This patch defines necessary variables for the 'hashi_vault' pki backend which is the alternative to the default 'standalone' backend. Additionally, it: - changes the format of `cloudkitty_pki_san` to the new one changed in [1] - passes `pki_default_backend` when trigerring PKI role so its aware of the default backend in case it's not explicitly specified in the cert definition. - adopts this role to the recent changes in PKI role [2][3][4] [1] https://review.opendev.org/c/openstack/openstack-ansible/+/948886 [2]fc7db02074[3]7cff89ee71[4]f03bcc19d5Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/979877 Change-Id: I476802601ab5cd1fb1e8ece94fb5a5b523f12d86 Signed-off-by: Damian Dabrowski <damian.dabrowski@cleura.com>