Copy ca-key.pem to etcd and kube-masters accordingly

roles/vault/tasks/cluster/main.yml

@@ -32,6 +32,7 @@
     gen_ca_mount_path: "{{ vault_pki_mounts.kube.name }}"
     gen_ca_vault_headers: "{{ vault_headers }}"
     gen_ca_vault_options: "{{ vault_ca_options.kube }}"
+    gen_ca_copy_group: "kube-master"
   when: inventory_hostname in groups.vault
 
 - include_tasks: ../shared/auth_backend.yml