►
From YouTube: Istio Cookbook: Kiali Recipe - Lucas Ponce, Red Hat
Description
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Istio Cookbook: Kiali Recipe - Lucas Ponce, Red Hat
Istio provides a rich feature set, including service discovery, traffic management, extended security, observability (including telemetry and distributed tracing), rolling releases and resiliency. All these features are very powerful but on the other hand they add more configuration to manage and more information to process on top of a standard kubernetes cluster. Kiali is a management console for Istio. It provides dashboards, observability and lets you operate your mesh with robust configuration and validation capabilities. In this session we will run several scenarios learning Istio capabilities in a in a visual manner on a multiple namespace demo application.
A
A
A
So
the
interesting
thing
of
this
demo
app
is
that
I
can
personalize
all
these
user
requests.
So
I
can
create
completely
different
type
of
of
traffic
load
base
per
per
city
base
per
user
type
or
just
per
travel
target.
One
travels
main
ball
flies,
other
stuff
could
be
only
by
car.
All
travels
may
need
some
insulin,
discount,
etc.
A
Right.
I
have
also
a
another
namespace
in
this
travel
demo
application,
which
is
going
to
provide
that
user
interface.
To
give
me
visibility
of
all
of
these
travel
requests
per
city,
what
which
what
type
of
travel
is
small
purchases
and
also
to
will
let
me
to
modify
the
simulator,
so
I
come
from
one
travel
shop
from
one
country.
I
can
increase
the
rate,
the
the
recourse
rate
deal.
I
can
change
the
the
type
of
the
device
that
you
use
or
the
type
of
so
that
is
going
to
create
a
more
rich
demo
scenario.
A
Another
typical
step
in
the
using
of
the
histo
service
mess
is
exposing
services
through
ingress,
using
gateways
right
also
we're
going
to
show
all
the
capabilities
of
observability
right.
We
are
going
to
show
how
to
build
graph
with
one
or
many
namespace
to
see
what
is
happening,
how
my
services
are
communicating,
and
not
also,
we
are
going
to
stop
that.
So
we
are
going
to
create
scenarios
for
traffic
16
on
http
or
tcp
traffic.
A
Okay.
So,
let's
start
with
the
first
scenario,
so
imagine
that
I'm
starting
to
use
deploy
application
name
space
into
my
mess.
So
a
typical
situation
is
that
I'm
going
to
have
namespace
that
are
in
mms
and
other
namespaces
that
are
talking
with
this
other
application,
but
are
not
yet
in
my
mess.
How
I
can
show
that
right.
So
this
is
my
kiali.
This
is
the
overview
page
where
I
can
see
the
travel
inc
travel
portal
tower
control.
A
I
can
filter
this
name
space
and
I
can
see
that
I
have
a
three
name:
space
deploy
my
application,
but
how
to
see
which
applications
have
are
in
the
mess
or
not.
So
the
way
to
see
that
is
using
the
the
wall
of
view
or
the
application
view
and
checking
the
cycles,
so
I
can,
when
I
deploy
a
cycle
into
a
wall
laws
is
when
I
connect
a
wallet
into
the
mess
right.
So
this
is
something
that
I
can
check
in
kiali
I
can
select
in
the
world
of
application
view.
A
I
can
check
all
the
name
space
that
I
am
migrating
and
I
can
see
that,
for
the
travel
inc
are
the
travel
portal.
All
these
workloads
are
already
included
the
product
into
the
ms,
so
they
have
cycle,
but
not
the
terror
control
right.
The
target
contour
has
a
sim
cycle,
so
I
can
also
click
into
the
application,
and
it
will
tell
me
that
I
don't
detect
the
hd
container
right.
So
what
is
the
next
step?
What
I'm
going
to
to
show?
You
is
how
I
can
deploy
this
namespace
our
contouring
to
ms.
A
There
are
several
ways
to
do
that.
I
can
do
this
manually
just
with
the
ctl
command.
I
can
manually
inject
the
psi
card
in
my
deployment,
but
typically
another
way
to
do
that
is
to
annotate
in
the
the
namespace.
I
can
add
the
enable
auto
injection
annotation
from
the
overview
page.
I
can
click
into
the
the
full
list
view.
A
I
can
also
go
to
this
wireless
and
enable
authentication
to
create
the
annotation
of
the
istio
inject
manually.
