open read only kubelet port for heapster
open read only kubelet port for heapster

once we upgrade to kubernetes 1.6 and heapster 1.3 with apiserver
deployment we can remove this, as heapster will connect to the API server
instead of to the kubelets directly.

kinvolk/aws-operator,giantswarm/aws-operator,giantswarm/aws-operator