kubespray/roles/kubernetes-apps/external_cloud_controller/openstack/tasks/openstack-write-cacert.yml

---
# include to workaround mitogen issue
# https://github.com/dw/mitogen/issues/663

- name: External OpenStack Cloud Controller | Write cacert file
  copy:
    src: "{{ external_openstack_cacert }}"
    dest: "{{ kube_config_dir }}/external-openstack-cacert.pem"
    group: "{{ kube_cert_group }}"
    mode: 0640
  tags: external-openstack
  delegate_to: "{{ delegate_host_to_write_cacert }}"