Setting KIE_SERVER_DOMAIN does set the kie.server.domain property, which affect JMS clients, but doesn't affect the REST interface, as the "other" domain is hard-coded in kie-server.war/WEB-INF/jboss-web.xml

KIE_SERVER_DOMAIN should perhaps also replace the "other" domain in kie-server.war/WEB-INF/jboss-web.xml

Use case:

It should be possible to configure users/roles properties from a secret using a custom security domain:

SECDOMAIN_NAME=bpms
SECDOMAIN_USERS_PROPERTIES=/etc/secdomain-secret/users.properties
SECDOMAIN_ROLES_PROPERTIES=/etc/secdomain-secret/roles.properties
KIE_SERVER_DOMAIN=bpms