Skill UI

Automates Istio and Linkerd configuration for microservices, generating production-ready manifests and setup code tailored to your infrastructure, emphasizing security, observability, and traffic management best practices.

Automates Istio service mesh configuration guidance for DevOps Advanced users, offering best-practice patterns, production-ready code, validation, and infrastructure-as-code support across Kubernetes, Terraform, and monitoring workflows.

A comprehensive guide covering advanced traffic routing and management techniques within a service mesh using Istio. Learn how to implement critical deployment strategies like Canary releases and Blue-Green deployments, configure circuit breakers, manage retries, and perform fault injection testing. Includes YAML templates for VirtualService, DestinationRule, and Gateway setup, essential for reliable production service deployments.

Guides implementing Kubernetes NetworkPolicy, RBAC, PodSecurityPolicy, Pod Security Standards, and OPA Gatekeeper constraints to enforce defense-in-depth across clusters, covering multi-tenant protection, admission control, and Istio service mesh policies.

An expert guide for designing, implementing, and optimizing large-scale, secure, and highly available cloud-native infrastructure using Kubernetes. Covers advanced topics including GitOps workflows (ArgoCD/Flux), service mesh architecture (Istio), multi-cluster management, Policy as Code (OPA), and infrastructure automation with Terraform. Ideal for platform engineers building enterprise-grade container orchestration solutions.

This specialized, end-to-end workflow guides the deployment of applications onto Kubernetes clusters. It systematically covers all critical production phases, including Docker container preparation, generating K8s manifests, structuring applications with Helm charts, configuring advanced service meshes (like Istio), enforcing robust security policies (RBAC, NetworkPolicy), and implementing full observability and GitOps pipelines for reliable, scalable deployments.

A comprehensive guide to implementing Mutual TLS (mTLS) for achieving zero-trust, secure service-to-service communication within a service mesh. This skill provides templates and concepts for configuring mTLS using industry standards like Istio, Cert-Manager, and SPIFFE/SPIRE, ensuring robust certificate management and encrypted internal communication.

This comprehensive skill profile models an expert network engineer specializing in modern cloud networking, security architectures, and performance optimization. It covers multi-cloud environments (AWS, Azure, GCP), advanced concepts like Zero Trust, Service Mesh (Istio), and high-availability design. Key capabilities include implementing IaC (Terraform), load balancing, DNS management, and deep network troubleshooting. Ideal for complex DevOps, SRE, or infrastructure design roles.

An expert architect specializing in designing and optimizing service mesh using industry leaders like Istio and Linkerd. This skill provides deep knowledge of cloud-native networking patterns, enabling secure, reliable microservices communication. It covers advanced topics including zero-trust networking, mTLS configuration, sophisticated traffic management (e.g., canary and blue-green deployments), observability integration, and multi-cluster federation.

A comprehensive guide covering observability patterns for service meshes like Istio and Linkerd. Learn how to implement the three pillars—Metrics, Traces, and Logs—to monitor service health, visualize dependencies, track golden signals (latency, traffic, errors, saturation), and debug microservice communication issues across complex distributed systems.

KubeStellar Console is an open-source, multi-cluster Kubernetes dashboard (CNCF project) that provides advanced operational capabilities powered by an MCP server and built-in AI agent skills. It helps manage complex deployments across edge and cloud environments, offering AI-assisted troubleshooting, performance testing, and deep integration with major CNCF projects like Argo and Istio.

Comprehensive skill for managing the KubeSphere ServiceMesh extension, integrating Istio, Kiali, and Jaeger. It provides full lifecycle management, including installation, uninstallation, and detailed status checking. Users can define advanced traffic governance policies (like canary or blue-green deployments) and troubleshoot microservice connectivity, utilizing features such as traffic mirroring and circuit breaking for composed applications.