# Mosip setup in GKE

**URL:** <https://community.mosip.io/t/mosip-setup-in-gke/1466>\
**Category:** General\
**Created:** [July 22, 2024, 10:19am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466 "2024-07-22T10:19:45Z")\
**Posts on this page:** 20\
**Page:** 4

<div class="post-metadata">

**Author:** ![ckm007](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/ckm007/32/264_2.png) [@ckm007](https://community.mosip.io/u/ckm007)\
**Post date:** [August 6, 2024, 5:20am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/62 "2024-08-06T05:20:46Z")

</div>

Is wireguard setup done?  
Are you connected to wireguard?  
Also all the loadbalancer configuration relevant to this is performed?  
[loadbalancer configuration](https://docs.mosip.io/1.2.0/deploymentnew/v3-installation/aws-installation-guidelines-new#mosip-k8-cluster-global-configmap-ingress-and-storage-class-setup)

---

<div class="post-metadata">

**Author:** ![Arjun\_Bose](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arjun_bose/32/897_2.png) [@Arjun\_Bose](https://community.mosip.io/u/Arjun_Bose)\
**Post date:** [August 6, 2024, 5:24am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/63 "2024-08-06T05:24:00Z")

</div>

yes wireguard setup is done , I am connected to wireguard aswell and also loadbalancer configuration has been performed. I am setting it up in gcp just wanted you to take a note of that.

---

<div class="post-metadata">

**Author:** ![Arjun\_Bose](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arjun_bose/32/897_2.png) [@Arjun\_Bose](https://community.mosip.io/u/Arjun_Bose)\
**Post date:** [August 7, 2024, 4:34am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/64 "2024-08-07T04:34:17Z")

</div>

Please can someone revert , a bit quicker on this matter @syed.salman @svahsek @ckm007 @HarikrishnaReddy

---

<div class="post-metadata">

**Author:** ![svahsek](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/svahsek/32/1098_2.png) [@svahsek](https://community.mosip.io/u/svahsek)\
**Post date:** [August 7, 2024, 6:08am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/65 "2024-08-07T06:08:32Z")

</div>

Hi @Arjun_Bose ,

Yes, one of of the SMEs will respond here, team has been a bit occupied, have requested them.

Best Regards  
Team MOSIP

---

<div class="post-metadata">

**Author:** ![Arjun\_Bose](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arjun_bose/32/897_2.png) [@Arjun\_Bose](https://community.mosip.io/u/Arjun_Bose)\
**Post date:** [August 9, 2024, 7:17am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/66 "2024-08-09T07:17:09Z")

</div>

Its been 2 days no one reached out yet. @svahsek

---

<div class="post-metadata">

**Author:** ![Arjun\_Bose](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arjun_bose/32/897_2.png) [@Arjun\_Bose](https://community.mosip.io/u/Arjun_Bose)\
**Post date:** [August 9, 2024, 9:27am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/67 "2024-08-09T09:27:12Z")

</div>

please can someoe help on this ,

when i try to access the prereg ui , i am getting this

 ![image](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/2X/0/082f95e9945cdbf559d7cc291484aff19adb3350.png)  
 ![Screenshot 2024-08-09 145305](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/2X/c/c66bc78a0a17768520d5da2eab236b591cde7ab3.png)

@syed.salman @ckm007 @svahsek @HarikrishnaReddy

---

<div class="post-metadata">

**Author:** ![svahsek](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/svahsek/32/1098_2.png) [@svahsek](https://community.mosip.io/u/svahsek)\
**Post date:** [August 9, 2024, 9:47am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/68 "2024-08-09T09:47:47Z")

</div>

Dear @Arjun_Bose ,

Apologies for the delay, we are to look into the aspect when load balancer has been used and solution for the same. One of our colleagues is looking into this and will be responding here with inputs. Kindly bear with us this while.

