k8s: Update ingress to use IAP OAuth config

This allows Jenkins to actually work for google.com users. This also
required making a few changes in Pantheon to update the proxy
permissions to allow IAP authentications for google.com.

Change-Id: Iaedb7d7e9197b19b062f18e6de861f83f82b738d