Mercurial > code > home > repos > infra
annotate dns_check.py @ 288:3af02e24eaf9
minor
author | drewp@bigasterisk.com |
---|---|
date | Sun, 21 Apr 2024 17:01:13 -0700 |
parents | bf1573dd1947 |
children |
rev | line source |
---|---|
45 | 1 # run key dns lookups everywhere |
2 | |
3 from pyinfra import host | |
81 | 4 from pyinfra.operations import server |
45 | 5 |
59
fa7a71b8a97f
more dns checks, including from inside containers in k8s`
drewp@bigasterisk.com
parents:
53
diff
changeset
|
6 |
45 | 7 def check(name, addr): |
8 server.shell(commands=[ | |
9 # note: one big string | |
10 f"out=`dnsget -q {name}`; " | |
11 f'[ -n "$out" ] || exit 1; ' | |
12 f"if [ $out != {addr} ]; then echo got $out >&2 ; exit 1; fi" | |
59
fa7a71b8a97f
more dns checks, including from inside containers in k8s`
drewp@bigasterisk.com
parents:
53
diff
changeset
|
13 ]) |
fa7a71b8a97f
more dns checks, including from inside containers in k8s`
drewp@bigasterisk.com
parents:
53
diff
changeset
|
14 |
45 | 15 |
16 ''' | |
17 idea: read a file that looks like this: | |
18 | |
19 on host: bang dash slash prime | |
20 lookup: | |
21 bang 127.0.1.1 10.1.0.1 10.1.0.1 10.5.0.1 | |
22 bang5 10.5.0.1 10.5.0.1 10.5.0.1 10.5.0.1 | |
23 dash 10.1.0.5 127.0.1.1 10.1.0.5 10.5.0.5 | |
59
fa7a71b8a97f
more dns checks, including from inside containers in k8s`
drewp@bigasterisk.com
parents:
53
diff
changeset
|
24 bang.bigasterisk.com |
fa7a71b8a97f
more dns checks, including from inside containers in k8s`
drewp@bigasterisk.com
parents:
53
diff
changeset
|
25 bang.bigasterisk.com. |
fa7a71b8a97f
more dns checks, including from inside containers in k8s`
drewp@bigasterisk.com
parents:
53
diff
changeset
|
26 prime |
fa7a71b8a97f
more dns checks, including from inside containers in k8s`
drewp@bigasterisk.com
parents:
53
diff
changeset
|
27 projects.bigasterisk.com |
45 | 28 etc |
29 | |
30 ''' | |
31 | |
32 if host.name in ['dash', 'bang', 'slash']: | |
78 | 33 check('dash', '10.2.0.212') |
59
fa7a71b8a97f
more dns checks, including from inside containers in k8s`
drewp@bigasterisk.com
parents:
53
diff
changeset
|
34 check('projects.bigasterisk.com', '10.2.0.1') |
45 | 35 elif host.name in ['prime']: |
36 check('dash', '10.5.0.5') | |
53
8945bf71da22
make bang look to itself, not just to ISP, for projects.bigasterisk.com
drewp@bigasterisk.com
parents:
45
diff
changeset
|
37 check('projects.bigasterisk.com', '10.2.0.1') # expected the public addr, but fine |
45 | 38 else: |
78 | 39 check('dash', '10.2.0.212') |
53
8945bf71da22
make bang look to itself, not just to ISP, for projects.bigasterisk.com
drewp@bigasterisk.com
parents:
45
diff
changeset
|
40 check('projects.bigasterisk.com', '10.2.0.1') |
45 | 41 |
59
fa7a71b8a97f
more dns checks, including from inside containers in k8s`
drewp@bigasterisk.com
parents:
53
diff
changeset
|
42 if host.name in ['prime']: |
45 | 43 check('bang', '10.5.0.1') |
59
fa7a71b8a97f
more dns checks, including from inside containers in k8s`
drewp@bigasterisk.com
parents:
53
diff
changeset
|
44 check('slash', '10.5.0.6') |
45 | 45 else: |
46 check('bang', '10.2.0.1') | |
81 | 47 check('slash', '10.2.0.145') |
45 | 48 |
49 check('bang5', '10.5.0.1') | |
50 check('prime', '10.5.0.2') | |
51 |