Playbook #3
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml
Execution
Date 14 Dec 2025 10:15:01 +0000
Duration 00:06:33.21
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.13.5
Summary
7 Hosts
567 Tasks
554 Results
37 Plays
221 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:00.96
  • Play
    HAProxy base config
  • Task
    pki : Sign the certificate CSR for haproxy_aio1-10.0.19.177
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-10.0.19.177.csr
diff 
--- before

+++ after

@@ -1 +1,84 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "7f:87:78:f2:ec:fe:2b:ec:98:aa:d8:8a:7e:c9:49:4b:91:10:ba:7a",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBQ0VBTrFMjynYQNd0rpxutWaFKPLg=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MCKCBGFpbzGCFGFpbzEub3BlbnN0YWNrLmxvY2FshwQKABOx"
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFH+HePLs/ivsmKrYin7JSUuRELp6"
+        }
+    },
+    "fingerprints": {
+        "sha256": "57:78:2b:63:4b:9b:54:72:14:2a:ff:3b:d5:78:2a:3e:1c:15:b1:25:6c:6f:ea:f1:4b:85:c8:ab:7c:c2:9d:14"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": null,
+    "key_usage_critical": false,
+    "not_after": "20351212101529Z",
+    "not_before": "20251214101529Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\ngRNyFUwpoPLPO8v6Mmg7KWsCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 856861025057363827166854236181504108974550051962179871857580689563602025079433870046260614810988258610317000249300815957422235211327121731430209553065256755868861224356958448003976329386032754423671055830731676340314192596029279909427361301651817065040898082460959664926775808393827435828564524091327240433528125958874132256298793009285534818993029661525131960013544012753341761274468316751567046623140821006249311289446547721174091250873863799787253799937032813658392322512990469261218356119716067785633443241342381958853506964148270650241966177432380462024017414791594550352166078578702258486041860757989992150920061851958583937510563463338960319184476433882542056184491005109724595436526180304849133316411090289678325788764977708150376923427749775807425108339452399835661460661706279519407560780436547174796816138862952458267237262017646823706865002858734816968354068243851084111486497926711212005681693226404342613817039287487420125309593463417309354982340817753850656093820598022376010156943598916239200128512368431706625764830680778858054065793955513387103399760834594149464669730746017502635621029820129633598452068249890849527393456816263936088795405490104472344436002439528929027507246120108730703023082641883083406384507243,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "56:39:d3:c5:24:80:d8:2a:66:f2:fe:97:54:06:3f:ae:e7:bb:90:5a:98:a5:b8:40:94:7d:7a:ea:ba:e7:c8:09"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 246729717697009975100755958950300543632645347508,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1.openstack.local",
+        "IP:10.0.19.177"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "34:54:14:eb:14:c8:f2:9d:84:0d:77:4a:e9:c6:eb:56:68:52:8f:2e",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-10.0.19.177.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-10.0.19.177.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-10.0.19.177.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351212101529Z
notBefore 
20251214101529Z
privatekey None
serial_number 
246729717697009975100755958950300543632645347508