Add socks5 proxy via dante

[Fraggle]

Description

This PR adds a SOCKS5 proxy using Dante. The changes include:

1. Adding a new Dante Dockerfile and configuration
2. Creating a new GitHub Actions workflow for deploying Dante
3. Updating Kubernetes configurations to include the SOCKS proxy
4. Minor adjustments to existing configurations

Usage:
Use the SOCKS_PROXY_HOST and SOCKS_PROXY_PORT env variables in core or connectors (already available).

Risk

None

Deploy Plan

Apply infra

[spolu]

I'm a bit lost between nginx and dante and who uses what when and where. Do we have a design doc that describes the latest state?

[fontanierh]

What is special about our image? Ideally if we coule use a stock one we wouldn't need a github workflow etc...

[Fraggle]

The one i used before was also very old and the creator was using « ash » (making it different from our others images, breaking k8s_ssh for example)

I’m not a fan of the extra workflow either but we shouldn’t have to run it often.

[fontanierh]

Ok if there's no official image then LGTM 👍

[fontanierh]

What does it do?

[Fraggle]

Avoid the container to immediately shutdown.

[Fraggle]

Nginx = http proxy
Dante = socks proxy

Norhing uses dante yet.

The design doc is not up to date, i’ll update (btw i understood than design doc were only a point in time and they were not kept updated, is that incorrect ?)

[fontanierh]

LGTM

[spolu]

The design doc is not up to date, i’ll update (btw i understood than design doc were only a point in time and they were not kept updated, is that incorrect ?)

Well if the project is still ongoing it's good hygiene to have an up to date version so that it can be used to track progress and review to better understand PRs such as here.

re nginx vs dante: I though it was possible to do with nginx? is it? Right now snowflake uses nginx then? what's the plan for dante?

[Fraggle]

The design doc is not up to date, i’ll update (btw i understood than design doc were only a point in time and they were not kept updated, is that incorrect ?)

Well if the project is still ongoing it's good hygiene to have an up to date version so that it can be used to track progress and review to better understand PRs such as here.

No problemo, will do

re nginx vs dante: I though it was possible to do with nginx? is it?

It is but turned out more hacky than i was expecting (running a client in front of nginx).
After discussing quickly live with @fontanierh we decided that it was simpler to use dante.

Right now snowflake uses nginx then?

Yes

What's the plan for dante?

Immediately, nothing. Mostly about readiness for other db engines in « 48h » (such as postgres)

[spolu]

ack thanks