Add RBAC rules to the heapster manifests and combine logical API objects into the same file

[luxas]

A lot of these manifests are/were obsolete, I'd be very happy to remove/cleanup things here.
RBAC is turned on by default in v1.6 and heapster is broken without credentials granted to it

I didn't touch standalone-test nor standalone-with-apiserver, are those relevant anymore?

fixes: kubernetes/kubeadm#248 cc @sebgoa

PTAL @DirectXMan12 @piosz @mwielgus and please merge ASAP

[k8s-reviewable]

This change is 

[liggitt]

the service account and deployment are logically paired. the RBAC objects are not, since they would not apply if RBAC authz was not in use.

[luxas]

Is there any harm done if it's applied/created when RBAC is not in use?

[liggitt]

if RBAC is not in use, default roles/rolebindings are not created

[luxas]

Ah, gotcha. Updated

[piosz]

/lgtm
thanks for the fix!

[jeffery9]

can not find where defined the clusterRole system:heapster

apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  creationTimestamp: 2017-05-19T01:29:35Z
  name: heapster
  resourceVersion: "48623"
  selfLink: /apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindingsheapster
  uid: 9dbf4447-3c32-11e7-8db8-0050562a8439
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:heapster
subjects:
- kind: ServiceAccount
  name: heapster
  namespace: kube-system

can't found clusterRole definition.

kubectl get clusterrole heapster
Error from server (NotFound): clusterroles.rbac.authorization.k8s.io "heapster" not found