Agent skill · security · aiskillstore
mtls-configuration
Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service communication.
Why this skill is useful
Provides detailed templates and domain-specific knowledge for configuring mTLS in a zero-trust architecture that the AI wouldn't reliably generate on its own.
What it needs
Requires cert-manager, istio installed locally. About 4k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
mTLS Configuration Comprehensive guide to implementing mutual TLS for zero-trust service mesh communication. Do not use this skill when The task is unrelated to mtls configuration You need a different domain or tool outside this scope Instructions Clarify goals, constraints, and required inputs. Apply relevant best practices and validate outcomes. Provide actionable steps and verification. If detailed examples are required, open resources/implementation-playbook.md. Use this skill when Implementing zero-trust networking Securing service-to-service communication Certificate rotation and management Debugging TLS handshake issues Compliance requirements (PCI-DSS, HIPAA) Multi-cluster secure communication Core Concepts 1. mTLS Flow 2. Certificate Hierarchy Templates Template 1: Istio mTLS (Strict Mode) Template 2: Istio Destination Rule for mTLS Template 3: Cert-Manager with Istio Template 4: SPIFFE/SPIRE Integration Template 5: Linkerd mTLS (Automatic) Certificate Rotation Debugging mTLS Issues Best Practices Do's Start with PERMISSIVE - Migrate gradually to STRICT Monitor certificate expiry - Set up alerts Use short-lived certs - 24h or less for workloads Rotate CA periodically - Plan for CA rotation Log TLS errors - For debugging and audit Don'ts Don't disable mTLS - For convenience in production Don't ignore cert expiry - Automate rotation Don't use self-signed certs - Use proper CA hierarchy Don't skip verification - Verify the full chain Resources Istio Security SPIFFE/SPIRE cert-manager Zero Trust Architecture (NIST) Limitations Use this skill only when the task clearly matches the scope described above. Do not treat the output as a substitute for environment-specific validation, testing, or expert review. Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/mtls-configuration