In the MCP 2019.2.5 maintenance update, Mirantis added the capability to enable Secure Sockets Layer (SSL) for the internal endpoint of the OpenContrail 4.1 API. By default, the feature is disabled.
To obtain the enhancement, first follow the steps described in Apply maintenance updates.