# I want to create lab for ZTNA using open ziti, the environment are kubernetes in docker desktop Windows **URL:** \ **Category:** Support\ **Created:** [November 21, 2025, 2:16pm UTC](https://openziti.discourse.group/t/i-want-to-create-lab-for-ztna-using-open-ziti-the-environment-are-kubernetes-in-docker-desktop-windows/5356 "2025-11-21T14:16:55Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![akbarmavs](https://avatars.discourse-cdn.com/v4/letter/a/9f8e36/32.png) [@akbarmavs](https://openziti.discourse.group/u/akbarmavs)\ **Post date:** [November 21, 2025, 2:16pm UTC](https://openziti.discourse.group/t/i-want-to-create-lab-for-ztna-using-open-ziti-the-environment-are-kubernetes-in-docker-desktop-windows/5356/1 "2025-11-21T14:16:55Z")
Hi, i want to create lab for ZTNA using openziti, where the environment are in windows 11, using docker desktop and kubernetes, but i seems like can’t do the installation for openziti, it always error when i want to create the openziti, i use the docker compose from netfoundry, but it can’t enroll the new edge router or services and policy, is there any topics or link that i can refer to? Or someone here can help me to set it up? ---
**Author:** ![michi](https://avatars.discourse-cdn.com/v4/letter/m/c37758/32.png) [@michi](https://openziti.discourse.group/u/michi)\ **Post date:** [November 21, 2025, 8:08pm UTC](https://openziti.discourse.group/t/i-want-to-create-lab-for-ztna-using-open-ziti-the-environment-are-kubernetes-in-docker-desktop-windows/5356/2 "2025-11-21T20:08:54Z")
Can you give us some more details about your environment? Are you running your openziti network on Docker or Kubernetes? If you use Docker: Are you running the quickstart compose ([Local - Docker Compose | NetFoundry Documentation](https://netfoundry.io/docs/openziti/learn/quickstarts/network/local-docker-compose/)) or the deployment ones ([Local - Docker Compose | NetFoundry Documentation](https://netfoundry.io/docs/openziti/learn/quickstarts/network/local-docker-compose/))? Are the containers up and running or do they fail to start? On docker you can check this by running `docker ps`. On Kubernetes run `kubectl get pods --all-namespaces`. > [@akbarmavs](#): > > but i seems like can’t do the installation for openziti, it always error when i want to create the openziti What do you mean by “create the openziti”? Can you share the error you get when doing this? ---
**Author:** ![akbarmavs](https://avatars.discourse-cdn.com/v4/letter/a/9f8e36/32.png) [@akbarmavs](https://openziti.discourse.group/u/akbarmavs)\ **Post date:** [November 22, 2025, 2:47pm UTC](https://openziti.discourse.group/t/i-want-to-create-lab-for-ztna-using-open-ziti-the-environment-are-kubernetes-in-docker-desktop-windows/5356/4 "2025-11-22T14:47:11Z")
![image](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/7/743f5a8729c278f45e06a46e215329d042493f8c.png) This is the output of my error, i run minikube on docker desktop in windows 11 ---
**Author:** ![akbarmavs](https://avatars.discourse-cdn.com/v4/letter/a/9f8e36/32.png) [@akbarmavs](https://openziti.discourse.group/u/akbarmavs)\ **Post date:** [November 22, 2025, 3:50pm UTC](https://openziti.discourse.group/t/i-want-to-create-lab-for-ztna-using-open-ziti-the-environment-are-kubernetes-in-docker-desktop-windows/5356/5 "2025-11-22T15:50:21Z")
Now i try to set up from this tutorial [Kubernetes Quickstart | NetFoundry Documentation](https://netfoundry.io/docs/openziti/learn/quickstarts/network/local-kubernetes), and it stuck on init ![image](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/d/d0fc8558cf18b7aebae83c6b4f6e3a96a22a68ff.png) ---
**Author:** ![qrkourier](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/qrkourier/32/52_2.png) [@qrkourier](https://openziti.discourse.group/u/qrkourier)\ **Post date:** [November 25, 2025, 3:42pm UTC](https://openziti.discourse.group/t/i-want-to-create-lab-for-ztna-using-open-ziti-the-environment-are-kubernetes-in-docker-desktop-windows/5356/6 "2025-11-25T15:42:57Z")
Hello there, I see you're working through the steps for Windows in the local Kubernetes quickstart for OpenZiti ([Kubernetes Quickstart | NetFoundry Documentation](https://netfoundry.io/docs/openziti/learn/quickstarts/network/local-kubernetes/)). Did you perform the Windows steps in the "Configure DNS" section ([Kubernetes Quickstart | NetFoundry Documentation](https://netfoundry.io/docs/openziti/learn/quickstarts/network/local-kubernetes/#configure-dns))? In Kubernetes, a pod may have zero or more "init" containers. The main application will not start until the init containers have completed successfully. Therefore, you must troubleshoot why the init container has not completed. If you need help with that, please provide the relevant log messages from the init container that failed to complete. ---
