Playbook #3
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml
Execution
Date 14 Dec 2025 10:15:01 +0000
Duration 00:06:33.21
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.13.5
Summary
7 Hosts
567 Tasks
554 Results
37 Plays
221 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:00.86
  • Play
    HAProxy base config
  • Task
    pki : Sign the certificate CSR for haproxy_aio1-172.29.236.101
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-172.29.236.101.csr
diff 
--- before

+++ after

@@ -1 +1,84 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "7f:87:78:f2:ec:fe:2b:ec:98:aa:d8:8a:7e:c9:49:4b:91:10:ba:7a",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBTM2PTOpEPIxiZ0yBGc/R/APVAdJg=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MCKCBGFpbzGCFGFpbzEub3BlbnN0YWNrLmxvY2FshwSsHexl"
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFH+HePLs/ivsmKrYin7JSUuRELp6"
+        }
+    },
+    "fingerprints": {
+        "sha256": "21:54:43:05:52:2e:50:02:95:57:c3:1b:da:17:73:2d:67:1b:c6:73:90:15:7d:4f:4f:89:91:46:7e:17:dd:3e"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": null,
+    "key_usage_critical": false,
+    "not_after": "20351212101535Z",
+    "not_before": "20251214101535Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\n7T7slcQQOSl0ZeZLSzKmBfsCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 545478545470165284038161882427540653261314909086311599067637418406539238926661327437973628659569389774702953585145030892403710627735799887828015437621169990458931475274349072768201094762403442907907083547943723794305364603899478308413844766688517393148296333846451860389135159312400951137408602151841187237669301023349607265778773440966577303909314740440884578687504966465033944464920086273770685088349619560983521703825915908327457816297700673612510405398099160542839547709975931994383073375323436786811765758286822169420931230025619058119924732716260064045354698096317953235803731089029662818901248658096998452773606405468904793007882633260570154081602848232426819075497247222290203861296777291525122963337191288754035786758853385454360988381663151518947835102413034207315431880956202668465718124163105188988999356007343869347562676970887810472725076666412113716165855161317700876581035971630683781156068479819223414101218342728278297983468402184475887353589656939374325782393541518378318694830025455686567250892793877235971038961157758265655010983503087335302473935601107559178715788998547926116206426033486485898702689589215069818402090335957705480869813449360043713880231294851362540018825566639799771882839527183985549125223931,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "73:65:09:59:09:1d:ea:fb:8f:33:6b:8b:3e:b1:3d:da:39:fa:ce:08:ff:60:2b:c9:df:3a:f9:a6:7a:c2:fb:8e"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 277278097833532129517817400394821149310498412634,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1.openstack.local",
+        "IP:172.29.236.101"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "cc:d8:f4:ce:a4:43:c8:c6:26:74:c8:11:9c:fd:1f:c0:3d:50:1d:26",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-172.29.236.101.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-172.29.236.101.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-172.29.236.101.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351212101535Z
notBefore 
20251214101535Z
privatekey None
serial_number 
277278097833532129517817400394821149310498412634