What problem does it solve? Managing an Istio service mesh requires deep knowledge of many CRDs (VirtualServices, DestinationRules, Gateways, PeerAuthentication, AuthorizationPolicies, EnvoyFilters) and operational tooling, and misconfigurations can break traffic or security across the cluster. ## Core Features & Use Cases - Traffic Management: Configure VirtualServices, DestinationRules, Gateways, and ServiceEntries for canary releases, blue-green deployments, A/B testing, and dark launches. - Security & Resilience: Enforce strict mTLS, layered AuthorizationPolicies, JWT/external authorization, circuit breaking, retries, and bulkhead isolation. - Observability & Operations: Set up Telemetry API metrics, Jaeger/Zipkin/OpenTelemetry tracing, access logging, and diagnose issues with istioctl proxy-config and analyze. - Use Case: You need to roll out v2 of a service to 10% of traffic with automatic rollback guidance, enforce mesh-wide mTLS, and debug why sidecar injection failed in a namespace — this Skill provides the exact manifests and diagnostic commands. ## Quick Start Ask the assistant to create an Istio VirtualService and DestinationRule that route 90 percent of traffic to v1 and 10 percent to v2 of your service, then validate the configuration with istioctl analyze.
