Fix oci-update-cluster-certs ROLE detection, cp .csr optional and correct pem source for haproxy restart

Chris Sealrequested to merge
cmseal/openstack-cluster-installer:oci-cluster-cert-update-role-fix into debian/yoga
  • oci-update-cluster-certs:
    • ROLE variable declared second time incorrectly, so role isn't detected for controller/swiftproxy API key/certs copy
    • cp .csr optional - csr not required if using LetEncrypt/Certbot, for example
  • oci-update-cluster-certs-restart-services:
    • correct source cp when haproxy is restarted, from when updated in oci-update-cluster-certs

Merge request reports