@tpe I have a working Ignition file example here (…but sadly without the TLS certificates and OS trust store you asked for), but you can see how to create files in octal notation:
files:
- path: /etc/hostname
mode: 0644
overwrite: true
contents:
inline: yourhostname
With a leading 0 you can create the file system permission 644.
I used this documentation to get the correct specification. Please be aware that you need to stick to version 1.4 for OpenSUSE OSes!