Agent skill · security · aiskillstore
mtls-configuration
Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service communication.
Why this skill is useful
Provides specific templates and configurations for implementing mTLS in Istio, which the AI wouldn't reliably generate on its own.
What it needs
Requires cert-manager, istio installed locally. About 3k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
mTLS Configuration Comprehensive guide to implementing mutual TLS for zero-trust service mesh communication. When to Use This Skill Implementing zero-trust networking Securing service-to-service communication Certificate rotation and management Debugging TLS handshake issues Compliance requirements (PCI-DSS, HIPAA) Multi-cluster secure communication Core Concepts 1. mTLS Flow 2. Certificate Hierarchy Templates Template 1: Istio mTLS (Strict Mode) Template 2: Istio Destination Rule for mTLS Template 3: Cert-Manager with Istio Template 4: SPIFFE/SPIRE Integration Template 5: Linkerd mTLS (Automatic) Certificate Rotation Debugging mTLS Issues Best Practices Do's Start with PERMISSIVE - Migrate gradually to STRICT Monitor certificate expiry - Set up alerts Use short-lived certs - 24h or less for workloads Rotate CA periodically - Plan for CA rotation Log TLS errors - For debugging and audit Don'ts Don't disable mTLS - For convenience in production Don't ignore cert expiry - Automate rotation Don't use self-signed certs - Use proper CA hierarchy Don't skip verification - Verify the full chain Resources Istio Security SPIFFE/SPIRE cert-manager Zero Trust Architecture (NIST)
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/mtls-configuration--0ac0d3