Currently there is bi directional communication between kie server and kie controller which requires both ends to be able to communicate with each other. That in turn requires both ends to know about each other security setup - user name and password.

As an alternative, there should be websocket based solution that is initiated from kie server (it is then a client) to kie controller (the server). It is kie server responsibility to maintain the active connection to kie controller and restore it once it failed.