feat: (IAC-480) Change default certificate generator to openssl

[jarpat]

Changes

Makes the new default for V4_CFG_TLS_GENERATOR to openssl. Also changes CERT_MANAGER_ENABLED to false so cert-manager does not get installed during the baseline by default.

Tests

See internal IAC-480 ticket

[thpang]

Just a general comment here. There is no parity between what used to be in place for the cert-manager and openssl that was installed during the deployment repo install phase. Would be nice, if possible to have openssl as part of the baseline to keep things aligned.

[jarpat]

Just a general comment here. There is no parity between what used to be in place for the cert-manager and openssl that was installed during the deployment repo install phase. Would be nice, if possible to have openssl as part of the baseline to keep things aligned.

I think this is ready for re-review after the discussion we had last week.

[dhoucgitter]

Just a doc comment.
Since there are now two certificate handling objects that IAC can impact, I think it might help to say, "Whether to deploy certificate-manager into the cluster" to be more specific than "tool" here.

[jarpat]

@dhoucgitter, you're right that description doesn't seem to be clear. I've updated the description and notes section to:

Name	Description	Type	Default	Required	Notes	Tasks
CERT_MANAGER_ENABLED	Whether to deploy cert-manager into the cluster using helm	bool	false	false	Required if V4_CFG_TLS_GENERATOR is set to cert-manager and it's not already installed	baseline

Let me know if that sounds better

[dhoucgitter]

I added a minor doc comment, otherwise lgtm

[thpang]

LGTM. We'll have future conversations about OpenSSL and possible cluster enablement vs namespace enablement with Viya.