feat(tls): Add CA cert to glance storage init

This patch set add CA certificate to glance storage init and also
converts the nginx.sh script to shell script.

Change-Id: If3e0cd194af7ed3e15668df799b2b9026e0135d8

glance/templates/bin/_nginx.sh.tpl

@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/bin/sh
 set -xe
 
 COMMAND="${@:-start}"

glance/templates/job-storage-init.yaml

@@ -129,7 +129,7 @@ spec:
             {{- if eq .Values.storage "swift" }}
             - name: SWIFT_TMPURL_KEY
               value: {{ .Values.endpoints.object_store.auth.glance.tmpurlkey | quote }}
-{{- with $env := dict "ksUserSecret" $envAll.Values.secrets.identity.glance }}
+{{- with $env := dict "ksUserSecret" $envAll.Values.secrets.identity.glance "useCA" .Values.manifests.certificates }}
 {{- include "helm-toolkit.snippets.keystone_openrc_env_vars" $env | indent 12 }}
 {{- end }}
             {{ end }}
@@ -160,6 +160,7 @@ spec:
             - name: glance-images
               mountPath: {{ .Values.conf.glance.glance_store.filesystem_store_datadir }}
             {{ end }}
+{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.image.api.internal | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
       volumes:
         - name: pod-tmp
           emptyDir: {}
@@ -185,4 +186,5 @@ spec:
           persistentVolumeClaim:
             claimName: glance-images
         {{ end }}
+{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.image.api.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
 {{- end }}