Execution
Date
08 Dec 2025 13:57:07 +0000
Duration
00:24:46.17
Controller
aio1.openstack.local
User
root
Versions
Ansible
2.18.6
ara
1.7.4 / 1.7.4
Python
3.12.11
Summary
12
Hosts
1505
Tasks
1497
Results
32
Plays
487
Files
0
Records
Task result details
-
StatusCHANGED
-
Duration00:00:00.87
-
PlayInstall nova control-plane services
-
Taskpki : Sign the certificate CSR for nova_aio1-nova-api-container-6428bad1-client
-
Date08 Dec 2025 14:14:23 +0000
-
Module / Actioncommunity.crypto.x509_certificate (/home/zuul/src/opendev.org/openstack/ansible-role-pki/tasks/standalone/sign_cert.yml:64)
-
Tags
- pki
- nova-config
| Field | Value |
|---|---|
| ca_cert |
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt |
| ca_privatekey |
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem |
| changed |
True |
| csr |
/etc/openstack_deploy/pki/certs/csr/nova_aio1-nova-api-container-6428bad1-client.csr |
| diff |
--- before +++ after @@ -1 +1,98 @@ -{} +{ + "authority_cert_issuer": null, + "authority_cert_serial_number": null, + "authority_key_identifier": "7f:7f:83:48:5c:6e:e0:64:f1:fd:f1:32:a7:01:36:40:7a:df:b1:b8", + "basic_constraints": null, + "basic_constraints_critical": false, + "can_parse_certificate": true, + "expired": false, + "extended_key_usage": [ + "TLS Web Client Authentication" + ], + "extended_key_usage_critical": false, + "extensions_by_oid": { + "2.5.29.14": { + "critical": false, + "value": "BBSvsDZUMV6muaw2OgagtquBNKYXHw==" + }, + "2.5.29.15": { + "critical": false, + "value": "AwIDqA==" + }, + "2.5.29.17": { + "critical": false, + "value": "MEqCIGFpbzEtbm92YS1hcGktY29udGFpbmVyLTY0MjhiYWQxgiBhaW8xLW5vdmEtYXBpLWNvbnRhaW5lci02NDI4YmFkMYcErB3szw==" + }, + "2.5.29.35": { + "critical": false, + "value": "MBaAFH9/g0hcbuBk8f3xMqcBNkB637G4" + }, + "2.5.29.37": { + "critical": false, + "value": "MAoGCCsGAQUFBwMC" + } + }, + "fingerprints": { + "sha256": "41:32:64:ce:b4:dc:c4:cb:de:59:1b:0d:1a:de:dd:b4:67:62:53:7d:6c:b3:cb:29:4f:f3:a7:96:10:5a:30:38" + }, + "issuer": { + "commonName": "Example Corp Openstack Infrastructure Intermediate CA", + "countryName": "GB", + "stateOrProvinceName": "England" + }, + "issuer_ordered": [ + [ + "countryName", + "GB" + ], + [ + "stateOrProvinceName", + "England" + ], + [ + "commonName", + "Example Corp Openstack Infrastructure Intermediate CA" + ] + ], + "issuer_uri": null, + "key_usage": [ + "Digital Signature", + "Key Agreement", + "Key Encipherment" + ], + "key_usage_critical": false, + "not_after": "20351206141423Z", + "not_before": "20251208141423Z", + "ocsp_must_staple": null, + "ocsp_must_staple_critical": false, + "ocsp_uri": null, + "public_key": "-----BEGIN PUBLIC KEY-----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\ndmRKh8nlgfnmGp6bfX08Y8MCAwEAAQ==\n-----END PUBLIC KEY-----\n", + "public_key_data": { + "exponent": 65537, + "modulus": 605991416379852347538047390937314882131003014531239051600855807617837489223789018053911800022367709484688523734432928215258458896620894749485720932173327531942674771255641210126788813434568205983261825110543565060482964127125674994626178827112264417187495536616818104109828633612213106476685676406447243970054998372803455072010854135889902588560876773239492344991796262473475049341875929474530065885156522783526612117489308935923427177450210001616093922547654458921575801506582202435229600722417643701525754584204223890510507802856055826629881856884121101888295321202421275157824023781848669076