Skip to content
cccskills
FreePublished on GitHub

istio

Istio service mesh patterns for Rossoctl

The English summary is being prepared. Showing the original description.

rossoctl/rossoctl303 stars(GitHub 303 + cccskills 0)
Works withKubernetes

Run score Not tested

See how to install

Files included (1)

  • SKILL.md1.0 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Istio Skills

Skills for configuring Istio service mesh in Ambient mode.

Available Skills

SkillDescription
istio:ambient-waypointL7 AuthorizationPolicy with waypoint proxies
istio:mesh-selfhealDetect/recover the Ambient expired-cert 503 outage on long-running dev clusters

Ambient Mode Basics

In Istio Ambient mode:

  • ztunnel: Handles L4 traffic (TCP, mTLS)
  • Waypoint: Handles L7 traffic (HTTP) - needed for path-based authorization

Common Tasks

Enable Ambient for Namespace

kubectl label namespace rossoctl-system istio.io/dataplane-mode=ambient

Create Waypoint

apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: my-waypoint
  labels:
    istio.io/waypoint-for: service
spec:
  gatewayClassName: istio-waypoint
  listeners:
    - name: mesh
      port: 15008
      protocol: HBONE

Related Skills

  • testing:kubectl-debugging

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

auth

Free

Authentication and authorization patterns for Rossoctl services

The English summary is being prepared. Showing the original description.

rossoctl/rossoctl303Updated Oct 25, 2026

Create confidential OAuth2 clients in Keycloak for server-to-service authentication

The English summary is being prepared. Showing the original description.

rossoctl/rossoctl303Updated Oct 25, 2026

Configure MLflow with mlflow-oidc-auth plugin for Keycloak OIDC authentication

The English summary is being prepared. Showing the original description.

rossoctl/rossoctl303Updated Oct 25, 2026

Configure OpenTelemetry Collector with OAuth2 authentication for trace export

The English summary is being prepared. Showing the original description.

rossoctl/rossoctl303Updated Oct 25, 2026

ci

Free

CI pipeline monitoring, status checks, and PR validation workflows

The English summary is being prepared. Showing the original description.

rossoctl/rossoctl303Updated Oct 25, 2026

Monitor running CI jobs, wait for completion, create tasks for results

The English summary is being prepared. Showing the original description.

rossoctl/rossoctl303Updated Oct 25, 2026

See all skills by rossoctl

Report a problem with this skill