update knot role to support more operational variety

Now secondary zones, dynamic zones, interpeted catalog zones, etc.
are supported by our knot role
This commit is contained in:
lilly 2026-09-11 10:09:48 +02:00
commit 4bdd36b8f7
Signed by: lilly
SSH key fingerprint: SHA256:y9T5GFw2A20WVklhetIxG1+kcg/Ce0shnQmbu1LQ37g
8 changed files with 264 additions and 61 deletions

View file

@ -3,18 +3,21 @@ deploy_systemd_resolved_config__enable: false
alloy_config_additional: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/auth-dns/alloy/knot-exporter.alloy') }}"
knot__dnssec_key_id: "auth-dns.hamburg.ccc.de-1"
knot__remotes:
- id: erfadns.ber.ccc.de
address: [ "2a02:8000:1000:101::196", "185.106.84.196" ]
via: [ "2a00:14b0:4200:3000:124::1", "212.12.48.124" ]
- id: ns.vie.ccc.de
address: [ "2a02:1b8:10:31::228", "146.255.57.228" ]
via: [ "2a00:14b0:4200:3000:124::1", "212.12.48.124" ]
# - id: cccfr-de-hidden-primary
# address: [ "89.163.204.252" ]
knot__catalog_zones:
- domain: "hamburg.ccc.de.catalog."
notify_targets: [ "erfadns.ber.ccc.de" ]
knot__zones:
knot__primary_zones:
- domain: "hh.ccc.de."
catalog_member: "hamburg.ccc.de.catalog."
notify_targets: [ "erfadns.ber.ccc.de" ]
@ -48,3 +51,7 @@ knot__zones:
- domain: "3.2.0.0.0.0.0.f.0.b.4.1.0.0.a.2.ip6.arpa."
notify_targets: [ "erfadns.ber.ccc.de" ]
content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/3.2.0.0.0.0.0.f.0.b.4.1.0.0.a.2.ip6.arpa.zone') }}"
# knot__catalog_secondary_zones:
# - domain: "cccfr.catalog.invalid"
# primary: "cccfr-de-hidden-primary"