Skip to content

closes #1161 setup documentation for 1.2.1.0#1162

Open
ckm007 wants to merge 2 commits into
1.2.0from
story/1161
Open

closes #1161 setup documentation for 1.2.1.0#1162
ckm007 wants to merge 2 commits into
1.2.0from
story/1161

Conversation

@ckm007

@ckm007 ckm007 commented Jun 1, 2026

Copy link
Copy Markdown
Member

Summary by CodeRabbit

  • Documentation
    • Added comprehensive v3 deployment guides: AWS, on‑premises, and on‑premises without public DNS, covering network setup, clusters, ingress, storage, TLS, Rancher/Keycloak integration, monitoring, logging, dependencies, module deployment, and validation steps.
    • Added overview & architecture and pre‑requisites pages detailing architecture, sizing, DNS/SSL, and tooling.
    • Updated a version header in the installation docs.

Signed-off-by: ckm007 <chandrakeshavmishra@gmail.com>
@ckm007 ckm007 linked an issue Jun 1, 2026 that may be closed by this pull request
@coderabbitai

coderabbitai Bot commented Jun 1, 2026

Copy link
Copy Markdown

Review Change Stack

Walkthrough

Adds a complete MOSIP v3 (1.2.1.0) deployment documentation set: prerequisites, architecture overview, and three deployment guides (AWS, on‑prem with DNS, on‑prem without DNS) including observability, external dependencies, module deployment, and verification steps.

Changes

MOSIP v3 Deployment Documentation

Layer / File(s) Summary
Foundation: Prerequisites and Architecture
docs/setup/deploymentnew/v3-installation/1.2.1.0/README.md, docs/setup/deploymentnew/v3-installation/1.2.1.0/overview-and-architecture.md, docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md
Version header and architecture/prerequisites: two-cluster overview (Observation, MOSIP), WireGuard, Nginx, Rancher/RKE, Keycloak, hardware/network/DNS/cert requirements, and tooling/OpenSSL setup and repo cloning instructions.
AWS Deployment Workflow
docs/setup/deploymentnew/v3-installation/1.2.1.0/aws-deployment.md
End-to-end AWS guide: WireGuard bastion, Observation EKS via eksctl, NGINX ingress with internal NLB, gp2/gp2-retain and CSI, Rancher+Keycloak SAML, MOSIP EKS import, global configmap/Istio ingress/TLS, DNS mapping, optional monitoring/alerting/logging, external dependencies, MOSIP module deploy, API testrig.
On‑Premises Deployment (with DNS)
docs/setup/deploymentnew/v3-installation/1.2.1.0/on-premises-deployment.md
On‑prem guide for environments with public DNS: WireGuard bastion, Observation & MOSIP RKE2 provisioning via Ansible, Nginx ingress and NFS storage, Let's Encrypt wildcard TLS, Rancher/Keycloak SAML and RBAC, global ConfigMap/Istio, cluster import, httpbin verification, optional observability, DB policy update, module deploy, API testrig/DSL Rig validation.
On‑Premises Deployment (without DNS)
docs/setup/deploymentnew/v3-installation/1.2.1.0/on-premises-deployment-without-dns.md
On‑prem guide for restricted/no-DNS environments: WireGuard bastion/client, RKE2 Observation with CoreDNS host mappings, Nginx ingress and NFS, OpenSSL/self-signed wildcard TLS and hosts-file guidance, Rancher/Keycloak SAML, MOSIP cluster config with ingress disabled, Istio ingress, optional observability, DB policy update, module deploy recovery steps, API testrig/DSL Rig setup.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related issues

Poem

🐰 I hopped through guides of bastion and node,
Wrote TLS and Helm in a tidy mode,
From WireGuard tunnels to Istio's light,
MOSIP v3 docs now shine through the night. ✨

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly references issue #1161 and describes the main change: adding setup documentation for version 1.2.1.0 across multiple deployment guides.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch story/1161

