Playbook #3
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml
Execution
Date 08 Dec 2025 13:33:24 +0000
Duration 00:06:14.05
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.3
Summary
2 Hosts
374 Tasks
364 Results
37 Plays
208 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:01.98
  • Play
    HAProxy base config
  • Task
    pki : Sign the certificate CSR for haproxy_aio1-172.29.236.101
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-172.29.236.101.csr
diff 
--- before

+++ after

@@ -1 +1,84 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "3b:a4:ca:5f:55:d4:27:ab:c4:8d:53:50:eb:19:66:22:80:7e:63:e4",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBT4z9itMFfNq8FPFP9CNsCODcH+zg=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MCKCBGFpbzGCFGFpbzEub3BlbnN0YWNrLmxvY2FshwSsHexl"
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFDukyl9V1CerxI1TUOsZZiKAfmPk"
+        }
+    },
+    "fingerprints": {
+        "sha256": "8c:da:43:3b:40:79:dd:6f:69:eb:34:42:76:50:9e:c6:8f:8c:c3:85:ad:48:33:6c:39:d1:71:68:25:fc:a2:a5"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": null,
+    "key_usage_critical": false,
+    "not_after": "20351206133424Z",
+    "not_before": "20251208133424Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\nNVcx9/GTUxEtX2jT5PBBIIMCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 770303525006412863567204941929542336003638923466325064379274129780169501498322027717367396699028933667915776509011096392680601906384962824094181601911822092698239535378383387060155215057294593264537898318137701926245299946182498661577113289866054224272266216619065483338152982952030523229388044103996069038900501045220421956790946896398055469797481609939557772677924775620783695443249253006308666256300658551903201267306823431990585891743306633326597146301145682092121877144247993893460557393826805198211492372778372394942381593754326017871307137550698155173775941061389884347716542489071543932830015164848674190270225993706286717252851628484277265549037388890829525473621357541173331291429820792768553779602652000533895225243885120788079883915369984691273850538947728568913518513200837161294778840869709422308976040785581134823093328086870530141437026557043735797695417292968547417518283416693735958232634305074871836412486932971187254414044161486818354910143985003492230363731710601270175049419655889027227999975870312416209223247669275762206164138773443173639102447295590040384417167427179579009609979373752041186317017267155509450322990612856256105763426879134467354130863272570554500159217687631813407418893404732564251609211011,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "e7:5d:fe:4e:07:93:2f:e4:1c:c9:32:a8:33:7c:ed:cb:0f:33:92:5f:ce:18:b2:88:3c:9f:6b:5b:eb:e5:98:f6"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 478925402740587245981983172406314866409397463970,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "DNS:aio1.openstack.local",
+        "IP:172.29.236.101"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "f8:cf:d8:ad:30:57:cd:ab:c1:4f:14:ff:42:36:c0:8e:0d:c1:fe:ce",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-172.29.236.101.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/haproxy_aio1-172.29.236.101.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/haproxy_aio1-172.29.236.101.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351206133424Z
notBefore 
20251208133424Z
privatekey None
serial_number 
478925402740587245981983172406314866409397463970