What problem does it solve? Managing cross-cutting concerns like mutual TLS, retries, circuit breakers, and distributed tracing across dozens of microservices is error-prone when done in application code. This Skill moves those concerns into the infrastructure layer by generating production-grade Istio or Linkerd configurations. ## Core Features & Use Cases - Security Policies: Generates STRICT mTLS PeerAuthentication and deny-all-by-default AuthorizationPolicy manifests with per-service service account rules. - Traffic Management: Produces DestinationRule and VirtualService configs covering load balancing, connection pools, outlier detection, retries, timeouts, and weight-based canary routing. - Observability Setup: Configures Telemetry resources for Jaeger tracing with sampling rates, filtered Envoy access logs, and Prometheus metrics. - Use Case: A platform team running 30 services on Kubernetes needs zero-trust networking and safe canary releases. Use this Skill to generate the full mesh configuration: strict mTLS, per-service circuit breakers, and a 90/10 traffic split for the new order-service version. ## Quick Start Ask the AI to generate an Istio service mesh configuration for your Kubernetes cluster with strict mTLS, circuit breakers, and a 10 percent canary deployment for a specified service.