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 16

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@docs/setup/deploymentnew/v3-installation/1.2.1.0/aws-deployment.md`:
- Line 430: The shell command shown uses a literal K8_ROOT instead of the
environment variable; update the command string 'cd K8_ROOT/logging/dashboard'
to use the env var by adding the dollar sign (i.e., 'cd
$K8_ROOT/logging/dashboard') and ensure any preceding instructions actually
export or define K8_ROOT so the substitution works at runtime.
- Around line 242-246: The docs reference two different filenames for the same
cluster config (copy cluster.config.sample to mosip.cluster.config, then
instruct editing rancher.cluster.config), so correct the inconsistency by
replacing the incorrect "rancher.cluster.config" reference with
"mosip.cluster.config" so all steps consistently instruct users to edit
mosip.cluster.config and then list the parameters (name, region, version).
- Line 112: Replace every incorrect occurrence of the command string "kubect get
nodes" with the correct "kubectl get nodes" in the documentation; search for the
exact typo "kubect get nodes" (e.g., the instances shown in the diff) and update
them to "kubectl get nodes" so the command copies/pastes correctly.
- Around line 102-104: The fenced code block containing the command "eksctl
create cluster -f rancher.cluster.config" lacks a language identifier; update
the block delimiter from ``` to ```sh (or another suitable shell marker) so it
reads ```sh followed by the command and closing ``` to satisfy linting and
improve readability.
- Line 15: Replace the generic link text "[here]" used in sentences like
"Install docker in the Wireguard machine as given [here](...)" with descriptive
link text (e.g., "Docker Engine install guide") so readers and screen readers
can understand the link target; update every occurrence of "[here](...)" in this
document (including the instances called out in the comment) to meaningful
labels such as "Docker Engine install guide", "AWS CLI configuration reference",
or similar context-specific phrases that match each URL.

In
`@docs/setup/deploymentnew/v3-installation/1.2.1.0/on-premises-deployment-without-dns.md`:
- Around line 1266-1268: Remove the embedded Slack webhook URL
"https://hooks.slack.com/services/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"
from the docs and replace it with a generic placeholder such as
"https://hooks.slack.com/services/TEAM/ID/KEY" or "<SLACK_WEBHOOK_URL>"; commit
the change and ensure the real webhook is rotated/revoked outside of this repo
to prevent unauthorized access.
- Line 473: Remove the stray editor artifact text "Add commentMore actions" from
the sentence that reads "Post installation access the keycloak using
`iam.mosip.net` and get the credentials as per the post installation steps
definedAdd commentMore actions ![keycloak-access](...)" so the sentence reads
cleanly (e.g., end the sentence after "defined" or before the image), and remove
the same "Add commentMore actions" artifact wherever it appears later (notably
the occurrence referenced at line 920) to restore proper readability.
- Around line 572-700: The docs mix RKE1 and RKE2 steps causing contradictory
instructions; decide on a single RKE2 flow or clearly separate a deprecated RKE1
section. If choosing RKE2, replace all occurrences of the RKE1 CLI/artefacts
(references to "rke", "rke up", "cluster.rkestate", "kube_config_cluster.yml"
and instructions about generating "cluster.yml" with RKE1 prompts) with the RKE2
equivalents (RKE2 installation, rke2 server/agent config, kubeconfig paths and
service management) and remove/mark any RKE1-only steps as deprecated;
alternatively, create a new clearly labeled "RKE1 (deprecated)" subsection
containing the existing "rke", "rke up", and "cluster.rkestate" content and add
a top-level note directing users to the preferred RKE2 section.
- Line 689: Fix the two broken command snippets: close the missing quote on the
export command by completing export
KUBECONFIG="$HOME/.kube/<cluster_name>_config" and correct the SSH example by
using a single -i with the key file and a proper user@host (e.g., ssh -i
/path/to/key.pem ubuntu@<host_or_ip>) instead of the incomplete "ssh -i ... -i
ubuntu@" fragment; apply the same corrections to the other occurrence of these
snippets.
- Line 436: The referenced internal links are inconsistent: update the
anchor/link that points to
on-prem-without-dns.md#setting-up-nginx-server-for-observation-k8s-cluster to
match the actual target document and anchor name used in this docs directory,
and fix the dashboard link text that says "02-error-only-logs.ndjson" but
currently points to "03-service-logs.ndjson" so the link URL and link text match
the correct ndjson filename; also scan other similar references in this file
(including the ones flagged around the dashboard examples and related anchors)
and correct filenames/anchors/URLs to the actual files in the directory
structure so all Markdown links resolve.

