Agent skill · software engineering · aj-geddes
service-mesh-implementation
Implement service mesh (Istio, Linkerd) for service-to-service communication, traffic management, security, and observability.
Why this skill is useful
Provides specific configuration examples and best practices for implementing service meshes that the AI wouldn't reliably generate on its own.
What it needs
Requires istioctl, kubectl installed locally. About 1k tokens when loaded. Last updated 2026-03-04. 307 stars on the source repository.
What this skill does
Service Mesh Implementation Table of Contents Overview When to Use Quick Start Reference Guides Best Practices Overview Deploy and configure a service mesh to manage microservice communication, enable advanced traffic management, implement security policies, and provide comprehensive observability across distributed systems. When to Use Microservice communication management Cross-cutting security policies Traffic splitting and canary deployments Service-to-service authentication Request routing and retries Distributed tracing integration Circuit breaker patterns Mutual TLS between services Quick Start Minimal working example: Reference Guides Detailed implementations in the references/ directory: Guide Contents --- --- Istio Core Setup Istio Core Setup Virtual Service and Destination Rule Virtual Service and Destination Rule Security Policies Security Policies Observability Configuration Observability Configuration Service Mesh Deployment Script Service Mesh Deployment Script Best Practices ✅ DO Enable mTLS for all workloads Implement proper authorization policies Use virtual services for traffic management Enable distributed tracing Monitor resource usage (CPU, memory) Use appropriate sampling rates for tracing Implement circuit breakers Use namespace isolation ❌ DON'T Disable mTLS in production Allow permissive traffic policies Ignore observability setup Deploy without resource requests/limits Skip sidecar injection validation Use 100% sampling in high-traffic systems Mix service versions without proper routing Neglect authorization policies
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aj-geddes/service-mesh-implementation