Best Regards  
Team MOSIP

---

<div class="post-metadata">

**Author:** ![Arjun\_Bose](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arjun_bose/32/897_2.png) [@Arjun\_Bose](https://community.mosip.io/u/Arjun_Bose)\
**Post date:** [August 9, 2024, 10:00am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/69 "2024-08-09T10:00:00Z")

</div>

Please look into the prereg issue first , its also unable to find this [https://prereg.sandbox.radiant-mosip.org/preregistration/v1/login/config](https://prereg.sandbox.radiant-mosip.org/preregistration/v1/login/config)

 ![image](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/2X/9/99b34a8635441c8b8fdd342a212b2b003bbce7fb.png)

 ![image](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/2X/2/2cc9f56e16647493d471e4b73f9ce52626472f1f.png)

---

<div class="post-metadata">

**Author:** ![Arjun\_Bose](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arjun_bose/32/897_2.png) [@Arjun\_Bose](https://community.mosip.io/u/Arjun_Bose)\
**Post date:** [August 9, 2024, 11:22am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/70 "2024-08-09T11:22:36Z")

</div>

please can anyone respond to the issue @svahsek @syed.salman @HarikrishnaReddy

---

<div class="post-metadata">

**Author:** ![sanchi-singh24](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/sanchi-singh24/32/538_2.png) [@sanchi-singh24](https://community.mosip.io/u/sanchi-singh24)\
**Post date:** [August 9, 2024, 12:01pm UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/71 "2024-08-09T12:01:53Z")

</div>

Hi @Arjun_Bose

Apologies for the delay from our side as I see you haven’t got a reply back from our side let me assign it to one of my team members asap who can look into this and help you out.

Best regards,  
Team MOSIP

---

<div class="post-metadata">

**Author:** ![mayuradesh](https://avatars.discourse-cdn.com/v4/letter/m/e19adc/32.png) [@mayuradesh](https://community.mosip.io/u/mayuradesh)\
**Post date:** [August 9, 2024, 12:05pm UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/72 "2024-08-09T12:05:51Z")

</div>

Hi @Arjun_Bose

The URL for PreReg services seems incorrect. It has one extra slash.

 ![image](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/2X/6/65ff6522fc5ef28ed03cfbd74b5e782c27673940.png)  
That is why you are getting 404 err.

Hope this helps!

---

<div class="post-metadata">

**Author:** ![Arjun\_Bose](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arjun_bose/32/897_2.png) [@Arjun\_Bose](https://community.mosip.io/u/Arjun_Bose)\
**Post date:** [August 9, 2024, 12:22pm UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/73 "2024-08-09T12:22:44Z")

</div>

have resolved this but still getting error [PreRegistration](https://prereg.sandbox.radiant-mosip.org/pre-registration-ui/#/)

 ![image](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/2X/7/77287430f6bba92f3a264d1b0e24f825d824ffe9.png)

[https://prereg.sandbox.radiant-mosip.org/pre-registration-ui/#/](https://prereg.sandbox.radiant-mosip.org/pre-registration-ui/#/)

---

<div class="post-metadata">

**Author:** ![syed.salman](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/syed.salman/32/25_2.png) [@syed.salman](https://community.mosip.io/u/syed.salman)\
**Post date:** [August 9, 2024, 12:36pm UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/74 "2024-08-09T12:36:01Z")

</div>

@Arjun_Bose

Could you please provide the load-balancer configuration and istio nodeport configuration?

You can get the istio configuration via the below command

```auto
kubectl -n istio-system get iop istio-operators-mosip -o yaml

```

---

<div class="post-metadata">

**Author:** ![Arjun\_Bose](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arjun_bose/32/897_2.png) [@Arjun\_Bose](https://community.mosip.io/u/Arjun_Bose)\
**Post date:** [August 9, 2024, 12:46pm UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/75 "2024-08-09T12:46:49Z")

</div>

im not using istio i have exposed it using a public loadbalancer and an ingress. I have set it up in gke so have done so as I was facing issues with istio.

