Playbook #3
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml
Execution
Date 08 Dec 2025 13:33:24 +0000
Duration 00:06:14.05
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.3
Summary
2 Hosts
374 Tasks
364 Results
37 Plays
208 Files
0 Records
check:False tags:all

Task result details

  • Status
    CHANGED
  • Duration
    00:00:01.90
  • Play
    Install rabbitmq server
  • Task
    pki : Sign the certificate CSR for rabbitmq_aio1
  • Host
    aio1 ( task delegated to localhost )

Field Value
ca_cert 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt
ca_privatekey 
/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem
changed 
True
csr 
/etc/openstack_deploy/pki/certs/csr/rabbitmq_aio1.csr
diff 
--- before

+++ after

@@ -1 +1,84 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": "3b:a4:ca:5f:55:d4:27:ab:c4:8d:53:50:eb:19:66:22:80:7e:63:e4",
+    "basic_constraints": null,
+    "basic_constraints_critical": false,
+    "can_parse_certificate": true,
+    "expired": false,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBRczPoBilnkfiqsoqcrtMoAvchL2Q=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MCKCBGFpbzGHBKwd7GSCFGFpbzEub3BlbnN0YWNrLmxvY2Fs"
+        },
+        "2.5.29.35": {
+            "critical": false,
+            "value": "MBaAFDukyl9V1CerxI1TUOsZZiKAfmPk"
+        }
+    },
+    "fingerprints": {
+        "sha256": "d8:7a:33:63:ad:61:ad:13:9f:b9:53:b9:d4:07:2f:66:77:34:18:44:33:5b:e6:f2:d5:1c:00:c6:1f:21:87:86"
+    },
+    "issuer": {
+        "commonName": "Example Corp Openstack Infrastructure Intermediate CA",
+        "countryName": "GB",
+        "stateOrProvinceName": "England"
+    },
+    "issuer_ordered": [
+        [
+            "countryName",
+            "GB"
+        ],
+        [
+            "stateOrProvinceName",
+            "England"
+        ],
+        [
+            "commonName",
+            "Example Corp Openstack Infrastructure Intermediate CA"
+        ]
+    ],
+    "issuer_uri": null,
+    "key_usage": null,
+    "key_usage_critical": false,
+    "not_after": "20351206133740Z",
+    "not_before": "20251208133740Z",
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "ocsp_uri": null,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\nhGUf7JpPdQUq/A/Wf9YOjmMCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 966768767638733266646284792854209533042788791204557904026930394696615404356487112122382576610587205255800252659012048659849903017943140995869047851561920970514600656215080187404298001384780042211778504200081656685830425513452300791626070116282710368736624023878292565306220128601319248637768283056760541781164217450407327570335691078173451120323270110360354130356361554470846876071670285811616816004251956750214621293772993259796244867072325503642609362508199253837140931040565645559777301189485269657621357602737898714792553580362179860663479458029474310375105128656353863109612898356069270687854168811154143580551547883806069921378836634016473647920514844312400960695202229089797557575887905630512314981037542016483754478338751110837267082262221247415999363931246109295327212690101179069715076999607772059358281645626211779329656101806067404991227497106220036676229996250733793497592476243697425024603323623940210401261525925384815533917053362407942131292673909015949563962828264092941494220280491979164848734236359778785862076068524715249875743892235426183548950248836007940053434562604285996161380685138761830746480935989764992172945335159321760233395321394585441246786836843902632814525141559203374432630706800373200890603933283,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "08:29:b0:3f:fd:76:7a:59:8c:10:0c:53:eb:ca:5a:7f:61:31:98:7a:d4:2b:0d:8f:60:da:bd:0b:df:bf:a8:86"
+    },
+    "public_key_type": "RSA",
+    "serial_number": 241302640698730002271646229004213998866679639364,
+    "signature_algorithm": "sha256WithRSAEncryption",
+    "subject": {
+        "commonName": "aio1"
+    },
+    "subject_alt_name": [
+        "DNS:aio1",
+        "IP:172.29.236.100",
+        "DNS:aio1.openstack.local"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "5c:cc:fa:01:8a:59:e4:7e:2a:ac:a2:a7:2b:b4:ca:00:bd:c8:4b:d9",
+    "subject_ordered": [
+        [
+            "commonName",
+            "aio1"
+        ]
+    ],
+    "version": 3
+}
filename 
/etc/openstack_deploy/pki/certs/certs/rabbitmq_aio1.crt
invocation 
{
    "module_args": {
        "acme_accountkey_path": null,
        "acme_chain": false,
        "acme_challenge_path": null,
        "acme_directory": "https://acme-v02.api.letsencrypt.org/directory",
        "attributes": null,
        "backup": false,
        "csr_content": null,
        "csr_path": "/etc/openstack_deploy/pki/certs/csr/rabbitmq_aio1.csr",
        "entrust_api_client_cert_key_path": null,
        "entrust_api_client_cert_path": null,
        "entrust_api_key": null,
        "entrust_api_specification_path": "https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml",
        "entrust_api_user": null,
        "entrust_cert_type": "STANDARD_SSL",
        "entrust_not_after": "+365d",
        "entrust_requester_email": null,
        "entrust_requester_name": null,
        "entrust_requester_phone": null,
        "force": false,
        "group": null,
        "ignore_timestamps": true,
        "mode": null,
        "ownca_content": null,
        "ownca_create_authority_key_identifier": true,
        "ownca_create_subject_key_identifier": "create_if_not_provided",
        "ownca_digest": "sha256",
        "ownca_not_after": "+3650d",
        "ownca_not_before": "+0s",
        "ownca_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/certs/ExampleCorpIntermediate.crt",
        "ownca_privatekey_content": null,
        "ownca_privatekey_passphrase": null,
        "ownca_privatekey_path": "/etc/openstack_deploy/pki/roots/ExampleCorpIntermediate/private/ExampleCorpIntermediate.key.pem",
        "ownca_version": 3,
        "owner": null,
        "path": "/etc/openstack_deploy/pki/certs/certs/rabbitmq_aio1.crt",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": null,
        "provider": "ownca",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "selfsigned_create_subject_key_identifier": "create_if_not_provided",
        "selfsigned_digest": "sha256",
        "selfsigned_not_after": "+3650d",
        "selfsigned_not_before": "+0s",
        "selfsigned_version": 3,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false
    }
}
notAfter 
20351206133740Z
notBefore 
20251208133740Z
privatekey None
serial_number 
241302640698730002271646229004213998866679639364