Skip to main content
Version: 5.3.0 - 5.3.2

Application deployment

This article contains a subset of information described in KAIZEN setup. If you have already performed the same instructions in that article, do not repeat the steps below and only view it as a summary.

This article lists the application configurations required for deploying KAIZEN. It covers the key backend (BE) and frontend (FE) configuration properties that should be reviewed and updated to map with your deployment environment.

note

Additional application configurations can be performed. This article only lists those that are considered important for setting up KAIZEN.

BE application configurations​

important

Apply the instructions in this section only to the following manifest list.

note

For details on a complete list of Spring Boot properties, refer to the Spring Boot documentation.

Manifest list:

  • kaizen-be-cm-config

Instructions:

  1. Redis cache configuration

    Property NameDefault ValueDescription
    spring.data.redis.hostkaizen-redis-service.kaizen.svc.cluster.localHostname of the Redis cache service KAIZEN should connect with
    spring.data.redis.password-Password to connect with Redis cache service if required
    spring.data.redis.port6379Port number of the Redis cache service KAIZEN should connect with
    spring.data.redis.ssl.enabledDefault follows server.ssl.enabledFlag to determine whether KAIZEN should connect with Redis cache service via TLS connection. Accept true or false value
    spring.redis.ssl.key-storeDefault follows server.ssl.key-store-passwordFile path of the keystore to be used for SSL connection to connect with Redis cache
    spring.redis.ssl.key-store-passwordDefault follows server.ssl.key-store-passwordPassword of the keystore to be used for SSL connection to connect with Redis cache
    spring.redis.ssl.trust-storeDefault follows server.ssl.trust-storeFile path of the truststore to be used for SSL connection to connect with Redis cache
    spring.redis.ssl.trust-store-passwordDefault follows server.ssl.trust-store-passwordPassword of the truststore to used for SSL connection to connect with Redis cache

  2. JWT configuration

    Property NameDefault ValueDescription
    com.ecquaria.lowcode.iam.access.jwt.issuerecq-jwt-issuerIssuer claim value to be set for KAIZEN to issue JWT token
    com.ecquaria.lowcode.iam.access.jwt.trusted.issuersecq-jwt-issuerIssuer claim value of the JWT token for KAIZEN to validate
    com.ecquaria.lowcode.iam.access.jwt.refresh-token-expiration-sec-admin1800JWT refresh token validity in terms of seconds when issued
    com.ecquaria.lowcode.iam.access.jwt.session-token-expiration-sec-admin900JWT access token validity in terms of seconds when issued
    com.ecquaria.lowcode.iam.access.jwt.signer.key.location/certs/jwt/signer-private-key-rsa.pemFile path of the JWT signer key location
    com.ecquaria.lowcode.iam.access.jwt.trusted.cert.location/certs/jwt/signer-public-key-rsa.pemFile path of the JWT trusted cert for validating the integrity of the JWT token
    security.token.cookie.prefixkaizen-cookieCookie name prefix for JWT tokens

  3. Configuration for the transit of password encryption

    Property NameDefault ValueDescription
    com.ecquaria.lowcode.iam.access.password.enc.key.location/certs/jwt/signer-private-key-rsa.pemPath to the key to be used for encryption and decryption of password in transit

  4. CSRF configuration

    Property NameDefault ValueDescription
    tecq.lowcode.gateway.csrf.enabledtrueFlag to control whether KAIZEN enables CSRF checking
    security.token.cookie.csrf.prefixkaizen-cookie-csrfcookie prefix for CSRF Token
    security.token.cookie.csrfkey.prefixkaizen-cookie-csrf_keycookie prefix key for CSRF token

  5. KAIZEN service TLS configuration

    Property NameDefault ValueDescription
    server.ssl.enabledtrueFlag to configure whether KAIZEN services should run as TLS services. Accept true or false value
    server.ssl.key-aliasKAIZENKey alias used to run KAIZEN services as TLS services
    server.ssl.key-store-typePKCS12Keystore type used. Accept PKCS12 or JKS value
    server.ssl.key-storefile:/certs/keystore/kaizen-keystore.p12File path to the keystore used for TLS connections
    server.ssl.key-store-password-Password of the keystore
    server.ssl.trust-store-typePKCS12Truststore type used. Accept PKCS12 or JKS value
    server.ssl.trust-storefile:/certs/truststore/kaizen-truststore.p12File path to the truststore used for TLS connections
    server.ssl.trust-store-password-Password of the truststore

  6. KAIZEN service mesh configuration

    Property NameDefault ValueDescription
    use.mesh.nametrueFlag to configure whether KAIZEN should use its own service mesh setup. If using Istio Service Mesh, this should be set to false. Accept true or false value
    service.names.mesh{"setup":{"host":"setup.kaizen.svc.cluster.local","port":8089,"contextPath":""}, "gateway":{"host":"gateway.kaizen.svc.cluster.local","port":8081,"contextPath":""}, "iam":{"host":"iam.kaizen.svc.cluster.local","port":8082,"contextPath":""}, "common":{"host":"common.kaizen.svc.cluster.local","port":8084,"contextPath":""}, "job":{"host":"job.kaizen.svc.cluster.local","port":8085,"contextPath":""}, "workflow":{"host":"workflow.kaizen.svc.cluster.local","port":8087,"contextPath":""}, "console":{"host":"console.kaizen.svc.cluster.local","port":8083,"contextPath":""}, "pagescan":{"host":"pagescan.kaizen.svc.cluster.local","port":8086,"contextPath":""}, "theme":{"host":"theme.kaizen.svc.cluster.local","port":8090,"contextPath":""}, "dbeditor":{"host":"dbeditor.kaizen.svc.cluster.local","port":8091,"contextPath":""}, "report":{"host":"report.kaizen.svc.cluster.local","port":8088,"contextPath":""}, "ai":{"host":"ai.kaizen.svc.cluster.local","port":7860,"contextPath":""}}KAIZEN Service Mesh configuration in JSON format. Each JSON item is one service configuration in the format of <service name> :
    {host:<service hostname>, port: <service port number>}
    e.g. "setup":{"host":"setup.kaizen.svc.cluster.local","port":8089}
    service.public.white.path.additional.list'[{"path":"/xxx/api/v1/xxx/services","method":"GET"}, … }]'A list of additional endpoints to be whitelisted for security checks

FE application configurations​

important

Apply the instructions in this section only to the following manifest list.

note

For details on a complete list of Spring Boot properties, refer to the Spring Boot documentation.

Manifest list:

  • kaizen-fe-cm-config

Instructions:

  1. KAIZEN FE application configuration

    The following configurations are deployed in JSON format in the config.json file.

    Property NameDefault ValueDescription
    CSRF_TOKEN_PREFIXkaizen-cookie-csrfCSRF Token cookie name to be used by FE application
    DYNAMIC_USER_DOMAIN_CODES-Custom user domain code to be accepted by KAIZEN

Last updated on 21 Sep 2026