Add certificate for nova-compute-ironic

Change-Id: Iea8593b203762415ee55a74edb03c0e7836d1698

service/files/nova.conf.j2

@@ -98,6 +98,7 @@ username = {{ ironic.username }}
 password = {{ ironic.password }}
 project_domain_name = {{ service_account.domain }}
 user_domain_name = {{ service_account.domain }}
+cafile = /opt/ccp/etc/tls/ca.pem
 
 #(TODO) remove these parameters when mitaka support will be dropped
 #(TODO) remember to update this once discoverd is replaced by inspector

service/nova-compute-ironic.yaml

@@ -15,6 +15,9 @@ service:
         files:
           - nova.conf
           - nova-ironic.conf
+          # {% if keystone.tls.enabled %}
+          - ca-cert
+          # {% endif %}
         dependencies:
           - nova-db-migrations
           - ironic-user-create
@@ -27,3 +30,9 @@ files:
     path: /etc/nova/nova-ironic.conf
     content: nova-ironic.conf.j2
     perm: "0600"
+  # {% if keystone.tls.enabled %}
+  ca-cert:
+    path: /opt/ccp/etc/tls/ca.pem
+    content: ca-cert.pem.j2
+    perm: "0644"
+  # {% endif %}