Add bool variable to choose CA secret store

Author: seunghun1ee

etc/kayobe/environments/ci-multinode/stackhpc-monitoring.yml

@@ -1,3 +1,3 @@
 ---
 # Path to a CA certificate file to trust in the OpenStack Capacity exporter.
-stackhpc_os_capacity_openstack_cacert: "{{ kayobe_env_config_path }}/kolla/certificates/ca/openbao.crt"
+stackhpc_os_capacity_openstack_cacert: "{{ kayobe_env_config_path }}/kolla/certificates/ca/{{ openbao.crt if stackhpc_enable_openbao else vault.crt }}"

etc/kayobe/environments/ci-multinode/tempest.yml

@@ -3,4 +3,4 @@
 rally_no_sensitive_log: false
 
 # Add the Vault CA certificate to the rally container when running tempest.
-tempest_cacert: "{{ kayobe_env_config_path }}/kolla/certificates/ca/openbao.crt"
+tempest_cacert: "{{ kayobe_env_config_path }}/kolla/certificates/ca/{{ openbao.crt if stackhpc_enable_openbao else vault.crt }}"

etc/kayobe/stackhpc.yml

@@ -183,3 +183,10 @@ download_amphora_from_ark: true
 
 # Octavia Amphora image version
 stackhpc_amphora_image_version: "2025.1-20250619T113933"
+
+################################################################################
+# Certificate Authority
+
+# Whether or not OpenBao is used as Certificate Authority. Default is true.
+# If set to false, Hashicorp Vault is used instead.
+stackhpc_enable_openbao: true