Playbook #3
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml
Execution
Date 08 Dec 2025 13:33:24 +0000
Duration 00:06:14.05
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.3
Summary
2 Hosts
374 Tasks
364 Results
37 Plays
208 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:01.96
  • Play
    Install galera server
  • Task
    pki : Sign the certificate CSR for galera_aio1
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/galera_aio1.csr
diff 
--- before

+++ after

@@ -1 +1,84 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "3b:a4:ca:5f:55:d4:27:ab:c4:8d:53:50:eb:19:66:22:80:7e:63:e4",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBR2bvqPkDkEZipByWqPduSEBRJKXg=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MBKCBGFpbzGHBKwd7GWHBKwd7GQ="
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFDukyl9V1CerxI1TUOsZZiKAfmPk"
+        }
+    },
+    "fingerprints": {
+        "sha256": "b2:99:50:12:a4:72:ed:d0:f5:c8:2a:20:5b:b6:e8:e8:90:da:dd:70:a6:38:9e:13:61:f4:1f:e6:86:68:ba:e8"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": null,
+    "key_usage_critical": false,
+    "not_after": "20351206133615Z",
+    "not_before": "20251208133615Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\nll5+tOmgprKfCHpX+Z08DuMCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 665242632422769105003173387376263476133846566887982709432926227070469867149340839011291756439151965134967547428757825757798600519552377748431762811436835548987871652322566275210953654624925926240696840593200329242424828132172141049504790809299897036760694997639805669811963730424148283211654343292216719072547879442850276869973377337171421094774140580475284185731742508114995475834218141942831829849225365079998999292226882493259403185223882587720701197976744673462268075356701157251156591884893822628936276698017445490794042716211846044916547110972347246254584376655929254556836586537618401305127022635428306916934716384430018498777085645408418362865169411218291275255306623688399803808897137750054837374963232957880598243672921976551573626807257629309817617041413945374116215670217396783445752787940247066122723975615985819735164853814415576701933444887720671564111803747931334820267689273820352231397510565549380020257206884360851835683284947261362759767839551635011067153334105506530717667497481601676467006184424890542883160350774207059855897982400153619793935901619200288167034588245517131378730163340447155340097410330969494994216469547441505270589810393136161860541658362863964484889120292478064741677492494529167262998073059,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "60:2a:21:da:e1:d6:1e:b3:35:cd:f7:c6:c4:44:7b:41:99:06:40:f1:eb:a1:3f:a3:6c:53:64:71:65:1b:38:59"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 30014711015396655644205915443421632660959349217,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "IP:172.29.236.101",
+        "IP:172.29.236.100"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "76:6e:fa:8f:90:39:04:66:2a:41:c9:6a:8f:76:e4:84:05:12:4a:5e",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/galera_aio1.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/galera_aio1.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/galera_aio1.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351206133615Z
notBefore 
20251208133615Z
privatekey None
serial_number 
30014711015396655644205915443421632660959349217