Always generate kops-controller certs

[hakman]

This is a quick simple fix, but can be easily be reverted and a better one added later.

Fixes: #10704

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: hakman

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [hakman]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[hakman]

/cc @rifelpet @johngmyers

[hakman]

/retest

[olemarkus]

/lgtm

[justinsb]

Yes, I concur with this fix; it is consistent with our always labelling with the pki label!

Thanks @hakman!

[hakman]

Thanks @justinsb. I guess now all blockers for 1.19.1 are fixed?

[justinsb]

I think we also want to figure out the kubenet + containerd thing... I borrowed your trick and am trying to get that to pass... They all pass on GCE somehow (https://k8s-testgrid.appspot.com/google-gce#gce-containerd)

I'm generally double-checking the list... we should probably also check this fix against the two reported scenarios (at least mentally run through the scenarios!)