Playbook #3
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml
Execution
Date 15 Dec 2025 09:55:36 +0000
Duration 00:21:13.46
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.3
Summary
15 Hosts
924 Tasks
1203 Results
46 Plays
212 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:01.89
  • Play
    HAProxy base config
  • Task
    pki : Sign the certificate CSR for haproxy_aio1-172.29.236.101
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-172.29.236.101.csr
diff 
--- before

+++ after

@@ -1 +1,84 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "39:86:53:2d:86:fc:29:3d:8d:dc:75:0f:63:78:f6:3f:92:f3:e3:33",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBRDtGVYMBl+QCoMojBqkfOWDS7JWQ=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MCKCBGFpbzGCFGFpbzEub3BlbnN0YWNrLmxvY2FshwSsHexl"
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFDmGUy2G/Ck9jdx1D2N49j+S8+Mz"
+        }
+    },
+    "fingerprints": {
+        "sha256": "2e:5b:c9:83:a7:ac:bd:03:c5:72:21:f5:b8:ad:4b:e7:32:b5:52:7c:b1:23:b7:21:e9:9d:23:d3:b7:b8:d7:62"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": null,
+    "key_usage_critical": false,
+    "not_after": "20351213095632Z",
+    "not_before": "20251215095632Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\ngUj5hrwVrXVbw4DXEZskwGkCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 762010818378016807648186187685992647260133947585490004646167537785472768722445893672408988516855105928150840026601845897545095835765819012714548693764645680209826152792394021212421037571787806988302124024275949299034637785143199558175911650710840067298183424072515864909605460107929434263073979604563538248477791299324791561569870883504843508450927718973053888350859028463064370907214554728277195576062552282834392859091877247284189198772146773020069721572835113457616326291602697227603414386935496449452455166372896545467931470599537765333772648932657476583022180262417896635976538018000836070910478303634611994226288475511029890277810871961593452818714408124874833989060497235402025496757937867188625988040937063007030414931066493619318256608026658568304697432448476987342758457272504526104233281950986785259466250009136021058649061275179970108527563027695700949227593391714860943998559141862804910436037432204029972585570771545980338990092648735376879593391218235117625232287405924837456737833237775761720689923985048349182219908710358003907222315459720492158994163378286359354760959004184521161235766925212663344019798962438040736605622689573603068756118382893032477762444539639696913540551179695641180775955792930827338992894057,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "d8:0d:2c:bf:3d:78:59:94:20:7c:45:a6:08:0c:0d:4e:7d:f3:9b:ae:50:ae:89:8b:4d:af:4c:41:57:1f:b1:3f"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 30144523320747084580374392260792713851348083268,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1.openstack.local",
+        "IP:172.29.236.101"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "43:b4:65:58:30:19:7e:40:2a:0c:a2:30:6a:91:f3:96:0d:2e:c9:59",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-172.29.236.101.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-172.29.236.101.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-172.29.236.101.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351213095632Z
notBefore 
20251215095632Z
privatekey None
serial_number 
30144523320747084580374392260792713851348083268