What Radar Shows
Topology: Full Istio traffic path - IstioGateway → VirtualService → Service, and DestinationRule → Service configuration edges. See how traffic flows through gateway listeners, virtual service routing rules, and into backend services. VirtualService Detail View:- HTTP/TCP/TLS routing rules with match conditions
- Destinations with weight distribution bars
- Fault injection and traffic mirroring detection (AlertBanner warnings)
- Retry policies, timeouts, and CORS settings
- Gateway references with clickable links
- Target service host with clickable link
- Traffic policy: connection pool (TCP/HTTP limits), load balancer algorithm, outlier detection (ejection settings), TLS mode
- Subset definitions with labels and per-subset traffic policy overrides
- Server configurations with port, protocol, and hosts
- TLS settings per server (mode, credential references)
- Workload selector labels
- Hosts, location (MESH_EXTERNAL/MESH_INTERNAL), resolution strategy
- Ports with protocol badges
- Endpoint addresses with port mappings and labels
- mTLS mode with color-coded badges (STRICT/PERMISSIVE/DISABLE)
- Scope indicator (workload-scoped vs namespace-wide)
- Port-level mTLS overrides
- Action badge (ALLOW/DENY/CUSTOM/AUDIT) with rule breakdown
- Source principals, namespaces, IP blocks
- Operation matching (hosts, ports, methods, paths)
- Deny-all and allow-nothing detection (AlertBanner)
Supported CRDs
| CRD | Group | Topology | Detail View | AI Summary |
|---|---|---|---|---|
| VirtualService | networking.istio.io/v1 | Yes | Yes | - |
| DestinationRule | networking.istio.io/v1 | Yes | Yes | - |
| Gateway | networking.istio.io/v1 | Yes | Yes | - |
| ServiceEntry | networking.istio.io/v1 | - | Yes | - |
| PeerAuthentication | security.istio.io/v1 | - | Yes | - |
| AuthorizationPolicy | security.istio.io/v1 | - | Yes | - |