810763976038280712517747634001259675617861349014659958159681061874817696112376589110458210814993090196925930495146700808215515607475588308920092548804833907244690946783520155397695374303109214817753919390793077593353255904477665508002559025066178259836881005281091094390898559314587700236773442087502588396907873896916237640527188639132156736539289543742634511162171072990143525071715194472965667805793193381414748351052898701679915385558689045309513604313144017845699014814907451131147029397173000381149487061328455053468371666993830876468135926035468918570309437733071579041134931465192959890939383864762184921486962651565431774213071811, + "size": 4096 + }, + "public_key_fingerprints": { + "sha256": "8a:47:c3:f0:21:af:e5:81:98:84:96:d9:f4:5f:42:a5:23:78:c5:75:57:b1:45:87:53:0b:53:27:78:4a:9f:68" + }, + "public_key_type": "RSA", + "serial_number": 445699280433160606364987060133261337370832391224, + "signature_algorithm": "sha256WithRSAEncryption", + "subject": { + "commonName": "aio1-nova-api-container-6428bad1" + }, + "subject_alt_name": [ + "DNS:aio1-nova-api-container-6428bad1", + "DNS:aio1-nova-api-container-6428bad1", + "IP:172.29.236.207" + ], + "subject_alt_name_critical": false, + "subject_key_identifier": "af:b0:36:54:31:5e:a6:b9:ac:36:3a:06:a0:b6:ab:81:34:a6:17:1f", + "subject_ordered": [ + [ + "commonName", + "aio1-nova-api-container-6428bad1" + ] + ], + "version": 3 +} |
| filename |
/etc/openstack_deploy/pki/certs/certs/nova_aio1-nova-api-container-6428bad1-client.crt |
| invocation |
{ "module_args": { "acme_accountkey_path": null, "acme_chain": false, "acme_challenge_path": null, "acme_directory": "https://acme-v02.api.letsencrypt.org/directory", "attributes": null, "backup": false, "csr_content": null, "csr_path": "/etc/openstack_deploy/pki/certs/csr/nova_aio1-nova-api-container-6428bad1-client.csr", "entrust_api_client_cert_key_path": null, "entrust_api_client_cert_path": null, "entrust_api_key": null, "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml", "entrust_api_user": null, "entrust_cert_type": "STANDARD_SSL", "entrust_not_after": "+365d", "entrust_requester_email": null, "entrust_requester_name": null, "entrust_requester_phone": null, "force": false, "group": null, "ignore_timestamps": true, "mode": null, "ownca_content": null, "ownca_create_authority_key_identifier": true, "ownca_create_subject_key_identifier": "create_if_not_provided", "ownca_digest": "sha256", "ownca_not_after": "+3650d", "ownca_not_before": "+0s", "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt", "ownca_privatekey_content": null, "ownca_privatekey_passphrase": null, "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem", "ownca_version": 3, "owner": null, "path": "/etc/openstack_deploy/pki/certs/certs/nova_aio1-nova-api-container-6428bad1-client.crt", "privatekey_content": null, "privatekey_passphrase": null, "privatekey_path": null, "provider": "ownca", "return_content": false, "select_crypto_backend": "auto", "selevel": null, "selfsigned_create_subject_key_identifier": "create_if_not_provided", "selfsigned_digest": "sha256", "selfsigned_not_after": "+3650d", "selfsigned_not_before": "+0s", "selfsigned_version": 3, "serole": null, "setype": null, "seuser": null, "state": "present", "unsafe_writes": false } } |
| notAfter |
20351206141423Z |
| notBefore |
20251208141423Z |
| privatekey | None |
| serial_number |
445699280433160606364987060133261337370832391224 |