split('.') node_name_split.reverse() dns_name = '.'.join(node_name_split) ip4 = None ip6 = None # We only need this for GCE, because machines over there don't # have a public ipv4 address. if rnode.metadata.get('external_ipv4', None): ip4 = rnode.metadata.get('external_ipv4') for iface, config in sorted(rnode.metadata.get('interfaces', {}).items()): if not ip4 and 'ipv4' in config: ip4 = sorted(config['ipv4'])[0] if not ip6 and 'ipv6' in config: ip6 = sorted(config['ipv6'])[0] if ip4: results.add('{} IN A {}'.format(dns_name, ip4)) if ip6: results.add('{} IN AAAA {}'.format(dns_name, ip6)) return { 'powerdns': { 'bind-zones': { 'kunbox.net': { 'records': results, }, }, }, }