19913d85-f662-4518-a9a1-7adc1793dfd4.png){kind=small}
Hello, for the OSS deployment, the last step is th...
# ask-communitya
Abhishek Agrawal
03/01/2023, 11:06 PMHello, for the OSS deployment, the last step is this - https://docs.dagster.io/deployment/guides/kubernetes/deploying-with-helm#step-8-run-a-job-in-your-deployment.
After running the command
kubectl --namespace default port-forward $DAGIT_POD_NAME 8080:80Abhishek Agrawal
03/01/2023, 11:25 PMI see i can add
&Abhishek Agrawal
03/01/2023, 11:58 PMUpdate - even adding
&Abhishek Agrawal
03/02/2023, 12:01 AMAlso, once I close the cloud shell, the app stops working..
Abhishek Agrawal
03/02/2023, 6:07 AMIf there's someone who can jump on a call to sort this, it would be great. The dagit pod is also giving some gRPC related error..
e
Expoze Dummy
03/02/2023, 3:16 PMI don't think you're supposed to deploy an application inside Cloud Shell. It's only for testing, experimentations, interacting with your Google Cloud services but not deployment. Use a virtual machine (GCE) or Kubernetes (GKE) for deployment and that's where you should expose your port
a
Abhishek Agrawal
03/02/2023, 3:22 PMSorry for confusion, it's deployed in GKE, but I am running the commands via Cloud Shell.
I am running the last command given in the docs which is doing port forwarding. I think since am doing port forwarding via Cloud Shell, it does it temporarily. I wasn't sure what other ways there are to do this. I want to make sure that the application is not exposed to the internet, only internal folks.
d
daniel
03/02/2023, 4:42 PMI don't think that command was intended for permanent use - that exposes it to you on your local machine, not anybody else in your organization.
How to expose your Dagit service internally is going to depend a lot on your internal networking/cloud setup and is a bit outside of the scope of Dagster support. There's some general guidance for how to expose GKE apps in Google Cloud here: https://cloud.google.com/kubernetes-engine/docs/how-to/exposing-apps
e
Expoze Dummy
03/02/2023, 5:14 PM@Abhishek Agrawal Ahh, yeah, it would depend on your networking for GKE. That command only exposes dagit on your local machine. Refer to daniel's comment ^^
a
Abhishek Agrawal
03/03/2023, 5:34 AMAh thanks @daniel and @Expoze Dummy!!
Abhishek Agrawal
03/03/2023, 5:49 AMI did this and it's working now. Now the last part, the UI as of now, is accessible by everyone on internet. I need to put Google SSO on it so only the internal employees can use it. 🙂 Is it called setting IAP? Have you guys done this before?
e
Expoze Dummy
03/03/2023, 4:15 PMI have minimal knowledge on k8s so, I'll just give an answer for setting it up in GCE: Yes. Setup the iap then you should be able to use something like this:
Copy code
gcloud compute start-iap-tunnel <your_vm_instance_name_here> 3000--local-host-port=localhost:30005 Views