metrics-for-apps:

- Updating apache proxy config to handle ocp4 CA cert
- place ocp4 CA cert on proxies
- add ocp4 stg ca cert to haproxy/files

Signed-off-by: David Kirwan <dkirwan@redhat.com>

roles/httpd/reverseproxy/templates/reversepassproxy.conf

@@ -23,7 +23,13 @@ SSLProxyEngine On
 {% if targettype is defined and targettype == "openshift" %}
   SSLProxyVerify require
   SSLProxyCheckPeerName Off
+  {% if ocp4 and env == "production" %}
+  SSLProxyCACertificateFile "/etc/haproxy/ocp-prod.pem"
+  {% elif ocp4 and env == "staging" %}
+  SSLProxyCACertificateFile "/etc/haproxy/ocp-stg.pem"
+  {% else %}
   SSLProxyCACertificateFile "/etc/haproxy/os-master.pem"
+  {% endif %}
 {% endif %}
 
 <Proxy "balancer://{{balancer_name}}-websocket">