prole/infrastructure/roles/samba_dns/tasks/ensure_cname.yml

46 lines
2.0 KiB
YAML

---
- name: Determine zone and record name
ansible.builtin.set_fact:
samba_target_zone: "{{ 'internal.' ~ prole_domain if item.fqdn.endswith('.internal.' ~ prole_domain) or item.fqdn == 'internal.' ~ prole_domain else prole_domain }}"
samba_dns_record_name: >-
{% set fqdn_clean = item.fqdn | regex_replace('\\.?$', '') %}
{% if fqdn_clean == ('internal.' ~ prole_domain if item.fqdn.endswith('.internal.' ~ prole_domain) or item.fqdn == 'internal.' ~ prole_domain else prole_domain) %}
@
{% else %}
{{ fqdn_clean | regex_replace('\\.' ~ (('internal.' ~ prole_domain if item.fqdn.endswith('.internal.' ~ prole_domain) or item.fqdn == 'internal.' ~ prole_domain else prole_domain) | regex_escape) ~ '$', '') }}
{% endif %}
- name: Query existing CNAME records
ansible.builtin.command:
cmd: samba-tool dns query {{ samba_dns_server }} {{ samba_target_zone }} {{ samba_dns_record_name }} CNAME -P
register: cname_query
changed_when: false
failed_when: false
- name: Parse existing CNAME record value
ansible.builtin.set_fact:
cname_existing_value: >-
{{
(cname_query.stdout | default('') |
regex_findall('\\bCNAME\\s+([a-zA-Z0-9.-]+)\\b') |
first | default(''))
}}
- name: Remove stale CNAME record
ansible.builtin.command:
cmd: samba-tool dns delete {{ samba_dns_server }} {{ samba_target_zone }} {{ samba_dns_record_name }} CNAME {{ cname_existing_value }} -P
when:
- cname_existing_value | length > 0
- cname_existing_value != item.target
- name: Add missing CNAME record
ansible.builtin.command:
cmd: samba-tool dns add {{ samba_dns_server }} {{ samba_target_zone }} {{ samba_dns_record_name }} CNAME {{ item.target }} -P
register: cname_add
changed_when: cname_add.rc == 0
failed_when: >
cname_add.rc != 0 and
('WERR_DNS_ERROR_RECORD_ALREADY_EXISTS' not in (cname_add.stderr | default(''))) and
('Record already exists' not in (cname_add.stderr | default('')))
when: cname_existing_value != item.target