adding more explicit exceptions for openstackccm, cause it can apparently...

adding more explicit exceptions for openstackccm, cause it can apparently still not do everything it needs

roles/rke2/selinux/my-openstack.te

@@ -7,4 +7,6 @@ require {
 }
 
 #============= container_t ==============
-allow container_t cert_t:dir read;
\ No newline at end of file
+allow container_t cert_t:dir read;
+allow container_t cert_t:file { open read };
+allow container_t cert_t:lnk_file read;
\ No newline at end of file