cherry-picked from: https://review.openstack.org/#/c/643924/1
The script  that writes the ca.key depends in the apiserver to be running and the script to start the apiserver  needs the ca.key to exist.
Write the ca_key before all other scripts that depend on the apiserver.
story: 2005254 task: 30051
 https://github.com/openstack/magnum/blob/master/magnum/drivers/common/templates/kubernetes/fragments/enable-services-master.sh  https://github.com/openstack/magnum/blob/master/magnum/drivers/k8s_fedora_atomic_v1/templates/kubecluster.yaml#L843