FlowX Admin setup

This guide provides a comprehensive reference for configuring the FlowX Admin microservice using environment variables and configuration files.

Infrastructure prerequisites

Before setting up the Admin microservice, ensure the following components are properly set up:

Database Instance: The Admin microservice connects to the same database as the FlowX.AI Engine.
MongoDB: For additional data management.
Redis: For caching and transient data storage.
Kafka: For audit logs, events, and messaging (if using FlowX.AI Audit functionality).

Core configuration

Server configuration

Environment Variable	Description	Default Value
`SERVER_PORT`	Port on which the Admin service will run	`8080`
`SPRING_APPLICATION_NAME`	Name of the application used for service discovery	`admin`
`SPRING_JACKSON_SERIALIZATION_INDENTOUTPUT`	Enable indented JSON output	`true`

Database configuration

The Admin microservice connects to the same PostgreSQL or Oracle database as the FlowX.AI Engine for storing process definitions.

Environment Variable	Description	Default Value
`SPRING_DATASOURCE_URL`	JDBC URL for database connection	`jdbc:postgresql://localhost:5432/flowx`
`SPRING_DATASOURCE_USERNAME`	Database username	`postgres`
`SPRING_DATASOURCE_PASSWORD`	Database password	`[your-secure-password]`

You will need to make sure that the user, password, connection link and database name are configured correctly, otherwise, you will receive errors at start time.

The database schema is managed by a Liquibase script provided with the Engine.

MongoDB configuration

The Admin microservice also connects to a MongoDB database instance for additional data management.

Environment Variable	Description	Default Value
`DB_USERNAME`	MongoDB username	`data-model`
`DB_PASSWORD`	MongoDB password	`[your-secure-password]`
`DB_NAME`	MongoDB database name	`data-model`
`SPRING_DATA_MONGODB_URI`	MongoDB connection URI	`mongodb://${DB_USERNAME}:${DB_PASSWORD}@localhost:27017/${DB_NAME}?retryWrites=true`
`SPRING_DATA_MONGODB_UUIDREPRESENTATION`	UUID representation format	`standard`
`SPRING_DATA_MONGODB_STORAGE`	Storage type (Azure environments)	`mongodb` or `cosmosdb`
`MONGOCK_CHANGELOGSSCANPACKAGE_0_`	Mongock changelog scan package	`ai.flowx.admin.data.model.config.mongock`
`MONGOCK_TRANSACTIONENABLED`	Enable transactions for Mongock operations	`false`

Ensure that the MongoDB configuration is compatible with the same database requirements as the FlowX.AI Engine, especially if sharing database instances.

Redis and caching configuration

Admin Service uses Redis for caching and storing transient data. Configure Redis connection using the standard Redis environment variables. Quick reference:

Environment Variable	Description	Example Value	Status
`SPRING_DATA_REDIS_HOST`	Redis server hostname	`localhost`	Recommended
`SPRING_DATA_REDIS_PORT`	Redis server port	`6379`	Recommended
`SPRING_DATA_REDIS_PASSWORD`	Redis authentication password	-	Recommended
`REDIS_TTL`	Cache TTL in milliseconds	`5000000`	Optional

Both SPRING_DATA_REDIS_* and SPRING_REDIS_* variable prefixes are supported. The SPRING_DATA_REDIS_* prefix is the modern Spring Boot standard and is recommended for new deployments.

For advanced Redis deployment modes (Sentinel, Cluster) and SSL/TLS setup, see the Redis Configuration guide. Note that Sentinel and Cluster modes are only supported by the Events Gateway service.

Kafka configuration

The Admin microservice uses Kafka for sending audit logs, managing scheduled timer events, platform component versions, and start timer event updates.

