kubespray/roles/kubernetes-apps/csi_driver/cinder/tasks/cinder-write-cacert.yml

---
# include to workaround mitogen issue
# https://github.com/dw/mitogen/issues/663

- name: Cinder CSI Driver | Write cacert file
  copy:
    src: "{{ cinder_cacert }}"
    dest: "{{ kube_config_dir }}/cinder-cacert.pem"
    group: "{{ kube_cert_group }}"
    mode: 0640
  tags: cinder-csi-driver
  delegate_to: "{{ delegate_host_to_write_cacert }}"