Playbook #2
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml
Execution
Date 05 Dec 2025 13:22:31 +0000
Duration 00:00:50.80
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.11
Summary
2 Hosts
72 Tasks
71 Results
7 Plays
97 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:00.77
  • Play
    Create CA certificates
  • Task
    pki : Sign the selfsigned Root CA CSR for ExampleCorpRoot
  • Host
    localhost ( task delegated to localhost )

Field Value
changed 
True
csr 
/etc/openstack_deploy/pki/roots/ExampleCorpRoot/csr/ca_csr-1000.csr
diff 
--- before

+++ after

@@ -1 +1,102 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": null,
+    "basic_constraints": [
+        "CA:TRUE"
+    ],
+    "basic_constraints_critical": true,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBTfvq6R9PtNDIgyGSkXPO/5wg5E2Q=="
+        },
+        "2.5.29.15": {
+            "critical": false,
+            "value": "AwIBhg=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MBaCFEV4YW1wbGUgQ29ycCBSb290IENB"
+        },
+        "2.5.29.19": {
+            "critical": true,
+            "value": "MAMBAf8="
+        }
+    },
+    "fingerprints": {
+        "sha256": "4b:d6:88:9d:61:b7:b7:78:5d:44:b6:66:c4:e3:b4:26:3e:21:5a:c1:9c:51:50:c4:b3:2d:69:26:08:66:6c:5b"
+    },
+    "issuer": {
+        "commonName": "Example Corp Root CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Root CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": [
+        "CRL Sign",
+        "Certificate Sign",
+        "Digital Signature"
+    ],
+    "key_usage_critical": false,
+    "not_after": "20351203132241Z",
+    "not_before": "20251205132241Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\nRNu18K23rzZe9qvEPgx+UFsCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 841559685051515576580596970645420763757214309392498741092136997294503589345490916252452503741090740818782072428497927969730623603275285661866191721780627829960046344801052108594947237505475643257025354493676502981546670336357697946651395792799095729062844490061028327105816066929184904780531316755672542111702559594755492440923725656474806621903143491124813755283780552378273917100933127486609931337550455444382430214613471024086602790293776925457789941418141846376840201848837195378947216019262311767264952627467597372892861932251435091991799288870030451440057504205367298857961306914686118203616416673973787480615926982505961320782227426996044475586424259743753938295929393890657688049281689653481315241038593279877432428629575836761434709032717284342241326922477446120723914720945895266449986515552992488749047461040753373779851304760135282060080279265690418851371564338591428284143562183192599891031891904057279328972905375022501817839395499721427061194581430586073360387886312591963816139175232813901497097720154306047494336960648358562126628882557705672731147274314560608730195929069494668093433955631340066198475876079441326467911693419729154389175119972658179007723449386123732730926826978464646208181521548610188395264495707,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "ea:e5:27:dc:53:c3:ce:ca:9a:a1:88:51:5a:56:bc:df:ce:3d:59:87:a2:f2:76:b8:3d:65:48:7c:59:a6:6e:e7"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 249469059270871529264778443931353872157339689530,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "Example Corp Root CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "subject_alt_name": [
+        "DNS:Example Corp Root CA"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "df:be:ae:91:f4:fb:4d:0c:88:32:19:29:17:3c:ef:f9:c2:0e:44:d9",
+    "subject_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Root CA"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/roots/ExampleCorpRoot/certs/ExampleCorpRoot-1000.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": true,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/roots/ExampleCorpRoot/csr/ca_csr-1000.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": null,
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": null,
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/roots/ExampleCorpRoot/certs/ExampleCorpRoot-1000.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpRoot/private/ExampleCorpRoot.key.pem",
        "provider": "selfsigned",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351203132241Z
notBefore 
20251205132241Z
privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpRoot/private/ExampleCorpRoot.key.pem
serial_number 
249469059270871529264778443931353872157339689530