General Kafka settings

Environment Variable	Description	Default Value
`SPRING_KAFKA_BOOTSTRAPSERVERS`	Kafka broker addresses	`localhost:9092`
`SPRING_KAFKA_SECURITY_PROTOCOL`	Security protocol	`PLAINTEXT`
`KAFKA_MESSAGE_MAX_BYTES`	Maximum message size in bytes	`52428800` (50MB)

Kafka producer configuration

Environment Variable	Description	Default Value
`SPRING_KAFKA_PRODUCER_KEYSERIALIZER`	Key serializer class	`org.apache.kafka.common.serialization.StringSerializer`
`SPRING_KAFKA_PRODUCER_VALUESERIALIZER`	Value serializer class	`org.springframework.kafka.support.serializer.JsonSerializer`
`SPRING_KAFKA_PRODUCER_MAXREQUESTSIZE`	Maximum request size	`52428800` (50MB)

Kafka consumer configuration

Environment Variable	Description	Default Value
`KAFKA_CONSUMER_GROUPID_GENERICPROCESSING`	Generic processing consumer group	`generic-processing-group`
`KAFKA_CONSUMER_THREADS_GENERICPROCESSING`	Generic processing threads	`6`
`KAFKA_CONSUMER_GROUPID_PROCESSSYNC`	Process sync consumer group	`process-sync-group`
`KAFKA_CONSUMER_THREADS_PROCESSSYNC`	Process sync consumer threads	`6`
`KAFKA_CONSUMER_GROUPID_BUSINESSRULESYNC`	Business rule sync consumer group	`business-rule-sync-group`
`KAFKA_CONSUMER_THREADS_BUSINESSRULESYNC`	Business rule sync consumer threads	`6`
`KAFKA_CONSUMER_GROUPID_REUSABLETEMPLATESYNC`	Reusable template sync consumer group	`reusable-template-sync-group`
`KAFKA_CONSUMER_THREADS_REUSABLETEMPLATESYNC`	Reusable template sync consumer threads	`6`
`KAFKA_CONSUMER_GROUPID_UIFLOWSYNC`	UI flow sync consumer group	`ui-flow-sync-group`
`KAFKA_CONSUMER_THREADS_UIFLOWSYNC`	UI flow sync consumer threads	`6`
`KAFKA_CONSUMER_GROUPID_PROCESSCORRECTIONAFTERAPPOPERATION`	Process correction after app operation consumer group	`process-correction-after-app-operation-group`
`KAFKA_CONSUMER_THREADS_PROCESSCORRECTIONAFTERAPPOPERATION`	Process correction after app operation consumer threads	`6`
`KAFKA_AUTHEXCEPTIONRETRYINTERVAL`	Auth exception retry interval (seconds)	`10`

Topic naming configuration

Environment Variable	Description	Default Value
`DOT`	Reference to the primary separator	`${kafka.topic.naming.separator}`
`DASH`	Reference to the secondary separator	`${kafka.topic.naming.separator2}`
`KAFKA_TOPIC_NAMING_PACKAGE`	Base package name	`ai${dot}flowx${dot}`
`KAFKA_TOPIC_NAMING_ENVIRONMENT`	Environment name
`KAFKA_TOPIC_NAMING_VERSION`	Topic version	`${dot}v1`
`KAFKA_TOPIC_NAMING_SEPARATOR`	Primary separator	`.`
`KAFKA_TOPIC_NAMING_SEPARATOR2`	Secondary separator	`-`
`KAFKA_TOPIC_NAMING_PREFIX`	Combined prefix	`${kafka.topic.naming.package}${kafka.topic.naming.environment}`
`KAFKA_TOPIC_NAMING_SUFFIX`	Combined suffix	`${kafka.topic.naming.version}`

