Add public TLS certificates to identitiy images

Some profiles may want to have a fixed boot image,
and site specific content limited to the identity payload, or at
least the TLS so it could fetch the rest over https.

confluent_server/confluent/plugins/deployment/identimage.py

@@ -59,6 +59,7 @@ def create_ident_image(node, configmanager):
         yaml.safe_dump(ident, yamlout, default_flow_style=False)
     with open(os.path.join(tmpd, 'cnflnt.jsn'), 'w') as jsonout:
         json.dump(ident, jsonout)
+    shutil.copytree('/var/lib/confluent/public/site/tls', os.path.join(tmpd, 'tls'))
     mkdirp('/var/lib/confluent/private/identity_images/')
     imgname = '/var/lib/confluent/private/identity_images/{0}.img'.format(node)
     if os.path.exists(imgname):