Manage Istio service mesh for traffic management, security, and observability. Use for traffic shifting, canary releases, mTLS, and service mesh troubleshooting.
The English summary is being prepared. Showing the original description.
Review the instructions the agent will receive before you install.
Traffic management, security, and observability using kubectl-mcp-server's Istio/Kiali tools.
Use this skill when:
| Priority | Rule | Impact | Tools |
|---|---|---|---|
| 1 | Detect Istio installation first | CRITICAL | istio_detect_tool |
| 2 | Run analyze before changes | HIGH | istio_analyze_tool |
| 3 | Check proxy status for sync | HIGH | istio_proxy_status_tool |
| 4 | Verify sidecar injection | MEDIUM | istio_sidecar_status_tool |
| Task | Tool | Example |
|---|---|---|
| Detect Istio | istio_detect_tool | istio_detect_tool() |
| Analyze config | istio_analyze_tool | istio_analyze_tool(namespace) |
| Proxy status | istio_proxy_status_tool | istio_proxy_status_tool() |
| List VirtualServices | istio_virtualservices_list_tool | istio_virtualservices_list_tool(namespace) |
istio_detect_tool()
istio_proxy_status_tool()
istio_sidecar_status_tool(namespace)
istio_analyze_tool(namespace)
List and inspect:
istio_virtualservices_list_tool(namespace)
istio_virtualservice_get_tool(name, namespace)
See TRAFFIC-SHIFTING.md for canary and blue-green patterns.
istio_destinationrules_list_tool(namespace)
istio_gateways_list_tool(namespace)
VirtualService for 90/10 split:
apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
name: my-service
spec:
hosts:
- my-service
http:
- route:
- destination:
host: my-service
subset: stable
weight: 90
- destination:
host: my-service
subset: canary
weight: 10
Apply and verify:
kubectl_apply(vs_yaml, namespace)
istio_virtualservice_get_tool("my-service", namespace)
Route beta users:
http:
- match:
- headers:
x-user-type:
exact: beta
route:
- destination:
host: my-service
subset: canary
- route:
- destination:
host: my-service
subset: stable
See MTLS.md for detailed mTLS configuration.
istio_peerauthentications_list_tool(namespace)
istio_authorizationpolicies_list_tool(namespace)
istio_proxy_status_tool()
If using Cilium with Istio:
hubble_flows_query_tool(namespace)
cilium_endpoints_list_tool(namespace)
istio_sidecar_status_tool(namespace)
istio_analyze_tool(namespace)
istio_virtualservice_get_tool(name, namespace)
istio_destinationrules_list_tool(namespace)
istio_proxy_status_tool()
istio_peerauthentications_list_tool(namespace)
| Symptom | Check | Resolution |
|---|---|---|
| 503 errors | istio_analyze_tool() | Fix VirtualService/DestinationRule |
| No sidecar | istio_sidecar_status_tool() | Label namespace |
| Config not applied | istio_proxy_status_tool() | Wait for sync or restart pod |
Istio multi-cluster setup:
istio_proxy_status_tool(context="primary")
istio_virtualservices_list_tool(namespace, context="primary")
istio_proxy_status_tool(context="remote")
istioctl install --set profile=demo
No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Configure Kubernetes autoscaling with HPA, VPA, and KEDA. Use for horizontal/vertical pod autoscaling, event-driven scaling, and capacity management.
The English summary is being prepared. Showing the original description.
Kubernetes backup and restore with Velero. Use when creating backups, restoring applications, managing disaster recovery, or migrating workloads between clusters.
The English summary is being prepared. Showing the original description.
Browser automation for Kubernetes dashboards and web UIs. Use when interacting with Kubernetes Dashboard, Grafana, ArgoCD UI, or other web interfaces. Requires MCP_BROWSER_ENABLED=true.
The English summary is being prepared. Showing the original description.
Cluster API lifecycle management for provisioning, scaling, and upgrading Kubernetes clusters. Use when managing cluster infrastructure or multi-cluster operations.
The English summary is being prepared. Showing the original description.
Kubernetes certificate management with cert-manager. Use when managing TLS certificates, configuring issuers, or troubleshooting certificate issues.
The English summary is being prepared. Showing the original description.
Cilium and Hubble network observability for Kubernetes. Use when managing network policies, observing traffic flows, or troubleshooting connectivity with eBPF-based networking.
The English summary is being prepared. Showing the original description.