refactor: moved `bastion` module to after `etcd` module
refactor: moved `bastion` module to after `etcd` module

it is possible that bastion could catch an ip wanted by etcd - will need to move bastion private_ip to static

kz8s/tack,ii/cncfdemo,kz8s/terraform-aws-coreos-kubernetes,yagonobre/tack