---
nova:
  endpoints:
    identity:
      auth:
        admin:
          cacert: /etc/ssl/certs/openstack-helm.crt
        nova:
          cacert: /etc/ssl/certs/openstack-helm.crt
        test:
          cacert: /etc/ssl/certs/openstack-helm.crt

  tls:
    identity: true
...