Enable tls for 9200 on search capable nodes

salt/elasticsearch/files/sotls.yml

@@ -9,4 +9,8 @@ protocols:
 ciphers:
 - TLS_RSA_WITH_AES_128_CBC_SHA256
 transport.encrypted: true
+{%- if grains['role'] in ['so-node','so-heavynode'] %}
+http.encrypted: true
+{%- else %}
 http.encrypted: false
+{%- endif %}