The manual instructions are missing the step to update the SSH CA
and Octavia certificate variables.t
The step to update the PKI CA is left over from the W to X upgrade
and should not be required for X to Y. Update the instructions and
script for this.
Change-Id: I142cad013775c457f841994bb3ba10be78c9bc54