So
what
is
going
to
do
right
now
is
is
going
to
deploy
the
this
this
spot,
and
now
I
can
see
how
the
sidecar
is
applied
onto
this
world.
So
I
can
see
the
container
here
right.
I
can
see
that
it's
not
showing
any
warning
about
that,
and
I
can
also
show
that
then
point
details
the
low
level
letters
of
the
recycle
that
is
properly
working
right,
okay,
so
that
was
our
first
scenario.
A
What
second
scenario
is
now
that
I
have
applications
deploying
to
the
mess
the
next
typical
step
is
to
expose
it
to
outside
my
cluster,
using
the
ingress
and
using
the
easter
gateway
all
right.
How
I
can
do
that
using
qrd,
so
yeah
remember
in
this
demo
application
I
have
a
service,
the
travel
control
that
expose
a
user
interface.
What
I
want
to
do
is
to
expose
these
services
to
the
english.
How
to
do
that?
I
can
go
to
the
service
details.
A
I
can
go
to
the
actions
the
request
routines
and
I
can
generate
a
very
simple
generic
rule
for
this
I
can
add
just
a
rule
to
say.
Okay,
any
request
to
this
service
is
going
to
is
going
to
be
route
to
the
control
workload,
but
I
can
add
an
advanced
option
to
add
this
service
to
the
gateway,
so
I
can
add
it
to
a
gateway.
I
can
select
an
existing
gateway
or
I
can
create
a
new
one
in
this
gateway.
I'm
going
to
in
the
to
to
write
the
dns.
A
Okay,
so
this
is
going
to
generate
all
the
configuration
required,
a
virtual
service,
a
destination
rule,
a
gateway
connected
to
all
of
them,
and
now,
if
I
access
to
the
ui,
I
can
say
I
can
see
that
this.
Now
this
this
ui
is
exposed
to
outside
traffic.
You
know
with
using
the
this
class,
so,
as
I
commented
in
in
this,
ui
can
tell
me:
okay
what
the
troubleshoots
are
requesting
to
a
tablet,
inc
per
ct
per
type,
and
I
can
also
change
the
request
ratio
of
this
or
these
tools.
A
I
can
modify
the
setting
of
my
simulators
to
create
more
heterogeneous
traffic
and
to
create
a
more
elaborated
demo
scenario:
okay,
so
next
one.
So
the
next
scenario
that
we
want
to
show
is
now
that
we
have
this
name
space
connected
or
deployed
into
the
mess.
I'm
going
to
start
to
receive
additional
information
like
additional
telemetry
about
what
the
traffic
is
doing.
A
Additional
tracing
signals
from
the
sidecars
as
well,
and
I'm
going
to
show
you
how
I
can
use
kiali
to
build
a
graph
from
one
to
many
name
space,
and
I
can
see
the
details
of
security.
The
request
rate,
the
distribution
rate
response
time
with
the
goal,
to
help
me
to
identify
critical
paths
and
when
I
identify
some
world
that
it
looks
like
some
critical,
they
may
have
something
to
test,
so
we
are
going
to
show
details
and
try
to
correlate
more
information
to
understand
what
this
world
is
doing
right.
A
So,
let's
do
that
in
india
so
how
to
start
typically,
we
will
start
with
them
in
the
overview
right.
In
the
overview,
I
see
all
the
name
space
that
I
have
in
my
cluster
deploy
or
not
into
the
mess,
and
as
I
commented,
I
exposed
the
travel
control
name
space
now
I
start
to
see
the
limiting
and
I'm
going
to
show
the
graph
for
this
namespace
right.
A
One
of
the
in
this
graph
I
can
see
that
traffic
is
is
coming
from
the
eastern
ingress
gateway,
as
expected,
you
know,
is
calling
the
control
service
to
the
control
workload
and,
as
I
skype,
this
control
wallet
is
talking
with
the
target
shop
right
to
cut
information.
So
one
interesting
feature
is
that
I
can
build
the
graph
from
one
to
many
namespace.
So
I
see
that
this
story,
contour,
is
talking
to
the
travel
portal
name
space,
so
I
can
add
it
into
my
graph,
and
I
can
see
that.
A
Okay,
that
our
country
is
talking
to
the
teleporter
in
the
teleporter.
I
have
three
shops
that
are
talking
with
the
travel
sciences.
I
can
also
select
the
travel
inc
into
the
graph
view
and
I
can
build
a
rich
graph
of
all
of
the
elements
that
are
talking
into
my
into
my
class
right.
