Playbook #2
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml
Execution
Date 08 Dec 2025 13:40:18 +0000
Duration 00:10:06.79
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.11
Summary
15 Hosts
608 Tasks
2412 Results
18 Plays
158 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:00.71
  • Play
    Create CA certificates
  • Task
    pki : Sign the intermediate CA CSR for ExampleCorpIntermediate
  • Host
    localhost ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpRoot/certs/ExampleCorpRoot.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpRoot/private/ExampleCorpRoot.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/csr/ca_csr-1000.csr
diff 
--- before

+++ after

@@ -1 +1,107 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "d5:6a:04:cd:e4:1d:5a:c3:67:54:11:0a:71:e5:b4:27:cc:bb:7b:04",
+    "basic_constraints": [
+        "CA:TRUE",
+        "pathlen:0"
+    ],
+    "basic_constraints_critical": true,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBR/f4NIXG7gZPH98TKnATZAet+xuA=="
+        },
+        "2.5.29.15": {
+            "critical": false,
+            "value": "AwIBhg=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MDeCNUV4YW1wbGUgQ29ycCBPcGVuc3RhY2sgSW5mcmFzdHJ1Y3R1cmUgSW50ZXJtZWRpYXRlIENB"
+        },
+        "2.5.29.19": {
+            "critical": true,
+            "value": "MAYBAf8CAQA="
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFNVqBM3kHVrDZ1QRCnHltCfMu3sE"
+        }
+    },
+    "fingerprints": {
+        "sha256": "8f:68:5b:10:ed:51:8e:75:d6:a9:1e:b6:61:4e:30:02:cd:f3:76:5d:dc:3c:9c:0a:ce:48:c6:cf:4e:3e:e8:4d"
+    },
+    "issuer": {
+        "commonName": "Example Corp Root CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Root CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": [
+        "CRL Sign",
+        "Certificate Sign",
+        "Digital Signature"
+    ],
+    "key_usage_critical": false,
+    "not_after": "20351206134039Z",
+    "not_before": "20251208134039Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\n0xGZswhDlei6lbW5ogcNulkCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 581123779090919470211925624466439555785701510052419923297375412278376184884598439329443321219729733040212473344637229127485537433053563018629836089466162069225692907356143956537833539431321860923798838943142093525838332266407432628674108425433991766660093726620197399779636752385192991924369449395923065829461093671768448850582698624845757624700762116669923508836526619330825651310174315396007299730586047772518388995308636266791153539796288095096807642186522967256686204310753594186109746525866887018062091281970655234281979457263760110206753927557037169001008345965264162197386412293978335911586439579081082693058049312978428756923988941731748677388661150673943662042412649982999592069250312210065678178532002894533150427347379945147469243677081424160094638315397216328869533810161146098590070436280699649594012917542869138479826260050844445441675166397865488168060489696431243891186633096531192064905831055520469076426840784407774616504911151501352663463798984251095229470159452076788373894520733145302528863220725792155630795877427836183547832223757819336400900369811770561470472374853000894658389991192369041148726646048058953440139207299213200780577852758672533413530768603949870222686351532015457891408167755245076197531302489,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "d7:83:58:64:7c:a7:c1:ae:2a:30:ba:62:73:9d:14:53:35:c0:9a:4f:d5:f4:8a:b7:4c:28:de:72:55:fe:0b:b4"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 664392016516796431898274883109724661310020971284,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "subject_alt_name": [
+        "DNS:Example Corp Openstack Infrastructure Intermediate CA"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "7f:7f:83:48:5c:6e:e0:64:f1:fd:f1:32:a7:01:36:40:7a:df:b1:b8",
+    "subject_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate-1000.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": true,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/csr/ca_csr-1000.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpRoot/certs/ExampleCorpRoot.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpRoot/private/ExampleCorpRoot.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate-1000.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351206134039Z
notBefore 
20251208134039Z
privatekey None
serial_number 
664392016516796431898274883109724661310020971284