add https support with port and cert

diff --git a/config.yaml b/config.yaml
index d34d87b..9cf81c8 100644
--- a/config.yaml
+++ b/config.yaml
+ transport-type:
+ type: string
+ description: |
+ Transport protocol for communicating with the storage system or proxy
+ server. Valid options include http and https.
+ default: http
+ netapp-server-port:
+ type: string
+ description: |
+ The TCP port to use for communication with the storage system or proxy
+ server. If not specified, ONTAP drivers will use 80 for HTTP and 443 for HTTPS.
+ default: ''

diff --git a/templates/queens/manila.conf b/templates/queens/manila.conf
index 0475d67..2438051 100644
--- a/templates/queens/manila.conf
+++ b/templates/queens/manila.conf

 netapp_storage_family = ontap_cluster
 netapp_server_hostname = {{ options.management_address }}
 netapp_login = {{ options.admin_name }}
 netapp_password = {{ options.admin_password }}
+netapp_transport_type = {{ options.transport_type }}
+netapp_server_port = {{ options.netapp_server_port }}

This feels like more than a wishlist. Not supporting https is a security risk. I'd argue that https should be the default.

I've hit this at a customer deployment and had to fork the charm with a patch similar to Narinder's to enable https.

> This feels like more than a wishlist. Not supporting https is a security risk. I'd argue that https should be the default.

In this case I meant 'wishlist' as in, not a bug, but a feature request. I didn't mean to imply that it was not important. If you do have a working patch, please do submit it as a patch to the charm. We can then work with it to get it into the stable charms. Alternatively, add the patch here and we can take it forward.

I need to suss out the cert implications first and then I'll submit a patch -- maybe even with tests, but that might be a stretch. :)

On reflection, I think my categorisation of wishlist for this one was wrong, and you (Vern) were correct in your comment. I've changed it to high to reflect that. Thanks very much for your work on this!

Note that part of this config option (netapp-transport-type, netapp-server-port) is provided in this fix https://review.opendev.org/c/openstack/charm-manila-netapp/+/863151.

The ca-cert is not added as part of that patch set, so leaving this bug open.