docker/sapphire: Include Envoy proxy

[ptrus]

Fixes: #423

Envoy proxy is now included which exposes the clients node internal.sock on port 8544 (by default). Envoy is used because it also supports grpc-web, which might be useful/needed when testing any dapps.

[matevz]

Can you also please add envoy support to emerald-localnet.

[matevz]

I tried testing it locally with the Oasis CLI, but it seems a TLS connection is required. Do you think we could simply use a self-signed cert?

oasis net add localnet a41bd4bc75f31e68ceb1e8543f1a08ca54069b155f980bdf0316ec16ed194772 localhost:8544
oasis net status --network localnet
Error: failed to retrieve remote node's chain context: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: tls: first record does not look like a TLS handshake"

[ptrus]

I tried testing it locally with the Oasis CLI, but it seems a TLS connection is required. Do you think we could simply use a self-signed cert?

Added. The GRPC port now supports both TLS with self-signed certs and unsecured traffic as well.

oasis net add localnet 761298f959ad9f7fd8f832cb62fa0c15c2ba9a112a27fabfcb6bd6fca6d47843 localhost:8544
? Description: just testing
? Denomination symbol: TEST
? Denomination decimal places: 9

[matevz]

Oasis CLI is still not entirely satisfied ;)

$ oasis net add localnet 0b91b8e4e44b2003a7c5e23ddadb5e14ef5345c0ebcb3ddcae07fa2f244cab76 localhost:8544
? Description: 
? Denomination symbol: TEST
? Denomination decimal places: 9
$ oasis net status --network localnet
Error: failed to retrieve remote node's chain context: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate relies on legacy Common Name field, use SANs instead"

[ptrus]

Fixed, but it turns out that the oasis-cli doesn't allow self-signed certs

oasis net status --network localnet_test
Error: failed to retrieve remote node's chain context: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate signed by unknown authority"

IMO this should be fixed this in the CLI so that it supports untrusted connection for localhost (or via a flag).

[ptrus]

Removed TLS support as discused. oasis-cli and oasis-node will start working once the new releases will be made and binaries will be updated. I suggest we merge this PR, not blocking on that.

[matevz]

I tested this with the fork of Oasis CLI using oasisprotocol/oasis-sdk#2013 and works. Good job!