add path to CA bundle so requests picks it up
diff --git a/roles/juju-setup/templates/admin-openrc.sh.j2 b/roles/juju-setup/templates/admin-openrc.sh.j2
index bd195a4..86eb230 100644
--- a/roles/juju-setup/templates/admin-openrc.sh.j2
+++ b/roles/juju-setup/templates/admin-openrc.sh.j2
@@ -3,3 +3,4 @@
 export OS_TENANT_NAME=admin
 export OS_AUTH_URL=https://keystone.{{ site_suffix }}:5000/v2.0
 export OS_REGION_NAME=RegionOne
+export REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt