Execution
Date
14 Dec 2025 10:21:40 +0000
Duration
00:43:55.98
Controller
aio1.openstack.local
User
root
Versions
Ansible
2.18.6
ara
1.7.4 / 1.7.4
Python
3.13.5
Summary
13
Hosts
2438
Tasks
2413
Results
107
Plays
511
Files
0
Records
Task result details
-
StatusCHANGED
-
Duration00:00:00.93
-
PlayInstall nova control-plane services
-
Taskpki : Sign the certificate CSR for nova_aio1-nova-api-container-01d1027c-client
-
Date14 Dec 2025 10:40:40 +0000
-
Module / Actioncommunity.crypto.x509_certificate (/home/zuul/src/opendev.org/openstack/ansible-role-pki/tasks/standalone/sign_cert.yml:64)
-
Tags
- nova-config
- pki
| Field | Value |
|---|---|
| ca_cert |
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt |
| ca_privatekey |
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem |
| changed |
True |
| csr |
/etc/openstack_deploy/pki/certs/csr/nova_aio1-nova-api-container-01d1027c-client.csr |
| diff |
--- before +++ after @@ -1 +1,98 @@ -{} +{ + "authority_cert_issuer": null, + "authority_cert_serial_number": null, + "authority_key_identifier": "7f:87:78:f2:ec:fe:2b:ec:98:aa:d8:8a:7e:c9:49:4b:91:10:ba:7a", + "basic_constraints": null, + "basic_constraints_critical": false, + "can_parse_certificate": true, + "expired": false, + "extended_key_usage": [ + "TLS Web Client Authentication" + ], + "extended_key_usage_critical": false, + "extensions_by_oid": { + "2.5.29.14": { + "critical": false, + "value": "BBTzrmL9RPMV7P6qv9w07/X3ZzfOZQ==" + }, + "2.5.29.15": { + "critical": false, + "value": "AwIDqA==" + }, + "2.5.29.17": { + "critical": false, + "value": "MEqCIGFpbzEtbm92YS1hcGktY29udGFpbmVyLTAxZDEwMjdjgiBhaW8xLW5vdmEtYXBpLWNvbnRhaW5lci0wMWQxMDI3Y4cErB3vHA==" + }, + "2.5.29.35": { + "critical": false, + "value": "MBaAFH+HePLs/ivsmKrYin7JSUuRELp6" + }, + "2.5.29.37": { + "critical": false, + "value": "MAoGCCsGAQUFBwMC" + } + }, + "fingerprints": { + "sha256": "10:ca:32:d2:29:5d:73:74:00:24:2c:80:8c:1c:6c:18:f0:b5:06:cb:2f:a2:f8:48:da:1f:9e:cf:e2:ce:a4:c9" + }, + "issuer": { + "commonName": "Example Corp Openstack Infrastructure Intermediate CA", + "countryName": "GB", + "stateOrProvinceName": "England" + }, + "issuer_ordered": [ + [ + "countryName", + "GB" + ], + [ + "stateOrProvinceName", + "England" + ], + [ + "commonName", + "Example Corp Openstack Infrastructure Intermediate CA" + ] + ], + "issuer_uri": null, + "key_usage": [ + "Digital Signature", + "Key Agreement", + "Key Encipherment" + ], + "key_usage_critical": false, + "not_after": "20351212104040Z", + "not_before": "20251214104040Z", + "ocsp_must_staple": null, + "ocsp_must_staple_critical": false, + "ocsp_uri": null, + "public_key": "-----BEGIN PUBLIC KEY-----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\nRDynn40EJEtaT00UmW/Gl0sCAwEAAQ==\n-----END PUBLIC KEY-----\n", + "public_key_data": { + "exponent": 65537, + "modulus": 675569762076832662582446969823234058720553209935595771505779037612762770599140903976201838069818925627070022168366990715292482832299758471179114256183470769031403668261538232932713069901989147760063843746642635323498179296374870986170858783644973059633121917278037895322170231835680958809629677785461333370218328577579491112919877261132523469432645293853561121649475896483265742991027565012578665126718386230412057285815813028601753198549943976366780982897758888059484338774917551964054408475306862538502463470826417645667508593609591299022776881026544069475101163795143055522846916883731326