Playbook #4
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-openstack.yml
Execution
Date 14 Dec 2025 10:21:40 +0000
Duration 00:43:55.98
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.13.5
Summary
13 Hosts
2438 Tasks
2413 Results
107 Plays
511 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:00.86
  • Play
    Install nova compute services
  • Task
    pki : Sign the certificate CSR for nova_aio1
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/nova_aio1.csr
diff 
--- before

+++ after

@@ -1 +1,99 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "7f:87:78:f2:ec:fe:2b:ec:98:aa:d8:8a:7e:c9:49:4b:91:10:ba:7a",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": [
+        "TLS Web Client Authentication",
+        "TLS Web Server Authentication"
+    ],
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBTxir59oWzSS9pe6SEnBibJU8wVNw=="
+        },
+        "2.5.29.15": {
+            "critical": false,
+            "value": "AwIDqA=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MBKCBGFpbzGCBGFpbzGHBKwd7GQ="
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFH+HePLs/ivsmKrYin7JSUuRELp6"
+        },
+        "2.5.29.37": {
+            "critical": false,
+            "value": "MBQGCCsGAQUFBwMCBggrBgEFBQcDAQ=="
+        }
+    },
+    "fingerprints": {
+        "sha256": "3f:71:d3:08:5d:a8:7f:b4:ff:1e:bf:4e:2b:f0:7d:e9:a9:ce:4b:01:cc:85:e1:04:9b:e0:be:74:2f:e5:32:73"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": [
+        "Digital Signature",
+        "Key Agreement",
+        "Key Encipherment"
+    ],
+    "key_usage_critical": false,
+    "not_after": "20351212104432Z",
+    "not_before": "20251214104432Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\nXOhPPxUcmVA0Sdf0XZaJ5XkCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 760490562845672303604772331943290608306747776547759408749102185793929115246490021721440642912869866091383881555528103648786568084665941981327863310749765814697799053529551725112668964574562488752383178546930732606251734271841487878498013539347550625406891247408606824558598575069948821720326840153155905367156367854204349864252066303679490883561862432666417275962063343310956314408523329795947437042784001168657279151491415589852119818709582348588043026955107130832558940363556784532976623531295076476194004313772460665607619189483744010171494535481731718144181807334242772305318848013930988629945446500413137824898823847830381814821732993761708188465457219198495749309517552615896428926253193529991336358071523315043439359146656559496017070794222138107571452376716887098149787923303499352808329252546615919465388471932839998516223819559270700528443526850004121646820828666058600788286345921491848135077286275791842031037460374075239620563591381115060425022514822721052094570087607916308130048891681457541181004422135777470530274961587374344594021968927800981182713182802249967070208757853911839759395798128131992404496384412741994128139640814871573565639723893168009320908364162776075897483355057954520467956888869663461274974545273,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "51:86:e9:fa:da:85:fd:49:9f:de:ba:95:4e:96:db:d8:54:c9:78:d7:9b:ae:61:c0:f2:bc:0a:7e:a7:e2:b6:a8"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 699198151469824197324888709194203416388985753532,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1",
+        "IP:172.29.236.100"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "f1:8a:be:7d:a1:6c:d2:4b:da:5e:e9:21:27:06:26:c9:53:cc:15:37",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/nova_aio1.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/nova_aio1.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/nova_aio1.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351212104432Z
notBefore 
20251214104432Z
privatekey None
serial_number 
699198151469824197324888709194203416388985753532