Execution
Date
15 Dec 2025 09:55:36 +0000
Duration
00:21:13.46
Controller
aio1.openstack.local
User
root
Versions
Ansible
2.18.6
ara
1.7.4 / 1.7.4
Python
3.12.3
Summary
15
Hosts
924
Tasks
1203
Results
46
Plays
212
Files
0
Records
Task result details
-
StatusCHANGED
-
Duration00:00:01.96
-
PlayInstall galera server
-
Taskpki : Sign the certificate CSR for galera_aio1-galera-container-cca271a2
-
Date15 Dec 2025 10:04:24 +0000
-
Module / Actioncommunity.crypto.x509_certificate (/home/zuul/src/opendev.org/openstack/ansible-role-pki/tasks/standalone/sign_cert.yml:64)
-
Tags
- galera_server-config
- galera-server
- galera
| Field | Value |
|---|---|
| ca_cert |
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt |
| ca_privatekey |
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem |
| changed |
True |
| csr |
/etc/openstack_deploy/pki/certs/csr/galera_aio1-galera-container-cca271a2.csr |
| diff |
--- before +++ after @@ -1 +1,84 @@ -{} +{ + "authority_cert_issuer": null, + "authority_cert_serial_number": null, + "authority_key_identifier": "39:86:53:2d:86:fc:29:3d:8d:dc:75:0f:63:78:f6:3f:92:f3:e3:33", + "basic_constraints": null, + "basic_constraints_critical": false, + "can_parse_certificate": true, + "expired": false, + "extended_key_usage": null, + "extended_key_usage_critical": false, + "extensions_by_oid": { + "2.5.29.14": { + "critical": false, + "value": "BBRzB6xhKBwZrSmVgSeAa4LBEazGng==" + }, + "2.5.29.17": { + "critical": false, + "value": "MCyCHmFpbzEtZ2FsZXJhLWNvbnRhaW5lci1jY2EyNzFhMocErB3sZYcErB3uEA==" + }, + "2.5.29.35": { + "critical": false, + "value": "MBaAFDmGUy2G/Ck9jdx1D2N49j+S8+Mz" + } + }, + "fingerprints": { + "sha256": "1c:77:55:51:ff:fb:62:10:43:d9:0c:84:2f:78:66:6e:69:60:c2:50:a9:68:0c:86:71:d3:ac:22:01:7c:30:fe" + }, + "issuer": { + "commonName": "Example Corp Openstack Infrastructure Intermediate CA", + "countryName": "GB", + "stateOrProvinceName": "England" + }, + "issuer_ordered": [ + [ + "countryName", + "GB" + ], + [ + "stateOrProvinceName", + "England" + ], + [ + "commonName", + "Example Corp Openstack Infrastructure Intermediate CA" + ] + ], + "issuer_uri": null, + "key_usage": null, + "key_usage_critical": false, + "not_after": "20351213100423Z", + "not_before": "20251215100423Z", + "ocsp_must_staple": null, + "ocsp_must_staple_critical": false, + "ocsp_uri": null, + "public_key": "-----BEGIN PUBLIC KEY-----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\nr3MxvgZ1Fvrp0JGTvWGNL88CAwEAAQ==\n-----END PUBLIC KEY-----\n", + "public_key_data": { + "exponent": 65537, + "modulus": 630496947650050020587188392997377024621812860367299254499826816997033840297719419833843081511616722729903442905596321412977371961047683528488281821867952553482190302855693570796413273210313243719243414365584911091945582016979204659904661134663751918195782140270510853477970572118203535228154521834401946343905001413456977060405520748330076689077882447619065844083878026158686777775542604121177371601089669173068825278708458252318475544723750601788168936084976909482246068125937893315415249184095303761124917134284730681215071840526588486297801768730329212096564188515190393312135489997569713871209578695597021760078232868480209846762883236494673054592729922094097579637624898334502861855312200621744179403679062952457752109468738767372207572350712704710584732158947190232778504796884613690023761863097331949090428143638047521325822321376145608055494420415630234064665174064719011298015275056557887325251693555315480879409226262057550096311384850790901950800158814148945881340766065593014693983468607785838569841872498000338939110881456629896424859874466130902565248308656992241139287633152665035786412075676338216073103257719205021775938859736477364632412912698247095679312248209856806250125878200353490611295560247916911012170510287, + "size": 4096 + }, + "public_key_fingerprints": { + "sha256": "09:d3:37:42:09:8b:9a:4c:de:5b:66:02:a7:b0:30:e8:1e:02:f5:ac:69:ce:aa:62:46:5e:de:d9:b4:9d:a1:b4" + }, + "public_key_type": "RSA", + "serial_number": 544524338400485912865941373247266370637586585012, + "signature_algorithm": "sha256WithRSAEncryption", + "subject": { + "commonName": "aio1-galera-container-cca271a2" + }, + "subject_alt_name": [ + "DNS:aio1-galera-container-cca271a2", + "IP:172.29.236.101", + "IP:172.29.238.16" + ], + "subject_alt_name_critical": false, + "subject_key_identifier": "73:07:ac:61:28:1c:19:ad:29:95:81:27:80:6b:82:c1:11:ac:c6:9e", + "subject_ordered": [ + [ + "commonName", + "aio1-galera-container-cca271a2" + ] + ], + "version": 3 +} |
| filename |
/etc/openstack_deploy/pki/certs/certs/galera_aio1-galera-container-cca271a2.crt |
| invocation |
{ "module_args": { "acme_accountkey_path": null, "acme_chain": false, "acme_challenge_path": null, "acme_directory": "https://acme-v02.api.letsencrypt.org/directory", "attributes": null, "backup": false, "csr_content": null, "csr_path": "/etc/openstack_deploy/pki/certs/csr/galera_aio1-galera-container-cca271a2.csr", "entrust_api_client_cert_key_path": null, "entrust_api_client_cert_path": null, "entrust_api_key": null, "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml", "entrust_api_user": null, "entrust_cert_type": "STANDARD_SSL", "entrust_not_after": "+365d", "entrust_requester_email": null, "entrust_requester_name": null, "entrust_requester_phone": null, "force": false, "group": null, "ignore_timestamps": true, "mode": null, "ownca_content": null, "ownca_create_authority_key_identifier": true, "ownca_create_subject_key_identifier": "create_if_not_provided", "ownca_digest": "sha256", "ownca_not_after": "+3650d", "ownca_not_before": "+0s", "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt", "ownca_privatekey_content": null, "ownca_privatekey_passphrase": null, "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem", "ownca_version": 3, "owner": null, "path": "/etc/openstack_deploy/pki/certs/certs/galera_aio1-galera-container-cca271a2.crt", "privatekey_content": null, "privatekey_passphrase": null, "privatekey_path": null, "provider": "ownca", "return_content": false, "select_crypto_backend": "auto", "selevel": null, "selfsigned_create_subject_key_identifier": "create_if_not_provided", "selfsigned_digest": "sha256", "selfsigned_not_after": "+3650d", "selfsigned_not_before": "+0s", "selfsigned_version": 3, "serole": null, "setype": null, "seuser": null, "state": "present", "unsafe_writes": false } } |
| notAfter |
20351213100423Z |
| notBefore |
20251215100423Z |
| privatekey | None |
| serial_number |
544524338400485912865941373247266370637586585012 |