Playbook #4
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-openstack.yml
Execution
Date 08 Dec 2025 13:39:52 +0000
Duration 00:35:02.03
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.3
Summary
2 Hosts
1377 Tasks
1365 Results
104 Plays
504 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:02.14
  • Play
    Install nova control-plane services
  • Task
    pki : Create the CSR for nova_aio1-client
  • Host
    aio1 ( task delegated to localhost )

Field Value
basicConstraints None
changed 
True
diff 
--- before

+++ after

@@ -1 +1,64 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": null,
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_csr": true,
+    "extended_key_usage": [
+        "TLS Web Client Authentication"
+    ],
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.15": {
+            "critical": false,
+            "value": "AwIDqA=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MBKCBGFpbzGCBGFpbzGHBKwd7GQ="
+        },
+        "2.5.29.37": {
+            "critical": false,
+            "value": "MAoGCCsGAQUFBwMC"
+        }
+    },
+    "key_usage": [
+        "Digital Signature",
+        "Key Agreement",
+        "Key Encipherment"
+    ],
+    "key_usage_critical": false,
+    "name_constraints_critical": false,
+    "name_constraints_excluded": null,
+    "name_constraints_permitted": null,
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\npyKXk1rpF7znSQUWutcaDNsCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 749718477154543267341838388480585015623865277941354006623722363914532087106721317550589254265967817457490252246250420445937057642136768581563482970518829520582549033229523331912260071827686617668845907471608657057927431621413182700702827001070526071734191956981089976309705869045457650389414875196029248438698288591950283287748159534162000504536618388663770847837242732211773242411460537050552388960755716636227308789129985805051507696109990538948504718647862275006683871521868994836110640714552174959851665833193071857753583509519319359328418323351229028249872034207515807937313793847261079493961736526283711001394682626851961538797679134502854934673863608938258564580630167329784745187375491522850319290419482926991945604071734094644423178885538827056163896293809899644556698025001123234477107705790339547543373288443299908122174083814180942322919446097639877970692091896910185006480894681805962916383540894761636984490153141187678337364424781631348338675099367201171348891463936118964614936219342047900347479896661501543361611934359877256248858245988765716837350818682107079373677643875367980375346951728946204160556864435250963179013632557198909564038423402475382589953308083354589913033713082291128056523140457725886472474201307,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "99:9a:3e:95:76:ec:97:97:78:bb:1c:85:49:ea:19:ba:b0:ed:6a:70:3d:3c:d8:4b:63:9d:28:8b:41:c6:df:9e"
+    },
+    "public_key_type": "RSA",
+    "signature_valid": true,
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1",
+        "IP:172.29.236.100"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": null,
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ]
+}
extendedKeyUsage 
[
    "clientAuth"
]
filename 
/etc/openstack_deploy/pki/certs/csr/nova_aio1-client.csr
invocation 
{
    "module_args": {
        "attributes": null,
        "authority_cert_issuer": null,
        "authority_cert_serial_number": null,
        "authority_key_identifier": null,
        "backup": false,
        "basic_constraints": null,
        "basic_constraints_critical": true,
        "common_name": "aio1",
        "country_name": null,
        "create_subject_key_identifier": false,
        "crl_distribution_points": null,
        "digest": "sha256",
        "email_address": null,
        "extended_key_usage": [
            "clientAuth"
        ],
        "extended_key_usage_critical": false,
        "force": false,
        "group": null,
        "key_usage": [
            "digitalSignature",
            "keyAgreement",
            "keyEncipherment"
        ],
        "key_usage_critical": false,
        "locality_name": null,
        "mode": null,
        "name_constraints_critical": false,
        "name_constraints_excluded": null,
        "name_constraints_permitted": null,
        "ocsp_must_staple": false,
        "ocsp_must_staple_critical": false,
        "organization_name": null,
        "organizational_unit_name": null,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/csr/nova_aio1-client.csr",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": "/etc/openstack_deploy/pki/certs/private/nova_aio1-client.key.pem",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "state_or_province_name": null,
        "subject": null,
        "subject_alt_name": [
            "DNS:aio1",
            "DNS:aio1",
            "IP:172.29.236.100"
        ],
        "subject_alt_name_critical": false,
        "subject_key_identifier": null,
        "subject_ordered": null,
        "unsafe_writes": false,
        "use_common_name_for_san": true,
        "version": 1
    }
}
keyUsage 
[
    "digitalSignature",
    "keyAgreement",
    "keyEncipherment"
]
name_constraints_excluded 
[]
name_constraints_permitted 
[]
ocspMustStaple 
False
privatekey 
/etc/openstack_deploy/pki/certs/private/nova_aio1-client.key.pem
subject 
[
    [
        "CN",
        "aio1"
    ]
]
subjectAltName 
[
    "DNS:aio1",
    "DNS:aio1",
    "IP:172.29.236.100"
]