Playbook #4
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-openstack.yml
Execution
Date 08 Dec 2025 13:39:52 +0000
Duration 00:35:02.03
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.3
Summary
2 Hosts
1377 Tasks
1365 Results
104 Plays
504 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:01.96
  • Play
    Install nova control-plane services
  • Task
    pki : Sign the certificate CSR for nova_aio1
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/nova_aio1.csr
diff 
--- before

+++ after

@@ -1 +1,99 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "3b:a4:ca:5f:55:d4:27:ab:c4:8d:53:50:eb:19:66:22:80:7e:63:e4",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": [
+        "TLS Web Client Authentication",
+        "TLS Web Server Authentication"
+    ],
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBS7ggCh8D1xKZM9DvjqtK2bOwV/mQ=="
+        },
+        "2.5.29.15": {
+            "critical": false,
+            "value": "AwIDqA=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MBKCBGFpbzGCBGFpbzGHBKwd7GQ="
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFDukyl9V1CerxI1TUOsZZiKAfmPk"
+        },
+        "2.5.29.37": {
+            "critical": false,
+            "value": "MBQGCCsGAQUFBwMCBggrBgEFBQcDAQ=="
+        }
+    },
+    "fingerprints": {
+        "sha256": "f8:51:a8:53:56:26:33:e7:96:2d:9a:8b:7d:67:68:7b:b8:af:11:10:40:6f:af:c5:a3:0a:08:3e:df:34:62:0e"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": [
+        "Digital Signature",
+        "Key Agreement",
+        "Key Encipherment"
+    ],
+    "key_usage_critical": false,
+    "not_after": "20351206135620Z",
+    "not_before": "20251208135620Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\nnvT+La8s88IPvuAn0SwXbjMCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 840373017706456796893514342361883712900926150093406663047029252929511058886437834435330763380379221986958158376990629900110213311333520981988243320402493005468157700390197094352669846729446774485386332866306612746630285144418295898355776183650762591003430842185934357991817465667018351643412123352473512367233059399778470615661772547193384033622269151164145063903294970612541688011318896972683361368761569393166487714839789711426138972992337883067674575897677343201893570054717171678730836592371326983524149198162942833668320127930859198773259353148685260538625079265619944888109410558232084685189631377440754376305887451309916845064171261489120582903699714852461773400315497998316307829620077756563396440882070129586188261682832187920032443415504545472651896250813816054278314651022357981083574778891374740838312150377080048351859835365712125303828264235573422504906965966728904666600724120997325069049087426763983364584831435402883404282116770943049881615894878865036895569094467964258559897640384400528396284396791134337989422990084116061320118636696524108299622257136168785291278151068532102817758118711541545067054625243821354838648404802350348514502683390298820786833125618384311870269629000167369844351006789134839923506376243,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "67:79:7c:01:c5:2d:db:51:68:b8:1c:d0:d2:21:89:0b:9e:2b:98:2d:91:75:e9:c8:c0:90:c9:df:bd:c3:9d:b5"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 695549683002838655245715779696832685916043599567,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1",
+        "IP:172.29.236.100"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "bb:82:00:a1:f0:3d:71:29:93:3d:0e:f8:ea:b4:ad:9b:3b:05:7f:99",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/nova_aio1.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/nova_aio1.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/nova_aio1.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351206135620Z
notBefore 
20251208135620Z
privatekey None
serial_number 
695549683002838655245715779696832685916043599567