Hi @Praful_Rakhade,
Thank you for the detail installation guide, I completely follow the guideline in: [External Modules Installation Guide]
but under [Mosip Modules Installation Guide], where I am executing config-server, I keep getting this error:
john@mosipwgbst1:~/mosip-infra/deployment/v3/mosip$ kubectl describe pod -n config-server config-server-65fcf8db6c-dn9lh
Name: config-server-65fcf8db6c-dn9lh
Namespace: config-server
Priority: 0
Service Account: config-server
Node: mosip-node6/172.16.2.156
Start Time: Fri, 13 Jun 2025 01:03:28 +0000
Labels: app.kubernetes.io/instance=config-server
app.kubernetes.io/name=config-server
pod-template-hash=65fcf8db6c
Annotations: cni.projectcalico.org/containerID: 83324025b0ef65d4da4bb3b691190036ea5b63529ea19db30602fa19c657bbb0
cni.projectcalico.org/podIP: 10.42.5.54/32
cni.projectcalico.org/podIPs: 10.42.5.54/32
Status: Running
IP: 10.42.5.54
IPs:
IP: 10.42.5.54
Controlled By: ReplicaSet/config-server-65fcf8db6c
Containers:
config-server:
Container ID: docker://cb02ba44bb0b1eeb0644cae519659242ba33b78c49885bb461dc481c0ac6720c
Image: mosipid/config-server:1.1.2
Image ID: docker-pullable://mosipid/config-server@sha256:bc5ce50037d8988f807db45ee0fb19a750f6d0b17487155fca7edad0892e7eb0
Port: 51000/TCP
Host Port: 0/TCP
State: Running
Started: Fri, 13 Jun 2025 01:03:32 +0000
Ready: False
Restart Count: 0
Limits:
cpu: 200m
memory: 1500Mi
Requests:
cpu: 50m
memory: 256Mi
Liveness: http-get http://:51000/config/%2A/%2A delay=180s timeout=5s period=30s #success=1 #failure=6
Readiness: http-get http://:51000/config/%2A/%2A delay=120s timeout=5s period=30s #success=1 #failure=6
Startup: http-get http://:51000/config/%2A/%2A delay=0s timeout=5s period=10s #success=1 #failure=30
Environment Variables from:
config-server-env-vars ConfigMap Optional: false
Environment:
SPRING_CLOUD_CONFIG_SERVER_GIT_PASSWORD: <set to the key ‘github-token’ in secret ‘config-server’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_API_PUBLIC_HOST: <set to the key ‘mosip-api-host’ of config map ‘global’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_API_INTERNAL_HOST: <set to the key ‘mosip-api-internal-host’ of config map ‘global’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_ADMIN_HOST: <set to the key ‘mosip-admin-host’ of config map ‘global’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_PREREG_HOST: <set to the key ‘mosip-prereg-host’ of config map ‘global’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_RESIDENT_HOST: <set to the key ‘mosip-resident-host’ of config map ‘global’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_PMP_HOST: <set to the key ‘mosip-pmp-host’ of config map ‘global’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_COMPLIANCE_HOST: <set to the key ‘mosip-compliance-host’ of config map ‘global’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_ESIGNET_HOST: <set to the key ‘mosip-esignet-host’ of config map ‘global’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_SIGNUP_HOST: <set to the key ‘mosip-signup-host’ of config map ‘global’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_DB_DBUSER_PASSWORD: <set to the key ‘db-dbuser-password’ in secret ‘db-common-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_KEYCLOAK_INTERNAL_URL: <set to the key ‘keycloak-internal-url’ of config map ‘keycloak-host’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_KEYCLOAK_EXTERNAL_URL: <set to the key ‘keycloak-external-url’ of config map ‘keycloak-host’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_KEYCLOAK_INTERNAL_HOST: <set to the key ‘keycloak-internal-host’ of config map ‘keycloak-host’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_KEYCLOAK_EXTERNAL_HOST: <set to the key ‘keycloak-external-host’ of config map ‘keycloak-host’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_ABIS_CLIENT_SECRET: <set to the key ‘mosip_abis_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_SYNCDATA_CLIENT_SECRET: <set to the key ‘mosip_syncdata_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_CRESER_IDPASS_CLIENT_SECRET: <set to the key ‘mosip_creser_idpass_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MPARTNER_DEFAULT_AUTH_SECRET: <set to the key ‘mpartner_default_auth_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_IDREPO_CLIENT_SECRET: <set to the key ‘mosip_idrepo_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MPARTNER_DEFAULT_PRINT_SECRET: <set to the key ‘mpartner_default_print_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MPARTNER_DEFAULT_DIGITALCARD_SECRET: <set to the key ‘mpartner_default_digitalcard_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_ADMIN_CLIENT_SECRET: <set to the key ‘mosip_admin_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_AUTH_CLIENT_SECRET: <set to the key ‘mosip_auth_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_CREREQ_CLIENT_SECRET: <set to the key ‘mosip_crereq_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_CRESER_CLIENT_SECRET: <set to the key ‘mosip_creser_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_DATSHA_CLIENT_SECRET: <set to the key ‘mosip_datsha_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_IDA_CLIENT_SECRET: <set to the key ‘mosip_ida_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_MISP_CLIENT_SECRET: <set to the key ‘mosip_misp_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_PMS_CLIENT_SECRET: <set to the key ‘mosip_pms_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_POLICYMANAGER_CLIENT_SECRET: <set to the key ‘mosip_policymanager_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_REG_CLIENT_SECRET: <set to the key ‘mosip_reg_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_REGPROC_CLIENT_SECRET: <set to the key ‘mosip_regproc_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_RESIDENT_CLIENT_SECRET: <set to the key ‘mosip_resident_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_PREREG_CLIENT_SECRET: <set to the key ‘mosip_prereg_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_HOTLIST_CLIENT_SECRET: <set to the key ‘mosip_hotlist_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_DIGITALCARD_CLIENT_SECRET: <set to the key ‘mosip_digitalcard_client_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_KEYCLOAK_ADMIN_PASSWORD: <set to the key ‘admin-password’ in secret ‘keycloak’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SOFTHSM_KERNEL_SECURITY_PIN: <set to the key ‘security-pin’ in secret ‘softhsm-kernel’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SOFTHSM_IDA_SECURITY_PIN: <set to the key ‘security-pin’ in secret ‘softhsm-ida’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_ACTIVEMQ_HOST: <set to the key ‘activemq-host’ of config map ‘activemq-activemq-artemis-share’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_ACTIVEMQ_CORE_PORT: <set to the key ‘activemq-core-port’ of config map ‘activemq-activemq-artemis-share’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_ACTIVEMQ_PASSWORD: <set to the key ‘artemis-password’ in secret ‘activemq-activemq-artemis’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_AUTHTYPE_CALLBACK_SECRET: <set to the key ‘ida-websub-authtype-callback-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_CREDENTIAL_ISSUE_CALLBACK_SECRET: <set to the key ‘ida-websub-credential-issue-callback-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_PARTNER_SERVICE_CALLBACK_SECRET: <set to the key ‘ida-websub-partner-service-callback-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_CA_CERTIFICATE_CALLBACK_SECRET: <set to the key ‘ida-websub-ca-certificate-callback-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_HOTLIST_CALLBACK_SECRET: <set to the key ‘ida-websub-hotlist-callback-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_MASTERDATA_TEMPLATES_CALLBACK_SECRET: <set to the key ‘ida-websub-masterdata-templates-callback-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_MASTERDATA_TITLES_CALLBACK_SECRET: <set to the key ‘ida-websub-masterdata-titles-callback-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDREPO_WEBSUB_VID_CREDENTIAL_UPDATE_SECRET: <set to the key ‘idrepo-websub-vid-credential-update-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_RESIDENT_WEBSUB_CREDENTIAL_STATUS_UPDATE_SECRET: <set to the key ‘resident-websub-credential-status-update-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_KERNEL_TOKENID_UIN_SALT: <set to the key ‘mosip-kernel-tokenid-uin-salt’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_KERNEL_TOKENID_PARTNERCODE_SALT: <set to the key ‘mosip-kernel-tokenid-partnercode-salt’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_PRINT_WEBSUB_HUB_SECRET: <set to the key ‘print-websub-hub-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_HUB_SECRET_ENCRYPTION_KEY: <set to the key ‘hub-secret-encryption-key’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_S3_ACCESSKEY: <set to the key ‘s3-user-key’ of config map ‘s3’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_S3_REGION: <set to the key ‘s3-region’ of config map ‘s3’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_S3_SECRETKEY: <set to the key ‘s3-user-secret’ in secret ‘s3’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMTP_HOST: <set to the key ‘smtp-host’ of config map ‘msg-gateway’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMS_HOST: <set to the key ‘sms-host’ of config map ‘msg-gateway’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMTP_PORT: <set to the key ‘smtp-port’ of config map ‘msg-gateway’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMS_PORT: <set to the key ‘sms-port’ of config map ‘msg-gateway’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMTP_USERNAME: <set to the key ‘smtp-username’ of config map ‘msg-gateway’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMS_USERNAME: <set to the key ‘sms-username’ of config map ‘msg-gateway’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMTP_SECRET: <set to the key ‘smtp-secret’ in secret ‘msg-gateway’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMS_SECRET: <set to the key ‘sms-secret’ in secret ‘msg-gateway’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMS_AUTHKEY: <set to the key ‘sms-authkey’ in secret ‘msg-gateway’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_PREREG_CAPTCHA_SITE_KEY: <set to the key ‘prereg-captcha-site-key’ in secret ‘mosip-captcha’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_PREREG_CAPTCHA_SECRET_KEY: <set to the key ‘prereg-captcha-secret-key’ in secret ‘mosip-captcha’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_RESIDENT_CAPTCHA_SITE_KEY: <set to the key ‘resident-captcha-site-key’ in secret ‘mosip-captcha’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_RESIDENT_CAPTCHA_SECRET_KEY: <set to the key ‘resident-captcha-secret-key’ in secret ‘mosip-captcha’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_S3_PRETEXT_VALUE: <set to the key ‘s3-pretext-value’ in secret ‘s3’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MPARTNER_DEFAULT_MOBILE_SECRET: <set to the key ‘mpartner_default_mobile_secret’ in secret ‘keycloak-client-secrets’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_RESIDENT_WEBSUB_AUTHTYPE_STATUS_SECRET: <set to the key ‘resident-websub-authtype-status-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_RESIDENT_WEBSUB_AUTH_TRANSACTION_STATUS_SECRET: <set to the key ‘resident-websub-auth-transaction-status-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_IDA_KYC_TOKEN_SECRET: <set to the key ‘mosip-ida-kyc-token-secret’ in secret ‘conf-secrets-various’> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_PARTNER_CRYPTO_P12_PASSWORD: <set to the key ‘mosip-partner-crypto-p12-password’ in secret ‘conf-secrets-various’> Optional: false
Mounts:
/var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-jw64b (ro)
Conditions:
Type Status
Initialized True
Ready False
ContainersReady False
PodScheduled True
Volumes:
kube-api-access-jw64b:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 3607
ConfigMapName: kube-root-ca.crt
ConfigMapOptional:
DownwardAPI: true
QoS Class: Burstable
Node-Selectors:
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
Type Reason Age From Message
Normal Scheduled 84s default-scheduler Successfully assigned config-server/config-server-65fcf8db6c-dn9lh to mosip-node6
Normal Pulled 82s kubelet Container image “mosipid/config-server:1.1.2” already present on machine
Normal Created 81s kubelet Created container config-server
Normal Started 81s kubelet Started container config-server
Warning Unhealthy 5s (x8 over 75s) kubelet Startup probe failed: Get “http://10.42.5.54:51000/config/*/*”: dial tcp 10.42.5.54:51000: connect: connection refused





