cluster: partial cert bump

Done:

 1. etcd peer CA & certs
 2. etcd client CA & certs
 3. kube CA (currently all components set to accept both new and old CA,
    new CA called ca-kube-new)
 4. kube apiserver
 5. kubelet & kube-proxy
 6. prodvider intermediate

TODO:

 1. kubernetes controller-manager & kubernetes scheduler
 2. kubefront CA
 3. admitomatic?
 4. undo bundle on kube CA components to fully transition away from old
    CA

Change-Id: If529eeaed9a6a2063bed23c9d81c57b36b9a0115
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1487
Reviewed-by: q3k <q3k@hackerspace.pl>
diff --git a/cluster/secrets/cipher/kube-apiserver.key b/cluster/secrets/cipher/kube-apiserver.key
index f3b56da..eae1605 100644
--- a/cluster/secrets/cipher/kube-apiserver.key
+++ b/cluster/secrets/cipher/kube-apiserver.key
@@ -1,91 +1,41 @@
 -----BEGIN PGP MESSAGE-----
 
-hQEMAzhuiT4RC8VbAQgAgXSKioPeMLTj2DoTwkaCQUBmVi14sIaDL20RHPf1NNgh
-aCsbec1ZCKvcVTJFFySFcgw0slUXgcfhyWw8/UniWKFtxYYrHHmPgGg7K+/mSYac
-/cluCB1G55Dutz89ZYxi4zECeshTIrJzTSPToMOTFqzv1+zdnGs5Z27kldiWrkXx
-pCda9xcmk0niFZNZWlxj4070/47Yq5OqTWxUDvsCGI1iq70134TDkuRlzYQLKHiR
-j7QyON/S7P1m+r8/+atQKenKSlutVABy2OnvAgAjsjSUXZiTbzV6+5zWxbt9dnvu
-rUkGcD8nGqgv85ieKiJ9KKPmsRcGP9JS1M5Xepu+HYUBDANcG2tp6fXqvgEIAIW6
-WaiS7TlNumqycTYFHSyfvgBkaVBAF0DbbxkTMBAqRQWabUfsBZvcDouei8s5OkGt
-DH4mSwHJZ5G2GN6RhfARXQ/I+2cq/uRnY0YB4cT9LRcr5wUFQKxkDMIn9s82+r2a
-2ls69eiykWC9+NHpphWoY3ebBs3z8fcuhm2QkIt6lYZDKnC7Vud07drvtUWD1oOi
-MulP1OxtACNHGGoJgzPjMwd0uY/ulmHV3J2aYbxvdgWLFVBSK8vttjfcMBUM4UE6
-G6v1RwiOuwB2Xuj+6Z/TDY3MeNxeEnkINnSIqahvxaWImWqxpCmQPplsZTXmjPX3
-6WXlSzS13IVyPIuoJLyFAgwDodoT8VqRl4UBEACD4Q/xdo73J6e4ehS+bz9NZySP
-JrLCqfQIERsR8auagrKF7Hch6/hrCyODxbCYj5E+mzIXwoHPHzct6bpdTn6EMu5c
-0cAUqHFx7QO1gzN6Gyf6INnogpFeDJkzHGmzhMJ6eiwoR/2o0y5QyoT1BeJgwh3i
-/ShLmgdkBupxtXrYu2cKklWPsNmhzKTn+evLdu6Rb1dayyw8xJ/zN8Nstxfv4DSK
-vAxe9NR1UyqDPYqwNF+2vXtj3TDJsfrKnyvAUlHFmPA6fJwQOo5kHNn6QQ40w92f
-JuVrFLnaLfRjfexYzju6/AoyVSYeTft1Oolln0qenM6tM5j156HGm7II6J5Wu+lg
-uRQGFQIFBAXyBszw0qKhT1oXJpZwac81DUYwgqe0U0PqWH6tzHKDDI814V9raYmC
-k/HygNARdXKHXh6jpYYAFsLaMiw8rUj8LrSrSA+/rQxw49uLcODM+7g/Yr/urVcu
-6RWIwzkuFrwQz4dC1NJbqEG9xg40ak7wJa3mCEPeA7pr2RyTRFaKI4j1VQGubOwd
-QTAW3L/0foJ+Z93kpAPDpee2gtleR5E+d3DMkWDxt9ifhYUmuFariaSX8THIKggj
