k8s_fedora: Add ca_key before all deployments

cherry-picked from: https://review.openstack.org/#/c/643924/1

The script [1] that writes the ca.key depends in the apiserver to be running and the script to start the apiserver [0] needs the ca.key to exist.

Write the ca_key before all other scripts that depend on the apiserver.

story: 2005254 task: 30051

[0] https://github.com/openstack/magnum/blob/master/magnum/drivers/common/templates/kubernetes/fragments/enable-services-master.sh [1] https://github.com/openstack/magnum/blob/master/magnum/drivers/k8s_fedora_atomic_v1/templates/kubecluster.yaml#L843

Change-Id: If532ccc4673225eb1b7e7cab77a30950ee5ee695 Signed-off-by: Spyros Trigazis spyridon.trigazis@cern.ch (cherry picked from commit 13e8c11f)

magnum/drivers/k8s_fedora_atomic_v1/templates/kubecluster.yaml

@@ -757,11 +757,11 @@ resources:
         list_join:
           - "\n"
           -
-            - get_file: ../../common/templates/kubernetes/fragments/kube-apiserver-to-kubelet-role.sh
             - str_replace:
                 template: {get_file: ../../common/templates/kubernetes/fragments/enable-cert-api-manager.sh}
                 params:
                   "$CA_KEY": {get_param: ca_key}
+            - get_file: ../../common/templates/kubernetes/fragments/kube-apiserver-to-kubelet-role.sh
             - get_file: ../../common/templates/kubernetes/fragments/core-dns-service.sh
             - str_replace:
                 template: {get_file: ../../common/templates/kubernetes/fragments/enable-prometheus-monitoring.sh}