Access private resources from Spacelift CI/CD runners using Twingate's userspace networking mode — no root, TUN devices, or NET_ADMIN required. Uses proxytunnel to bridge any TCP protocol (Postgres, MySQL, SSH, etc.) through the Twingate HTTP proxy.