beta to stable

[zalando-teapot-robot]

• Revert "Revert "RBAC: rollout [2/2]""
  ^{Merge pull request Revert "Revert "RBAC: rollout [2/2]"" #2862 from zalando-incubator/revert-2861-revert-2456-webhook-deny-only}
• Revert "Revert "Revert "RBAC: rollout [2/2]"""
  ^{Merge pull request Revert "Revert "Revert "RBAC: rollout [2/2]""" #2864 from zalando-incubator/revert-2862-revert-2861-revert-2456-webhook-deny-only}
• remove zmon components
  ^{Merge pull request remove zmon components #2863 from pitr/cleanup-zmon}
• RBAC: rollout [2/2]
  ^{Merge pull request RBAC: rollout [2/2] #2865 from zalando-incubator/revert-2864-revert-2862-revert-2861-revert-2456-webhook-deny-only}
• Update ExternalDNS to v0.5.18
  ^{Merge pull request Update ExternalDNS to v0.5.18 #2855 from zalando-incubator/external-dns-v0.5.18}
• Give PowerUser/ReadOnly access to persistentvolumes via RBAC
  ^{Merge pull request Give PowerUser/ReadOnly access to persistentvolumes via RBAC #2869 from zalando-incubator/poweruser-persistentvolumes}
• Update admission-controller (crd admitter)
  ^{Merge pull request Update admission-controller (crd admitter) #2870 from zalando-incubator/crd-admit-update}
• Allow access to priority classes and events (PowerUser/ReadOnly)
  ^{Merge pull request Allow access to priority classes and events (PowerUser/ReadOnly) #2871 from zalando-incubator/poweruser-allow-priorityclasses}
• Enable rotation of service account tokens
  ^{Merge pull request Enable rotation of service account tokens #2839 from zalando-incubator/bound-service-account-tokens}
• VPA: update secret before updating the pod
  ^{Merge pull request VPA: update secret _before_ updating the pod #2874 from zalando-incubator/fix-vpa-admitter}
• Update auth webhook to 0.7.4
  ^{Merge pull request Update auth webhook to 0.7.4 #2873 from zalando-incubator/update-webhook}
• Collaborator role: fix daemonsets
  ^{Merge pull request Collaborator role: fix daemonsets #2876 from zalando-incubator/fix-visibility-rbac}
• Move stuff to the private repo
  ^{Merge pull request Move stuff to the private repo #2872 from zalando-incubator/move-lightstep-token}
• Update kube-state-metrics to v1.9.1
  ^{Merge pull request Update kube-state-metrics to v1.9.1 #2878 from zalando-incubator/state-metrics}
• Make it possible to allow collaborator admin access in pet clusters
  ^{Merge pull request Make it possible to allow collaborator admin access in pet clusters #2877 from zalando-incubator/collaborator-pet-cluster}
• Update kube-state-metrics to v1.9.2
  ^{Merge pull request Update kube-state-metrics to v1.9.2 #2880 from zalando-incubator/ksm-v1.9.2}
• Collaborators: bind something that actually exists
  ^{Merge pull request Collaborators: bind something that actually exists #2882 from zalando-incubator/fix-collaborator-role}
• Set various configurations for virtual memory
  ^{Merge pull request Set various configurations for virtual memory #2879 from zalando-incubator/set-vm-parameters}
• Fix mirror pods
  ^{Merge pull request Fix mirror pods #2885 from zalando-incubator/fix-mirror-pods}
• Update to 1.15.9
  ^{Merge pull request Update to 1.15.9 #2887 from zalando-incubator/update-1-15-9}
• kubelet: drop readOnlyPort
  ^{Merge pull request kubelet: drop readOnlyPort #2884 from zalando-incubator/remove-readonly-port}
• Fix deployment role
  ^{Merge pull request Fix deployment role #2888 from zalando-incubator/fix-deployment-resources}
• Restore the kubectl node role label
  ^{Merge pull request Restore the kubectl node role label #2890 from zalando-incubator/fix-node-labels}
• [1/2] CDP controller role: allow the use of v2 tokens
  ^{Merge pull request [1/2] CDP controller role: allow the use of v2 tokens #2891 from zalando-incubator/cdp-controller-v2}
• RBAC: allow events.k8s.io for events
  ^{Merge pull request RBAC: allow events.k8s.io for events #2894 from zalando-incubator/events-k8s-io}