cloudkitty: set cafile for fetcher_keystone

Without this setting, the keystone fetcher fails to authenticate when
using internal TLS with a local CA.

Closes-Bug: #2000097

Change-Id: Ia709f450c3e5b73e145e89a305cd038c05507dc6

ansible/roles/cloudkitty/templates/cloudkitty.conf.j2

@@ -80,6 +80,7 @@ backend = {{ cloudkitty_fetcher_backend }}
 [fetcher_keystone]
 keystone_version = 3
 auth_section = keystone_authtoken
+cafile = {{ openstack_cacert }}
 region_name = {{ openstack_region_name }}
 {% endif %}