Playbook #2
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml
Execution
Date 15 Dec 2025 09:38:00 +0000
Duration 00:17:22.68
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.3
Summary
18 Hosts
603 Tasks
2798 Results
18 Plays
138 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:02.12
  • Play
    Create CA certificates
  • Task
    pki : Sign the selfsigned Root CA CSR for ExampleCorpRoot
  • Host
    localhost ( task delegated to localhost )

Field Value
changed 
True
csr 
/etc/openstack_deploy/pki/roots/ExampleCorpRoot/csr/ca_csr-1000.csr
diff 
--- before

+++ after

@@ -1 +1,102 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": null,
+    "basic_constraints": [
+        "CA:TRUE"
+    ],
+    "basic_constraints_critical": true,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBSVN6sJQDGxDWQS/qanUT3CQCg5WA=="
+        },
+        "2.5.29.15": {
+            "critical": false,
+            "value": "AwIBhg=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MBaCFEV4YW1wbGUgQ29ycCBSb290IENB"
+        },
+        "2.5.29.19": {
+            "critical": true,
+            "value": "MAMBAf8="
+        }
+    },
+    "fingerprints": {
+        "sha256": "ab:af:aa:06:03:36:00:17:36:95:1f:0a:29:80:d6:73:45:ba:ea:91:16:6c:c5:7e:8c:23:05:56:50:77:a5:dc"
+    },
+    "issuer": {
+        "commonName": "Example Corp Root CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Root CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": [
+        "CRL Sign",
+        "Certificate Sign",
+        "Digital Signature"
+    ],
+    "key_usage_critical": false,
+    "not_after": "20351213093823Z",
+    "not_before": "20251215093823Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----\nMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8jdm3piMsmOnGmSQr1Yq\n0UWgUHR5qBjtbvbiWYFI9VPmcXb0lLzpEjHip6JbRnWSwj+FXPW/sRYb+Yhbryro\nrLE0ToX3VQW87PTaYyhkUaeHJb+blHPKckIKIuLuPSOJ1G8kmiOWqI/dePMZ3Fxi\nDSqE5pwjTQgLz2wZSqAzDrn7u+S6yuJOGeeM7xkZqCGxRE0EKK6OI5beZ2ayEUke\nzmqfFjz5X+Z5p4VnTKUPK4re0rmTBQTXbjLA0KtliizzInCWX7OofxhjVDoLcr3l\n8aqESHNlQVxvHwBtP/Tbqeotw2rsF7VB5ENETTQkuZYghDXAteHACKVoTfly1dXN\n7X8/hWGerOxBe5B1ZWn1Da6fhmseO2S8xYS171ytkNmx8d7GsyY9Z7DRuYcTwxJg\naz8D4kSGr3c4xE3U+sPllwzf3d819Vf+KkSuBRoHWVygLYPiG0Noi3h622PvRQOC\nairF6fctmYalT71L6GI5aGb6YsCCjERTeBIuHO2FqH41q5dfbYu1oFOMdn/L3PF6\n1yRfjfdO24IOWOrK0NhYIn6hUAfCJxELyI4mImO+ONLysAlP5q30qi03eamUyFhE\ng+b9QVxY85l26S1czli/bMY4Leer0ax9iNRNssTN6qXwATOSgVarFbh3TvjdLboM\nf7DSJuvY/E8whhWB6mJezuUCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 988156754162489372553334239501495963967961006181361207532302157332791085383807771423259007261747710961757032186698589664726690685003042879871436526615781127776225287185503975892253142415323074817389609483075415066991022089948737994967191524224323501115439325613796368341688780005991424196036767181623389075122278817077220919620145877839979625532752729857172929130877303529751025467955144250818444783354836880385944507027598426064446867401857054076563610775791880576623221786028085131092678754375985159240230985783167796677504372591585691219913316736799522253489637617240089202966231371429095827506058225396752676279010070136292778836891667325421522471929134549439124370922701619604528963207449683710362566622652679857388979538706348236337071790185815533115809404735847474905787205099786561184385577528902034998719069588210472825656851405756492011835637652959110498526627063392124540746758420061698355091524419367964840460571473920385226198099519251446390377425088889923680186878994142510385998535150128873808862334235653330604748803203757362369946313397089609443783272018695498337912448737920261297058146763236569451186150419144280571561988459865121862685369167898206866333793595851573367688393017278324630655550303314564109540708069,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "9d:db:39:f7:07:29:37:ab:e7:46:5c:bd:ee:6d:29:06:e9:8b:75:56:c5:67:f9:56:02:22:27:f4:35:0a:af:fb"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 505286468121684727302549880370293425343534927248,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "Example Corp Root CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "subject_alt_name": [
+        "DNS:Example Corp Root CA"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "95:37:ab:09:40:31:b1:0d:64:12:fe:a6:a7:51:3d:c2:40:28:39:58",
+    "subject_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Root CA"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/roots/ExampleCorpRoot/certs/ExampleCorpRoot-1000.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": true,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/roots/ExampleCorpRoot/csr/ca_csr-1000.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": null,
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": null,
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/roots/ExampleCorpRoot/certs/ExampleCorpRoot-1000.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpRoot/private/ExampleCorpRoot.key.pem",
        "provider": "selfsigned",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351213093823Z
notBefore 
20251215093823Z
privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpRoot/private/ExampleCorpRoot.key.pem
serial_number 
505286468121684727302549880370293425343534927248