Provision LE cert for zuul.opendev.org

This provisions the cert but does not use it yet. We will do the
switchover once the cert is confirmed to be in place.

Depends-On: https://review.opendev.org/701819
Change-Id: I04fee48b9a79758527d8f9e8128c0fa915cd133e

inventory/groups.yaml

@@ -69,6 +69,7 @@ groups:
     - files[0-9]*.open*.org
     - static.openstack.org
     - gitea[0-9]*.opendev.org
+    - zuul[0-9]*.open*.org
   logstash:
     - logstash[0-9]*.open*.org
   logstash-worker:

manifests/site.pp

@@ -929,18 +929,22 @@ node /^zuul\d+\.open.*\.org$/ {
       'zuul.openstack.org' => {
         tenant_name => 'openstack',
         ssl         => true,
+        use_le      => false,
       },
       'zuul.opendev.org' => {
         tenant_name => '',
         ssl         => true,
+        use_le      => false,
       },
       'zuul.openstack.org-http' => {
         tenant_name => 'openstack',
         ssl         => false,
+        use_le      => false,
       },
       'zuul.opendev.org-http' => {
         tenant_name => '',
         ssl         => false,
+        use_le      => false,
       },
     },
     vhosts_ssl => {

playbooks/host_vars/zuul01.openstack.org

@@ -0,0 +1,4 @@
+letsencrypt_certs:
+  zuul01-opendev-main:
+    - zuul.opendev.org
+    - zuul01.opendev.org

playbooks/roles/letsencrypt-create-certs/handlers/main.yaml

@@ -25,6 +25,9 @@
 - name: letsencrypt updated zuul-ci-git
   include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
 
+- name: letsencrypt updated zuul01-opendev-main
+  include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
+
 - name: letsencrypt updated logs-main
   include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml