text: Title: apiserver and controller manager pod doesn't start with Kubeadm
  Body: <!-- This form is for bug reports and feature requests ONLY! 
  
  If you're looking for help check [Stack Overflow](https://stackoverflow.com/questions/tagged/kubernetes) and the [troubleshooting guide](https://kubernetes.io/docs/tasks/debug-application-cluster/troubleshooting/).
  -->
  
  **Is this a BUG REPORT or FEATURE REQUEST?**:
  /kind bug
  
  
  **What happened**:
  Launched Kubernetes cluster using kubeadm. But, apiserver and controller manager pod doesn't start
  **What you expected to happen**:
  apiserver and controller manager should start 
  **How to reproduce it (as minimally and precisely as possible)**:
  Run kubeadm:
  ```kubeadm init --config config1 --skip-preflight-checks```
  config1:
  ```
  api:
    advertiseAddress: 10.161.169.219
    bindPort: 6443
  authorizationModes:
  - Node
  - RBAC
  certificatesDir: /etc/kubernetes/pki
  cloudProvider: "vsphere"
  etcd:
    caFile: ""
    certFile: ""
    dataDir: /var/lib/etcd
    endpoints: null
    image: "gcr.io/google-containers/etcd:3.1.10"
    keyFile: ""
  imageRepository: docker.io/ashivani
  kubernetesVersion: v1.8.2
  networking:
    dnsDomain: cluster.local
    podSubnet: "10.244.0.0/16"
    serviceSubnet: 10.96.0.0/12
  nodeName: promc-2n-dhcp105-23
  token: ""
  tokenTTL: 24h0m0s
  unifiedControlPlaneImage: "docker.io/ashivani/hyperkube-amd64:v1.8.2"
  apiServerExtraArgs:
    cloud-config: /etc/kubernetes/conf/vsphere.conf
  controllerManagerExtraArgs:
    cloud-config: /etc/kubernetes/conf/vsphere.conf
  apiServerExtraVolumes:
      - name: configMount
        hostPath: /etc/kubernetes/conf
        mountPath: /etc/kubernetes/conf
  controllerManagerExtraVolumes:
       - name: configMount
         hostPath: /etc/kubernetes/conf
         mountPath: /etc/kubernetes/conf
  ```
  
  **Anything else we need to know?**:
  
  **Environment**:
  - Kubernetes version (use `kubectl version`):  master (commit: 687c8d3297)  
  - Cloud provider or hardware configuration: vsphere
  - OS (e.g. from /etc/os-release): Ubuntu 16.04
  - Kernel (e.g. `uname -a`): 4.4.0-87-generic
  - Install tools: 
  - Others:
  
  Manifest generated by Kubeadm:
  **apiserver**
  ```
  apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      scheduler.alpha.kubernetes.io/critical-pod: ""
    creationTimestamp: null
    labels:
      component: kube-apiserver
      tier: control-plane
    name: kube-apiserver
    namespace: kube-system
  spec:
    containers:
    - command:
      - kube-apiserver
      - --cloud-config=/etc/kubernetes/conf/vsphere.conf
      - --insecure-port=0
      - --kubelet-client-certificate=/etc/kubernetes/pki/apiserver-kubelet-client.crt
      - --secure-port=6443
      - --proxy-client-key-file=/etc/kubernetes/pki/front-proxy-client.key
      - --requestheader-group-headers=X-Remote-Group
      - --advertise-address=10.161.169.219
      - --service-account-key-file=/etc/kubernetes/pki/sa.pub
      - --admission-control=Initializers,NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,DefaultTolerationSeconds,NodeRestriction,ResourceQuota
      - --enable-bootstrap-token-auth=true
      - --requestheader-extra-headers-prefix=X-Remote-Extra-
      - --service-cluster-ip-range=10.96.0.0/12
      - --client-ca-file=/etc/kubernetes/pki/ca.crt
      - --kubelet-client-key=/etc/kubernetes/pki/apiserver-kubelet-client.key
      - --proxy-client-cert-file=/etc/kubernetes/pki/front-proxy-client.crt
      - --allow-privileged=true
      - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
      - --proxy-client-cert-file=/etc/kubernetes/pki/front-proxy-client.crt
      - --allow-privileged=true
      - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
      - --requestheader-username-headers=X-Remote-User
      - --requestheader-allowed-names=front-proxy-client
      - --tls-cert-file=/etc/kubernetes/pki/apiserver.crt
      - --tls-private-key-file=/etc/kubernetes/pki/apiserver.key
