Place all public accessible service ports for GKE services behind oauth proxy

[stephen-soltesz]

Our federation monitoring stack uses oauth proxy to provide access control to services with public addresses.

Some ports in the Gardener and Parser are technically publicly accessible (but not advertised). Though these addresses should not be generally accessible. They should be behind a similar oauth proxy.