Deployment strategy
Deploying FlowX.AI microservices involves breaking down the application into modular components that can be independently deployed, scaled, and maintained. All microservices are delivered as Docker containers, making them suitable for deployment on any container orchestration platform, such as Kubernetes or Docker Swarm.Deployment prerequisites
Before beginning the deployment process, ensure you have:- A Kubernetes cluster or Docker environment
- Access to a container registry
- Persistent storage for databases
- Network policies configured for inter-service communication
- Resource quotas and limits defined for each environment
Recommended installation order
1
Infrastructure Components
First, deploy the foundational infrastructure:
- Databases: PostgreSQL/Oracle for relational data, MongoDB for document storage
- Message Broker: Kafka and ZooKeeper
- Caching: Redis
- Identity Management: Keycloak or other OAuth2 provider
2
Core Components
Next, deploy these core services in order:
- Advancing Controller: Manages process advancement and orchestration
- Process Engine: Handles business process execution and state management
3
Backend Services
Once the core components are operational, deploy these services (can be deployed in parallel):
- Admin Service: Platform administration and configuration management
- Audit Core: Compliance auditing and activity tracking
- Task Management: Human task assignment and workflow
- Scheduler Core: Job scheduling and time-based operations
- Data Search: Indexing and searching capabilities
- Events Gateway: Event routing and processing
- Document Plugin: Document generation and management
- Notification Plugin: Communication and alerts management
- Any additional plugins or extensions
4
AI Platform Services (New in 5.1)
Deploy the AI Platform services for intelligent automation capabilities:Java Services:
- Connected Graph: Knowledge graph queries and management
- Agents: AI agent management and orchestration
- Binaries: File storage and management for AI services
- Conversations: Conversation management and context
- Models: AI model configuration and lifecycle management
- Tenants: Multi-tenant management for AI services
- Knowledge Graph (KAG): Knowledge ingestion and processing
- Planner: Task orchestration and workflow planning
- AI Developer: Automated code generation capabilities
- AI Analyst: Process analysis and optimization
- AI Designer: UI generation and design automation
The AI Platform services are optional but provide significant value for organizations looking to leverage AI capabilities in their business processes.
5
Frontend Components
Finally, deploy the frontend services:
- Designer: Process design environment for business analysts
- Web Components: UI components for custom applications
- Customer-facing UIs and portals
Environment variables reference
Environment variables are the primary configuration mechanism for FlowX.AI microservices. They provide a secure and flexible way to customize service behavior without modifying the container images. The following sections detail the most commonly used environment variables across FlowX.AI microservices. For service-specific variables, refer to the dedicated setup guides for each component.Authorization & access management
| Environment Variable | Description | Example Value | Required |
|---|---|---|---|
SECURITY_OAUTH2_BASESERVERURL | Base URL of the OAuth2/OIDC server | https://keycloak.example.com/auth | Yes |
SECURITY_OAUTH2_CLIENTCLIENTID | OAuth2 client ID for the service | flowx-admin-service | Yes |
SECURITY_OAUTH2_CLIENTCLIENTSECRET | OAuth2 client secret | secret | Yes |
SECURITY_OAUTH2_REALM | OAuth2 realm name | flowx | Yes |
SECURITY_OAUTH2_SERVICEACCOUNT_ADMIN_CLIENTID | Service account client ID (for inter-service auth) | flowx-service-account | No* |