Kafka topics configuration

Application topics

Environment Variable	Description	Pattern	Default Value
`KAFKA_TOPIC_APPLICATION_SYNCRESPONSE`	Sync response topic	`${kafka.topic.naming.prefix}application-version.sync.out${kafka.topic.naming.suffix}`	`ai.flowx.application-version.sync.out.v1`
`KAFKA_TOPIC_APPLICATION_PROCESSSYNC`	Process sync topic	`${kafka.topic.naming.prefix}application-version.sync.process.in${kafka.topic.naming.suffix}`	`ai.flowx.application-version.sync.process.in.v1`
`KAFKA_TOPIC_APPLICATION_BUSINESSRULESYNC`	Business rule sync topic	`${kafka.topic.naming.prefix}application-version.sync.business-rule.in${kafka.topic.naming.suffix}`	`ai.flowx.application-version.sync.business-rule.in.v1`
`KAFKA_TOPIC_APPLICATION_REUSABLETEMPLATESYNC`	Reusable template sync topic	`${kafka.topic.naming.prefix}application-version.sync.reusable-template.in${kafka.topic.naming.suffix}`	`ai.flowx.application-version.sync.reusable-template.in.v1`
`KAFKA_TOPIC_APPLICATION_RESOURCEUPDATEPROPAGATION`	Resource update propagation topic	`${kafka.topic.naming.prefix}application-version.resource.update.propagation${kafka.topic.naming.suffix}`	`ai.flowx.application-version.resource.update.propagation.v1`
`KAFKA_TOPIC_APPLICATION_CORRECTIONAFTERAPPOPERATION_IN_PROCESS`	Correction after app operation → process request	`${kafka.topic.naming.prefix}application-version.correction-after-app-operation.process.request${kafka.topic.naming.suffix}`	`ai.flowx.application-version.correction-after-app-operation.process.request.v1`
`KAFKA_TOPIC_APPLICATION_CORRECTIONAFTERAPPOPERATION_IN_BUSINESSRULE`	Correction after app operation → business rule	`${kafka.topic.naming.prefix}application-version.correction-after-app-operation.business-rule.request${kafka.topic.naming.suffix}`	`ai.flowx.application-version.correction-after-app-operation.business-rule.request.v1`
`KAFKA_TOPIC_APPLICATION_CORRECTIONAFTERAPPOPERATION_IN_REUSABLETEMPLATE`	Correction after app operation → reusable template	`${kafka.topic.naming.prefix}application-version.correction-after-app-operation.reusable-template.request${kafka.topic.naming.suffix}`	`ai.flowx.application-version.correction-after-app-operation.reusable-template.request.v1`
`KAFKA_TOPIC_APPLICATION_CORRECTIONAFTERAPPOPERATION_IN_UIFLOW`	Correction after app operation → UI flow (5.5+)	`${kafka.topic.naming.prefix}application-version.correction-after-app-operation.ui-flow.request${kafka.topic.naming.suffix}`	`ai.flowx.application-version.correction-after-app-operation.ui-flow.request.v1`
`KAFKA_TOPIC_APPLICATION_CORRECTIONAFTERAPPOPERATION_OUT`	Correction after app operation response topic	`${kafka.topic.naming.prefix}application-version.correction-after-app-operation.response${kafka.topic.naming.suffix}`	`ai.flowx.application-version.correction-after-app-operation.response.v1`
`KAFKA_TOPIC_APPLICATION_UIFLOWSYNC`	UI flow sync topic (5.5+)	`${kafka.topic.naming.prefix}application-version.sync.ui-flow.in${kafka.topic.naming.suffix}`	`ai.flowx.application-version.sync.ui-flow.in.v1`

Audit topics

Environment Variable	Description	Pattern	Default Value
`KAFKA_TOPIC_AUDIT_OUT`	Audit output topic	`${kafka.topic.naming.prefix}core${dot}trigger${dot}save${dot}audit${kafka.topic.naming.suffix}`	`ai.flowx.core.trigger.save.audit.v1`

Platform Topics

Environment Variable	Description	Pattern	Default Value
`KAFKA_TOPIC_PLATFORM_COMPONENTSVERSIONS_IN`	Components versions caching topic	`${kafka.topic.naming.prefix}core${dot}trigger${dot}platform${dot}versions${dot}caching${kafka.topic.naming.suffix}`	`ai.flowx.core.trigger.platform.versions.caching.v1`

