Execution
Date
14 Dec 2025 10:21:40 +0000
Duration
00:43:55.98
Controller
aio1.openstack.local
User
root
Versions
Ansible
2.18.6
ara
1.7.4 / 1.7.4
Python
3.13.5
Summary
13
Hosts
2438
Tasks
2413
Results
107
Plays
511
Files
0
Records
Task result details
-
StatusCHANGED
-
Duration00:00:00.83
-
PlayInstall nova control-plane services
-
Taskpki : Create the CSR for nova_aio1-nova-api-container-01d1027c-client
-
Date14 Dec 2025 10:40:39 +0000
-
Module / Actioncommunity.crypto.openssl_csr (/home/zuul/src/opendev.org/openstack/ansible-role-pki/tasks/standalone/sign_cert.yml:35)
-
Tags
- nova-config
- pki
| Field | Value |
|---|---|
| basicConstraints | None |
| changed |
True |
| diff |
--- before +++ after @@ -1 +1,64 @@ -{} +{ + "authority_cert_issuer": null, + "authority_cert_serial_number": null, + "authority_key_identifier": null, + "basic_constraints": null, + "basic_constraints_critical": false, + "can_parse_csr": true, + "extended_key_usage": [ + "TLS Web Client Authentication" + ], + "extended_key_usage_critical": false, + "extensions_by_oid": { + "2.5.29.15": { + "critical": false, + "value": "AwIDqA==" + }, + "2.5.29.17": { + "critical": false, + "value": "MEqCIGFpbzEtbm92YS1hcGktY29udGFpbmVyLTAxZDEwMjdjgiBhaW8xLW5vdmEtYXBpLWNvbnRhaW5lci0wMWQxMDI3Y4cErB3vHA==" + }, + "2.5.29.37": { + "critical": false, + "value": "MAoGCCsGAQUFBwMC" + } + }, + "key_usage": [ + "Digital Signature", + "Key Agreement", + "Key Encipherment" + ], + "key_usage_critical": false, + "name_constraints_critical": false, + "name_constraints_excluded": null, + "name_constraints_permitted": null, + "ocsp_must_staple": null, + "ocsp_must_staple_critical": false, + "public_key": "-----BEGIN PUBLIC KEY-----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\nRDynn40EJEtaT00UmW/Gl0sCAwEAAQ==\n-----END PUBLIC KEY-----\n", + "public_key_data": { + "exponent": 65537, + "modulus": 675569762076832662582446969823234058720553209935595771505779037612762770599140903976201838069818925627070022168366990715292482832299758471179114256183470769031403668261538232932713069901989147760063843746642635323498179296374870986170858783644973059633121917278037895322170231835680958809629677785461333370218328577579491112919877261132523469432645293853561121649475896483265742991027565012578665126718386230412057285815813028601753198549943976366780982897758888059484338774917551964054408475306862538502463470826417645667508593609591299022776881026544069475101163795143055522846916883731326792961269762006946776044391418647711277555101820161120605511020354313020950910735309882552392721969755979680462019806696047638093038586960999125872443949657284923020233338491520466259781064469585471163860140946010821699923079267536726018465274195054282824388836810936290686390134017897213776177565338661680696411840876699453691606533469402085486203872061360916355477778916651270269059439961874147709416735158730391304158425761881892575092774240322558600280990135265793194748717050698582931278940709013882037634741945967302775263579371775725960620144346616476550208718699429022900678545243921294989328103973939233359053709289218203554215794507, + "size": 4096 + }, + "public_key_fingerprints": { + "sha256": "e8:f5:24:08:d0:e8:b1:83:e0:e2:5c:90:53:13:21:0f:c5:d1:92:07:3d:e8:16:46:f2:06:82:d0:a2:9d:31:e4" + }, + "public_key_type": "RSA", + "signature_valid": true, + "subject": { + "commonName": "aio1-nova-api-container-01d1027c" + }, + "subject_alt_name": [ + "DNS:aio1-nova-api-container-01d1027c", + "DNS:aio1-nova-api-container-01d1027c", + "IP:172.29.239.28" + ], + "subject_alt_name_critical": false, + "subject_key_identifier": null, + "subject_ordered": [ + [ + "commonName", + "aio1-nova-api-container-01d1027c" + ] + ] +} |
| extendedKeyUsage |
[ "clientAuth" ] |
| filename |
/etc/openstack_deploy/pki/certs/csr/nova_aio1-nova-api-container-01d1027c-client.csr |
| invocation |
{ "module_args": { "attributes": null, "authority_cert_issuer": null, "authority_cert_serial_number": null, "authority_key_identifier": null, "backup": false, "basic_constraints": null, "basic_constraints_critical": true, "common_name": "aio1-nova-api-container-01d1027c", "country_name": null, "create_subject_key_identifier": false, "crl_distribution_points": null, "digest": "sha256", "email_address": null, "extended_key_usage": [ "clientAuth" ], "extended_key_usage_critical": false, "force": false, "group": null, "key_usage": [ "digitalSignature", "keyAgreement", "keyEncipherment" ], "key_usage_critical": false, "locality_name": null, "mode": null, "name_constraints_critical": false, "name_constraints_excluded": null, "name_constraints_permitted": null, "ocsp_must_staple": false, "ocsp_must_staple_critical": false, "organization_name": null, "organizational_unit_name": null, "owner": null, "path": "/etc/openstack_deploy/pki/certs/csr/nova_aio1-nova-api-container-01d1027c-client.csr", "privatekey_content": null, "privatekey_passphrase": null, "privatekey_path": "/etc/openstack_deploy/pki/certs/private/nova_aio1-nova-api-container-01d1027c-client.key.pem", "return_content": false, "select_crypto_backend": "auto", "selevel": null, "serole": null, "setype": null, "seuser": null, "state": "present", "state_or_province_name": null, "subject": null, "subject_alt_name": [ "DNS:aio1-nova-api-container-01d1027c", "DNS:aio1-nova-api-container-01d1027c", "IP:172.29.239.28" ], "subject_alt_name_critical": false, "subject_key_identifier": null, "subject_ordered": null, "unsafe_writes": false, "use_common_name_for_san": true, "version": 1 } } |
| keyUsage |
[ "digitalSignature", "keyAgreement", "keyEncipherment" ] |
| name_constraints_excluded |
[]
|
| name_constraints_permitted |
[]
|
| ocspMustStaple |
False |
| privatekey |
/etc/openstack_deploy/pki/certs/private/nova_aio1-nova-api-container-01d1027c-client.key.pem |
| subject |
[ [ "CN", "aio1-nova-api-container-01d1027c" ] ] |
| subjectAltName |
[ "DNS:aio1-nova-api-container-01d1027c", "DNS:aio1-nova-api-container-01d1027c", "IP:172.29.239.28" ] |