Kiali — Service Mesh Observability Console for Istio

What it is

Kiali is the management console for the Istio service mesh. It provides a real-time visual graph of your microservices topology, showing how services communicate, where traffic flows, and where errors occur. Beyond visualization, Kiali validates Istio configuration objects, detects misconfigurations before they cause outages, and integrates with Prometheus, Grafana, and Jaeger.

It is built for platform engineers and SREs who operate Istio in production and need a single pane of glass for mesh health, traffic routing, and configuration validation.

How it saves time or tokens

Debugging traffic routing in Istio typically requires reading YAML manifests and correlating them with Prometheus metrics manually. Kiali overlays live traffic data onto a graph, so you can spot misconfigured VirtualServices or failing retries at a glance. The configuration validator catches common Istio mistakes -- duplicate hosts, missing gateways, conflicting routing rules -- before they reach production.

How to use

1. Install Kiali as an Istio addon or via Helm.

# As Istio addon
kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.22/samples/addons/kiali.yaml

# Or via Helm
helm install kiali-server kiali/kiali-server -n istio-system

1. Port-forward to access the dashboard.

kubectl port-forward svc/kiali 20001:20001 -n istio-system

1. Open http://localhost:20001 in your browser to view the service graph, traffic metrics, and configuration status.

Example

Checking traffic health for a namespace:

# Kiali also exposes a REST API for automation
curl -s http://localhost:20001/kiali/api/namespaces/bookinfo/graph \
  -H 'Accept: application/json' | jq '.elements.nodes[].data.service'

The graph endpoint returns the same topology data rendered in the UI, useful for CI checks or custom dashboards.

Related on TokRepo

• Monitoring tools -- Observability solutions that complement service mesh dashboards.
• DevOps tools -- Infrastructure tools for cloud-native environments.

Common pitfalls

• Kiali requires Prometheus to be running in the cluster. Without it, the service graph shows topology but no metrics.
• The Istio addon install uses default credentials. Change the authentication method to OpenID Connect or token-based auth for production.
• Kiali's graph can become unreadable with hundreds of services. Use namespace and label filters to scope the view.