diff --git a/install/installer/cmd/testdata/render/minimal/output.golden b/install/installer/cmd/testdata/render/minimal/output.golden
index 5923429fe34874..2a11e41e852e5c 100644
--- a/install/installer/cmd/testdata/render/minimal/output.golden
+++ b/install/installer/cmd/testdata/render/minimal/output.golden
@@ -6141,6 +6141,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         - name: JAEGER_DISABLED
           value: "true"
         - name: NODENAME
@@ -6417,6 +6437,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         - name: JAEGER_DISABLED
           value: "true"
         - name: GRPC_GO_RETRY
@@ -6622,6 +6662,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         - name: JAEGER_DISABLED
           value: "true"
         - name: NODENAME
@@ -6895,6 +6955,26 @@ spec:
               value: svc.cluster.local
             - name: LOG_LEVEL
               value: info
+            - name: HTTP_PROXY
+              valueFrom:
+                configMapKeyRef:
+                  key: httpProxy
+                  name: proxy-server
+                  optional: true
+            - name: HTTPS_PROXY
+              valueFrom:
+                configMapKeyRef:
+                  key: httpsProxy
+                  name: proxy-server
+                  optional: true
+            - name: CUSTOM_NO_PROXY
+              valueFrom:
+                configMapKeyRef:
+                  key: noProxy
+                  name: proxy-server
+                  optional: true
+            - name: NO_PROXY
+              value: $(CUSTOM_NO_PROXY)
           image: eu.gcr.io/gitpod-core-dev/build/openvsx-proxy:test
           imagePullPolicy: IfNotPresent
           name: openvsx-proxy
@@ -7241,6 +7321,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         - name: JAEGER_DISABLED
           value: "true"
         - name: GRPC_GO_RETRY
@@ -7355,6 +7455,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         - name: DB_HOST
           valueFrom:
             secretKeyRef:
@@ -7619,6 +7739,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         - name: JAEGER_DISABLED
           value: "true"
         image: eu.gcr.io/gitpod-core-dev/build/ws-proxy:test
@@ -7765,6 +7905,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         image: eu.gcr.io/gitpod-core-dev/build/ide-proxy:test
         imagePullPolicy: IfNotPresent
         name: ide-proxy
@@ -7853,6 +8013,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         - name: JAEGER_DISABLED
           value: "true"
         - name: GRPC_GO_RETRY
@@ -8091,6 +8271,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         image: eu.gcr.io/gitpod-core-dev/build/dashboard:test
         imagePullPolicy: IfNotPresent
         name: dashboard
@@ -8178,6 +8378,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         - name: JAEGER_DISABLED
           value: "true"
         image: eu.gcr.io/gitpod-core-dev/build/blobserve:test
@@ -8313,6 +8533,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         - name: JAEGER_DISABLED
           value: "true"
         - name: MESSAGEBUS_USERNAME
@@ -8578,6 +8818,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         - name: PROXY_DOMAIN
           value: minimal-test.gitpod.com
         image: eu.gcr.io/gitpod-core-dev/build/proxy:test
@@ -8713,6 +8973,26 @@ spec:
           value: svc.cluster.local
         - name: LOG_LEVEL
           value: info
+        - name: HTTP_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpProxy
+              name: proxy-server
+              optional: true
+        - name: HTTPS_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: httpsProxy
+              name: proxy-server
+              optional: true
+        - name: CUSTOM_NO_PROXY
+          valueFrom:
+            configMapKeyRef:
+              key: noProxy
+              name: proxy-server
+              optional: true
+        - name: NO_PROXY
+          value: $(CUSTOM_NO_PROXY)
         - name: JAEGER_DISABLED
           value: "true"
         image: eu.gcr.io/gitpod-core-dev/build/image-builder-mk3:test
@@ -9075,3 +9355,10 @@ spec:
   schedule: '@daily'
   successfulJobsHistoryLimit: 3
 status: {}
+
+              runAsUser: 31001
+          restartPolicy: OnFailure
+          serviceAccountName: gitpod
+  schedule: '@daily'
+  successfulJobsHistoryLimit: 3
+status: {}