So
it's
pretty
interesting.
So
let
me
to
show
several
options
that
I
can
visualize
in
the
graph
to
me.
The
first
interesting
the
first
one,
the
most
interesting
one
is
the
security.
A
So
one
of
the
benefits-
or
one
of
the
first
reason
that
I'm
going
to
deploy
my
application
into
a
service
mess,
is
to
automatically
have
secure
all
the
communication.
So
I
can
display
the
security
option
here
and
I
can
confirm
that
all
the
traffic
that
is
flowing
into
the
mess
are
using
mutual
tls
for
communicating.
So
it's
all
secure
about
that.
So
the
next
interesting
option
that
I
recommend
to
use
is
the
traffic
animation.
The
traffic
animation
is
a
a
visual
helper
to
show
the
request
rate.
So
it's
building.
A
This
animation
is
built
based
of
the
of
the
rate
information
that
they
collect
and
I
can
identify,
for
example,
some
defense,
so
I
can
see
that
in
this
this
edge,
this
traffic
rate,
I
have
more
traffic
in
the
hotel's
workload
compared
with
others,
apparently
right
so
also.
What
I
can
show
is
the
I
can
show
the
information
that
I
can
show
the
numbers
of
this
request
rate.
I
can
also
try
to
identify
the
distribution
right
and
also
the
response
time
of
all
my
edges
right.
A
I
can
query
not
only
tcp
traffic,
but
I
can
query
tcp
traffic
that
this
could
be
interesting,
for
example,
to
get
information
about
how
my
travel,
inc
workloads
are
communicating
with
the
database,
and
I
can
increase
the
change.
The
query,
for
example,
to
see-
and
I
can
confirm
that,
okay,
the
hotels,
have
some
big
queries
compared
with
to
database
compare
with
others
right.
I
can
also
zoom
in
into
the
travels
into
the
travel
service
I
can
submit
into
the
travel
workload
to
see
the
debates.
A
A
Oops.
Okay,
so
let
me
to
hide
the
hidden
notes.
I
know
what
they
coming.
Okay,
so
let
me
go.
The
hotels
has
identified
that
it
may
have
some
interesting
information
to
show.
Another
feature
that
I
have
is
that
I
can
click
in
the
whole,
this
particular
application.
I
can
show
the
trace
that
this
application
is
collecting
and
I
can
overlap.
A
I
can
correlate
the
tracing
information
with
the
telemetry
information
in
my
graph,
so
this
particular
trace
is
coming
from
a
portal
is
calling
the
travels
or
is
traveling
into
the
insurance
cancer,
hotels
and,
and
also
talking
with
the
discounts
and
also
with
the
database
right.
So
I
can
get
more
this
information,
so
I
can
correlate
this
information
also
from
the
charts
I
can
put
in
the
charts.
So
the
same,
the
limit
information
with
the
tracing
with
the
goal,
to
tell
me:
okay,
all
these
traces
are
good
or
are
bad.
A
How
I
can
say:
okay,
this
is
slow
for
my
environment,
so
this
is
what
we
decided
to
do
from
kiali.
We
tend
to
correlate
this
station
information
with
heat
mass
with
other
telemetry
signals.
Just
to
tell
you
that,
for
example,
this
tracing
are
more
or
less
green
that
are
not
slow
unexpected,
but
I
have
some
slow
traces
that
probably
can
get
more
my
attention.
A
So
I
can
get
to
the
the
span
details
and
I
can
see
okay,
this
particular
span
from
this
stage
could
be
slow
and
could
be
interesting
to
see
more
details
into
the
jagged
ui.
So
what
I
can
just
browse
for
all
the
days
of
this
span
and
try
to
understand
what
could
be
the
bottom
with
with
method
is
taking
more
time
than
I
expected
right.
A
Okay,
so
then,
let's
show
a
couple
of
more
scenarios
so
for
this
demo,
so
one
typical
scenario
for
using
service
mess
is
also
to
do
advanced
traffic
routines.
So
in
this
case,
imagine
that
my
developers
are
recommending
to
create
new
versions
for
the
travel
service
in
the
travel
agency
and
the
database
that
they
want
to
check
if
this
new
version
are
performing
better
than
others.
So,
let's
let
me
show
you
how
to
do
that.
So
I'm
going
to
connect
to
my
console.
