Playbook #3
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml
Execution
Date 15 Dec 2025 09:55:36 +0000
Duration 00:21:13.46
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.3
Summary
15 Hosts
924 Tasks
1203 Results
46 Plays
212 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:02.22
  • Play
    HAProxy base config
  • Task
    pki : Sign the certificate CSR for haproxy_aio1-23.253.164.124
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-23.253.164.124.csr
diff 
--- before

+++ after

@@ -1 +1,84 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "39:86:53:2d:86:fc:29:3d:8d:dc:75:0f:63:78:f6:3f:92:f3:e3:33",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBT64X9nDwDPAcPaE1nG4q3x+hA+6A=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MCKCBGFpbzGCFGFpbzEub3BlbnN0YWNrLmxvY2FshwQX/aR8"
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFDmGUy2G/Ck9jdx1D2N49j+S8+Mz"
+        }
+    },
+    "fingerprints": {
+        "sha256": "00:75:e3:c4:99:3b:05:22:6b:66:a3:86:09:fa:69:62:e2:26:ba:9c:d5:de:96:b0:d0:2e:a8:c1:de:a8:10:54"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": null,
+    "key_usage_critical": false,
+    "not_after": "20351213095620Z",
+    "not_before": "20251215095620Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\nsm6afm+ofudEs6hvJEFEGCkCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 876584301020856581864935898732438877061265787832276942100300987969944875552342753687449366664098166841465270735657209726774245298426983547110947948645269618602671196857826142345077107571771325283492822665440536072967219818378199181855694565741316565124753448605513818508087026937894675646986752734691024164856635410881983831118920542621696933534767214931273601768498211759714875448102766188398168509991195722963010871393349719022155949101496228480276067055551377149830373343575024635515613172581574933114232863323437046272637499280074933266334801479185714646384295031401210954885625770061028191063729690831396089381332444542796199627753114379676788653825473508256460457547601397234333888888895459202753056360490626984526714516587379238325493142943127899663850093453632020788493742980520275854891125931173780091372503250041611392400841500807264072493233452113358450704415011717059225721334346699584366164490910541764258962542023373800377131458096441325289685892025460652714874475991761506510954996405853516200612938957154454226756863967266004169470692587308889001796936738644941241636289098475725977043506795261294071127764568328392814186744924491064222340190577563125078914155813892606179030171276869421457825434592457071151894763561,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "d9:f0:68:e6:d4:b2:99:a1:f3:e9:27:c7:ad:cc:fe:c0:cb:35:de:0c:a6:4d:d1:ca:10:61:ad:17:72:81:23:52"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 72509544391840937690051470042782547205232537985,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1.openstack.local",
+        "IP:23.253.164.124"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "fa:e1:7f:67:0f:00:cf:01:c3:da:13:59:c6:e2:ad:f1:fa:10:3e:e8",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-23.253.164.124.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-23.253.164.124.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-23.253.164.124.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351213095620Z
notBefore 
20251215095620Z
privatekey None
serial_number 
72509544391840937690051470042782547205232537985