In
`@docs/setup/deploymentnew/v3-installation/1.2.1.0/overview-and-architecture.md`:
- Around line 25-27: The guide mixes repository version tags—update all infra
repo links in this document to use a single validated release tag (e.g., replace
occurrences of "v1.2.0.1-B1" and "v1.2.0.2" with the chosen release tag
"v1.2.1.0" or the officially validated tag for this guide); specifically update
the two links labeled "MOSIP External Components" and "MOSIP Services" and any
other occurrences noted around lines 36-40 so every reference in the guide
points to the same validated version set.

In `@docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md`:
- Around line 41-44: The fenced code blocks containing shell commands such as
the lines with "helm repo add bitnami https://charts.bitnami.com/bitnami" and
"helm repo add mosip https://mosip.github.io/mosip-helm" need explicit language
tags (use "bash") and the surrounding Markdown lists must have consistent
indentation; update each affected code fence to start with ```bash and normalize
list items to use the same indentation level (e.g., two spaces or a single tab
consistently) and apply the same fixes to the other occurrences referenced (the
blocks containing the commands at the noted ranges).
- Line 23: The table contains domain typos using "xyx.net" instead of "xyz.net";
update every domain example that uses the incorrect "xyx.net" (e.g.,
sandbox.xyx.net, api.sandbox.xyx.net, activemq.sandbox.xyx.net,
kibana.sandbox.xyx.net, object-store.sandbox.xyx.net and any other occurrences
of "xyx.net") to "xyz.net" so all hostnames consistently use "*.xyz.net" and
DNS/certificate mappings will match.
- Around line 49-71: Update the "Openssl Need openssl version 1.1.1 specifically
for regclient installation" section to stop hard-pinning OpenSSL 1.1.1f: replace
the forced remove-and-install instructions with guidance that states the minimum
and compatible OpenSSL versions for regclient (e.g., "OpenSSL >= 1.1.1" and
"OpenSSL 3.x is supported on Ubuntu 24.04") and provide alternative paths — (a)
use the system OpenSSL if it meets the minimum, with a verification command
`openssl version`, (b) for older OSes provide the manual install steps as an
optional legacy path, and (c) include a note linking to regclient compatibility
documentation; remove the blanket `sudo apt remove openssl` recommendation and
the forced backup/mv commands so modern distributions are not instructed to
downgrade system OpenSSL.
- Line 38: The prereq line "*
[kubectl](https://kubernetes.io/docs/tasks/tools/#kubectl)- version 2.12.4 or
higher" uses an invalid kubectl version; update that entry to a valid supported
client version (for example change the text to "kubectl - version 1.23.6 or
higher" or "kubectl - version > 1.23.6") so it matches the repo's other docs
(see the existing aws-deployment.md baseline); edit the same list item text to
replace "2.12.4" with the chosen valid version range.

In `@docs/setup/deploymentnew/v3-installation/1.2.1.0/README.md`:
- Line 1: The top-level markdown heading in README.md currently reads "1.2.0.2"
but this file lives in the 1.2.1.0 release folder; update the Markdown header on
the first line (the "# 1.2.0.2" heading) to "# 1.2.1.0" so the document title
matches the release directory and PR for 1.2.1.0 (locate and edit the first-line
heading in README.md).
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 54479f1b-11fe-44c0-ab08-b692de079c72

📥 Commits

Reviewing files that changed from the base of the PR and between c9c5b6f and 3ef20e9.