A
Okay,
so
if
I
go
back
to
the
overview,
I
expect
that
in
the
tablet
inc
I
will
have
more
workloads,
so
I
can
filter
the
wall
loss
by
travel
and
my
okay,
so
they
are
deploying
right
now.
What
I
would
like
to
do
is
to
go
to
the
travel
service
that
I
have
now.
The
visibility
of
the
three
travels
warlords
and
I
would
like
to
to
create
a
traffic
shifting
scenario.
A
For
example,
I
would
like
to
keep
the
50
of
the
traffic
for
the
travels
version
one,
and
I
want
to
test
version
two
version
c,
just
sending
twenty
five
percent
of
the
traffic
to
these
two
warlords.
I
want
to
create
that,
and
I
would
like
to
do
that
for
the
database
as
well,
so
I
go
to
the
database.
This
is
databases
fully
tcp,
I'm
going
to
create
a
tcp
traffic
shift
in
a
scenario.
A
A
Okay,
I
wanted
to
zoom
into
the
travels
app
and
I
will
okay.
This
is
what
I
wanted
to
show
okay.
So
now
I
see
that
I'm
sending
I
have
a
built-in
service
defined
in
the
travels
and
I'm
sending
most
of
the
traffic
to
the
persian
one
right.
Okay.
So
a
couple
of
last
scenario
before
that
that
we
end
this
this
quick
demo,
so
we
are
going
to
introduce
a
full
injection
scenario,
so
we
have
identified
that
the
hotels
is
is
having
a
lot
of
traffic
compared
with
others.
A
So
if
istio
service
mess
allows
me
to
to
test
the
resilience
of
my
system,
introducing
errors
right,
so
it's
something
that
we
can
create,
what
we
call
a
foul
injection
scenario,
so
I
can
do
that
go
into
the
hotel
service.
I
can
click
the
actions
to
create
a
full
injection
scenario.
I
can
add
an
extender
and
a
standard
delay
and
kia
is
going
to
generate
the
virtual
services
initial
service
for
this,
for
this
service.
Introducing
this
this
form.
A
A
Okay,
so
now
I
see
updating
the
telemetry
that
is
sending
this
okay.
So
now
I
can
query
and
I
can
ask
okay
what
how
is
the
impact
of
a
slow
warlord
in
my
in
my
word,
loss
in
my
and
my
graph
right.
So
let's
need
to
show
that,
with
all
the
walls
on
my
system-
and
this
query
can
tell
me,
okay
how
the
impact
of
an
error
is-
is
slowing
all
the
the
the
traffic
into
this
system
right.
So
this
is
one
scenario
we
wanted
to
show
right
how
to
query
that.
A
I
am
trying
to
show
local
version
by
destination
and
I
can
see
in
the
emo
metrics
that
you
know
an
average,
I'm
introducing
five
seconds
delay
for
this
service,
but
with
peaks
to
two
times
the
the
the
five
seconds
up
to
two
to
ten
to
ten
seconds
of
our
delay,
and
I
can
show
that
into
the
graph
how
the
impact
of
our
of
a
slow
wallow
can
affect
to
my
whole
graph.
Okay,.
A
Okay,
so
let
me
to
to
finish
my
my
demo
with
a
security
scenario
so
now
that
I
have
all
my
communication
right.
So
I'm
going
to
show
you
how
I
can
tell
kealy
that
okay
now
I
want
to
create
additional
traffic
policies
for
the
travel
inc
world,
so
I
can
go
to
the
namespace
and
go
to
the
actions
create
the
traffic
policies.
A
So
it's
still,
I'm
going
to
generate
kl
is
going
to
integrate
more
restrictive
authorization
policy
for
the
world,
so
only
the
existing
traffic
at
that
moment
are
going
to
be
allowed
to
communicate
with
the
world.
For
example,
I'm
going
to
create
a
deny
or
authorization
policy
rule
for
all
this
name
space
and
I'm
going
to
allow
to
create
specific
author
essential
policies
for
all
the
works.
A
A
A
A
So
I
will
see
how
the
istio
you
should
show
that.
Okay,
all
the
communication
is
not
permitted
it's
for
reading
and
it's
just
re
denying
the
request
to
this
right:
okay,
so
yeah!
This
is.
This
was
a
very
quick
introduction
to
how
to
use
easter
with
kiali.
Yes,
remember
a
very
long
version
of
this
tutorial
with
more
use
cases
to
how
to
use
kiali
to
visualize
and
operate
issues
available
under
kia
dot
io
under
the
tutorial
section.