{"id":167,"status":"changed","playbook":{"id":2,"items":{"plays":18,"tasks":608,"results":2412,"hosts":15,"files":158,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":4,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-hosts.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-08T13:40:18.992997Z","ended":"2025-12-08T13:50:25.791366Z","duration":"00:10:06.798369","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.12.11","server_version":"1.7.4","status":"completed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml","controller":"aio1.openstack.local","user":"root"},"play":{"id":3,"items":{"tasks":35,"results":34},"started":"2025-12-08T13:40:21.623400Z","ended":"2025-12-08T13:40:41.954450Z","duration":"00:00:20.331050","name":"Create CA certificates","status":"completed"},"task":{"id":167,"items":{"results":1},"path":"/home/zuul/src/opendev.org/openstack/ansible-role-pki/tasks/standalone/create_ca.yml","tags":["always"],"started":"2025-12-08T13:40:28.800645Z","ended":"2025-12-08T13:40:29.655869Z","duration":"00:00:00.855224","name":"pki : Sign the selfsigned Root CA CSR for ExampleCorpRoot","uuid":"fa163eb8-f9d2-e19b-22df-000000000135","action":"community.crypto.x509_certificate","lineno":118,"handler":false,"status":"completed","warnings":[],"deprecations":[],"exceptions":[],"file":76},"host":{"id":2,"name":"localhost","changed":21,"failed":0,"ok":36,"skipped":11,"unreachable":0},"delegated_to":[{"id":2,"name":"localhost","changed":21,"failed":0,"ok":36,"skipped":11,"unreachable":0}],"content":{"changed":true,"csr":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/csr/ca_csr-1000.csr","diff":{"after":{"authority_cert_issuer":null,"authority_cert_serial_number":null,"authority_key_identifier":null,"basic_constraints":["CA:TRUE"],"basic_constraints_critical":true,"can_parse_certificate":true,"expired":false,"extended_key_usage":null,"extended_key_usage_critical":false,"extensions_by_oid":{"2.5.29.14":{"critical":false,"value":"BBTVagTN5B1aw2dUEQpx5bQnzLt7BA=="},"2.5.29.15":{"critical":false,"value":"AwIBhg=="},"2.5.29.17":{"critical":false,"value":"MBaCFEV4YW1wbGUgQ29ycCBSb290IENB"},"2.5.29.19":{"critical":true,"value":"MAMBAf8="}},"fingerprints":{"sha256":"63:51:5a:82:22:2e:a6:1f:99:c9:ec:bd:98:87:48:59:00:fc:70:e3:9c:7d:7e:d8:22:c2:a0:b4:19:70:77:00"},"issuer":{"commonName":"Example Corp Root CA","countryName":"GB","stateOrProvinceName":"England"},"issuer_ordered":[["countryName","GB"],["stateOrProvinceName","England"],["commonName","Example Corp Root CA"]],"issuer_uri":null,"key_usage":["CRL Sign","Certificate Sign","Digital Signature"],"key_usage_critical":false,"not_after":"20351206134029Z","not_before":"20251208134029Z","ocsp_must_staple":null,"ocsp_must_staple_critical":false,"ocsp_uri":null,"public_key":"-----BEGIN PUBLIC KEY-----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\nxvmRIvTOavu9dLD1wpOUZH8CAwEAAQ==\n-----END PUBLIC KEY-----\n","public_key_data":{"exponent":65537,"modulus":642404126110604970436524149581995244466888338370571029097115028497617204796444350622614624713042580234958995094427762600341220018892260724748494511418180483013568727396715894360256771003436681595167825402795473806295857256574010369106654290128322508774828159489788862675643046103521459672665091786073777201733463653110315207214316583430600256127710776407276828518586379840839311262049414140974048467698513172715158317002566391415995221269282410814943581730753673246334641205245844939677586578584914464825770117396592930655509667338988802252262825392442593764066886348430574676855948363479279684013340574775370813858803545945358138761779883554429570365577703985338601988776561173008942365017760570307808381407144851206694436274337735425274602943713069349521745735288122017550299893104267655966641620189182120790397141059103857758051130027614749802137296812460974460300794081632413547268277313125553070236625802995719185810296438819126833384309485658228286373027679517827469115562778096240917260228753339273950722122001375950643280343356421390952998208113744192531869588938482626718499238794940642640059299180433752121649935187388071877766926224037931043501523588198728342537875571155265185521320074177233598517585598188148453356627071,"size":4096},"public_key_fingerprints":{"sha256":"a3:e6:3c:6f:1f:c0:1f:54:ae:90:16:85:be:fc:6d:91:bb:63:43:12:fe:b1:07:0f:cb:9c:b9:70:d1:e1:54:c4"},"public_key_type":"RSA","serial_number":101115140537604320007589534008281003747562504448,"signature_algorithm":"sha256WithRSAEncryption","subject":{"commonName":"Example Corp Root CA","countryName":"GB","stateOrProvinceName":"England"},"subject_alt_name":["DNS:Example Corp Root CA"],"subject_alt_name_critical":false,"subject_key_identifier":"d5:6a:04:cd:e4:1d:5a:c3:67:54:11:0a:71:e5:b4:27:cc:bb:7b:04","subject_ordered":[["countryName","GB"],["stateOrProvinceName","England"],["commonName","Example Corp Root CA"]],"version":3},"before":{}},"filename":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/certs/ExampleCorpRoot-1000.crt","invocation":{"module_args":{"acme_accountkey_path":null,"acme_chain":false,"acme_challenge_path":null,"acme_directory":"https://acme-v02.api.letsencrypt.org/directory","attributes":null,"backup":true,"csr_content":null,"csr_path":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/csr/ca_csr-1000.csr","entrust_api_client_cert_key_path":null,"entrust_api_client_cert_path":null,"entrust_api_key":null,"entrust_api_specification_path":"https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml","entrust_api_user":null,"entrust_cert_type":"STANDARD_SSL","entrust_not_after":"+365d","entrust_requester_email":null,"entrust_requester_name":null,"entrust_requester_phone":null,"force":false,"group":null,"ignore_timestamps":true,"mode":null,"ownca_content":null,"ownca_create_authority_key_identifier":true,"ownca_create_subject_key_identifier":"create_if_not_provided","ownca_digest":"sha256","ownca_not_after":"+3650d","ownca_not_before":"+0s","ownca_path":null,"ownca_privatekey_content":null,"ownca_privatekey_passphrase":null,"ownca_privatekey_path":null,"ownca_version":3,"owner":null,"path":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/certs/ExampleCorpRoot-1000.crt","privatekey_content":null,"privatekey_passphrase":null,"privatekey_path":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/private/ExampleCorpRoot.key.pem","provider":"selfsigned","return_content":false,"select_crypto_backend":"auto","selevel":null,"selfsigned_create_subject_key_identifier":"create_if_not_provided","selfsigned_digest":"sha256","selfsigned_not_after":"+3650d","selfsigned_not_before":"+0s","selfsigned_version":3,"serole":null,"setype":null,"seuser":null,"state":"present","unsafe_writes":false}},"notAfter":"20351206134029Z","notBefore":"20251208134029Z","privatekey":"/etc/openstack_deploy/pki/roots/ExampleCorpRoot/private/ExampleCorpRoot.key.pem","serial_number":101115140537604320007589534008281003747562504448},"created":"2025-12-08T13:40:29.643572Z","updated":"2025-12-08T13:40:29.643593Z","started":"2025-12-08T13:40:28.848502Z","ended":"2025-12-08T13:40:29.636366Z","duration":"00:00:00.787864","changed":true,"ignore_errors":false}