If you are deploying test OpenStack systems with self signed certs and want to test kubernetes/keystone authentication against it, it currently fails due to cert validation.

There needs to be two options to apiserver
--keystone-insecure=true - Ignore certificate issues. Only for testing
--certificate-authority=/path/to/ca.pem - Specify the certificate authority used to issue the keystone cert.