Make sure openssl-perl is installed on split stack tls-everywhere deployments

Directory /etc/pki/CA is no longer available in CentOS 8 with base openssl
package. Libvirt still has the default to /etc/pki/CA for some TLS settings.
Lets add openssl-perl to get /etc/pki/CA and keep defaults where possible.

The package gets added to overcloud image and container via:
https://review.openstack.org/645498
https://review.openstack.org/645501

This check is mainly to make sure the package is also installed on
split stack deployments.

Change-Id: Id81ad942db6b193ab8b1dad537c65249348714d8
Related-Bug: #1821139

deployment/nova/novajoin-container-puppet.yaml

@@ -202,6 +202,16 @@ outputs:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
               - KRB5_CONFIG=/etc/novajoin/krb5.conf
       host_prep_tasks:
+        # https://bugs.launchpad.net/tripleo/+bug/1821139
+        # This is here only for split stack environments to make sure
+        # openssl-perl is installed which provides /etc/pki/CA on RHEL8
+        - name: Ensure openssl-perl package is present on RHEL8
+          when:
+            - ansible_os_family == 'RedHat'
+            - ansible_distribution_major_version == '8'
+          package:
+            name: openssl-perl
+            state: present
         - name: Ensure FreeIPA Client package is present
           package:
             name: ipa-client