Execution
Date
08 Dec 2025 13:57:07 +0000
Duration
00:24:46.17
Controller
aio1.openstack.local
User
root
Versions
Ansible
2.18.6
ara
1.7.4 / 1.7.4
Python
3.12.11
Summary
12
Hosts
1505
Tasks
1497
Results
32
Plays
487
Files
0
Records
Task result details
-
StatusCHANGED
-
Duration00:00:00.79
-
PlayInstall nova control-plane services
-
Taskpki : Create the CSR for nova_aio1-nova-api-container-6428bad1-client
-
Date08 Dec 2025 14:14:22 +0000
-
Module / Actioncommunity.crypto.openssl_csr (/home/zuul/src/opendev.org/openstack/ansible-role-pki/tasks/standalone/sign_cert.yml:35)
-
Tags
- pki
- nova-config
| Field | Value |
|---|---|
| basicConstraints | None |
| changed |
True |
| diff |
--- before +++ after @@ -1 +1,64 @@ -{} +{ + "authority_cert_issuer": null, + "authority_cert_serial_number": null, + "authority_key_identifier": null, + "basic_constraints": null, + "basic_constraints_critical": false, + "can_parse_csr": true, + "extended_key_usage": [ + "TLS Web Client Authentication" + ], + "extended_key_usage_critical": false, + "extensions_by_oid": { + "2.5.29.15": { + "critical": false, + "value": "AwIDqA==" + }, + "2.5.29.17": { + "critical": false, + "value": "MEqCIGFpbzEtbm92YS1hcGktY29udGFpbmVyLTY0MjhiYWQxgiBhaW8xLW5vdmEtYXBpLWNvbnRhaW5lci02NDI4YmFkMYcErB3szw==" + }, + "2.5.29.37": { + "critical": false, + "value": "MAoGCCsGAQUFBwMC" + } + }, + "key_usage": [ + "Digital Signature", + "Key Agreement", + "Key Encipherment" + ], + "key_usage_critical": false, + "name_constraints_critical": false, + "name_constraints_excluded": null, + "name_constraints_permitted": null, + "ocsp_must_staple": null, + "ocsp_must_staple_critical": false, + "public_key": "-----BEGIN PUBLIC KEY-----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\ndmRKh8nlgfnmGp6bfX08Y8MCAwEAAQ==\n-----END PUBLIC KEY-----\n", + "public_key_data": { + "exponent": 65537, + "modulus": 605991416379852347538047390937314882131003014531239051600855807617837489223789018053911800022367709484688523734432928215258458896620894749485720932173327531942674771255641210126788813434568205983261825110543565060482964127125674994626178827112264417187495536616818104109828633612213106476685676406447243970054998372803455072010854135889902588560876773239492344991796262473475049341875929474530065885156522783526612117489308935923427177450210001616093922547654458921575801506582202435229600722417643701525754584204223890510507802856055826629881856884121101888295321202421275157824023781848669076810763976038280712517747634001259675617861349014659958159681061874817696112376589110458210814993090196925930495146700808215515607475588308920092548804833907244690946783520155397695374303109214817753919390793077593353255904477665508002559025066178259836881005281091094390898559314587700236773442087502588396907873896916237640527188639132156736539289543742634511162171072990143525071715194472965667805793193381414748351052898701679915385558689045309513604313144017845699014814907451131147029397173000381149487061328455053468371666993830876468135926035468918570309437733071579041134931465192959890939383864762184921486962651565431774213071811, + "size": 4096 + }, + "public_key_fingerprints": { + "sha256": "8a:47:c3:f0:21:af:e5:81:98:84:96:d9:f4:5f:42:a5:23:78:c5:75:57:b1:45:87:53:0b:53:27:78:4a:9f:68" + }, + "public_key_type": "RSA", + "signature_valid": true, + "subject": { + "commonName": "aio1-nova-api-container-6428bad1" + }, + "subject_alt_name": [ + "DNS:aio1-nova-api-container-6428bad1", + "DNS:aio1-nova-api-container-6428bad1", + "IP:172.29.236.207" + ], + "subject_alt_name_critical": false, + "subject_key_identifier": null, + "subject_ordered": [ + [ + "commonName", + "aio1-nova-api-container-6428bad1" + ] + ] +} |
| extendedKeyUsage |
[ "clientAuth" ] |
| filename |
/etc/openstack_deploy/pki/certs/csr/nova_aio1-nova-api-container-6428bad1-client.csr |
| invocation |
{ "module_args": { "attributes": null, "authority_cert_issuer": null, "authority_cert_serial_number": null, "authority_key_identifier": null, "backup": false, "basic_constraints": null, "basic_constraints_critical": true, "common_name": "aio1-nova-api-container-6428bad1", "country_name": null, "create_subject_key_identifier": false, "crl_distribution_points": null, "digest": "sha256", "email_address": null, "extended_key_usage": [ "clientAuth" ], "extended_key_usage_critical": false, "force": false, "group": null, "key_usage": [ "digitalSignature", "keyAgreement", "keyEncipherment" ], "key_usage_critical": false, "locality_name": null, "mode": null, "name_constraints_critical": false, "name_constraints_excluded": null, "name_constraints_permitted": null, "ocsp_must_staple": false, "ocsp_must_staple_critical": false, "organization_name": null, "organizational_unit_name": null, "owner": null, "path": "/etc/openstack_deploy/pki/certs/csr/nova_aio1-nova-api-container-6428bad1-client.csr", "privatekey_content": null, "privatekey_passphrase": null, "privatekey_path": "/etc/openstack_deploy/pki/certs/private/nova_aio1-nova-api-container-6428bad1-client.key.pem", "return_content": false, "select_crypto_backend": "auto", "selevel": null, "serole": null, "setype": null, "seuser": null, "state": "present", "state_or_province_name": null, "subject": null, "subject_alt_name": [ "DNS:aio1-nova-api-container-6428bad1", "DNS:aio1-nova-api-container-6428bad1", "IP:172.29.236.207" ], "subject_alt_name_critical": false, "subject_key_identifier": null, "subject_ordered": null, "unsafe_writes": false, "use_common_name_for_san": true, "version": 1 } } |
| keyUsage |
[ "digitalSignature", "keyAgreement", "keyEncipherment" ] |
| name_constraints_excluded |
[]
|
| name_constraints_permitted |
[]
|
| ocspMustStaple |
False |
| privatekey |
/etc/openstack_deploy/pki/certs/private/nova_aio1-nova-api-container-6428bad1-client.key.pem |
| subject |
[ [ "CN", "aio1-nova-api-container-6428bad1" ] ] |
| subjectAltName |
[ "DNS:aio1-nova-api-container-6428bad1", "DNS:aio1-nova-api-container-6428bad1", "IP:172.29.236.207" ] |