Preparing for Decision Center data migration

In migrating data between databases, you do not have to add groups to the target database because they are inherited from the source database.

If you are going to migrate the data from an earlier version of Operational Decision Manager to this version, define an empty file group-security-configurations.xml and pass it to customization.authSecretRef=my-migration-auth-secret following the group security configurations in Understand the migration scenarios.

Group security is defined in the previous database and does not need to defined here:

kubectl create secret generic my-migration-auth-secret --from-file=webSecurity.xml --from-file=group-security-configurations.xml 

The parameters are as follows:

group-security-configurations.xml

<dc-usermanagement>
</dc-usermanagement> 

webSecurity.xml

<server>
    <!-- Web application security -->
    <basicRegistry id="basic" realm="customRealm">
        <!-- ODM super user -->
        <user name="odmAdmin" password="odmAdmin"/>
        <!-- Users for Decision Center -->
        <user name="rtsAdmin" password="rtsAdmin"/>
        <user name="rtsConfig" password="rtsConfig"/>
        <user name="rtsUser1" password="rtsUser1"/>
        <user name="rtsUser2" password="rtsUser2"/>
        <!-- Users for Decision Server -->
        <user name="resAdmin" password="resAdmin"/>
        <user name="resDeployer" password="resDeployer"/>
        <user name="resMonitor" password="resMonitor"/>
        <user name="resExecutor" password="resExecutor" />
        <!-- Groups for Decision Center -->
        <group name="rtsAdministrators">
            <member name="odmAdmin"/>
            <member name="rtsAdmin"/>
        </group>
        <group name="rtsInstallers">
            <member name="odmAdmin"/>
            <member name="rtsAdmin"/>
        </group>
        <group name="rtsConfigManagers">
            <member name="rtsConfig"/>
        </group>
        <!-- Groups for Decision Server -->
        <group name="resAdministrators">
            <member name="odmAdmin" />
            <member name="resAdmin" />
        </group>
        <group name="resDeployers">
            <member name="resDeployer" />
        </group>
        <group name="resMonitors">
            <member name="resMonitor" />
        </group>
        <group name="resExecutors">
            <member name="odmAdmin" />
            <member name="resAdmin" />
            <member name="resDeployer" />
            <member name="resMonitor" />
            <member name="resExecutor" />
        </group>
    </basicRegistry>
</server>