Workaround for /etc/pki/CA/certs/vnc.crt not present
Workaround for /etc/pki/CA/certs/vnc.crt not present

When doing an upgrade to TLS Everywhere, vnc.crt is not always created
by the time the getcert command exits (even though it is run with the
-w flag). Puppet then ignores the instruction to change the file
permissions, resulting in an error at a later stage, when podman
tries to mount the file onto a container.

Change-Id: I0e0009d57cd1c90f8ae28a2cfc9337ecf8c75112

openstack/puppet-tripleo,openstack/puppet-tripleo,openstack/puppet-tripleo