Debian: DC subcloud deploy fail: system-openldap-local-certificate

[Andy]

Brief Description
-----------------
DC subclouds fail to deploy in latest load due to:

"failed to create certificate: {\"mode\":\"docker_registry\"}: certificate install error: Invalid secret deployment
system-openldap-local-certificate"

Severity
--------
Critical: System/Feature is not usable due to the defect

Steps to Reproduce
------------------
Deploy subcloud using "dcmanager subcloud add"

Expected Behavior
------------------
subcloud successfully deployed.

Actual Behavior
----------------
subcloud unlock failed.

Reproducibility
---------------
100% reproducible

System Configuration
--------------------
DC system.

Branch/Pull Time/Commit
-----------------------
STX master latest.

Last Pass
---------
Before "Replace nslcd with sssd" commits.

Timestamp/Logs
--------------
sysinv.log:
"failed to create certificate: {\"mode\":\"docker_registry\"}: certificate install error: Invalid secret deployment
system-openldap-local-certificate"

Test Activity
-------------
Developer Testing

Workaround
----------
N/A

[Andy (andy.wrs)]

This issue is introduced by the recent "replace nslcd with sssd" commits for https://storyboard.openstack.org/#!/story/2009834.

openldap certificate secret is not created by bootstrap on subcloud, but ldap sysinv plugin tries to retrieve the certificate from k8s, and the retrieval failed.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/config/+/855699

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/starlingx/config/+/855699
Committed: https://opendev.org/starlingx/config/commit/a3650cef1327ef9cb796910aed690fca63c44798
Submitter: "Zuul (22348)"
Branch: master

commit a3650cef1327ef9cb796910aed690fca63c44798
Author: Andy Ning <email address hidden>
Date: Fri Sep 2 17:09:01 2022 -0400

    Update sysinv to not create openldap cert on subcloud

    Openldap is not running on subcloud so no openldap certificate
    is created as k8s secret during bootstrap. But current sysinv ldap
    plugin still tries to retrieve the certificate from k8s, causing
    subcloud unlock to fail.

    This change updated sysinv ldap plugin to not retrieve openldap
    certificate for subcloud.

    Test Plan:
    PASS: subcloud deployment by "dcmanager subcloud add"

    Closes-Bug: 1988601
    Signed-off-by: Andy Ning <email address hidden>
    Change-Id: Iafbc5d6ff90735c07ac6850d2f76e9a6230a7a41