store openstack external cloud controller ca.cert in a k8s secret instead of the host filesystem (#7603)