📒 Files selected for processing (6)
  • docs/setup/deploymentnew/v3-installation/1.2.1.0/README.md
  • docs/setup/deploymentnew/v3-installation/1.2.1.0/aws-deployment.md
  • docs/setup/deploymentnew/v3-installation/1.2.1.0/on-premises-deployment-without-dns.md
  • docs/setup/deploymentnew/v3-installation/1.2.1.0/on-premises-deployment.md
  • docs/setup/deploymentnew/v3-installation/1.2.1.0/overview-and-architecture.md
  • docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md

Comment thread docs/setup/deploymentnew/v3-installation/1.2.1.0/aws-deployment.md
Comment thread docs/setup/deploymentnew/v3-installation/1.2.1.0/aws-deployment.md Outdated
Comment thread docs/setup/deploymentnew/v3-installation/1.2.1.0/aws-deployment.md Outdated
Comment thread docs/setup/deploymentnew/v3-installation/1.2.1.0/aws-deployment.md
Comment thread docs/setup/deploymentnew/v3-installation/1.2.1.0/aws-deployment.md Outdated
Comment thread docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md
Comment thread docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md Outdated
Comment thread docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md Outdated
Comment thread docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md
Comment thread docs/setup/deploymentnew/v3-installation/1.2.1.0/README.md
Signed-off-by: ckm007 <chandrakeshavmishra@gmail.com>

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md (1)

6-6: ⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Fix typo: "referting" should be "referring".

Line 6 contains a typographical error that should be corrected for documentation clarity.

📝 Suggested fix
-* Here, we are referting to __Ubuntu OS (22.0.4)__ throughout this installation guide.
+* Here, we are referring to __Ubuntu OS (22.0.4)__ throughout this installation guide.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md` at line
6, Fix the typographical error in the markdown line that reads "* Here, we are
referting to __Ubuntu OS (22.0.4)__ throughout this installation guide." by
changing "referting" to "referring" so the sentence becomes "* Here, we are
referring to __Ubuntu OS (22.0.4)__ throughout this installation guide." —
update the text in the file
docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md where the
phrase "__Ubuntu OS (22.0.4)__" appears.
♻️ Duplicate comments (3)
docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md (3)

78-82: ⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Add language tag to fenced code block.

The code block setting environment variables should specify bash as its language for proper syntax highlighting and markdown compliance.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md` around
lines 78 - 82, The fenced code block that exports MOSIP_ROOT, K8_ROOT, and
INFRA_ROOT lacks a language tag; update the triple-backtick fence to specify
"bash" (i.e., change ``` to ```bash) around the block containing the export
MOSIP_ROOT, export K8_ROOT=$MOSIP_ROOT/k8s-infra, and export
INFRA_ROOT=$MOSIP_ROOT/mosip-infra to enable proper syntax highlighting and
markdown compliance.

23-23: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

DNS examples contain likely domain typos (xyx.net vs xyz.net).

Several hostnames in the DNS table use *.xyx.net while adjacent entries use *.xyz.net. These appear to be copy errors that will cause DNS/certificate mapping failures if followed literally.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md` at line
23, The DNS table contains inconsistent typos using "xyx.net" in several entries
(e.g., sandbox.xyx.net, api.sandbox.xyx.net, activemq.sandbox.xyx.net,
kibana.sandbox.xyx.net, object-store.sandbox.xyx.net) while others use
"xyz.net"; update those mislabeled hostnames to the correct "xyz.net" variant to
match the rest of the domain names (for example change sandbox.xyx.net →
sandbox.xyz.net, api.sandbox.xyx.net → api.sandbox.xyz.net,
activemq.sandbox.xyx.net → activemq.sandbox.xyz.net, kibana.sandbox.xyx.net →
kibana.sandbox.xyz.net, object-store.sandbox.xyx.net →
object-store.sandbox.xyz.net) so DNS and certificate mappings remain consistent.

51-69: ⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Fix fenced-code language tags and reconsider OpenSSL 1.1.1f hard requirement.

