istio.io/content/en/docs/tasks/observability/kiali/index.md

title	description	weight	keywords	aliases
Visualizing Your Mesh	This task shows you how to visualize your services within an Istio mesh.	49	telemetry visualization	/docs/tasks/telemetry/kiali/

This task shows you how to visualize different aspects of your Istio mesh.

As part of this task, you install the Kiali add-on and use the web-based graphical user interface to view service graphs of the mesh and your Istio configuration objects. Lastly, you use the Kiali Public API to generate graph data in the form of consumable JSON.

This task uses the Bookinfo sample application as the example throughout.

Before you begin

{{< tip >}} The following instructions assume you have installed istioctl and will use it to install Kiali. To install Kiali without istioctl, follow the Kiali installation instructions. {{< /tip >}}

Create a secret

{{< tip >}} If you plan on installing Kiali using the Istio demo profile as described in the Istio Quick Start Installation Steps then a default secret will be created for you with a username of admin and passphrase of admin. You can therefore skip this section. {{< /tip >}}

Create a secret in your Istio namespace with the credentials that you use to authenticate to Kiali.

First, define the credentials you want to use as the Kiali username and passphrase:

{{< text bash >}} KIALI_USERNAME=(read -p 'Kiali Username: ' uval && echo -n $uval | base64) KIALI_PASSPHRASE=(read -sp 'Kiali Passphrase: ' pval && echo -n $pval | base64) {{< /text >}}

If you are using the Z Shell, zsh, use the following to define the credentials:

{{< text bash >}} KIALI_USERNAME=(read '?Kiali Username: ' uval && echo -n $uval | base64) KIALI_PASSPHRASE=(read -s "?Kiali Passphrase: " pval && echo -n $pval | base64) {{< /text >}}

To create a secret, run the following commands:

{{< text bash >}} $ NAMESPACE=istio-system $ kubectl create namespace $NAMESPACE {{< /text >}}

{{< text bash >}} $ cat <<EOF | kubectl apply -f - apiVersion: v1 kind: Secret metadata: name: kiali namespace: $NAMESPACE labels: app: kiali type: Opaque data: username: $KIALI_USERNAME passphrase: $KIALI_PASSPHRASE EOF {{< /text >}}

Install Via Istioctl

Once you create the Kiali secret, follow the install instructions to install Kiali via istioctl. For example:

{{< text bash >}} $ istioctl manifest apply --set values.kiali.enabled=true {{< /text >}}

{{< idea >}} This task does not discuss Jaeger and Grafana. If you already installed them in your cluster and you want to see how Kiali integrates with them, you must pass additional arguments to the istioctl command, for example:

{{< text bash >}} $ istioctl manifest apply
--set values.kiali.enabled=true
--set "values.kiali.dashboard.jaegerURL=http://jaeger-query:16686"
--set "values.kiali.dashboard.grafanaURL=http://grafana:3000" {{< /text >}}

{{< /idea >}}

Once you install Istio and Kiali, deploy the Bookinfo sample application.

Running on OpenShift

When Kiali runs on OpenShift it needs access to some OpenShift specific resources in order to function properly, which can be done using the following commands after Kiali has been installed:

{{< text bash >}} $ oc patch clusterrole kiali -p '[{"op":"add", "path":"/rules/-", "value":{"apiGroups":["apps.openshift.io"], "resources":["deploymentconfigs"],"verbs": ["get", "list", "watch"]}}]' --type json $ oc patch clusterrole kiali -p '[{"op":"add", "path":"/rules/-", "value":{"apiGroups":["project.openshift.io"], "resources":["projects"],"verbs": ["get"]}}]' --type json $ oc patch clusterrole kiali -p '[{"op":"add", "path":"/rules/-", "value":{"apiGroups":["route.openshift.io"], "resources":["routes"],"verbs": ["get"]}}]' --type json {{< /text >}}