Events gateway topics

Environment Variable	Description	Pattern	Default Value
`KAFKA_TOPIC_EVENTSGATEWAY_OUT_MESSAGE`	Commands message output topic	`${kafka.topic.naming.prefix}eventsgateway${dot}process${dot}commands${dot}message${kafka.topic.naming.suffix}`	`ai.flowx.eventsgateway.process.commands.message.v1`

Build topics

Environment Variable	Description	Pattern	Default Value
`KAFKA_TOPIC_BUILD_RUNTIMEDATA`	Build runtime data topic	`${kafka.topic.naming.prefix}build${dot}runtime-data${kafka.topic.naming.suffix}`	`ai.flowx.build.runtime-data.v1`
`KAFKA_TOPIC_BUILD_STARTTIMEREVENTS_OUT_UPDATES`	Start timer events updates topic	`${kafka.topic.naming.prefix}build${dot}start${dash}timer${dash}events${dot}updates${dot}in${kafka.topic.naming.suffix}`	`ai.flowx.build.start-timer-events.updates.in.v1`

Resource topics

Environment Variable	Description	Pattern	Default Value
`KAFKA_TOPIC_RESOURCESUSAGES_REFRESH`	Resources usages refresh topic	`${kafka.topic.naming.prefix}application${dash}version${dot}resources${dash}usages${dot}refresh${kafka.topic.naming.suffix}`	`ai.flowx.application-version.resources-usages.refresh.v1`

OAuth authentication for Kafka

When using the kafka-auth profile, the following variables configure OAuth for Kafka:

Environment Variable	Description	Default Value
`KAFKA_OAUTH_CLIENT_ID`	OAuth client ID	`kafka`
`KAFKA_OAUTH_CLIENT_SECRET`	OAuth client secret	`kafka-secret`
`KAFKA_OAUTH_TOKEN_ENDPOINT_URI`	OAuth token endpoint	`kafka.auth.localhost`

When using the kafka-auth profile, the security protocol will automatically be set to SASL_PLAINTEXT and the SASL mechanism will be set to OAUTHBEARER.

CAS lib configuration

Environment Variable	Description	Default Value
`FLOWX_SPICEDB_HOST`	SpiceDB server hostname	`spicedb`
`FLOWX_SPICEDB_PORT`	SpiceDB server port	`50051`
`FLOWX_SPICEDB_TOKEN`	SpiceDB authentication token	`spicedb-token`

Logging configuration

The FlowX Admin microservice provides granular control over logging levels for different components:

Environment Variable	Description	Default Value
`LOGGING_LEVEL_ROOT`	Log level for root Spring Boot microservice	`INFO`
`LOGGING_LEVEL_APP`	Log level for application-specific code	`DEBUG`

Changing log levels at runtime

You can adjust log levels dynamically without restarting the service using Spring Boot Actuator endpoints. This is particularly useful for troubleshooting and debugging in production environments. Example: Change log level for a specific package

curl 'http://localhost:8081/actuator/loggers/ai.flowx.admin' \
  -i -X POST \
  -H 'Content-Type: application/json' \
  -d '{"configuredLevel":"DEBUG"}'

Common logger packages:

ai.flowx.admin - Application-specific logs
org.springframework - Spring Framework logs
org.mongodb.driver - MongoDB driver logs
org.apache.kafka - Kafka client logs

Available log levels: TRACE, DEBUG, INFO, WARN, ERROR, OFF

Using DEBUG or TRACE log levels in production may impact performance and generate large log volumes. Revert to INFO or WARN after troubleshooting is complete.