-bmCiWf6DjpYBZhwhPxNy28XSKFbFq+Y6p68YnjdBg9dozKE75Eh0PAQW2R54f5kD
-3so3rxsC0mOS3bVN6oUCDAPiA8lOXOuz7wEP/iIukv4gHyteG+6oGkfMUC/qLtSu
-fr5/CSILkeaQKkyxgP1yGHvENWnnKIqMi5Yh3YKyaxYoG4Vy8zq7InAi8zjpkrou
-VFrGyxfUVtNw8LgnHoWnMPZhPxHAzNH2h6feAjgy22N7biq5KR9CZKZxRwj74OmD
-1BSxIYH6+zvcIxnoPlqmgG2EG/u2ycLrhXwHZdigwVf21AhtjCMUgGsOn8KxoMs+
-dWgvJk7FkkdeT8fQ+xda5NXQkbdOReNkChCRvVvRzIMvtotBpJXXA+Miu7kJI3g6
-jCYEj4Ks4znWv14NOXR1WbDId1ll+fHEmwvcGCkq3Qdu//53AzCzX8elYDMt6sRv
-gAdY+WJRGxznZWEjMzi89ZkigFDQlI734WGtl9vza88JXbnqLyqvLXBp5Mz8h0Ud
-BUQPN5njVb2XAlXYbbPyDwV/769i1HHvJBAWRld1w361q8YygeF+mkv5rOBfZRU2
-47LGLMGNBJm2hH9A77r3RoOQ5WtkltVd9K5k23kpgS5B8ggNfyz9cvDuYaFYbPnf
-tHhPow1yPZ6/ipjUDwjJfiIe0Hc6bb0owMt9WafNsNx6NvR5pds+TtLv8jkQvLtH
-V0RFoE/TjJ189ext4e+JCoYsqLRHrc+PxCHr38k3a3Bmvc3qOjq7KBV+zoZ3PW5m
-o2rxB9pDFqspIPp30usBEWA99G+X1t6TL5etRDxaCcoYyt9ghAwiazLiHkNY96Fd
-QhsY5AugRP9tCRz7dUVgmEuRZYldJTne4kK024C6x1Qk5qiLlWE7rS7aCmUmkW/Z
-CJIjYQl+gHTp+lIuKcnooC3IXkah3xDHt4K0vEcT3Tz3x7krbapAUA0Lnpceq1P5
-aJmX5dlOXOR4b93X2rFFnFf6jv8YZICHQRu8C0x6l2PN/SEjFZXt3kFCFzebz1lM
-s3uiXQCC+rnpGlNRa1sO9nvKUraqi7XFHCTeavzwLEikzOH9DxxSAqMFUHcrxK6E
-WRY5fDHi175V4BVKFxqbC1XElLAkCqKewwIz965pcwnYCTSROX/Ur5zYU8L8QLFr
-FxeX4ArByWRa34N8Un34wMyigR+l3Ndt7aSMgVidoo0uFj4wwotxbGH+V4zA7A7P
-FPYywH0+u1acIySPzVizzjuDlcgzl0S9JSE+hP4JwtZOtZ2oI6C1akaFl3l7Jlcp
-oXsK9Es+ClyfN1SAbdftQfLghmz9xsLHaknXPrqAJwoFlm/SDhNp+IMlertRQIO9
-G1/hpPu5g7EBO4PMm+y1O8I0lRVAX28S+jA7QRjqstSCwDSmuNta/B0XS/XuMnca
-QVinCTf6nckj9lvz5/k3xgbQH59qb1C6IPTmo89WyLYmhFFLKj8DnDj4agvINR+b
-NoVGcwj9qBI7FuwGABH1brLll6bxcE5eDp+byKFogEcNZmtBHbON17VrOice9Xb5
-/9wKxFjKsQBCu3jcnOBzD+VBzxnEeYzF93L1fmjuUS2oB+hpVdVkN76D28MEij7q
-+3mUHtP19SzeZh4OhY9ne30wFk4qm0IsTsjFET818jNEg/pO321iTGrdh5indSfV
-CrtEcbpZ5czXFt1C6U8SBeuEQxh/lCMTfAGAd7IDPpIEKXssJrJf2lr1aDfZj9uK
-kXwodmTK8+haJPVlilCUhQw4zOauvmhY1HidmVTsswT9+Et2gbFCJMZln6aDbm1R
-Gpt4oppMzmE1+7nYvIV6appb93Qzl9WWADEomUEmqOUnl+CKnIenUYpVthnCRAn1
-ono1pj5mFTG88++EGg5zgw9SzZa+2T0QS22XGiIZH5sKgOHC1v+PtsK0KRhPTcHb
-cmQGApR+7Gk+kPPZCKYKqfhOs1314SAkUdLWqrcNXsQcG3BlP6xzoZ8HYTsa/QJt
-UuXLaxTk2+shB34jmsSXBdCL1i3qzIEu7V3VVxLEtfyzJYF5xNLllIIokB2kPGuP
-MShiEW2diLQYl75MslQszVIBCcmvny2K+/kF0QvsD1tP9lTc0UWwLoC76ghurAr9
