OpenParable
Skip to content
← Back to skills

Service Mesh

DevOps & Security
service-mesh

Service Mesh is an Agent Skill for devops & security published in the a5c-ai/babysitter repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Service mesh configuration and operations expertise for Istio, Linkerd, and Consul Connect

View on GitHub ↗
QUICK START

How to use this skill

Bring this guide into your coding agent with a prompt tailored to the tool you use.

  1. Open your project in Codex.
  2. Copy and paste the prompt below.
  3. Review files and risks before approving any action.
Prompt to paste
Inspect the Agent Skill at https://github.com/a5c-ai/babysitter/blob/HEAD/library/specializations/devops-sre-platform/skills/service-mesh/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/service-mesh, but wait for my approval before writing files or running scripts.

Copying this prompt does not install or run the skill. Review third-party files before use.

Service Mesh Skill

Overview

Specialized skill for service mesh configuration and operations across major platforms (Istio, Linkerd, Consul Connect). Provides deep expertise in traffic management, security, and observability within service meshes.

Capabilities

Istio Configuration

  • Generate VirtualService and DestinationRule resources
  • Configure Gateway and ServiceEntry resources
  • Implement AuthorizationPolicy for access control
  • Set up PeerAuthentication for mTLS
  • Configure EnvoyFilter for advanced scenarios

Linkerd Operations

  • Create ServiceProfile configurations
  • Configure TrafficSplit for canary deployments
  • Implement Server and ServerAuthorization
  • Set up HTTPRoute for traffic routing
  • Configure multicluster communication

Traffic Management

  • Implement traffic shifting and splitting
  • Configure retry policies and timeouts
  • Set up circuit breakers and outlier detection
  • Design fault injection for chaos testing
  • Implement rate limiting

Security Configuration

  • Enable and configure mTLS across services
  • Set up service-to-service authorization
  • Configure external authorization (ext-authz)
  • Implement JWT validation
  • Design zero-trust network policies

Observability Integration

  • Configure distributed tracing (Jaeger, Zipkin)
  • Set up service mesh metrics collection
  • Integrate with Prometheus/Grafana
  • Enable access logging
  • Configure Kiali dashboards

Target Processes

  • service-mesh.js - Service mesh installation and configuration
  • kubernetes-setup.js - Kubernetes networking and security

Usage Context

This skill is invoked when processes require:

  • Installing and configuring service meshes
  • Implementing advanced traffic management
  • Setting up mTLS and service authorization
  • Debugging service mesh connectivity
  • Integrating mesh observability

Dependencies

  • istioctl CLI (for Istio)
  • linkerd CLI (for Linkerd)
  • consul CLI (for Consul Connect)
  • kubectl for resource management

Output Formats

  • Service mesh custom resource manifests
  • Traffic policy configurations
  • Security policy definitions
  • Observability integration configs
  • Troubleshooting reports