Service Mesh Skill
Overview
Specialized skill for service mesh configuration and operations across major platforms (Istio, Linkerd, Consul Connect). Provides deep expertise in traffic management, security, and observability within service meshes.
Capabilities
Istio Configuration
- Generate VirtualService and DestinationRule resources
- Configure Gateway and ServiceEntry resources
- Implement AuthorizationPolicy for access control
- Set up PeerAuthentication for mTLS
- Configure EnvoyFilter for advanced scenarios
Linkerd Operations
- Create ServiceProfile configurations
- Configure TrafficSplit for canary deployments
- Implement Server and ServerAuthorization
- Set up HTTPRoute for traffic routing
- Configure multicluster communication
Traffic Management
- Implement traffic shifting and splitting
- Configure retry policies and timeouts
- Set up circuit breakers and outlier detection
- Design fault injection for chaos testing
- Implement rate limiting
Security Configuration
- Enable and configure mTLS across services
- Set up service-to-service authorization
- Configure external authorization (ext-authz)
- Implement JWT validation
- Design zero-trust network policies
Observability Integration
- Configure distributed tracing (Jaeger, Zipkin)
- Set up service mesh metrics collection
- Integrate with Prometheus/Grafana
- Enable access logging
- Configure Kiali dashboards
Target Processes
service-mesh.js- Service mesh installation and configurationkubernetes-setup.js- Kubernetes networking and security
Usage Context
This skill is invoked when processes require:
- Installing and configuring service meshes
- Implementing advanced traffic management
- Setting up mTLS and service authorization
- Debugging service mesh connectivity
- Integrating mesh observability
Dependencies
- istioctl CLI (for Istio)
- linkerd CLI (for Linkerd)
- consul CLI (for Consul Connect)
- kubectl for resource management
Output Formats
- Service mesh custom resource manifests
- Traffic policy configurations
- Security policy definitions
- Observability integration configs
- Troubleshooting reports