Localization settings

Environment Variable	Description	Default Value
`APPLICATION_DEFAULTLOCALE`	Default locale for the application	`en`
`APPLICATION_SUPPORTEDLOCALES`	List of supported locales	`en, ro`

Health monitoring

Environment Variable	Description	Default Value
`MANAGEMENT_HEALTH_DB_ENABLED`	Enable database health checks	`true`
`MANAGEMENT_HEALTH_KAFKA_ENABLED`	Enable Kafka health checks	`true`
`MANAGEMENT_SERVER_ADDRESS`	Management server bind address	`0.0.0.0`
`MANAGEMENT_SERVER_PORT`	Management server port	`8081`
`MANAGEMENT_SERVER_BASEPATH`	Base path for management endpoints	`/manage`
`MANAGEMENT_SECURITY_ENABLED`	Enable security for management endpoints	`false`
`MANAGEMENT_ENDPOINTS_WEB_BASEPATH`	Base path for actuator endpoints	`/actuator`
`MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE`	Endpoints to expose	`health,info,metrics,metric,prometheus`
`MANAGEMENT_ENDPOINT_HEALTH_PROBES_ENABLED`	Enable Kubernetes probes	`true`
`MANAGEMENT_ENDPOINT_HEALTH_SHOWDETAILS`	Show health check details	`always`
`MANAGEMENT_METRICS_EXPORT_PROMETHEUS_ENABLED`	Enable Prometheus metrics export	`false`

Platform health configuration

Environment Variable	Description	Default Value
`FLOWX_PLATFORMHEALTH_NAMESPACE`	Kubernetes namespace for health checks	`flowx`
`FLOWX_PLATFORMHEALTH_MANAGEMENTBASEPATH`	Base path for management endpoints	`${management.server.base-path}`
`FLOWX_PLATFORMHEALTH_ACTUATORBASEPATH`	Base path for actuator endpoints	`${management.endpoints.web.base-path}`
`FLOWX_PLATFORMHEALTH_ANNOTATIONNAME`	Kubernetes annotation name for health checks	`flowx.ai/health`
`FLOWX_PLATFORMHEALTH_ANNOTATIONVALUE`	Kubernetes annotation value for health checks	`true`

Multi-edit and undo/redo configuration

Environment Variable	Description	Default Value
`FLOWX_MULTIEDIT_TTL`	Time-to-live for multi-edit sessions in seconds	`45`
`FLOWX_UNDOREDO_TTL`	Time-to-live for undo/redo actions in seconds	`86400`
`FLOWX_UNDOREDO_CLEANUP_CRONEXPRESSION`	Cron expression for undo/redo cleanup	`0 0 2 ?`
`FLOWX_UNDOREDO_CLEANUP_DAYS`	Days to keep deleted undo/redo items	`2`

Resources usage configuration

Environment Variable	Description	Default Value
`FLOWX_LIB_RESOURCESUSAGES_ENABLED`	Enable resources usage tracking	`true`
`FLOWX_LIB_RESOURCESUSAGES_REFRESHLISTENER_ENABLED`	Enable listener for resource usage refreshes	`true`
`FLOWX_LIB_RESOURCESUSAGES_REFRESHLISTENER_COLLECTOR_THREADCOUNT`	Thread count for resource usage collector	`5`
`FLOWX_LIB_RESOURCESUSAGES_REFRESHLISTENER_COLLECTOR_MAXBATCHSIZE`	Maximum batch size for resource usage collection	`1000`
`FLOWX_LIB_RESOURCESUSAGES_KAFKA_CONSUMER_GROUPID_RESOURCESUSAGESREFRESH`	Consumer group ID for resource usage refresh	`admin-resources-usages-refresh-group`
`FLOWX_LIB_RESOURCESUSAGES_KAFKA_CONSUMER_THREADS_RESOURCESUSAGESREFRESH`	Number of consumer threads for resource usage refresh	`3`
`FLOWX_LIB_RESOURCESUSAGES_KAFKA_TOPIC_RESOURCE_USAGES_REFRESH`	Kafka topic for resource usage refresh	`${kafka.topic.resources-usages.refresh}`
`FLOWX_LIB_RESOURCESUSAGES_KAFKA_AUTHEXCEPTIONRETRYINTERVAL`	Retry interval in seconds after auth exceptions	`3`

Authentication and Authorization Configuration

The FlowX Admin microservice supports authentication and authorization through OpenID Connect (with Keycloak as the default provider) and allows detailed role-based access control.

