Create k8s server certs directly on ctl nodes

Related bug: https://mirantis.jira.com/browse/PROD-24174

Change-Id: I0eece9893afabe2b431de2ce050abd8bf95e759d
diff --git a/classes/cluster/k8s-ha-contrail-40/kubernetes/control.yml b/classes/cluster/k8s-ha-contrail-40/kubernetes/control.yml
index 3d55a35..0532e50 100644
--- a/classes/cluster/k8s-ha-contrail-40/kubernetes/control.yml
+++ b/classes/cluster/k8s-ha-contrail-40/kubernetes/control.yml
@@ -1,5 +1,6 @@
 classes:
 - system.etcd.server.cluster
+- system.salt.minion.cert.k8s_server
 - service.kubernetes.control.cluster
 - system.haproxy.proxy.listen.kubernetes.apiserver
 - system.linux.system.repo.docker_legacy