this is the prereg-ui service cluster ip

apiVersion: v1  
kind: Service  
metadata:  
annotations:  
[cloud.google.com/neg:](http://cloud.google.com/neg:) ‘{“ingress”:true}’  
[cloud.google.com/neg-status:](http://cloud.google.com/neg-status:) ‘{“network\_endpoint\_groups”:{“80”:“k8s1-092b4e2b-prereg-prereg-ui-80-ebae32bc”},“zones”:[“us-central1-a”,“us-central1-b”,“us-central1-c”,“us-central1-f”]}’  
meta.helm.sh/release-name: prereg-ui  
meta.helm.sh/release-namespace: prereg  
creationTimestamp: “2024-07-29T08:53:23Z”  
labels:  
[app.kubernetes.io/component:](http://app.kubernetes.io/component:) mosip  
[app.kubernetes.io/instance:](http://app.kubernetes.io/instance:) prereg-ui  
[app.kubernetes.io/managed-by:](http://app.kubernetes.io/managed-by:) Helm  
[app.kubernetes.io/name:](http://app.kubernetes.io/name:) prereg-ui  
helm.sh/chart: prereg-ui-12.0.1-B2  
managedFields:

- apiVersion: v1  
fieldsType: FieldsV1  
fieldsV1:  
f:metadata:  
f:annotations:  
.: {}  
f:meta.helm.sh/release-name: {}  
f:meta.helm.sh/release-namespace: {}  
f:labels:  
.: {}  
f:app.kubernetes.io/component: {}  
f:app.kubernetes.io/instance: {}  
f:app.kubernetes.io/managed-by: {}  
f:app.kubernetes.io/name: {}  
f:helm.sh/chart: {}  
f:spec:  
f:internalTrafficPolicy: {}  
f:ports:  
.: {}  
k:{“port”:80,“protocol”:“TCP”}:  
.: {}  
f:port: {}  
f:protocol: {}  
f:selector: {}  
f:sessionAffinity: {}  
f:type: {}  
manager: helm  
operation: Update  
time: “2024-07-29T08:53:23Z”
- apiVersion: v1  
fieldsType: FieldsV1  
fieldsV1:  
f:spec:  
f:ports:  
k:{“port”:80,“protocol”:“TCP”}:  
f:targetPort: {}  
manager: unknown  
operation: Update  
time: “2024-08-06T16:04:58Z”
- apiVersion: v1  
fieldsType: FieldsV1  
fieldsV1:  
f:metadata:  
f:annotations:  
f:cloud.google.com/neg-status: {}  
manager: glbc  
operation: Update  
subresource: status  
time: “2024-08-08T18:43:55Z”  
name: prereg-ui  
namespace: prereg  
resourceVersion: “10341816”  
uid: 11b7fbbf-36d0-4449-8cce-24e2918540c9  
spec:  
clusterIP: 10.137.246.121  
clusterIPs:
- 10.137.246.121  
internalTrafficPolicy: Cluster  
ipFamilies:
- IPv4  
ipFamilyPolicy: SingleStack  
ports:
- port: 80  
protocol: TCP  
targetPort: 8080  
selector:  
[app.kubernetes.io/instance:](http://app.kubernetes.io/instance:) prereg-ui  
[app.kubernetes.io/name:](http://app.kubernetes.io/name:) prereg-ui  
sessionAffinity: None  
type: ClusterIP  
status:  
loadBalancer: {}

