service-mesh

Configure and operate Istio and Linkerd service meshes on Kubernetes.

1|Updated Nov 18, 2025
One-click install
npx skills add https://github.com/pluginagentmarketplace/custom-plugin-kubernetes --skill service-mesh-pluginagentmarketplace
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: service-mesh
Source: https://github.com/pluginagentmarketplace/custom-plugin-kubernetes/tree/main/skills/service-mesh
Command: npx skills add https://github.com/pluginagentmarketplace/custom-plugin-kubernetes --skill service-mesh-pluginagentmarketplace

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill enables teams to configure and operate a service mesh across Kubernetes deployments.

Core Features & Use Cases

  • Istio configuration and traffic routing (VirtualService, DestinationRule) and mTLS policies for secure service-to-service communication.
  • Linkerd service profiles and traffic metrics enable progressive delivery and reliability.
  • Use Case: deploying a multi-cluster application with canary rollouts and zero-trust security using both meshes.

Quick Start

  • Install Istio and enable automatic sidecar injection in the target namespace.
  • Install Linkerd and enable namespace injection, then configure mutual TLS.
  • Activate a sample canary rollout to validate traffic shifting and observability.

Frequently Asked Questions about service-mesh

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Istio traffic routing and mTLS for microservices in Kubernetes?

You can configure Istio traffic routing and mTLS in Kubernetes by applying VirtualService and DestinationRule YAML configurations to manage routing and enforce secure service-to-service communication policies.

What is the best way to run canary rollouts using a service mesh?

The best way to run canary rollouts is by using a service mesh to shift traffic progressively, leveraging Linkerd service profiles and traffic metrics to validate reliability and observability during deployment.

Does this service mesh skill support both Istio and Linkerd installations?

Yes, this skill supports both Istio and Linkerd installations, enabling you to enable automatic sidecar injection, configure mutual TLS, and validate mesh behavior across Kubernetes deployments.

How do I enable zero-trust security for a multi-cluster application deployment?

To enable zero-trust security for multi-cluster deployments, you apply service mesh mTLS policies across your clusters, ensuring mutual TLS is configured for secure service-to-service communication.

Do I need standard CLI tooling and YAML to manage Linkerd service profiles?

Yes, you need standard CLI tooling and YAML configurations to install Linkerd, enable namespace injection, apply service profiles, and validate traffic metrics for progressive delivery.

When should I not use a service mesh for traffic management?

You should not use a service mesh if your environment lacks Kubernetes deployments or if you cannot manage the operational overhead of sidecar injection and mTLS policy validation.