# Service Mesh

> Service Mesh is an Agent Skill for devops & security published in the a5c-ai/babysitter repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Service mesh configuration and operations expertise for Istio, Linkerd, and Consul Connect

- Skill name: `service-mesh`
- Category: [DevOps & Security](https://www.openparable.com/skill/devops-security/1)
- Source: https://github.com/a5c-ai/babysitter/blob/HEAD/library/specializations/devops-sre-platform/skills/service-mesh/SKILL.md
- Repository: a5c-ai/babysitter (1,548 GitHub stars when collected)

## SKILL.md

# Service Mesh Skill

## Overview

Specialized skill for service mesh configuration and operations across major platforms (Istio, Linkerd, Consul Connect). Provides deep expertise in traffic management, security, and observability within service meshes.

## Capabilities

### Istio Configuration
- Generate VirtualService and DestinationRule resources
- Configure Gateway and ServiceEntry resources
- Implement AuthorizationPolicy for access control
- Set up PeerAuthentication for mTLS
- Configure EnvoyFilter for advanced scenarios

### Linkerd Operations
- Create ServiceProfile configurations
- Configure TrafficSplit for canary deployments
- Implement Server and ServerAuthorization
- Set up HTTPRoute for traffic routing
- Configure multicluster communication

### Traffic Management
- Implement traffic shifting and splitting
- Configure retry policies and timeouts
- Set up circuit breakers and outlier detection
- Design fault injection for chaos testing
- Implement rate limiting

### Security Configuration
- Enable and configure mTLS across services
- Set up service-to-service authorization
- Configure external authorization (ext-authz)
- Implement JWT validation
- Design zero-trust network policies

### Observability Integration
- Configure distributed tracing (Jaeger, Zipkin)
- Set up service mesh metrics collection
- Integrate with Prometheus/Grafana
- Enable access logging
- Configure Kiali dashboards

## Target Processes

- `service-mesh.js` - Service mesh installation and configuration
- `kubernetes-setup.js` - Kubernetes networking and security

## Usage Context

This skill is invoked when processes require:
- Installing and configuring service meshes
- Implementing advanced traffic management
- Setting up mTLS and service authorization
- Debugging service mesh connectivity
- Integrating mesh observability

## Dependencies

- istioctl CLI (for Istio)
- linkerd CLI (for Linkerd)
- consul CLI (for Consul Connect)
- kubectl for resource management

## Output Formats

- Service mesh custom resource manifests
- Traffic policy configurations
- Security policy definitions
- Observability integration configs
- Troubleshooting reports

---

Source: https://www.openparable.com/skill/devops-security/service-mesh (OpenParable). Cite the canonical URL above.