and this is the ingress

apiVersion: [networking.k8s.io/v1](http://networking.k8s.io/v1)  
kind: Ingress  
metadata:  
annotations:  
[ingress.kubernetes.io/backends:](http://ingress.kubernetes.io/backends:) ‘{“k8s1-092b4e2b-kube-system-default-http-backend-80-ec2f7a65”:“HEALTHY”,“k8s1-092b4e2b-prereg-prereg-ui-80-ebae32bc”:“HEALTHY”}’  
[ingress.kubernetes.io/forwarding-rule:](http://ingress.kubernetes.io/forwarding-rule:) k8s2-fr-7u3htvsg-prereg-prereg-ui-ingress-fc63507h  
[ingress.kubernetes.io/target-proxy:](http://ingress.kubernetes.io/target-proxy:) k8s2-tp-7u3htvsg-prereg-prereg-ui-ingress-fc63507h  
[ingress.kubernetes.io/url-map:](http://ingress.kubernetes.io/url-map:) k8s2-um-7u3htvsg-prereg-prereg-ui-ingress-fc63507h  
[kubectl.kubernetes.io/last-applied-configuration:](http://kubectl.kubernetes.io/last-applied-configuration:) |  
{“apiVersion”:“[networking.k8s.io/v1",“kind”:“Ingress”,“metadata”:{“annotations”:{“nginx.ingress.kubernetes.io/rewrite-target”:“/”},“name”:“prereg-ui-ingress”,“namespace”:“prereg”},“spec”:{“rules”:[{“host”:“prereg.sandbox.radiant-mosip.org”,“http”:{“paths”:[{“backend”:{“service”:{“name”:“prereg-ui”,“port”:{“number”:80}}},“path”:“/pre-registration-ui/”,“pathType”:"Prefix](http://networking.k8s.io/v1%22,%22kind%22:%22Ingress%22,%22metadata%22:%7B%22annotations%22:%7B%22nginx.ingress.kubernetes.io/rewrite-target%22:%22/%22%7D,%22name%22:%22prereg-ui-ingress%22,%22namespace%22:%22prereg%22%7D,%22spec%22:%7B%22rules%22:%5B%7B%22host%22:%22prereg.sandbox.radiant-mosip.org%22,%22http%22:%7B%22paths%22:%5B%7B%22backend%22:%7B%22service%22:%7B%22name%22:%22prereg-ui%22,%22port%22:%7B%22number%22:80%7D%7D%7D,%22path%22:%22/pre-registration-ui/%22,%22pathType%22:%22Prefix)”}]}}]}}  
[nginx.ingress.kubernetes.io/rewrite-target:](http://nginx.ingress.kubernetes.io/rewrite-target:) /  
creationTimestamp: “2024-08-08T18:43:55Z”  
finalizers:

- [networking.gke.io/ingress-finalizer-V2](http://networking.gke.io/ingress-finalizer-V2)  
generation: 6  
managedFields:
- apiVersion: [networking.k8s.io/v1](http://networking.k8s.io/v1)  
fieldsType: FieldsV1  
fieldsV1:  
f:metadata:  
f:annotations:  
.: {}  
f:kubectl.kubernetes.io/last-applied-configuration: {}  
f:nginx.ingress.kubernetes.io/rewrite-target: {}  
manager: kubectl-client-side-apply  
operation: Update  
time: “2024-08-08T18:43:55Z”
- apiVersion: [networking.k8s.io/v1](http://networking.k8s.io/v1)  
fieldsType: FieldsV1  
fieldsV1:  
f:metadata:  
f:annotations:  
f:ingress.kubernetes.io/backends: {}  
f:ingress.kubernetes.io/forwarding-rule: {}  
f:ingress.kubernetes.io/target-proxy: {}  
f:ingress.kubernetes.io/url-map: {}  
f:finalizers:  
.: {}  
v:“[networking.gke.io/ingress-finalizer-V2](http://networking.gke.io/ingress-finalizer-V2)”: {}  
f:status:  
f:loadBalancer:  
f:ingress: {}  
manager: glbc  
operation: Update  
subresource: status  
time: “2024-08-08T18:47:08Z”
- apiVersion: [networking.k8s.io/v1](http://networking.k8s.io/v1)  
fieldsType: FieldsV1  
fieldsV1:  
f:spec:  
f:rules: {}  
manager: unknown  
operation: Update  
time: “2024-08-09T10:36:29Z”  
name: prereg-ui-ingress  
namespace: prereg  
resourceVersion: “10992808”  
uid: f886d06d-7c30-4ee0-b5b4-3bf48eb29cd3  
spec:  
rules:
- host: [prereg.sandbox.radiant-mosip.org](http://prereg.sandbox.radiant-mosip.org)  
http:  
paths:
  - backend:  
service:  
name: prereg-ui  
port:  
number: 80  
path: /pre-registration-ui/\*  
pathType: ImplementationSpecific  
status:  
loadBalancer:  
ingress:
  - ip: 34.120.207.136

---

<div class="post-metadata">

**Author:** ![syed.salman](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/syed.salman/32/25_2.png) [@syed.salman](https://community.mosip.io/u/syed.salman)\
**Post date:** [August 9, 2024, 12:56pm UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/76 "2024-08-09T12:56:16Z")

</div>

@Arjun_Bose

It appears the issue may be related to the ingress rule. The current path is set as `path: /pre-registration-ui/*`. Please consider updating it to `/`. The host (`prereg.sandbox.xyz.net`) will be validated before routing to the service.

