Comment 2 for bug 1665353

Problem is that there is not enough to just include ssl-related tasks to the plugins. All the ssl-related tasks have running scope with role tags, like (excerpt from ssl-keys-saving):

tags: [primary-controller, controller, compute, compute-vmware, cinder, cinder-vmware, primary-mongo, mongo, ceph-osd, virt, primary-keystone, keystone]

So, if you have a node with new role (like decomposed neutron one), you need to change the ssl tasks scope to ran on that node. There is nothing to change in Fuel itself in this case as we cannot magically predict new roles names (and we also cannot run ssl-related tasks on all nodes, like computes, cause of security matters) that will be used by plugins. Therefore, plugin maker must be personally assured that needed tasks are changed for sake of his plugin.

Because of aforementioned I close this bug as invalid.