* Fix permissions of cinder cert * Change runuser for external_cloud_controller to kube user with id 999, part of 999 - kube-cert group