Moved the cert generation to a separate salt state and put it in a more appropriate sharable location (`/srv/kubernetes/`).