Merge pull request #422 from kubespray/issue-421

remove host ca-certs, as they aren't necessary

roles/kubernetes/master/templates/manifests/kube-controller-manager.manifest.j2

@@ -32,9 +32,6 @@ spec:
     - mountPath: {{ kube_cert_dir }}
       name: ssl-certs-kubernetes
       readOnly: true
-    - mountPath: /etc/ssl/certs
-      name: ssl-certs-host
-      readOnly: true
 {% if cloud_provider is defined and cloud_provider == "openstack" %}
     - mountPath: {{ kube_config_dir }}/cloud_config
       name: cloudconfig
@@ -44,9 +41,6 @@ spec:
   - hostPath:
       path: {{ kube_cert_dir }}
     name: ssl-certs-kubernetes
-  - hostPath:
-      path: /etc/ssl/certs/
-    name: ssl-certs-host
 {% if cloud_provider is defined and cloud_provider == "openstack" %}
   - hostPath:
       path: {{ kube_config_dir }}/cloud_config