Playbook #3
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml
Execution
Date 08 Dec 2025 13:50:33 +0000
Duration 00:06:27.80
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.11
Summary
7 Hosts
589 Tasks
576 Results
37 Plays
222 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:00.89
  • Play
    HAProxy base config
  • Task
    pki : Sign the certificate CSR for haproxy_aio1-10.0.19.170
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-10.0.19.170.csr
diff 
--- before

+++ after

@@ -1 +1,84 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "7f:7f:83:48:5c:6e:e0:64:f1:fd:f1:32:a7:01:36:40:7a:df:b1:b8",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBQw5pvnuJIwk6hkCp9FobDOmlDitw=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MCKCBGFpbzGCFGFpbzEub3BlbnN0YWNrLmxvY2FshwQKABOq"
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFH9/g0hcbuBk8f3xMqcBNkB637G4"
+        }
+    },
+    "fingerprints": {
+        "sha256": "82:dc:a4:e5:c6:ae:52:8f:33:5d:ce:04:aa:b1:c6:ca:64:dd:3b:28:5c:d3:b0:99:15:0f:07:44:30:eb:43:43"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": null,
+    "key_usage_critical": false,
+    "not_after": "20351206135100Z",
+    "not_before": "20251208135100Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\nf9zQR5jFz0gOJu4njakov8MCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 770428290818883071991438799615130625342282252793078904873208483501442553989637039181762930911152642100460514653049330842141687349721751703316219343438166673910450387461797318493974275285614020778976883217355907626593033074109299660965206654785917553271436296514916871176836280920831289351245462078337577232383308516395271516746033728899391934073422704633463702129246240761134787924975214858204988337614037651795182380412699236650562503621418636482138145554066993427541037530318206177441002380800261935263701420929945387001591161421628163200887236758133208031495704831897384944029391448084647173557236282558928686381889596046770532102642748525134510173773709298164317504390188508881386452171302286498388649917687847216640435238006226513543059351965997440216584051969571013700949089300496920031446574854924363876480816869812135422585855152408817723398901854092260432995190964680855350042783893973155906248049367082494570543908196450668264423494539770756168500812596888175072403573467287804840718100688083339721895462952834778136024637794244479871794515627921366909028935469438736491658984365058697103454109576723199092385177554500628950454667204523980457114958122546506844536352097776241323287109076445408427332256541121499653493800899,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "f8:ba:b9:e3:5b:ab:f5:58:6f:a8:83:55:41:b5:6d:74:9c:f7:0c:7d:eb:85:e6:fb:94:f2:97:b9:1f:69:ee:7a"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 524659623140328619255056702551199405782733466479,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1.openstack.local",
+        "IP:10.0.19.170"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "30:e6:9b:e7:b8:92:30:93:a8:64:0a:9f:45:a1:b0:ce:9a:50:e2:b7",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-10.0.19.170.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-10.0.19.170.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-10.0.19.170.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351206135100Z
notBefore 
20251208135100Z
privatekey None
serial_number 
524659623140328619255056702551199405782733466479