Security type

Environment Variable	Description	Default Value
`SECURITY_TYPE`	Security type	`oauth2`
`SECURITY_OAUTH2CLIENT`	Enable OAuth2 client	`enabled`
`SECURITY_OAUTH2_BASESERVERURL`	Base URL of the OAuth2 server
`SECURITY_OAUTH2_REALM`	OAuth2 realm name

Resource server (opaque-token introspection)

Environment Variable	Description	Default Value
`SECURITY_OAUTH2_CLIENT_CLIENT_ID`	Client ID for token introspection
`SECURITY_OAUTH2_CLIENT_CLIENT_SECRET`	Client secret for token introspection

The introspection URI is derived automatically: ${SECURITY_OAUTH2_BASESERVERURL}/realms/${SECURITY_OAUTH2_REALM}/protocol/openid-connect/token/introspect

Service account configuration

Environment Variable	Description	Default Value
`SECURITY_OAUTH2_SERVICE_ACCOUNT_ADMIN_CLIENT_ID`	Service account client ID	`flowx-admin-sa`
`SECURITY_OAUTH2_SERVICE_ACCOUNT_ADMIN_CLIENT_SECRET`	Service account client secret
`SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_MAINAUTHPROVIDER_TOKENURI`	Provider token URI	`${SECURITY_OAUTH2_BASESERVERURL}/realms/${SECURITY_OAUTH2_REALM}/protocol/openid-connect/token`

Identity provider configuration

Environment Variable	Description	Default Value
`OPENID_PROVIDER`	OpenID provider type	`keycloak` (possible values: `keycloak`, `entra`)
`FLOWX_AUTHENTICATE_CLIENTID`	Client ID for authentication service	`flowx-platform-authenticate`
`FLOWX_PROCESS_DEFAULTROLES`	Default roles for processes	`FLOWX_ROLE`

Keycloak Configuration

Environment Variable	Description	Default Value
`OPENID_KEYCLOAK_BASE_SERVER_URL`	Keycloak server URL	`${SECURITY_OAUTH2_BASESERVERURL}`
`OPENID_KEYCLOAK_REALM`	Keycloak realm	`${SECURITY_OAUTH2_REALM}`
`OPENID_KEYCLOAK_CLIENT_CLIENT_ID`	Keycloak client ID	`${SECURITY_OAUTH2_SERVICE_ACCOUNT_ADMIN_CLIENTID}`
`OPENID_KEYCLOAK_CLIENT_CLIENT_SECRET`	Keycloak client secret	`${SECURITY_OAUTH2_SERVICE_ACCOUNT_ADMIN_CLIENTSECRET}`

Microsoft Entra ID configuration

Environment Variable	Description	Default Value
`OPENID_ENTRA_GRAPH_SCOPE`	Microsoft Graph API scope	`https://graph.microsoft.com/.default`
`OPENID_ENTRA_TENANT_ID`	Microsoft Entra tenant ID
`OPENID_ENTRA_CLIENT_ID`	Microsoft Entra client ID	`${SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_MAINIDENTITY_CLIENTID}`
`OPENID_ENTRA_CLIENT_SECRET`	Microsoft Entra client secret	`${SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_MAINIDENTITY_CLIENTSECRET}`
`OPENID_ENTRA_PRINCIPAL_ID`	Microsoft Entra principal ID

The role-based access control is configured in the application YAML and grants specific permissions for platform management, user management, process management, integrations management, and configuration management.

Ingress configuration

The Admin service uses the standard FlowX.AI ingress pattern. For complete setup instructions including the full ingress template, CORS configuration, and troubleshooting, see the Ingress Configuration Guide. Service-specific values for Admin:

Ingress name: admin-admin
Service path: /((.*)) or /admin(/|$)(.*)
Service name: admin
Rewrite target: /$2
Fx-Workspace-Id: Required

Complete Ingress Configuration

View the centralized ingress guide for the complete configuration template, annotations reference, and best practices.

