Bug 1443741

Description of problem:
  Ansible installation of metrics failed when running playbook for openshift-metrics.yaml, I get an error indicating the cert is not valid.

error: --signer-cert, \"/tmp/openshift-metrics-ansible-g8NWMu/ca.crt\" must be a valid certificate file\nSee 'oadm ca create-server-cert -h' for help and examples.

Version-Release number of selected component (if applicable):
master

How reproducible:
always.

Steps to Reproduce:
1. git clone https://github.com/openshift/openshift-ansible/
2. ansible-playbook -i <your_inventory_file> -vvv openshift-ansible/playbooks/byo/openshift-cluster/openshift-metrics.yml

Actual results:
      <openshift-127.lab.sjc.redhat.com> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o 'IdentityFile="/tmp/tmp/libra.pem"' -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=root -o ConnectTimeout=10 -o ControlPath=/opt/app-root/src/.ansible/cp/ansible-ssh-%h-%p-%r -tt openshift-127.lab.sjc.redhat.com '/bin/sh -c '"'"'/usr/bin/python /root/.ansible/tmp/ansible-tmp-1492631599.51-261101884427092/command.py; rm -rf "/root/.ansible/tmp/ansible-tmp-1492631599.51-261101884427092/" > /dev/null 2>&1 && sleep 0'"'"''
      fatal: [openshift-127.lab.sjc.redhat.com]: FAILED! => {
          "changed": true,
          "cmd": [
              "oadm",
              "ca",
              "create-server-cert",
              "--config=/tmp/openshift-metrics-ansible-g8NWMu/admin.kubeconfig",
              "--key=/tmp/openshift-metrics-ansible-g8NWMu/heapster.key",
              "--cert=/tmp/openshift-metrics-ansible-g8NWMu/heapster.cert",
              "--hostnames=heapster",
              "--signer-cert=/tmp/openshift-metrics-ansible-g8NWMu/ca.crt",
              "--signer-key=/tmp/openshift-metrics-ansible-g8NWMu/ca.key",
              "--signer-serial=/tmp/openshift-metrics-ansible-g8NWMu/ca.serial.txt"
          ],
          "delta": "0:00:00.271453",
          "end": "2017-04-19 15:53:20.016426",
          "failed": true,
          "invocation": {
              "module_args": {
                  "_raw_params": "oadm ca create-server-cert --config=/tmp/openshift-metrics-ansible-g8NWMu/admin.kubeconfig --key='/tmp/openshift-metrics-ansible-g8NWMu/heapster.key' --cert='/tmp/openshift-metrics-ansible-g8NWMu/heapster.cert' --hostnames=heapster --signer-cert='/tmp/openshift-metrics-ansible-g8NWMu/ca.crt' --signer-key='/tmp/openshift-metrics-ansible-g8NWMu/ca.key' --signer-serial='/tmp/openshift-metrics-ansible-g8NWMu/ca.serial.txt'",
                  "_uses_shell": false,
                  "chdir": null,
                  "creates": null,
                  "executable": null,
                  "removes": null,
                  "warn": true
              },
              "module_name": "command"
          },
          "rc": 1,
          "start": "2017-04-19 15:53:19.744973",
          "stderr": "error: --signer-cert, \"/tmp/openshift-metrics-ansible-g8NWMu/ca.crt\" must be a valid certificate file\nSee 'oadm ca create-server-cert -h' for help and examples.",
          "stdout": "",
          "stdout_lines": [],
          "warnings": []
      }
      	to retry, use: --limit @/tmp/tmp/openshift-ansible/playbooks/byo/openshift-cluster/openshift-metrics.retry

      PLAY RECAP *********************************************************************
      localhost                  : ok=1    changed=0    unreachable=0    failed=0
      openshift-127.lab.sjc.redhat.com : ok=28   changed=0    unreachable=0    failed=1


Expected results:


Additional info: