Installation on RHEL VM

[mhrd-nic]

Can we install the DIVOC on RHEL VM? If yes then kindly guide me about the installation procedure.

[pramodkvarma]

@dileepbapat can you please help answer this? Thanks.

[dileepbapat]

Assuming it is for evaluation purpose you can install using docker-compose / docker on RHEL or any variant.
Documentation : https://divoc.egov.org.in/tech-docs#getting-started
For production use, you can consider Kubernetes or similar.

[mhrd-nic]

Okay thanks. Yes now it is for POC

[mhrd-nic]

I have setup docker-compose for POC but we don't have internet access on production server. therefore need the deployment architecture along with following details for the necessary firewall entries.

1. Service Name,
2. Port No,
3. Access Rule (Inbound or Outbound or Both),
4. URL with Public IP
5. Remarks (Any other information you feel to share)

[dileepbapat]

Hi,

Delete the realm divoc (if you have already created) and import https://github.com/egovernments/DIVOC/blob/orchestration/keycloak/realm-export.json and create divoc realm.

wget https://raw.githubusercontent.com/egovernments/DIVOC/orchestration/keycloak/realm-export.json

• Hover on select realm > Click on add realm

* select file > use the downloaded realm-export.json

• Add a user with mobile number and add an attribute "mobile_number" with number

• In Groups tag select system admin and click on "Join"

Now you should be able to use the newly created user with portal

For portal it looks for facility-admin-port with admin role which is mapped in "system admin" group. If the appropriate role is not found it is redirecting to login.

Let me know if you face any issues with this.

[mhrd-nic]

Thanks @dileepbapat now authentication is working fine.

We are getting error in nginx and portal api consoles when trying to upload csv in vaccinator.

On nginx Console

2021/02/22 16:03:55 [error] 30#30: *29 upstream prematurely closed connection while reading response header from upstream, client: 10.25.26.251, server: , request: "POST /divoc/admin/api/v1/facilities HTTP/1.1", upstream: "http://172.30.0.14:8001/divoc/admin/api/v1/facilities", host: "10.25.26.30", referrer: "http://10.25.26.30/portal/admin"

On Portal API Console

time="2021-02-22T15:58:01Z" level=info msg="Consumer error: Subscribed topic not available: certified: Broker: Unknown topic or partition \n"
time="2021-02-22T16:03:52Z" level=info msg="Using the public key -----BEGIN PUBLIC KEY-----\n\n-----END PUBLIC KEY-----\n"
time="2021-02-22T16:03:52Z" level=info msg="asn1: syntax error: sequence truncated"
2021/02/22 16:03:52 http: panic serving 172.30.0.7:60746: runtime error: invalid memory address or nil pointer dereference
goroutine 25 [running]:
net/http.(*conn).serve.func1(0xc0024080a0)
/usr/local/go/src/net/http/server.go:1801 +0x147

[dileepbapat]

try running docker-compose restart portal_api, may be it was not able to fetch the key when it was starting as keycloak was still coming up.

[mhrd-nic]

while uploading facility csv getting error in user registration in keycloak while in open saber registered successfully.

Keycloak logs

14:33:04,783 WARN [org.keycloak.events] (default task-7) type=CLIENT_LOGIN_ERROR, realmId=divoc, clientId=admin-api, userId=null, ipAddress=172.31.0.14, error=invalid_client_credentials, grant_type=client_credentials

Registry (open saber logs)

time="2021-02-23T14:40:53Z" level=info msg="Create keycloak user POST /auth/admin/realms/divoc/users HTTP/1.1\r\nHost: keycloak:8080\r\nUser-Agent: Go-http-client/1.1\r\nContent-Length: 143\r\nAuthorization: \r\nContent-Type: application/json; charset=UTF-8\r\nAccept-Encoding: gzip\r\n\r\n{"username":"1111111121","enabled":true,"attributes":{"employee_id":"","facility_code":"BLR311","full_name":"","mobile_number":["1111111121"]}}\r\n\r\n=================================\r\n\r\nHTTP/1.1 401 Unauthorized\r\nContent-Length: 33\r\nConnection: keep-alive\r\nContent-Type: application/json\r\nDate: Tue, 23 Feb 2021 14:40:53 GMT\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Xss-Protection: 1; mode=block\r\n\r\n{"error":"HTTP 401 Unauthorized"}"
time="2021-02-23T14:40:53Z" level=error msg="Error while creating keycloak user : &{1111111121 ramesh Active}"

[dileepbapat]

ADMIN_API_CLIENT_SECRET need to be updated with secret from the admin-api in keycloak. This is implementation-specific

[mhrd-nic]

@dileepbapat could you please specify what languages, technologies, tools etc are used in DIVOC. It will be helpful for us to manage the team.

[dileepbapat]

UI:

• React, webpack, bootstrap
  Backend:
• Golang, kafka, keycloak, javascript, postgres, clickhouse, redash, elastic search, redis, docker, docker-compose
  Devops:
• Kubernetes, ansible, prometheous
  Performance:
• Gatling, HPS on kubernetes, prometheus operators

Good to know: Spring boot, Java stack to work on opensaber related functionalities

[mvinodpal]

I have configure system on local machine. but I am trying to uploading data on system. so I am facing 502 bad gateway error please check my below screenshot. Please suggest me how to fix.

[mvinodpal]

I have changed Facility.json and Vaccinator.json according to School and Teacher. and changes uploaded field in csv file. after that run and getting the error on console. Please check the below screenshot.

[mvinodpal]

I have trying to changes logo and right side image but not success. please check the below error and screenshot. Please suggest me.