-UQE28l6S+LPjrrkdMiwJsMLmWbmJvAHSiNFzrKRvteQjj1JQndIv+Sr10UD47QsJ
-kKIsh8v20MAvQoq7KjTIwAHzH/Tk5G9TdTJjR+t4kfNT0MxnzpXhGrE+hff+9ZIE
-XAo+9DYVMa9U+0g229kijOhXYl+77/8V/AkKdsRla+LMOVcjhuMkf5Qw7VBr6VlZ
-s6H0SFJVTWOn4acFvvdIcghDx8QASpGUvo6iq0Qs2oAsyHcGGoPWP+/5REYmeudE
-h6zMhV2zBKBcFaEd5iU8oOU+ePZOCXdXpB7CtWWzL+F9q4it+YKjsxy2v5B9HinO
-xqyDrie3nqKP7jWJrc/ch4MLo4DdtDRmblNNhM2P7d90INPxtY3LcV/u+Ode8ORx
-fd/6QpgG3y6USpuZjLI+pouoTlIXaksaJvCKkYNAYgquIEmzHy2EGDEnzoG8NjrZ
-p/ZLhn9wmfsvq/kr9tIYFjujzWNDGeRrSG6ZTCgK8W4vfk2fB2o6XTZ7+Bfyc5O5
-kH43jLsILr6zo0fsXYpj4yL70fknmzc2ificyQL6uSfCnsyaSPDRrTbu9f5hapJo
-qOl6ybZXJruocuP+rqwOV6jeAX6Q4/TwBaorjYGoMoiWUU/fskx3B/YjPLgtKCWq
-8jKqnamQsOrLczm7ZYxH5rlX9r4izd/YXedoE/eW4ZjtA5fJvXMPymgY3mdJ6+Q+
-bCMumqQ2/pdaBTxa1Bz2QZe0d1jJcDXiUfIAAAyvGsjdrr5ccZBIHMrMIF0oJb+c
-LYgHxRhbH+rywYQhHIwmcBxMmSztN3XIOhEQMl0HbAlk2hNoZKCKbwQvfsn5mGfJ
-r8/aCj5g56K5y4KXkW8/xcc7lNGxORvr3TNwwm8rj6v7wb8v8+KfkmWrg9/Z5mN9
-aY/u2mG9cpeA3zSKBFZlvenM7M+rJq2IOW8GUenyG7Zys3TFf3b7+af36nJsG6K2
-L4CzdK1QHfIRclcGslZ5sJN8TQjka476PW3mMPV2KdI0oHc0lmROngWhkjJ9obsQ
-WHuTXq1w+9yZgNJtwXkXGWfsuRNqz2eRZTuoXFC/lssFPU+M4/q04v+4XHedmuc3
-YfN+o8YbZ88YIw3XV9kLL6d7JS18PYUGjvE3B+/8Ai2LuiY2w3GK/6muu26BfdRV
-iIhCNTKDeTwxHESQlMQ3GX0k/OtWuk9p3PEW2+3tvAucm6mqozjxilkIT+qdOqeg
-WaQGqT05P1O6SAPKYWk5ACmfkFzeV5xOGMqfQRQuXbpV3p3PDof1Wg6uvhDMMnl8
-sqp0mIIj6bB+FoCxegc+QJ8dFB35XJTI5k4P3A8EvGyBpu/gd+7+hrVpi1xRhPNa
-syLLL4fiBUkLVAlZn5n4kE3YDbke2KSfZ4AZOSuaGy+ZOz6Z12WWu1GpQzbUWenc
-3YuqFNfTEpPlcgSirsNN29HyUm+sdwYpaFk5wXRZg8Qn6aJv+mV5TdyXhIqT8on/
-NQziXuZOpkaW0JrDuTjcjf3WAzVbaVd8ZYTrXijcYlUmrhBzavtfQLo1tRpJMVss
-xAFL+PM0JYmHSXDsQQR6uLkbD0l6Ys1gxNY6CXigMP608Df/p70iM0PrNvn7t/23
-ZYLNHzAde6AHtDQVRTmYt+XuHFZk5kGBntRYn1En4BoPaOPhVwMh2h4/R/Q6B5D5
-3ct6YTyWP6EEuNRDCX9VHj6v0Ebs+R16cVht9gpIQ5UH1wUc6OqZNOQoOpusFQ33
-TP5JlJ5Jr4lkHfA9MLlRfWmM+e8lu+3zXBnyGLurlZjaKwPRzd6iaVFdy2aUYcpz
-iU7bD1CZE1f6KZdXmbC2CBsGInnRK+S0VqZePVkErPsFVI3zIXK8XP/SsH1WKjvI
-TtZRMVVWoOwwr0TecgmQ7UxyTd0jQAAOYChmeHc51WV1bAQcEN9M3lMj/dCRmbG9
-9ocop6CHyDVHMvuR6V2h4FZMbO/EApe0msm1IwIXRLf/SLstI8fnijp3d4nJhH1h
-xRtgh8juIp3ZUbKwil+A5vJCYzD/Qp9YEwMtObcC6J65zPTkxL0UoXIXWPmeMmS/
-4/3KRdr8urjFewbXZOeNwnHoPfzrhfDA5WNmctVL2AE7
-=U+D5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+=7oZo
 -----END PGP MESSAGE-----