| ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; |
| ;;; This is the zone file for the luci.app domain. This file is used |
| ;;; to populate the zone records in the skia-public GCP project, |
| ;;; which is where our zone file is hosted. |
| ;;; |
| ;;; If you add or change any records in this file then they will |
| ;;; automatically be applied by the `zone-apply` application |
| ;;; running in skia-infra-corp. |
| ;;; |
| ;;; See //skfe/go/zone-apply/README.md for more details. |
| ;;; |
| ;;; Once the changes have propogated you can update the tests in: |
| ;;; |
| ;;; //skfe/go/dns/dns_test.go |
| ;;; |
| ;;; And then run the tests to confirm the configuration is working |
| ;;; as intended. |
| ;;; |
| ;;; bazelisk test //skfe/go/dns:dns_test |
| ;;; |
| ;;; See go/skia-dns for details on the registration of skia.org. |
| ;;; |
| ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; |
| |
| $TTL 3600 ; default TTL 1 hour |
| |
| ;;; SSL/TLS certificates policy |
| ;;; Certification Authority Authorization (CAA) records are |
| ;;; used to specify which certificate authorities (CAs) are |
| ;;; allowed to issue certificates for a domain. |
| ;;; The record below restricts certificate issuance to |
| ;;; Google CA only. |
| |
| @ 86400 IN CAA 0 issue "pki.goog" |
| |
| ;;;; This record is required to validate domains for |
| ;;;; certificate issuance. |
| |
| _validate_domain 3600 IN CNAME _validate_domain.pki.goog. |
| |
| ;;; Master A record. Hosted in the GCP project skia-infra-public. |
| @ 300 IN A 34.110.212.89 |
| |
| ;;; CNAME all the hosts for this domain. |
| * 3600 IN CNAME luci.app. |
| |
| ;;; config subdomain A record and AAAA record. Hosted in Cloud Run service |
| ;;; luci-config in GCP Project luci-config. |
| config 300 IN A 216.239.32.21 |
| config 300 IN A 216.239.34.21 |
| config 300 IN A 216.239.36.21 |
| config 300 IN A 216.239.38.21 |
| config 300 IN AAAA 2001:4860:4802:32::15 |
| config 300 IN AAAA 2001:4860:4802:34::15 |
| config 300 IN AAAA 2001:4860:4802:36::15 |
| config 300 IN AAAA 2001:4860:4802:38::15 |
| |
| ;;; config-dev subdomain A record and AAAA record. Hosted in Cloud Run service |
| ;;; luci-config-dev in GCP Project luci-config-dev. |
| config-dev 300 IN A 216.239.32.21 |
| config-dev 300 IN A 216.239.34.21 |
| config-dev 300 IN A 216.239.36.21 |
| config-dev 300 IN A 216.239.38.21 |
| config-dev 300 IN AAAA 2001:4860:4802:32::15 |
| config-dev 300 IN AAAA 2001:4860:4802:34::15 |
| config-dev 300 IN AAAA 2001:4860:4802:36::15 |
| config-dev 300 IN AAAA 2001:4860:4802:38::15 |
| |
| ;;; LUCI Analysis API subdomain A record. |
| ;;; Production hosted in luci-analysis GCP Project. |
| ;;; Staging hosted in luci-analysis-dev GCP Project. |
| analysis.api 300 IN A 34.36.43.198 |
| staging.analysis.api 300 IN A 34.54.189.125 |
| |
| ;;; TXT records for site verification |
| config 3600 IN TXT "google-site-verification=RQ5PG1uJSEsw-ypgV7fSHduKsVeLOAji3JIAINecC8A" |
| config-dev 3600 IN TXT "google-site-verification=xhhLX2KKlm_Eq8crnrbqSkAueTKVaRKUjvqhxi8P-tw" |
| |
| ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; |
| ;;; End of luci.app.zone |
| ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; |