**Author:** ![akbarmavs](https://avatars.discourse-cdn.com/v4/letter/a/9f8e36/32.png) [@akbarmavs](https://openziti.discourse.group/u/akbarmavs)\ **Post date:** [November 26, 2025, 12:06am UTC](https://openziti.discourse.group/t/i-want-to-create-lab-for-ztna-using-open-ziti-the-environment-are-kubernetes-in-docker-desktop-windows/5356/7 "2025-11-26T00:06:00Z")
Hi, i did it already, ![image](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/7/78cf8c8d88bc62f0304ccb9d4ebdacca786fbf64.png) But then i can’t use ziti command ![image](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/c/cdd6b24f6d8e8bbc734c51115f6594778f165220.png) ---
**Author:** ![akbarmavs](https://avatars.discourse-cdn.com/v4/letter/a/9f8e36/32.png) [@akbarmavs](https://openziti.discourse.group/u/akbarmavs)\ **Post date:** [November 26, 2025, 12:10am UTC](https://openziti.discourse.group/t/i-want-to-create-lab-for-ztna-using-open-ziti-the-environment-are-kubernetes-in-docker-desktop-windows/5356/8 "2025-11-26T00:10:14Z")
![image](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/8/8fbb44109ee8291b075e3f5c34e5be89a5312700.png)And here is the nslookup and curl results from that section ---
**Author:** ![qrkourier](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/qrkourier/32/52_2.png) [@qrkourier](https://openziti.discourse.group/u/qrkourier)\ **Post date:** [December 2, 2025, 1:37pm UTC](https://openziti.discourse.group/t/i-want-to-create-lab-for-ztna-using-open-ziti-the-environment-are-kubernetes-in-docker-desktop-windows/5356/9 "2025-12-02T13:37:56Z")
Thanks for clarifying that you completed [the Kubernetes quickstart (using Minikube)](https://netfoundry.io/docs/openziti/learn/quickstarts/network/local-kubernetes/), and now your goal is to create [your first Ziti service](https://netfoundry.io/docs/openziti/learn/quickstarts/services/kubernetes-service) using your Ziti network running on the local Windows machine. You mentioned that you're unable to run the `ziti` command on the Windows machine where you completed the Kubernetes quickstart. For that, you must install the `ziti.exe` command. The link will show you how to download the latest version for your Windows computer ([Downloads | NetFoundry Documentation](https://netfoundry.io/docs/openziti/downloads/?os=Windows)). Alternatively, you may run the `ziti` command inside your Kubernetes cluster with the provided `miniziti.bash` script from the Kubernetes quickstart. Note that there's an extra step to extract any files you create with this method, such as an enrollment token, since the `ziti` command can only write to the filesystem of the pod inside the cluster. Examples of running the `ziti` CLI with `miniziti.bash`: ```bash $ ./miniziti.bash ziti edge policy-advisor services --quiet httpbin-service OKAY : miniziti-client (1) -> httpbin-service (1) Common Routers: (1/1) Dial: Y Bind: N OKAY : httpbin-host (1) -> httpbin-service (1) Common Routers: (1/1) Dial: N Bind: Y ``` ```bash $ ./miniziti.bash ziti edge create identity "idtest" New identity idtest created with id: 2Nd2j0Sy6 $ ./miniziti.bash ziti edge list identities 'name="idtest"' -j | jq -r '.data[0].enrollment.ott.jwt' | tee /tmp/idtest.jwt eyJhbGciOiJSUzI1NiIsImtpZCI6IjhhN2JjMTI0NTg0YzlhOGQ2MzFhOGQxYWExNjE5ODg2OGNlNWZiZTIiLCJ0eXAiOiJKV1QifQ.eyJpc3MiOiJodHRwczovL21pbml6aXRpLWNvbnRyb2xsZXIuMTkyLjE2OC40OS4yLnNzbGlwLmlvOjQ0MyIsInN1YiI6InAwTFRqMFNjNkIiLCJhdWQiOlsiIl0sImV4cCI6MTc2NDY5MjM3MiwianRpIjoiZjg2MjQ2NjMtMTI2Yy00NWZkLWI1YzktNzM2MWFjOWY2NmE3IiwiZW0iOiJvdHQiLCJjdHJscyI6WyJ0bHM6bWluaXppdGktY29udHJvbGxlci4xOTIuMTY4LjQ5LjIuc3NsaXAuaW86NDQzIl19.N6HJdSxaKJ1H5ZE8mBqB9UCNBaWKDwJgRvEnbF7tyyckzCeDQ6zy58C6WYgXS8Ijm7RWoqYcg6b1qwRIlUIyaUgrUxsAFRLz2Zh0ke_kRaW97iUw_SkGabI18W6QZknDp2CbkckomFDDaZhMq3bhv2uq-MxGw7PCiCE7FK1yYrJbNZ-n7LM63_aevFHvGsMvXNsYNNzULDC0kQQY8oEtbMwPGIhwImUIeJ4hp2kbwX4OwLbGB2Awb0emGq3lVXoAr4fvSeaeGMc8gyDsnbW6tqkGKnDjAnNdQfzMps3SEhsJnm4cNoJbz_GOLls_M_Nvpcsjymwv_YrPsGYNNNbXs6fjeNhsEFlhSYcm5BPzelrKYkcDf8O5ZIIOar4qPjEdx4Oz_1k8t5F-AFPF8C9tyyra0vnILvxFpj4ewj7vPuJi4q9LSN1gWDsNVwhcKFfPk0MWvwidMK2SBJwKfp9vu6G_TnoMewb4cLlIv_KfZcwSxfvGSMXIyYprwdOrc-u5bLoITpwF8-sBzRMRt2MYkMQ3_zgAQFAwADdZAKGN-bSt6BNinRQIIYS32N3AWbBXJRRqNPgnlNDRXOimFB05LMu9BD655udVkzKelB0xuLMZipkduHjMxX7wrK5oe7aHQGK3D8cN6AfVE1wfkqPRgXMANlp61AIFjCjt3JNjR1c ``` Additionally, you mentioned that the test service's Ziti intercept address, "httpbin.miniziti.private", is not resolving in DNS on your Windows computer. For this to work, you'll need to do two things: 1. Install a Ziti tunneler for your OS, the Desktop Edge app in this case ([Downloads | NetFoundry Documentation](https://netfoundry.io/docs/openziti/downloads/?os=Windows)). 2. Add the identity to Ziti Desktop Edge that was created by the Kubernetes quickstart (`miniziti-client.jwt`).