SECURITY_OAUTH2_SERVICEACCOUNT_ADMIN_CLIENTSECRET | Service account client secret | secret | No* |
Database configuration
PostgreSQL/Oracle
| Environment Variable | Description | Example Value | Required |
|---|---|---|---|
SPRING_DATASOURCE_URL | JDBC connection URL | jdbc:postgresql://postgres:5432/flowx | Yes |
SPRING_DATASOURCE_USERNAME | Database username | flowx_user | Yes |
SPRING_DATASOURCE_PASSWORD | Database password | securePassword123 | Yes |
SPRING_DATASOURCE_DRIVERCLASSNAME | JDBC driver class (Oracle only) | oracle.jdbc.OracleDriver | Yes* |
SPRING_JPA_PROPERTIES_HIBERNATE_DEFAULTSCHEMA | Default schema (Oracle only) | FLOWX | Yes* |
MongoDB (NoSQL)
| Environment Variable | Description | Example Value | Required |
|---|---|---|---|
SPRING_DATA_MONGODB_URI | MongoDB connection URI | mongodb://mongo1,mongo2,mongo3:27017/flowx?replicaSet=rs0 | Yes |
DB_USERNAME | MongoDB username for services that need it | flowx_mongo_user | Yes |
DB_PASSWORD | MongoDB password | mongoSecurePass456 | Yes |
SPRING_DATA_MONGODB_RUNTIME_ENABLED | Enable runtime MongoDB connection | true | No |
SPRING_DATA_MONGODB_RUNTIME_URI | URI for runtime MongoDB connection | mongodb://${DB_USERNAME}:${DB_PASSWORD}@mongodb-runtime:27017/app-runtime | No* |
Kafka configuration
| Environment Variable | Description | Example Value | Required |
|---|---|---|---|
SPRING_KAFKA_BOOTSTRAPSERVERS | Comma-separated list of Kafka brokers | kafka-0:9092,kafka-1:9092,kafka-2:9092 | Yes |
SPRING_KAFKA_SECURITY_PROTOCOL | Security protocol for Kafka communication | SASL_PLAINTEXT | No |
SPRING_KAFKA_CONSUMER_GROUPID | Consumer group ID | flowx-process-engine-group | Yes |
KAFKA_CONSUMER_THREADS | Number of Kafka consumer threads | 5 | No |
KAFKA_AUTHEXCEPTIONRETRYINTERVAL | Retry interval for auth exceptions (seconds) | 10 | No |
KAFKA_MESSAGE_MAX_BYTES | Maximum Kafka message size (bytes) | 52428800 (50 MB) | No |
Kafka authentication profile
FlowX.AI supports enabling Kafka authentication across all Java microservices using thekafka-auth Spring configuration profile. This feature simplifies the activation of secure Kafka communication.
To enable Kafka authentication, set the SPRING_PROFILES_ACTIVE environment variable:
You can activate multiple profiles by separating them with commas:
SPRING_PROFILES_ACTIVE=dev,kafka-auth| Environment Variable | Description | Example Value | Required |
|---|---|---|---|
KAFKA_OAUTH_CLIENT_ID | OAuth client ID used to authenticate with the token endpoint | kafka-client | Yes* |
KAFKA_OAUTH_CLIENT_SECRET | Secret associated with the OAuth client ID | kafka-secret | Yes* |
KAFKA_OAUTH_TOKEN_ENDPOINT_URI | OAuth token endpoint URI from which access tokens are obtained | https://keycloak.example.com/auth/token | Yes* |
kafka-auth profile is active
For more details, see the Kafka Authentication Configuration guide.
Redis configuration
FlowX.AI microservices use Redis for caching and real-time data management. Redis can be deployed in three modes: Standalone, Sentinel (high availability), and Cluster (horizontal scaling). Quick reference for common Redis variables:| Environment Variable | Description | Example Value | Mode |
|---|---|---|---|
SPRING_DATA_REDIS_HOST | Redis server hostname | localhost | Standalone |
SPRING_DATA_REDIS_PORT | Redis server port | 6379 | Standalone |
SPRING_DATA_REDIS_PASSWORD | Redis authentication password | yourpassword | All modes |
SPRING_DATA_REDIS_SENTINEL_MASTER | Sentinel master name | mymaster | Sentinel |
SPRING_DATA_REDIS_SENTINEL_NODES | Sentinel nodes list | host1:26379,host2:26379 | Sentinel |
SPRING_DATA_REDIS_CLUSTER_NODES | Cluster nodes list | host1:6379,host2:6379 | Cluster |
For complete Redis configuration including all deployment modes, SSL/TLS setup, and troubleshooting, see the Redis Configuration guide.
