pkg/asset/tls: don't append parent to kube-apiserver cert
pkg/asset/tls: don't append parent to kube-apiserver cert

A self-signed CA must not be included in a server certificate bundle.

derekhiggins/installer,derekhiggins/installer