Add variable to choose CA secret store

Author: seunghun1ee

etc/kayobe/environments/ci-multinode/stackhpc-monitoring.yml

@@ -1,3 +1,3 @@
 ---
 # Path to a CA certificate file to trust in the OpenStack Capacity exporter.
-stackhpc_os_capacity_openstack_cacert: "{{ kayobe_env_config_path }}/kolla/certificates/ca/vault.crt"
+stackhpc_os_capacity_openstack_cacert: "{{ kayobe_env_config_path }}/kolla/certificates/ca/{{ stackhpc_ca_secret_store }}.crt"

etc/kayobe/environments/ci-multinode/tempest.yml

@@ -3,4 +3,4 @@
 rally_no_sensitive_log: false
 
 # Add the Vault CA certificate to the rally container when running tempest.
-tempest_cacert: "{{ kayobe_env_config_path }}/kolla/certificates/ca/vault.crt"
+tempest_cacert: "{{ kayobe_env_config_path }}/kolla/certificates/ca/{{ stackhpc_ca_secret_store }}.crt"

etc/kayobe/stackhpc.yml

@@ -183,3 +183,10 @@ download_amphora_from_ark: true
 
 # Octavia Amphora image version
 stackhpc_amphora_image_version: "2025.1-20250619T113933"
+
+################################################################################
+# Certificate Authority
+
+# Secret store to deploy as a Certificate Authority.
+# Valid options are "vault" and "openbao". Default is "openbao".
+stackhpc_ca_secret_store: openbao