Description of problem:
Currently RHOSP Director deploys the overcloud by default without TLS enabled on the public endpoints. All other Red Hat products TMK deploy by default with a self signed cert.

Even the undercloud gives the ability to generate and automatically deploy a self signed cert.

However, the process for the overcloud is very manual and tedious.

Please automate and deploy self-signed certs on public endpoints by default.


Version-Release number of selected component (if applicable):
All

How reproducible:
100%

Actual results:
A default overcloud deployment deploys without TLS on the public endpoints.

Expected results:
A default overcloud deployment should deploy with TLS with an auto-generated self-signed cert.

Additional info:
It would also be nice to automatically inject the undercloud CA in the overcloud hosts by default as well rather than having to go find the CA file and create a yaml template to include it.