Runner-level Vaults
Last updated
Last updated
he "Runner-level Vaults" page in the Cortex User Guide is dedicated to the setup and management of encryption for specific runner-related credentials. This feature is crucial for enhancing the security of your Runners within Cortex. Here, we'll guide you through the process of entering credentials for both the JVM Truststore and Keystore, as well as HTTP(S) Basic Authentication.
In Cortex's Runner-level Vaults, JVM Truststore and Keystore credentials are pivotal for secure communications and data handling. A Java Keystore holds private keys, certificates with public keys, or secret keys for cryptographic purposes, mainly used when a server wants to establish HTTPS connections. During an SSL handshake, the server retrieves the private key from the Keystore and presents its public key and certificate to the client.
Truststore: This is used to store certificates from trusted Certificate Authorities (CAs), essential for SSL/TLS connections. By securely storing these certificates, Cortex ensures that your Runners can establish trusted connections with other services.
Keystore: Here, you store your private keys and certificates necessary for secure data transmission. It's crucial for establishing your Runner's identity and facilitating encrypted communication.
For secure HTTP(S) connections, Cortex uses Basic Authentication, a method where a username and password are required for authentication.
Setting Up Credentials
Basic Authentication Username: This is your identifier for HTTP(S) connections. It should be unique and recognizable for secure identification.
Basic Authentication Password: Paired with your username, this password is crucial for completing the authentication process. It's essential to choose a strong, complex password to prevent unauthorized access.
By carefully configuring these HTTP(S) Basic Authentication credentials in your Runner-level Vault, you ensure a higher level of security for your Runners. This not only protects your data but also fortifies the communication channels your Runners use.
The process of entering these credentials into your Runner-level Vault is designed to be straightforward. Ensuring these credentials are accurate and secure is key to maintaining the integrity and security of your Runners.