Generating a service graph

1. To verify the service is running in your cluster, run the following command:

   {{< text bash >}} $ kubectl -n istio-system get svc kiali {{< /text >}}

2. To determine the Bookinfo URL, follow the instructions to determine the Bookinfo ingress GATEWAY_URL.

3. To send traffic to the mesh, you have three options

   • Visit http://$GATEWAY_URL/productpage in your web browser

   • Use the following command multiple times:

     {{< text bash >}} $ curl http://$GATEWAY_URL/productpage {{< /text >}}

   • If you installed the watch command in your system, send requests continually with:

     {{< text bash >}} $ watch -n 1 curl -o /dev/null -s -w %{http_code} $GATEWAY_URL/productpage {{< /text >}}

4. To open the Kiali UI, execute the following command in your Kubernetes environment:

   {{< text bash >}} $ istioctl dashboard kiali {{< /text >}}

5. To log into the Kiali UI, go to the Kiali login screen and enter the username and passphrase stored in the Kiali secret.

6. View the overview of your mesh in the Overview page that appears immediately after you log in. The Overview page displays all the namespaces that have services in your mesh. The following screenshot shows a similar page:

   {{< image width="75%" link="./kiali-overview.png" caption="Example Overview" >}}

7. To view a namespace graph, click on the bookinfo graph icon in the Bookinfo namespace card. The graph icon is in the lower left of the namespace card and looks like a connected group of circles. The page looks similar to:

   {{< image width="75%" link="./kiali-graph.png" caption="Example Graph" >}}

8. To view a summary of metrics, select any node or edge in the graph to display its metric details in the summary details panel on the right.

9. To view your service mesh using different graph types, select a graph type from the Graph Type drop down menu. There are several graph types to choose from: App, Versioned App, Workload, Service.

   • The App graph type aggregates all versions of an app into a single graph node. The following example shows a single reviews node representing the three versions of the reviews app.

     {{< image width="75%" link="./kiali-app.png" caption="Example App Graph" >}}

   • The Versioned App graph type shows a node for each version of an app, but all versions of a particular app are grouped together. The following example shows the reviews group box that contains the three nodes that represents the three versions of the reviews app.

     {{< image width="75%" link="./kiali-versionedapp.png" caption="Example Versioned App Graph" >}}

   • The Workload graph type shows a node for each workload in your service mesh. This graph type does not require you to use the app and version labels so if you opt to not use those labels on your components, this is the graph type you will use.

     {{< image width="70%" link="./kiali-workload.png" caption="Example Workload Graph" >}}

   • The Service graph type shows a node for each service in your mesh but excludes all apps and workloads from the graph.

     {{< image width="70%" link="./kiali-service-graph.png" caption="Example Service Graph" >}}

10. To examine the details about the Istio configuration, click on the Applications, Workloads, and Services menu icons on the left menu bar. The following screenshot shows the Bookinfo applications information:

    {{< image width="80%" link="./kiali-services.png" caption="Example Details" >}}

About the Kiali Public API

To generate JSON files representing the graphs and other metrics, health, and configuration information, you can access the Kiali Public API. For example, point your browser to $KIALI_URL/api/namespaces/graph?namespaces=bookinfo&graphType=app to get the JSON representation of your graph using the app graph type.

The Kiali Public API is built on top of Prometheus queries and depends on the standard Istio metric configuration. It also makes Kubernetes API calls to obtain additional details about your services. For the best experience using Kiali, use the metadata labels app and version on your application components. As a template, the Bookinfo sample application follows this convention.

Cleanup

If you are not planning any follow-up tasks, remove the Bookinfo sample application and Kiali from your cluster.

1. To remove the Bookinfo application, refer to the Bookinfo cleanup instructions.

2. To remove Kiali from a Kubernetes environment, remove all components with the app=kiali label:

{{< text bash >}} $ kubectl delete all,secrets,sa,configmaps,deployments,ingresses,clusterroles,clusterrolebindings,customresourcedefinitions --selector=app=kiali -n istio-system {{< /text >}}