Logging configuration
| Environment Variable | Description | Default Value | Required |
|---|---|---|---|
LOGGING_LEVEL_ROOT | Root logging level | INFO | No |
LOGGING_LEVEL_APP | Application-specific logging level | DEBUG | No |
LOGGING_LEVEL_MONGO_DRIVER | MongoDB driver logging level | WARN | No |
LOGGING_LEVEL_KAFKA | Kafka client logging level | WARN | No |
LOGGING_LEVEL_REDIS | Redis client logging level | OFF | No |
Changing log levels at runtime
All FlowX microservices support dynamic log level adjustment without requiring a restart. This capability uses Spring Boot Actuator’s loggers endpoint and is particularly useful for troubleshooting production issues. Prerequisites: Ensure theloggers endpoint is exposed in your management endpoints configuration:
Example usage:
ai.flowx with the specific logger package you want to modify.
Available log levels: TRACE, DEBUG, INFO, WARN, ERROR, OFF
Deployment best practices
High availability considerations
For production environments, configure these high availability features:- Database Clustering: Implement PostgreSQL/Oracle with replication
- MongoDB Replica Sets: Deploy MongoDB as a replica set with at least 3 nodes
- Kafka Clustering: Use at least 3 Kafka brokers with replication factor ≥ 3
- Redis Sentinel/Cluster: Configure Redis for high availability
- Service Replicas: Run multiple instances of each microservice
- Load Balancing: Implement proper load balancing for service instances
- Affinity/Anti-Affinity Rules: Distribute service instances across nodes
Security recommendations
Secure your FlowX.AI deployment with these measures:- Network Segmentation: Isolate microservices using network policies
- Secret Management: Use Kubernetes Secrets or a vault solution
- TLS Everywhere: Enable TLS for all service-to-service communication
- OAuth2 Scopes: Configure fine-grained OAuth2 scopes for services
- Resource Isolation: Use namespaces and pod security policies
- Regular Updates: Keep all components updated with security patches
- Audit Logging: Enable comprehensive audit logging via the Audit Core service
Troubleshooting
Common issues and solutions
| Issue | Possible cause | Solution |
|---|---|---|
| Service fails to start | Missing environment variables | Check logs for “Configuration property not found” errors |
| Database connection errors | Incorrect credentials or URL | Verify database connection parameters |
| Services can’t communicate | Kafka misconfiguration | Ensure topic names match between producer and consumer services |
| Authentication failures | OAuth2 configuration issues | Verify client IDs, secrets, and server URLs |
| Performance degradation | Insufficient resources | Monitor CPU/memory usage and scale resources appropriately |
| Data inconsistency | Redis cache not synchronized | Check Redis connection and consider cache invalidation |
Diagnostic procedures
When troubleshooting FlowX.AI microservices:- Check Service Logs: Examine logs for error messages
- Verify Configurations: Ensure all required environment variables are set correctly
- Test Connectivity: Verify network connectivity between services
- Monitor Resources: Check CPU, memory, and disk usage
- Inspect Kafka Topics: Use Kafka tools to inspect message flow
- Review Database State: Examine database for data integrity issues
- Check OAuth2 Tokens: Verify token validity and permissions
Service-specific documentation
For detailed configuration of individual services, refer to:Core platform components
Process Engine Setup
Admin Setup
Advancing Controller Setup
Application Manager Setup
Runtime Manager Setup
Scheduler Core Setup
Audit Setup
Authorization Setup
Task Management Setup
Notifications Setup
Document Setup
Events Gateway Setup
AI Platform services
FlowX.AI 5.1 introduces the AI Platform, a comprehensive suite of AI services that provide intelligent automation capabilities across the entire application lifecycle.

