Optional: Customizing Process Federation Server

You can add custom configuration for Process Federation Server.

About this task

After you install Business Automation Workflow, the <CR_Name>-pfs-secret-custom secret contains a Process Federation Server configuration file named user.xml. If pfs_configuration.enable_default_security_roles is set to true in the custom resource (CR) file, you can use the user.xml to configure the user registry and user roles for Process Federation Server.

You can customize the Process Federation Server configuration by using the pfs_configuration.config_dropins_overrides_secret property in the CR. You must create a secret and set the secret name to pfs_configuration.config_dropins_overrides_secret. Use the following command to create the secret:

kubectl create secret generic ibm-pfs-config --from-file=/opt/pfs/configDropins

where /opt/pfs/configDropins is the folder that contains the Process Federation Server configuration files.

Procedure

The following example shows how to update the custom configuration roles for Process Federation Server by changing the user.xml file.

Get the content of the user.xml file.
The file is encoded with base64 in the ibm-pfs-config secret. Run the following command to get it:
```
oc get secret <CR_Name>-pfs-secret-custom -o yaml
```
Decode the data in the user.xml file and update the content, then encode the updated content with base64. If you are on a Linux based system, you can decode and encode with the base64 command. For more information, see Base64 Linux man page. If you are on Windows, you can decode and encode with the built-in certutil command. For more information, see Certutil windows command.
Update ibm-pfs-config to add the new secret.
Run the following command:
```
oc edit secret <CR_Name>-pfs-secret-custom
```
Replace the data in user.xml with the updated base64-encoded content.
When you save and quit, the content is updated in the Process Federation Server Pod starter-ibm-process-federation-server-0 synchronously.