Playbook #3
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml
Execution
Date 08 Dec 2025 13:33:24 +0000
Duration 00:06:14.05
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.3
Summary
2 Hosts
374 Tasks
364 Results
37 Plays
208 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:02.38
  • Play
    HAProxy base config
  • Task
    pki : Sign the certificate CSR for haproxy_aio1-104.239.175.21
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-104.239.175.21.csr
diff 
--- before

+++ after

@@ -1 +1,84 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "3b:a4:ca:5f:55:d4:27:ab:c4:8d:53:50:eb:19:66:22:80:7e:63:e4",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBTLYbycTzsEZCCpYvayqn3VuGpapw=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MCKCBGFpbzGCFGFpbzEub3BlbnN0YWNrLmxvY2FshwRo768V"
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFDukyl9V1CerxI1TUOsZZiKAfmPk"
+        }
+    },
+    "fingerprints": {
+        "sha256": "57:a1:82:42:fd:74:26:e5:4e:4c:8a:8a:7d:c7:5f:51:2e:9e:8a:e1:d1:53:68:51:8c:60:19:8a:f8:11:cf:e6"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": null,
+    "key_usage_critical": false,
+    "not_after": "20351206133412Z",
+    "not_before": "20251208133412Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----\nMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw4iKoMXQziMpaNXuTUeS\nxShhICMde9RzK+uJdqn6FmFqmp+dGO4lEr8Us87vYttXTcmIyoroGbeNQHf7GEZy\nrYkRaL+02wUKK9/03WPzR4XDSlC3jdd48Y+3rIUUTBVrfpCHjs5qv1vEfYwupX8s\nm/8PZhMICbHZiwIBzGFiJ5k9mUHkcYkbMCH3RYTle2AjKXHxldTG1UdXnP6m2kZw\nC4IbZyBj3Jk0BL6HsQluWu81jj73uhHLXGMjRrVe0anaMBPpBkQNp16nl8AyzIyH\nlWrsQBqyUiUzwIWw7tuqXQYSwV7XWteeMj+vHIU26p766u6IPmvoNKjDIpwavRtD\nIGescuYe1cwB/QgSgAGukQVgIKW8QzBGVxi0kFwoHw9mBhpuMZyaaeP38uYsDlja\nmfd4AGLkZ4dm93g9d5F2HG98e0jifR5AvvR2zt4cMJH99+AekOr7hi6MmriEIINV\nJIwdy8mm7kCl+YIJB05bVX8RCQFG6F3y3As+B/n5p+aDiz7tQLrSFPTJBR9ZhSOQ\n7ANdOQRV1saZt2RCyVF7sNBxsXZXoYPStA/ahT7nOI0JHznrQvqQ2ojlJ0tzbXVT\nku9L8l8/u8CMKr8scc04yg/XnpnalAe3BKKxQilfrQMa37AbpOjhTnkc/mog2yI9\nY4TAcZUHRTddKZ3RkRJ7fNkCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 797706533828579709058926372967691561345473553393154222211090683608528083420821933527455221218112091285639380747787153734085871043948385365541139774037683159701893892726490113239066443359914733805874845326664522778079738786734073360598475599389614054392408790407185586127473632359961120812143897057095544993031278756242549729762204007573596491854141817631492816964328878451330646489026629763303382379545187858782418208995315876039236367190290192136134137054969634027954607578080371349194321566811672611032856538753242493612425102589982913493050493838717340444935537489765518325797126874567305420462151463977899630991890838298316568241432437528654350456083178142944156694210889001226693634377915507806337003544569087536886377066030558382787029138748203981437707351588943980160434086241719466839143894432550329635060639507675775003510620550708787582048987991740221653782104451337449610350685310726308699307180600022686880226613932327175997872852276580626028476874373390946428479585190260498587677043271451321120884291568429603859502868302103497095372511213962843975877146619315348990431746234036097720636900219267992209314909191223016916055918530868940502536033168779103453016421564104004738936820383358471284551299644097095218885262553,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "06:ea:d9:8d:42:c1:bf:79:a4:14:73:49:26:1e:46:78:e0:09:c0:45:8e:db:7d:4e:c4:aa:b1:d5:28:89:9e:19"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 304879791775857320022776766961205599635159266851,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1.openstack.local",
+        "IP:104.239.175.21"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "cb:61:bc:9c:4f:3b:04:64:20:a9:62:f6:b2:aa:7d:d5:b8:6a:5a:a7",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-104.239.175.21.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-104.239.175.21.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-104.239.175.21.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351206133412Z
notBefore 
20251208133412Z
privatekey None
serial_number 
304879791775857320022776766961205599635159266851