Octavia cannot use OVN driver if ssl* charm config options are being used.

[Liam Young]

The octavia ovn driver needs ssl certs and keys to be able to talk to the ovn northbound db. If Octavia is related to vault it uses these certs and keys for both securing the api service and talking to ovn central. However if the api service uses charm config to get its certs and keys then they may not work with ovn central and the driver will break. ( https://bugs.launchpad.net/charm-octavia/+bug/1885936/comments/12 )

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/charm-octavia/+/790924

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/charm-octavia/+/790924
Committed: https://opendev.org/openstack/charm-octavia/commit/f1a602ca41af1d0ed2f42f17e3ac7c9316fb2628
Submitter: "Zuul (22348)"
Branch: master

commit f1a602ca41af1d0ed2f42f17e3ac7c9316fb2628
Author: Frode Nordahl <email address hidden>
Date: Wed May 12 10:44:24 2021 +0200

    Retrieve chassis certificates from subordinate relation

    When OVN provider driver is enabled, retrieve chassis
    certificates from subordinate.

    While a principal and subordinate charm executes in the same
    environment, the payload usually execute under different service
    accounts and as such it is impractical and may be less secure to
    attempt to provide direct on-disk file access.

    Also reverts commit bc0f83fee6af481324f2f9c7e8f01a5c3bde991c.

    Closes-Bug: #1918271
    Related-Bug: #1885936
    Change-Id: I4bc65ea1fcf3c01b68ed92b31e91a64940afe10e