The code blocks at lines 51, 55, 63, and 67 are missing bash language specifiers, and the OpenSSL installation instructions hard-require version 1.1.1f despite Ubuntu 24.04 (listed as supported on line 89) shipping with OpenSSL 3.x by default.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md` around
lines 51 - 69, The fenced code blocks in the OpenSSL section are missing the
bash language tag and the docs also hard-code OpenSSL 1.1.1f as a requirement;
update the three fenced blocks shown in the diff (the `openssl version` check
and the two other command blocks) to use ```bash so syntax highlighting is
correct, and change the installation guidance that forces OpenSSL 1.1.1f to
instead recommend verifying compatibility (e.g., accept OpenSSL 1.1.1 or 3.x
where supported) and only instruct manual replacement when the detected `openssl
version` is incompatible with the product; reference the OpenSSL version check
block and the manual install guidance that mentions openssl-1.1.1f for where to
apply these edits.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Outside diff comments:
In `@docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md`:
- Line 6: Fix the typographical error in the markdown line that reads "* Here,
we are referting to __Ubuntu OS (22.0.4)__ throughout this installation guide."
by changing "referting" to "referring" so the sentence becomes "* Here, we are
referring to __Ubuntu OS (22.0.4)__ throughout this installation guide." —
update the text in the file
docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md where the
phrase "__Ubuntu OS (22.0.4)__" appears.

---

Duplicate comments:
In `@docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md`:
- Around line 78-82: The fenced code block that exports MOSIP_ROOT, K8_ROOT, and
INFRA_ROOT lacks a language tag; update the triple-backtick fence to specify
"bash" (i.e., change ``` to ```bash) around the block containing the export
MOSIP_ROOT, export K8_ROOT=$MOSIP_ROOT/k8s-infra, and export
INFRA_ROOT=$MOSIP_ROOT/mosip-infra to enable proper syntax highlighting and
markdown compliance.
- Line 23: The DNS table contains inconsistent typos using "xyx.net" in several
entries (e.g., sandbox.xyx.net, api.sandbox.xyx.net, activemq.sandbox.xyx.net,
kibana.sandbox.xyx.net, object-store.sandbox.xyx.net) while others use
"xyz.net"; update those mislabeled hostnames to the correct "xyz.net" variant to
match the rest of the domain names (for example change sandbox.xyx.net →
sandbox.xyz.net, api.sandbox.xyx.net → api.sandbox.xyz.net,
activemq.sandbox.xyx.net → activemq.sandbox.xyz.net, kibana.sandbox.xyx.net →
kibana.sandbox.xyz.net, object-store.sandbox.xyx.net →
object-store.sandbox.xyz.net) so DNS and certificate mappings remain consistent.
- Around line 51-69: The fenced code blocks in the OpenSSL section are missing
the bash language tag and the docs also hard-code OpenSSL 1.1.1f as a
requirement; update the three fenced blocks shown in the diff (the `openssl
version` check and the two other command blocks) to use ```bash so syntax
highlighting is correct, and change the installation guidance that forces
OpenSSL 1.1.1f to instead recommend verifying compatibility (e.g., accept
OpenSSL 1.1.1 or 3.x where supported) and only instruct manual replacement when
the detected `openssl version` is incompatible with the product; reference the
OpenSSL version check block and the manual install guidance that mentions
openssl-1.1.1f for where to apply these edits.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 06fcbcfb-e97e-404a-9630-1781e914bc8d

📥 Commits

Reviewing files that changed from the base of the PR and between 3ef20e9 and 154e5cb.

📒 Files selected for processing (2)
  • docs/setup/deploymentnew/v3-installation/1.2.1.0/aws-deployment.md
  • docs/setup/deploymentnew/v3-installation/1.2.1.0/pre-requisites.md
🚧 Files skipped from review as they are similar to previous changes (1)
  • docs/setup/deploymentnew/v3-installation/1.2.1.0/aws-deployment.md

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update a deployment document for MOSIP v1.2.1.0

1 participant