When container runtime moving to containerd, the containers are
created by containerd. Accordingly, the client tool is changed
to crictl. In the kube cert rotation script, the containers will
be stopped by crictl and automatically started by kubelet to
update the renewed certificates within the container.
Story: 2006145
Task: 37619
Change-Id: Ia8cf76c15811f8f9d88199158e83ccba31534e4e
Signed-off-by: Mingyuan Qi <mingyuan.qi@intel.com>