In production environments, never use the default service account credentials. Always configure secure, environment-specific credentials for authentication.

Sensitive information such as passwords and client secrets should be managed securely using environment variables or a secrets management solution in production environments.

Troubleshooting

Common issues

Admin service fails to start

Symptoms: Service crashes on startup or fails health checks.Solutions:

Verify PostgreSQL connection parameters (SPRING_DATASOURCE_URL, credentials) are correct and the database is reachable
Check that MongoDB is running and the connection URI is valid
Ensure Kafka brokers are accessible at the configured SPRING_KAFKA_BOOTSTRAPSERVERS address
Review startup logs for specific error messages indicating which dependency is unavailable

Cannot export or import resources

Symptoms: Import/export operations fail with permission or authentication errors.Solutions:

Verify the Keycloak service account has the required roles for import/export operations
Check that OPENID_KEYCLOAK_CLIENT_CLIENT_ID and OPENID_KEYCLOAK_CLIENT_CLIENT_SECRET are configured correctly
Ensure the service account has canImport access rights in the target workspace
Confirm the target application version is in a WIP state

Build creation fails

Symptoms: Creating a build returns errors or times out.Solutions:

Check connectivity between Admin and the application-manager service
Verify that the Kafka topics for build operations (KAFKA_TOPIC_BUILD_RUNTIMEDATA) are created and accessible
Ensure version compatibility between Admin and application-manager services
Review Kafka consumer group lag for build-related topics

UI not loading in Designer

Symptoms: Designer interface fails to render or returns blank pages.Solutions:

Verify the Designer service is running and healthy
Check ingress configuration — ensure the Admin ingress (admin-admin) is correctly routing traffic
Review CORS settings in the Ingress Configuration Guide
Confirm that the Fx-Workspace-Id header is being passed correctly through the ingress

Configuring an IAM Solution

Identity and access management setup for Keycloak and Microsoft Entra ID

Redis Configuration

Complete Redis setup including Sentinel and Cluster modes

Ingress Configuration

Centralized ingress guide with CORS configuration and best practices

​Infrastructure prerequisites

​Core configuration

​Server configuration

​Database configuration

​MongoDB configuration

​Redis and caching configuration

​Kafka configuration

​General Kafka settings

​Kafka producer configuration

​Kafka consumer configuration

​Topic naming configuration

​Kafka topics configuration

​Application topics

​Audit topics

​Platform Topics

​Events gateway topics

​Build topics

​Resource topics

​OAuth authentication for Kafka

​CAS lib configuration

​Logging configuration

​Changing log levels at runtime

​Localization settings

​Health monitoring

​Platform health configuration

​Multi-edit and undo/redo configuration

​Resources usage configuration

​Authentication and Authorization Configuration

​Security type

​Resource server (opaque-token introspection)

​Service account configuration

​Identity provider configuration

​Keycloak Configuration

​Microsoft Entra ID configuration

​Ingress configuration

Complete Ingress Configuration

​Troubleshooting

​Common issues

​Related resources

Configuring an IAM Solution

Redis Configuration

Ingress Configuration

Infrastructure prerequisites

Core configuration

Server configuration

Database configuration

MongoDB configuration

Redis and caching configuration

Kafka configuration

General Kafka settings

Kafka producer configuration

Kafka consumer configuration

Topic naming configuration

Kafka topics configuration

Application topics

Audit topics

Platform Topics

Events gateway topics

Build topics

Resource topics

OAuth authentication for Kafka

CAS lib configuration

Logging configuration

Changing log levels at runtime

Localization settings

Health monitoring

Platform health configuration

Multi-edit and undo/redo configuration

Resources usage configuration

Authentication and Authorization Configuration

Security type

Resource server (opaque-token introspection)

Service account configuration

Identity provider configuration

Keycloak Configuration

Microsoft Entra ID configuration

Ingress configuration

Troubleshooting

Common issues

Related resources