Added MOS 24.2: different bug fixes

List of changes:
- use fresh heat image as a base for toolset image
- added cacert secret for public endpoints at rally and toolset
- rally creates env with public endpoints
- fixed rally openstack dry-run scenario typo
- added setting ext gw info for heat-router in prepare.sh
- added label to set image tag in dockerfile

Related-PROD: PROD-37187

Change-Id: I83c91c8ab20f39087f7db7b32f67dd7b2130d5e7
diff --git a/k8s/yamls/qa-toolset.yaml b/k8s/yamls/qa-toolset.yaml
index 831dcac..3c4b421 100644
--- a/k8s/yamls/qa-toolset.yaml
+++ b/k8s/yamls/qa-toolset.yaml
@@ -63,15 +63,18 @@
         secretKeyRef:
           key: OS_DEFAULT_DOMAIN
           name: keystone-keystone-admin
+    - name: OS_CACERT
+      value: /etc/ssl/certs/openstack-ca-bundle.pem
     imagePullPolicy: IfNotPresent
     name: toolset
-    #image: 127.0.0.1:44301/general/external/docker.io/library/ubuntu:bionic-20201119
-    #image: savex13/toolset:latest
-    #image: registry.mirantis.com/professional-services-qa/toolset:latest
-    image: registry.mirantis.com/professional-services-qa/toolset:23.3-antelope
+    image: registry.mirantis.com/professional-services-qa/toolset:24.2-antelope
     volumeMounts:
     - mountPath: /artifacts
       name: qa-pv-a
+    - mountPath: /etc/ssl/certs/openstack-ca-bundle.pem
+      name: ca-cert-bundle
+      readOnly: true
+      subPath: ca_bundle
   dnsPolicy: ClusterFirst
   volumes:
   - emptyDir: {}
@@ -79,3 +82,7 @@
   - name: qa-pv-a
     persistentVolumeClaim:
       claimName: qa-pvc-a
+  - name: ca-cert-bundle
+    secret:
+      defaultMode: 420
+      secretName: keystone-ca-bundle
\ No newline at end of file