Execution
Date
08 Dec 2025 13:39:52 +0000
Duration
00:35:02.03
Controller
aio1.openstack.local
User
root
Versions
Ansible
2.18.6
ara
1.7.4 / 1.7.4
Python
3.12.3
Summary
2
Hosts
1377
Tasks
1365
Results
104
Plays
504
Files
0
Records
Task result details
-
StatusCHANGED
-
Duration00:00:01.76
-
PlayInstall nova control-plane services
-
Taskpki : Create the CSR for nova_aio1
-
Date08 Dec 2025 13:56:19 +0000
-
Module / Actioncommunity.crypto.openssl_csr (/home/zuul/src/opendev.org/openstack/ansible-role-pki/tasks/standalone/sign_cert.yml:35)
-
Tags
- nova-config
- pki
| Field | Value |
|---|---|
| basicConstraints | None |
| changed |
True |
| diff |
--- before +++ after @@ -1 +1,65 @@ -{} +{ + "authority_cert_issuer": null, + "authority_cert_serial_number": null, + "authority_key_identifier": null, + "basic_constraints": null, + "basic_constraints_critical": false, + "can_parse_csr": true, + "extended_key_usage": [ + "TLS Web Client Authentication", + "TLS Web Server Authentication" + ], + "extended_key_usage_critical": false, + "extensions_by_oid": { + "2.5.29.15": { + "critical": false, + "value": "AwIDqA==" + }, + "2.5.29.17": { + "critical": false, + "value": "MBKCBGFpbzGCBGFpbzGHBKwd7GQ=" + }, + "2.5.29.37": { + "critical": false, + "value": "MBQGCCsGAQUFBwMCBggrBgEFBQcDAQ==" + } + }, + "key_usage": [ + "Digital Signature", + "Key Agreement", + "Key Encipherment" + ], + "key_usage_critical": false, + "name_constraints_critical": false, + "name_constraints_excluded": null, + "name_constraints_permitted": null, + "ocsp_must_staple": null, + "ocsp_must_staple_critical": false, + "public_key": "-----BEGIN PUBLIC KEY-----\nMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzf3jRqKPgozyz9Km+UIz\nnnFbZmz+aCuf2sChtYi4ORX5oOC/OKjyNOc0600GcTv/d6AuaS2s3bzAxmjH+rJT\nUVS/UV3HeSFw9WVnjsX1oZQ5zh+zLrcChFi/lfx7HHiHonmrdByNYrG2fFD8P0Aa\n867q8Plcedcr/FcYp9Aeg7+MPPgGIBgkMXAQ71a9PygBSNO2FQ5W4whHaFjRGnux\niY/+FYMyZMecJeelojacJdcJgt/DumdAeTKXL52Jgd6qE6mmXomDKj/KNXOI3bZW\npCp6WIhJFqlrYGEHpNo0aXatdtEH5Zlc+S91SyFbXbdpHdiJlbCY01S/3c0JZftp\nRTG969antXvxAv1siwijowstOgKplbwqVjez5i4dgzbA38eipB8Q/fhVTJSNd65Q\nm6P5oS/l5iMxZMR3/4IzIbEIZ5ZuwiPTi4UfgxJGBUJr8mLD8/UDxCfDYNGPzIaa\n0swi9ZpQprGuhUrP1IcVbFd3J1LMKIYryrWkL8O/ee62NfaG0xUmk2pbkQa/o3bC\n+OahYwYXrpNmtQSRGNzTLy7D5KoIqn9OHPGLVkm2z5BAXap6V2zMP/n4/SJtu5ar\nJMjhRxZpBuhn0OQKPOxVwBSEz1rCMFo0ugFKGjPLnHoEvBOAvHHmEDRkUIKYiJcX\nnvT+La8s88IPvuAn0SwXbjMCAwEAAQ==\n-----END PUBLIC KEY-----\n", + "public_key_data": { + "exponent": 65537, + "modulus": 840373017706456796893514342361883712900926150093406663047029252929511058886437834435330763380379221986958158376990629900110213311333520981988243320402493005468157700390197094352669846729446774485386332866306612746630285144418295898355776183650762591003430842185934357991817465667018351643412123352473512367233059399778470615661772547193384033622269151164145063903294970612541688011318896972683361368761569393166487714839789711426138972992337883067674575897677343201893570054717171678730836592371326983524149198162942833668320127930859198773259353148685260538625079265619944888109410558232084685189631377440754