It doesn't look like tripleo-heat-templates is detecting the certificate and populating it here [0], but it does when generating the stackrc file in post-deployment steps [1].
[0] https://opendev.org/openstack/tripleo-heat-templates/src/commit/b5ef03c9c939db551b03e9490edc6981ff582035/deployment/keystone/keystone-container-puppet.yaml#L711-L720 [1] https://opendev.org/openstack/tripleo-heat-templates/src/commit/b5ef03c9c939db551b03e9490edc6981ff582035/extraconfig/post_deploy/undercloud_post.yaml#L121
It doesn't look like tripleo- heat-templates is detecting the certificate and populating it here [0], but it does when generating the stackrc file in post-deployment steps [1].
[0] https:/ /opendev. org/openstack/ tripleo- heat-templates/ src/commit/ b5ef03c9c939db5 51b03e9490edc69 81ff582035/ deployment/ keystone/ keystone- container- puppet. yaml#L711- L720 /opendev. org/openstack/ tripleo- heat-templates/ src/commit/ b5ef03c9c939db5 51b03e9490edc69 81ff582035/ extraconfig/ post_deploy/ undercloud_ post.yaml# L121
[1] https:/