> ## Documentation Index
> Fetch the complete documentation index at: https://radarhq.io/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Istio service mesh visibility in Kubernetes

> See Istio in Radar: gateway-to-service traffic topology, VirtualService routing rules with weight bars, DestinationRule config edges, and fault-injection warnings.

[Istio](https://istio.io/) is the most widely adopted service mesh, providing traffic management, security (mTLS), and observability for microservices.

### What Radar Shows

**Topology:** Full Istio traffic path  -  IstioGateway → VirtualService → Service, and DestinationRule → Service configuration edges. See how traffic flows through gateway listeners, virtual service routing rules, and into backend services.

**VirtualService Detail View:**

* HTTP/TCP/TLS routing rules with match conditions
* Destinations with weight distribution bars
* Fault injection and traffic mirroring detection (AlertBanner warnings)
* Retry policies, timeouts, and CORS settings
* Gateway references with clickable links

**DestinationRule Detail View:**

* Target service host with clickable link
* Traffic policy: connection pool (TCP/HTTP limits), load balancer algorithm, outlier detection (ejection settings), TLS mode
* Subset definitions with labels and per-subset traffic policy overrides

**Gateway Detail View (networking.istio.io):**

* Server configurations with port, protocol, and hosts
* TLS settings per server (mode, credential references)
* Workload selector labels

**ServiceEntry Detail View:**

* Hosts, location (MESH\_EXTERNAL/MESH\_INTERNAL), resolution strategy
* Ports with protocol badges
* Endpoint addresses with port mappings and labels

**PeerAuthentication Detail View:**

* mTLS mode with color-coded badges (STRICT/PERMISSIVE/DISABLE)
* Scope indicator (workload-scoped vs namespace-wide)
* Port-level mTLS overrides

**AuthorizationPolicy Detail View:**

* Action badge (ALLOW/DENY/CUSTOM/AUDIT) with rule breakdown
* Source principals, namespaces, IP blocks
* Operation matching (hosts, ports, methods, paths)
* Deny-all and allow-nothing detection (AlertBanner)

**Resource Browser:** Smart columns show status badges, hosts, gateways, route counts, mTLS modes, actions, and load balancer algorithms at a glance.

### Supported CRDs

| CRD                 | Group                    | Topology | Detail View | AI Summary |
| ------------------- | ------------------------ | -------- | ----------- | ---------- |
| VirtualService      | `networking.istio.io/v1` | Yes      | Yes         | -          |
| DestinationRule     | `networking.istio.io/v1` | Yes      | Yes         | -          |
| Gateway             | `networking.istio.io/v1` | Yes      | Yes         | -          |
| ServiceEntry        | `networking.istio.io/v1` | -        | Yes         | -          |
| PeerAuthentication  | `security.istio.io/v1`   | -        | Yes         | -          |
| AuthorizationPolicy | `security.istio.io/v1`   | -        | Yes         | -          |