[chart] Enable kube-rbac-proxy for proxy

chart/templates/proxy-deployment.yaml

@@ -51,6 +51,7 @@ spec:
             - -c
             - "sysctl -w net.core.somaxconn=32768; sysctl -w net.ipv4.ip_local_port_range='1024 65000'"
       containers:
+{{ include "gitpod.kube-rbac-proxy" $this | indent 6 }}
       - name: proxy
         image: {{ template "gitpod.comp.imageFull" $this }}
 {{ include "gitpod.container.imagePullPolicy" $this | indent 8 }}

chart/values.yaml

@@ -430,6 +430,9 @@ components:
       https:
         expose: true
         containerPort: 443
+      metrics:
+        expose: false
+        containerPort: 9500
     loadBalancerIP: null
     serviceType: "LoadBalancer"
     serviceSessionAffinity: "None"

components/proxy/conf/Caddyfile

@@ -129,7 +129,9 @@
 :8003 {
 	respond /live 200
 	respond /ready 200
+}
 
+127.0.0.1:9500 {
 	metrics /metrics {
 		disable_openmetrics
 	}