Merge branch 'zed-multinode-tls' into 2023.1-multinode-upgrade-test

Author: markgoddard

etc/kayobe/environments/ci-multinode/kolla/globals.yml

@@ -67,3 +67,15 @@ designate_forwarders_addresses: "1.1.1.1; 8.8.8.8"
 # Ensure Rabbit is deployed with HA rather than quorum queues (to test migrations)
 om_enable_rabbitmq_high_availability: true
 om_enable_rabbitmq_quorum_queues: false
+
+{% if kolla_enable_tls_internal | bool %}
+############################################################################
+# Internal and backend TLS configuration
+
+# Copy the self-signed CA into the kolla containers
+kolla_copy_ca_into_containers: "yes"
+openstack_cacert: "{{ '/etc/pki/tls/certs/ca-bundle.crt' if os_distribution == 'rocky' else '/etc/ssl/certs/ca-certificates.crt' }}"
+kolla_enable_tls_backend: "yes"
+rabbitmq_enable_tls: "yes"
+
+{% endif %}