FlowX Admin setup

​

Infrastructure prerequisites

Before setting up the Admin microservice, ensure the following components are properly set up:

• Database Instance: The Admin microservice connects to the same database as the FlowX.AI Engine.

​

Dependencies

Ensure the following dependencies are met:

• Database: Properly configured database instance.
• Datasource: Configuration details for connecting to the database where also the FlowX.Ai Engine is connected.
• Kafka cluster: If you intend to use the FlowX.AI Audit functionality, ensure that the backend microservice can connect to the Kafka cluster. When connected to Kafka, it sends details about all database transactions to a configured Kafka topic.

​

Datasource configuration

To store process definitions the Admin microservice connects to the same Postgres / Oracle database as the Engine. Make sure to set the needed database connection details.

The following configuration details need to be added using environment variables:

• SPRING_DATASOURCE_URL: This environment variable is used to specify the URL of the database that the Admin microservice and Engine connect to. The URL typically includes the necessary information to connect to the database server, such as the host, port, and database name. It follows the format of the database’s JDBC URL, which is specific to the type of database being used (e.g., PostgreSQL or Oracle).
• SPRING_DATASOURCE_USERNAME: This environment variable sets the username that the Admin microservice and Engine used to authenticate themselves when connecting to the database. The username is used to identify the user account that has access to the specified database.
• SPRING_DATASOURCE_PASSWORD: This environment variable specifies the password associated with the username provided in the SPRING_DATASOURCE_USERNAME variable. The password is used to authenticate the user and grant access to the database.

​

MongoDB configuration

The Admin microservice also connects to a MongoDB database instance for additional data management. Configure the MongoDB connection with the following environment variables:

• SPRING_DATA_MONGODB_URI - URI for connecting to the Admin MongoDB instance
  • Format: mongodb://${DB_USERNAME}:${DB_PASSWORD}@<host1>,<host2>,<arbiter-host>:<port>/${DB_NAME}?retryWrites=false
• DB_USERNAME: admin.
• DB_PASSWORD: DB password.
• DB_NAME: admin.
• SPRING_DATA_MONGODB_STORAGE - Specifies the storage type used for the Runtime MongoDB instance (Azure environments only)
  • Possible Values: mongodb, cosmosdb
  • Default Value: mongodb

​

Kafka configuration

The Admin microservice uses Kafka for sending audit logs, managing scheduled timer events, platform component versions, and start timer event updates. Both producers and consumers must be configured to ensure proper communication between services.

​

General Kafka configuration

​

Kafka producer configuration

​

Kafka consumer configuration

​

Topic naming convention and pattern creation

The Admin microservice uses a consistent naming structure for Kafka topics to ensure standardized communication.

Topics are constructed using the following pattern:

{prefix} + service + {separator/dot} + action + {separator/dot} + detail + {suffix}

Where:

• prefix is ${kafka.topic.naming.package}${kafka.topic.naming.environment} (e.g., ai.flowx.dev.)
• suffix is ${kafka.topic.naming.version} (e.g., .v1)

​

Kafka topic configuration

​

Audit topics

​

Platform topics

​

Events Gateway topics

​

Build topics

​

Resource topics

​

OAuth authentication (when using SASL_PLAINTEXT)

When using OAuth authentication with Kafka (SASL_PLAINTEXT), activate the kafka-auth profile and configure the following environment variables:

​

Redis configuration

The following values should be set with the corresponding Redis-related values:

• SPRING_REDIS_HOST
• SPRING_REDIS_PASSWORD

​

Logging

The following environment variables could be set in order to control log levels:

• LOGGING_LEVEL_ROOT - root Spring Boot microservice logs
• LOGGING_LEVEL_APP - app level logs

​

Authorization & access roles

The following variables need to be set in order to connect to the identity management platform:

• SECURITY_OAUTH2_BASE_SERVER_URL
• SECURITY_OAUTH2_CLIENT_CLIENT_ID
• SECURITY_OAUTH2_REALM

A specific service account should be configured in the OpenID provider to allow the Admin microservice to access realm-specific data. It can be configured using the following environment variables:

• SECURITY_OAUTH2_SERVICE_ACCOUNT_ADMIN_CLIENT_ID - the openid service account username
• SECURITY_OAUTH2_SERVICE_ACCOUNT_ADMIN_CLIENT_SECRET - the openid service account client secret

Configuration needed to clear the offline sessions of a user session from the identity provider solution:

• FLOWX_AUTHENTICATE_CLIENTID

​

Elasticsearch

• SPRING_ELASTICSEARCH_REST_URIS
• SPRING_ELASTICSEARCH_REST_DISABLESSL
• SPRING_ELASTICSEARCH_INDEX_SETTINGS_NAME
• SPRING_ELASTICSEARCH_REST_USERNAME
• SPRING_ELASTICSEARCH_REST_PASSWORD

​

Undo/redo actions

flowx:
  undo-redo:
    ttl: 6000000  # Redis TTL for undoable actions by user+nodeid (in seconds)
    cleanup:
      cronExpression: "0 2 * * * *"  # Every day at 2am
      days: 2  # Items marked as deleted will be permanently removed if older than this number of days