Additionally, could you please share the challenges you encountered during the deployment of Istio?

---

<div class="post-metadata">

**Author:** ![Arjun\_Bose](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arjun_bose/32/897_2.png) [@Arjun\_Bose](https://community.mosip.io/u/Arjun_Bose)\
**Post date:** [August 9, 2024, 1:14pm UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/77 "2024-08-09T13:14:30Z")

</div>

I am unable to route anything from istio-ingressgateway-internal nor istio-ingressgateway

still not working i tried giving just the /

---

<div class="post-metadata">

**Author:** ![syed.salman](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/syed.salman/32/25_2.png) [@syed.salman](https://community.mosip.io/u/syed.salman)\
**Post date:** [August 9, 2024, 1:40pm UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/78 "2024-08-09T13:40:27Z")

</div>

@Arjun_Bose

Could you please provide all the ingress configurations?

---

<div class="post-metadata">

**Author:** ![Arjun\_Bose](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arjun_bose/32/897_2.png) [@Arjun\_Bose](https://community.mosip.io/u/Arjun_Bose)\
**Post date:** [August 12, 2024, 4:36am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/79 "2024-08-12T04:36:24Z")

</div>

I have deployed istio v.1.15 , and my gke version is 1.28 (the lowest I can go in gke is 1.27) , i was seeing some documentations of istio which says 1.15 is not compatible with 1.28 gke verson , also when i have installed istio (istiod,istio-ingressgateway and ingressgateway-internal) and using the cname values in the dns for the services to be routed using istio , its not working both for internal and extenal , please can you suggest some way @syed.salman @svahsek

---

<div class="post-metadata">

**Author:** ![syed.salman](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/syed.salman/32/25_2.png) [@syed.salman](https://community.mosip.io/u/syed.salman)\
**Post date:** [August 12, 2024, 1:10pm UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/80 "2024-08-12T13:10:12Z")

</div>

@Arjun_Bose

The compatible Istio version is `v1.22.0`.  
Please ensure that you use either `Istio` or the default `Ingress`, but not both. If you choose to use the default `Ingress`, you’ll need to manually create ingress resources for all deployed services.

---

<div class="post-metadata">

**Author:** ![Arjun\_Bose](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arjun_bose/32/897_2.png) [@Arjun\_Bose](https://community.mosip.io/u/Arjun_Bose)\
**Post date:** [August 13, 2024, 4:30am UTC](https://community.mosip.io/t/mosip-setup-in-gke/1466/81 "2024-08-13T04:30:34Z")

</div>

This is my setup

 ![Screenshot 2024-08-13 104718](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/2X/3/38d2d22d653e04dd99319d6d5ac705af247ba682.png)  
 ![Screenshot 2024-08-13 104633](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/2X/7/7d719b7cb31cc0e3ae863fb980c386dc9a2eb97b.png)  
 ![Screenshot 2024-08-13 104643](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/2X/8/838a90ef183285bd4024ff80e8e68c64c897cea9.png)

now when i try to access regclient its taking me to this page

[https://regclient.sandbox.radiant-mosip.org/](https://regclient.sandbox.radiant-mosip.org/) but i am unable to access it but when i try [http://regclient.sandbox.radiant-mosip.org/](http://regclient.sandbox.radiant-mosip.org/) , it is accessible

@syed.salman

[Previous page](https://community.mosip.io/t/mosip-setup-in-gke/1466.md?page=3)

[Next page](https://community.mosip.io/t/mosip-setup-in-gke/1466.md?page=5)
