Playbook #4
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-openstack.yml
Execution
Date 08 Dec 2025 13:39:52 +0000
Duration 00:35:02.03
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.3
Summary
2 Hosts
1377 Tasks
1365 Results
104 Plays
504 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:02.32
  • Play
    Install nova control-plane services
  • Task
    pki : Sign the certificate CSR for nova_aio1-client
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/nova_aio1-client.csr
diff 
--- before

+++ after

@@ -1 +1,98 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "3b:a4:ca:5f:55:d4:27:ab:c4:8d:53:50:eb:19:66:22:80:7e:63:e4",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": [
+        "TLS Web Client Authentication"
+    ],
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBT/wfTGjlZUXy3uf5je+Bkn76vrzQ=="
+        },
+        "2.5.29.15": {
+            "critical": false,
+            "value": "AwIDqA=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MBKCBGFpbzGCBGFpbzGHBKwd7GQ="
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFDukyl9V1CerxI1TUOsZZiKAfmPk"
+        },
+        "2.5.29.37": {
+            "critical": false,
+            "value": "MAoGCCsGAQUFBwMC"
+        }
+    },
+    "fingerprints": {
+        "sha256": "93:ad:06:ff:6c:de:d4:0a:7a:ef:17:dd:d3:49:88:3c:f3:bb:9f:bb:f3:de:f4:5f:b1:a8:73:ac:56:90:ef:cc"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": [
+        "Digital Signature",
+        "Key Agreement",
+        "Key Encipherment"
+    ],
+    "key_usage_critical": false,
+    "not_after": "20351206135558Z",
+    "not_before": "20251208135558Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\npyKXk1rpF7znSQUWutcaDNsCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 749718477154543267341838388480585015623865277941354006623722363914532087106721317550589254265967817457490252246250420445937057642136768581563482970518829520582549033229523331912260071827686617668845907471608657057927431621413182700702827001070526071734191956981089976309705869045457650389414875196029248438698288591950283287748159534162000504536618388663770847837242732211773242411460537050552388960755716636227308789129985805051507696109990538948504718647862275006683871521868994836110640714552174959851665833193071857753583509519319359328418323351229028249872034207515807937313793847261079493961736526283711001394682626851961538797679134502854934673863608938258564580630167329784745187375491522850319290419482926991945604071734094644423178885538827056163896293809899644556698025001123234477107705790339547543373288443299908122174083814180942322919446097639877970692091896910185006480894681805962916383540894761636984490153141187678337364424781631348338675099367201171348891463936118964614936219342047900347479896661501543361611934359877256248858245988765716837350818682107079373677643875367980375346951728946204160556864435250963179013632557198909564038423402475382589953308083354589913033713082291128056523140457725886472474201307,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "99:9a:3e:95:76:ec:97:97:78:bb:1c:85:49:ea:19:ba:b0:ed:6a:70:3d:3c:d8:4b:63:9d:28:8b:41:c6:df:9e"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 245574384479756021184900829128621364284488082785,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1",
+        "IP:172.29.236.100"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "ff:c1:f4:c6:8e:56:54:5f:2d:ee:7f:98:de:f8:19:27:ef:ab:eb:cd",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/nova_aio1-client.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/nova_aio1-client.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/nova_aio1-client.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351206135558Z
notBefore 
20251208135558Z
privatekey None
serial_number 
245574384479756021184900829128621364284488082785