cherry-pick: fix: ensure /etc/kubernetes/certs exists before generating kubelet serving cert

cherry-pick: fix: ensure /etc/kubernetes/certs exists before generating kubelet serving cert #1677