792961269762006946776044391418647711277555101820161120605511020354313020950910735309882552392721969755979680462019806696047638093038586960999125872443949657284923020233338491520466259781064469585471163860140946010821699923079267536726018465274195054282824388836810936290686390134017897213776177565338661680696411840876699453691606533469402085486203872061360916355477778916651270269059439961874147709416735158730391304158425761881892575092774240322558600280990135265793194748717050698582931278940709013882037634741945967302775263579371775725960620144346616476550208718699429022900678545243921294989328103973939233359053709289218203554215794507, + "size": 4096 + }, + "public_key_fingerprints": { + "sha256": "e8:f5:24:08:d0:e8:b1:83:e0:e2:5c:90:53:13:21:0f:c5:d1:92:07:3d:e8:16:46:f2:06:82:d0:a2:9d:31:e4" + }, + "public_key_type": "RSA", + "serial_number": 579091646518475570864487437024229694781445601442, + "signature_algorithm": "sha256WithRSAEncryption", + "subject": { + "commonName": "aio1-nova-api-container-01d1027c" + }, + "subject_alt_name": [ + "DNS:aio1-nova-api-container-01d1027c", + "DNS:aio1-nova-api-container-01d1027c", + "IP:172.29.239.28" + ], + "subject_alt_name_critical": false, + "subject_key_identifier": "f3:ae:62:fd:44:f3:15:ec:fe:aa:bf:dc:34:ef:f5:f7:67:37:ce:65", + "subject_ordered": [ + [ + "commonName", + "aio1-nova-api-container-01d1027c" + ] + ], + "version": 3 +} |
| filename |
/etc/openstack_deploy/pki/certs/certs/nova_aio1-nova-api-container-01d1027c-client.crt |
| invocation |
{ "module_args": { "acme_accountkey_path": null, "acme_chain": false, "acme_challenge_path": null, "acme_directory": "https://acme-v02.api.letsencrypt.org/directory", "attributes": null, "backup": false, "csr_content": null, "csr_path": "/etc/openstack_deploy/pki/certs/csr/nova_aio1-nova-api-container-01d1027c-client.csr", "entrust_api_client_cert_key_path": null, "entrust_api_client_cert_path": null, "entrust_api_key": null, "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml", "entrust_api_user": null, "entrust_cert_type": "STANDARD_SSL", "entrust_not_after": "+365d", "entrust_requester_email": null, "entrust_requester_name": null, "entrust_requester_phone": null, "force": false, "group": null, "ignore_timestamps": true, "mode": null, "ownca_content": null, "ownca_create_authority_key_identifier": true, "ownca_create_subject_key_identifier": "create_if_not_provided", "ownca_digest": "sha256", "ownca_not_after": "+3650d", "ownca_not_before": "+0s", "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt", "ownca_privatekey_content": null, "ownca_privatekey_passphrase": null, "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem", "ownca_version": 3, "owner": null, "path": "/etc/openstack_deploy/pki/certs/certs/nova_aio1-nova-api-container-01d1027c-client.crt", "privatekey_content": null, "privatekey_passphrase": null, "privatekey_path": null, "provider": "ownca", "return_content": false, "select_crypto_backend": "auto", "selevel": null, "selfsigned_create_subject_key_identifier": "create_if_not_provided", "selfsigned_digest": "sha256", "selfsigned_not_after": "+3650d", "selfsigned_not_before": "+0s", "selfsigned_version": 3, "serole": null, "setype": null, "seuser": null, "state": "present", "unsafe_writes": false } } |
| notAfter |
20351212104040Z |
| notBefore |
20251214104040Z |
| privatekey | None |
| serial_number |
579091646518475570864487437024229694781445601442 |