Playbook #3
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml
Execution
Date 08 Dec 2025 13:50:33 +0000
Duration 00:06:27.80
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.11
Summary
7 Hosts
589 Tasks
576 Results
37 Plays
222 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:00.79
  • Play
    HAProxy base config
  • Task
    pki : Sign the certificate CSR for haproxy_aio1-172.29.236.101
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-172.29.236.101.csr
diff 
--- before

+++ after

@@ -1 +1,84 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "7f:7f:83:48:5c:6e:e0:64:f1:fd:f1:32:a7:01:36:40:7a:df:b1:b8",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBSM0nCVk72FJBdxx3lKbeuAW8HbEw=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MCKCBGFpbzGCFGFpbzEub3BlbnN0YWNrLmxvY2FshwSsHexl"
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFH9/g0hcbuBk8f3xMqcBNkB637G4"
+        }
+    },
+    "fingerprints": {
+        "sha256": "4f:b2:f3:5c:f8:22:bc:7f:51:b4:ac:8f:0e:98:63:0c:1e:40:30:f8:80:96:5b:9c:46:66:51:30:97:37:49:31"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": null,
+    "key_usage_critical": false,
+    "not_after": "20351206135105Z",
+    "not_before": "20251208135105Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\n8T+6Je01ainD7CHOd2/9g2UCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 940293668668031503606078272983035715036058124691903601707320745118225123340437808250291817150124427423194473992068776524258225488417581607338739573636131750101617300180571129130748233308710605636384393616317415195155498777463818063174059823304725015296995408331982024773389750246852612803871869544342607900229842365630311549115885182782848449968616278976273941972779010705633777739995800016842076690648088565095923779202736845203653495986477132103823713526805559867150495455743758528103341847483840080965520912821004071453966160873049659165466438225118420539663260998768916652034212352412001243572695946020689793960027913523496404059232638657640119465131026535645185382034604170551934660978192089180477424797943984376212686424659689879696799322082324911568878173473844489539898881176810418933111265169995604548605552923239130797820231463613200072797319019559870855101890835258735708450146836880898104578529817919110140895467282289028719439505797616889106765216452296745242246758193437754124340737450767679150001255451042961045482044314366367895563679607730680237969287902647679728337068531673042702136075900252307413813901701444363528905592478679384074665897852956235374710438722632716651349518768226266610450355281808114454819079013,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "ec:0d:22:de:87:81:01:f1:36:25:c3:c4:d4:ec:6a:70:cb:e4:23:23:98:17:02:4b:c0:27:97:95:d7:de:c6:97"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 450070637280965978150238522078916689455393797805,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1.openstack.local",
+        "IP:172.29.236.101"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "8c:d2:70:95:93:bd:85:24:17:71:c7:79:4a:6d:eb:80:5b:c1:db:13",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-172.29.236.101.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-172.29.236.101.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-172.29.236.101.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351206135105Z
notBefore 
20251208135105Z
privatekey None
serial_number 
450070637280965978150238522078916689455393797805