SSL/TLS Configuration

The Launcher Server keystore contains the certificates and private keys required for TLS authentication and secure communication. By default, the keystore is named dtx_keys.p12, unless overridden in the config.yaml file. The keystore can be pre-configured and mounted as a Kubernetes generic Secret as defined by a matching filename entry in the external.secrets setting. Moreover, individual TLS certificates can be dynamically imported into the keystore before Launcher Server startup. The certificates to be imported are specified using the external.tls setting, which references one or more Kubernetes TLS Secrets.