      - --requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt
      - --authorization-mode=Node,RBAC
      - --etcd-servers=http://127.0.0.1:2379
      - --cloud-provider=vsphere
      image: docker.io/ashivani/hyperkube-amd64:v1.8.2
      livenessProbe:
        failureThreshold: 8
        httpGet:
          host: 10.161.169.219
          path: /healthz
          port: 6443
          scheme: HTTPS
        initialDelaySeconds: 15
        timeoutSeconds: 16
      name: kube-apiserver
      resources:
        requests:
          cpu: 250m
      volumeMounts:
      - mountPath: /etc/pki
        name: ca-certs-etc-pki
        readOnly: true
      - mountPath: /etc/kubernetes/conf
        name: configMount
        readOnly: true
      - mountPath: /etc/kubernetes/pki
        name: k8s-certs
        readOnly: true
      - mountPath: /etc/ssl/certs
        name: ca-certs
        readOnly: true
    hostNetwork: true
    volumes:
    - hostPath:
        path: /etc/kubernetes/pki
        type: DirectoryOrCreate
      name: k8s-certs
    - hostPath:
        path: /etc/ssl/certs
        type: DirectoryOrCreate
    - hostPath:
        path: /etc/pki
        type: DirectoryOrCreate
      name: ca-certs-etc-pki
    - hostPath:
        path: /etc/kubernetes/conf
        type: DirectoryOrCreate
      name: configMount
  status: {}
  ```
  **controller-manager**
  ```
  apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      scheduler.alpha.kubernetes.io/critical-pod: ""
    creationTimestamp: null
    labels:
      component: kube-controller-manager
      tier: control-plane
    name: kube-controller-manager
    namespace: kube-system
  spec:
    containers:
    - command:
      - kube-controller-manager
      - --cloud-config=/etc/kubernetes/conf/vsphere.conf
      - --root-ca-file=/etc/kubernetes/pki/ca.crt
      - --cluster-signing-cert-file=/etc/kubernetes/pki/ca.crt
      - --cluster-signing-key-file=/etc/kubernetes/pki/ca.key
      - --address=127.0.0.1
      - --use-service-account-credentials=true
      - --controllers=*,bootstrapsigner,tokencleaner
      - --kubeconfig=/etc/kubernetes/controller-manager.conf
      - --service-account-private-key-file=/etc/kubernetes/pki/sa.key
      - --leader-elect=true
      - --cloud-provider=vsphere
      - --allocate-node-cidrs=true
      - --cluster-cidr=10.244.0.0/16
      - --node-cidr-mask-size=24
      image: docker.io/ashivani/hyperkube-amd64:v1.8.2
      livenessProbe:
        failureThreshold: 8
        httpGet:
          host: 127.0.0.1
          path: /healthz
          port: 10252
          scheme: HTTP
        initialDelaySeconds: 15
        timeoutSeconds: 15
      name: kube-controller-manager
      resources:
        requests:
          cpu: 200m
      volumeMounts:
      - mountPath: /etc/pki
        name: ca-certs-etc-pki
        readOnly: true
      - mountPath: /etc/kubernetes/conf
        name: configMount
        readOnly: true
      - mountPath: /etc/kubernetes/pki
        name: k8s-certs
        readOnly: true
      - mountPath: /etc/ssl/certs
        name: ca-certs
        readOnly: true
      - mountPath: /etc/kubernetes/controller-manager.conf
        name: kubeconfig
        readOnly: true
      - mountPath: /usr/libexec/kubernetes/kubelet-plugins/volume/exec
        name: flexvolume-dir
    hostNetwork: true
    volumes:
    - hostPath:
        path: /etc/kubernetes/pki
        type: DirectoryOrCreate
    - hostPath:
        path: /etc/ssl/certs
        type: DirectoryOrCreate
      name: ca-certs
    - hostPath:
        path: /etc/kubernetes/controller-manager.conf
        type: FileOrCreate
      name: kubeconfig
    - hostPath:
        path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec
        type: DirectoryOrCreate
      name: flexvolume-dir
    - hostPath:
        path: /etc/pki
        type: DirectoryOrCreate
      name: ca-certs-etc-pki
    - hostPath:
        path: /etc/kubernetes/conf
        type: DirectoryOrCreate
      name: configMount
  
  ```