Run certificate-authority independently during upgrade
Run certificate-authority independently during upgrade

localhost is not part of the `all` and excluded from play with any limit
Because of that CA is not being generated during upgrade and
things fail later with being unable to retrieve CA.

This being workedaround with adding another task, that will setup
root and intermediate certificates in advance.

Change-Id: Ia5d82a7c8172407a0389ec9504ec80b3e842f88b

stackforge/os-ansible-deployment,openstack/openstack-ansible,stackforge/os-ansible-deployment,openstack/openstack-ansible