Merge "Make sure openssl-perl is installed on split stack tls-everywhere deployments"

deployment/nova/novajoin-container-puppet.yaml

@@ -202,6 +202,16 @@ outputs:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
               - KRB5_CONFIG=/etc/novajoin/krb5.conf
       host_prep_tasks:
+        # https://bugs.launchpad.net/tripleo/+bug/1821139
+        # This is here only for split stack environments to make sure
+        # openssl-perl is installed which provides /etc/pki/CA on RHEL8
+        - name: Ensure openssl-perl package is present on RHEL8
+          when:
+            - ansible_os_family == 'RedHat'
+            - ansible_distribution_major_version == '8'
+          package:
+            name: openssl-perl
+            state: present
         - name: Ensure FreeIPA Client package is present
           package:
             name: ipa-client