Add TLS support for tempest

Change-Id: I9e8e1d9e3a3dff82f69689429c746bde969ebe32

service/actions/tempest.yaml

@@ -3,7 +3,7 @@ actions:
     image: rally-tempest
     dependencies:
       - keystone
-    command: /var/lib/rally/run-tempest.sh
+    command: bash /var/lib/rally/run-tempest.sh
     files:
       - path: /var/lib/rally/tempest.conf
         content: tempest.conf.j2
@@ -13,3 +13,6 @@ actions:
       - path: /var/lib/rally/static.pem
         content: static.pem.j2
         perm: "0600"
+      - path: /opt/ccp/etc/tls/ca.pem
+        content: ca-cert.pem.j2
+        perm: "0400"

service/files/ca-cert.pem.j2

@@ -0,0 +1 @@
+{{ security.tls.ca_cert }}

service/files/run-tempest.sh.j2

@@ -19,6 +19,9 @@ export OS_PROJECT_DOMAIN_NAME=default
 export OS_PROJECT_NAME={{ openstack.project_name }}
 export OS_USERNAME={{ openstack.user_name }}
 export OS_USER_DOMAIN_NAME=default
+{% if keystone.tls.enabled %}
+export OS_CACERT="/opt/ccp/etc/tls/ca.pem"
+{% endif %}
 
 rally-manage db create
 rally deployment create --fromenv --name=to-be-verified-by-tempest