Operaton BPMN Workflow and DMN Decision Engine | cloudimg Support

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Operaton is the open-source, community-driven continuation of Camunda 7 - a mature BPMN 2.0 workflow and DMN decision automation engine with the Cockpit, Tasklist and Admin web applications and a full REST API. Deploying it yourself means installing Docker, wiring up the engine against a durable database, fronting it behind a reverse proxy, disabling built-in demo accounts and example applications, turning on REST authentication and resource authorizations, and generating and storing secrets. This AMI eliminates that effort entirely - your process engine is running within minutes of launch, not hours. You get a pre-hardened, tested configuration backed by 24/7 expert support with a one-hour average response for critical issues, something community forums cannot provide.

The current release available is Operaton 2.1.2.

The official upstream Operaton Run distribution and a bundled PostgreSQL database, both pinned by digest, run under one systemd service via Docker Compose on a private network. The engine is published to the loopback address only and PostgreSQL is not exposed to any host port; a host nginx reverse proxy fronts the engine on port 80 so the web applications and the REST API are reached through one URL. State is held in PostgreSQL, so your process instances, decisions and history survive restarts - unlike the default embedded in-memory database.

Operaton, like Camunda 7, ships a default demo/demo administrator and an example application that seeds further demo users and data. This image removes all of that:

• A single administrator account with a unique random password is created on first boot, before the engine starts, so the default demo account is never created
• The example application and its demo users and data are not deployed
• REST API authentication is turned on - the API rejects every unauthenticated request
• Resource authorizations are enforced
• The administrator password is stored in a root-only file, inaccessible to unprivileged users
• Build-time state is wiped before capture, so the database, administrator account and all secrets are re-created fresh on your instance

Browse to the instance on port 80, sign in to the web applications with the generated administrator credentials, and deploy your first BPMN process or DMN decision table. Model processes in Cockpit, complete human tasks in Tasklist, and manage users and authorizations in Admin. Automate business processes and decisions through the REST API from your own applications.

• Financial services - loan origination with KYC/AML checks: Model a customer onboarding process in BPMN that orchestrates identity verification steps, then use DMN decision tables to evaluate KYC and AML risk scores and route applications for approval or manual review.
• Microservice orchestration: Use the engine as a central orchestrator in your VPC to coordinate order fulfillment, payment processing and notification services across distributed microservices via the REST API.
• Camunda 7 migration: Run your existing Camunda 7 process applications on a maintained, open-source engine without vendor lock-in or license fees.

• Installing Docker and wiring the engine against a durable PostgreSQL database
• Configuring nginx as a reverse proxy in front of the engine
• Disabling the demo accounts and the example application
• Turning on REST authentication and resource authorizations
• Generating and securely storing the administrator and database secrets
• Ongoing maintenance and security patching without expert guidance

24/7 technical support by email and chat with a one-hour average response for critical issues. Our engineers help with deployment, TLS termination, database backups, user management, external database configuration, Camunda 7 to Operaton migration and scaling. Contact our team at support@cloudimg.co.uk .

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.