openstack-helm/openstack/values_overrides/nova/tls-offloading.yaml

---
nova:
  endpoints:
    identity:
      auth:
        admin:
          cacert: /etc/ssl/certs/openstack-helm.crt
        nova:
          cacert: /etc/ssl/certs/openstack-helm.crt
        test:
          cacert: /etc/ssl/certs/openstack-helm.crt

  tls:
    identity: true
...