{"id":165,"status":"changed","playbook":{"id":2,"items":{"plays":18,"tasks":603,"results":2357,"hosts":15,"files":157,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":4,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-hosts.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-14T10:04:43.190296Z","ended":"2025-12-14T10:14:53.851603Z","duration":"00:10:10.661307","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.13.5","server_version":"1.7.4","status":"completed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml","controller":"aio1.openstack.local","user":"root"},"play":{"id":3,"items":{"tasks":35,"results":34},"started":"2025-12-14T10:04:45.851543Z","ended":"2025-12-14T10:05:07.021289Z","duration":"00:00:21.169746","name":"Create CA certificates","status":"completed"},"task":{"id":165,"items":{"results":1},"path":"/home/zuul/src/opendev.org/openstack/ansible-role-pki/tasks/standalone/create_ca.yml","tags":["always"],"started":"2025-12-14T10:04:53.363591Z","ended":"2025-12-14T10:04:54.262296Z","duration":"00:00:00.898705","name":"pki : Sign the selfsigned Root CA CSR for ExampleCorpRoot","uuid":"fa163e3e-aca0-c085-3d55-000000000135","action":"community.crypto.x509_certificate","lineno":118,"handler":false,"status":"completed","warnings":[],"deprecations":[],"exceptions":[],"file":75},"host":{"id":2,"name":"localhost","changed":21,"failed":0,"ok":36,"skipped":11,"unreachable":0},"delegated_to":[{"id":2,"name":"localhost","changed":21,"failed":0,"ok":36,"skipped":11,"unreachable":0}],"content":{"changed":true,"csr":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/csr/ca_csr-1000.csr","diff":{"after":{"authority_cert_issuer":null,"authority_cert_serial_number":null,"authority_key_identifier":null,"basic_constraints":["CA:TRUE"],"basic_constraints_critical":true,"can_parse_certificate":true,"expired":false,"extended_key_usage":null,"extended_key_usage_critical":false,"extensions_by_oid":{"2.5.29.14":{"critical":false,"value":"BBTQ2kS0ve8szw8B+mQqvCSrcol6Fg=="},"2.5.29.15":{"critical":false,"value":"AwIBhg=="},"2.5.29.17":{"critical":false,"value":"MBaCFEV4YW1wbGUgQ29ycCBSb290IENB"},"2.5.29.19":{"critical":true,"value":"MAMBAf8="}},"fingerprints":{"sha256":"89:c6:6d:92:4c:0a:ae:0d:e2:a0:fe:72:9a:13:db:aa:46:41:82:c4:1d:af:ab:4b:d1:30:84:c7:15:b2:e1:86"},"issuer":{"commonName":"Example Corp Root CA","countryName":"GB","stateOrProvinceName":"England"},"issuer_ordered":[["countryName","GB"],["stateOrProvinceName","England"],["commonName","Example Corp Root CA"]],"issuer_uri":null,"key_usage":["CRL Sign","Certificate Sign","Digital Signature"],"key_usage_critical":false,"not_after":"20351212100453Z","not_before":"20251214100453Z","ocsp_must_staple":null,"ocsp_must_staple_critical":false,"ocsp_uri":null,"public_key":"-----BEGIN PUBLIC KEY-----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\nKq7zeEFGsauWJqkXl9caiisCAwEAAQ==\n-----END PUBLIC KEY-----\n","public_key_data":{"exponent":65537,"modulus":618161632550571264017160293426376770642688927253712915304040653203112621450378474832840376826047136108541356552471702400197160269021065930130402449470119931292799221992991411873503733851991385317337129793314061880551541295792429653270687910185838270691982867602921022946013843981344205290090672127473354823185346655802498151587893657439101679158709071953625342124064076531994211874617849782310030252189598267030856464467031221077041539993909005546813923336155635402006327505015561567689450209865224721268393410579817269378533393153350681734760645268530582868355989632997110957121940185418942262473743870044619638118332150263575977248413436358944557668710771292026970604460702701654138515591197964410797555103888380209093514241897446672471173329567734453575025508164681930421323659913323784950002605915416128286010722830311055566376637246072218202171424517715838828001988894906782309143160535900926646932305762343920351322170303611297352337073510830311109679509322943243296429603313494472885106495224310921994276629183835868187092738098952227015778330380594157450478207791708952427906484974674238256876137446168551891753527912119962376037875477952783771628119193997498446138919185421408586971208220299392846239086801461982626592754219,"size":4096},"public_key_fingerprints":{"sha256":"b7:91:74:f2:bb:3b:0e:e3:a7:05:ee:39:95:ea:0f:bd:c4:9f:50:0d:cf:88:fc:f5:0b:16:71:d4:c8:1d:02:7e"},"public_key_type":"RSA","serial_number":109806260951808739819568669113648028666939682158,"signature_algorithm":"sha256WithRSAEncryption","subject":{"commonName":"Example Corp Root CA","countryName":"GB","stateOrProvinceName":"England"},"subject_alt_name":["DNS:Example Corp Root CA"],"subject_alt_name_critical":false,"subject_key_identifier":"d0:da:44:b4:bd:ef:2c:cf:0f:01:fa:64:2a:bc:24:ab:72:89:7a:16","subject_ordered":[["countryName","GB"],["stateOrProvinceName","England"],["commonName","Example Corp Root CA"]],"version":3},"before":{}},"filename":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/certs/ExampleCorpRoot-1000.crt","invocation":{"module_args":{"acme_accountkey_path":null,"acme_chain":false,"acme_challenge_path":null,"acme_directory":"https://acme-v02.api.letsencrypt.org/directory","attributes":null,"backup":true,"csr_content":null,"csr_path":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/csr/ca_csr-1000.csr","entrust_api_client_cert_key_path":null,"entrust_api_client_cert_path":null,"entrust_api_key":null,"entrust_api_specification_path":"https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml","entrust_api_user":null,"entrust_cert_type":"STANDARD_SSL","entrust_not_after":"+365d","entrust_requester_email":null,"entrust_requester_name":null,"entrust_requester_phone":null,"force":false,"group":null,"ignore_timestamps":true,"mode":null,"ownca_content":null,"ownca_create_authority_key_identifier":true,"ownca_create_subject_key_identifier":"create_if_not_provided","ownca_digest":"sha256","ownca_not_after":"+3650d","ownca_not_before":"+0s","ownca_path":null,"ownca_privatekey_content":null,"ownca_privatekey_passphrase":null,"ownca_privatekey_path":null,"ownca_version":3,"owner":null,"path":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/certs/ExampleCorpRoot-1000.crt","privatekey_content":null,"privatekey_passphrase":null,"privatekey_path":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/private/ExampleCorpRoot.key.pem","provider":"selfsigned","return_content":false,"select_crypto_backend":"auto","selevel":null,"selfsigned_create_subject_key_identifier":"create_if_not_provided","selfsigned_digest":"sha256","selfsigned_not_after":"+3650d","selfsigned_not_before":"+0s","selfsigned_version":3,"serole":null,"setype":null,"seuser":null,"state":"present","unsafe_writes":false}},"notAfter":"20351212100453Z","notBefore":"20251214100453Z","privatekey":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/private/ExampleCorpRoot.key.pem","serial_number":109806260951808739819568669113648028666939682158},"created":"2025-12-14T10:04:54.251740Z","updated":"2025-12-14T10:04:54.251764Z","started":"2025-12-14T10:04:53.412120Z","ended":"2025-12-14T10:04:54.244796Z","duration":"00:00:00.832676","changed":true,"ignore_errors":false}