Kubernetes makes this namespace automatically, so there is no need for kubespray to manage it.
This should be done after kubeconfig is set for admin and before network plugins are up.