376305887451309916845064171261489120582903699714852461773400315497998316307829620077756563396440882070129586188261682832187920032443415504545472651896250813816054278314651022357981083574778891374740838312150377080048351859835365712125303828264235573422504906965966728904666600724120997325069049087426763983364584831435402883404282116770943049881615894878865036895569094467964258559897640384400528396284396791134337989422990084116061320118636696524108299622257136168785291278151068532102817758118711541545067054625243821354838648404802350348514502683390298820786833125618384311870269629000167369844351006789134839923506376243, + "size": 4096 + }, + "public_key_fingerprints": { + "sha256": "67:79:7c:01:c5:2d:db:51:68:b8:1c:d0:d2:21:89:0b:9e:2b:98:2d:91:75:e9:c8:c0:90:c9:df:bd:c3:9d:b5" + }, + "public_key_type": "RSA", + "signature_valid": true, + "subject": { + "commonName": "aio1" + }, + "subject_alt_name": [ + "DNS:aio1", + "DNS:aio1", + "IP:172.29.236.100" + ], + "subject_alt_name_critical": false, + "subject_key_identifier": null, + "subject_ordered": [ + [ + "commonName", + "aio1" + ] + ] +} |
| extendedKeyUsage |
[ "clientAuth", "serverAuth" ] |
| filename |
/etc/openstack_deploy/pki/certs/csr/nova_aio1.csr |
| invocation |
{ "module_args": { "attributes": null, "authority_cert_issuer": null, "authority_cert_serial_number": null, "authority_key_identifier": null, "backup": false, "basic_constraints": null, "basic_constraints_critical": true, "common_name": "aio1", "country_name": null, "create_subject_key_identifier": false, "crl_distribution_points": null, "digest": "sha256", "email_address": null, "extended_key_usage": [ "clientAuth", "serverAuth" ], "extended_key_usage_critical": false, "force": false, "group": null, "key_usage": [ "digitalSignature", "keyAgreement", "keyEncipherment" ], "key_usage_critical": false, "locality_name": null, "mode": null, "name_constraints_critical": false, "name_constraints_excluded": null, "name_constraints_permitted": null, "ocsp_must_staple": false, "ocsp_must_staple_critical": false, "organization_name": null, "organizational_unit_name": null, "owner": null, "path": "/etc/openstack_deploy/pki/certs/csr/nova_aio1.csr", "privatekey_content": null, "privatekey_passphrase": null, "privatekey_path": "/etc/openstack_deploy/pki/certs/private/nova_aio1.key.pem", "return_content": false, "select_crypto_backend": "auto", "selevel": null, "serole": null, "setype": null, "seuser": null, "state": "present", "state_or_province_name": null, "subject": null, "subject_alt_name": [ "DNS:aio1", "DNS:aio1", "IP:172.29.236.100" ], "subject_alt_name_critical": false, "subject_key_identifier": null, "subject_ordered": null, "unsafe_writes": false, "use_common_name_for_san": true, "version": 1 } } |
| keyUsage |
[ "digitalSignature", "keyAgreement", "keyEncipherment" ] |
| name_constraints_excluded |
[]
|
| name_constraints_permitted |
[]
|
| ocspMustStaple |
False |
| privatekey |
/etc/openstack_deploy/pki/certs/private/nova_aio1.key.pem |
| subject |
[ [ "CN", "aio1" ] ] |
| subjectAltName |
[ "DNS:aio1", "DNS:aio1", "IP:172.29.236.100" ] |