Set webserver_verify_ca to bool or certificate path

[bfournie]

Set the ironic conf setting webserver_verify_ca to False
if IRONIC_INSECURE is True (to disable TLS validation) or set
it to path to CA_BUNDLE file if new IRONIC_CA_PATH env
variable is set.

By default it will be set to True.

[dtantsur]

IRONIC_CA_PATH is a CA that ironic services use, it does not necessarily match the CA that the images use (and it's not the case in OpenShift). We need a new option, and we need it to have a higher priority than IRONIC_INSECURE (which is always True for OpenShift).

[bfournie]

IRONIC_CA_PATH is a CA that ironic services use, it does not necessarily match the CA that the images use (and it's not the case in OpenShift). We need a new option, and we need it to have a higher priority than IRONIC_INSECURE (which is always True for OpenShift).

IRONIC_CA_PATH is a new option, unfortunately the name is bit too similar to the existing one - IRONIC_CACERT_FILE. I'll change the name to make it clearer and move the check before INSECURE

[dtantsur]

/approve

[bfournie]

/test-integration

[dtantsur]

/test-integration

I'm not sure how to re-run travis, maybe you can rebase?

[metal3-io-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: bfournie, dtantsur

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [bfournie,dtantsur]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[elfosardo]

/retest

[elfosardo]

@bfournie as Dmitry said you'll have to rebase this :/

[dtantsur]

/test-integration

[elfosardo]

/lgtm