This is a comprehensive Istio assistant that handles service mesh operations from installation through production traffic management. It covers the full stack: VirtualServices for canary deployments and traffic splitting, DestinationRules with circuit breakers and outlier detection, Gateway configurations for both ingress and egress, and mTLS security policies. The examples are production-ready with actual resource limits, HPA configs, and connection pool settings. Useful when you're managing microservices at scale and need to route traffic intelligently, enforce mutual TLS, or debug why your circuit breaker isn't ejecting bad pods. The skill assumes Istio 1.20+ and includes both istioctl commands and declarative YAML approaches.

skills.sh installs
181
GitHub stars
44
last updated
Aug 21, 2026

Install

$ npx -y skills add personamanagmentlayer/pcl --skill istio-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

Istio Expert

You are an expert in Istio service mesh with deep knowledge of traffic management, security, observability, and production operations. You design and manage secure, observable microservices architectures using Istio's control plane and data plane.

istioctl Commands

Installation and Management:

# Install Istio
istioctl install --set profile=demo -y
istioctl install --set profile=production -y

# Verify installation
istioctl verify-install

# Show mesh status
istioctl proxy-status

# Analyze configuration
istioctl analyze
istioctl analyze -n production

# Show Envoy config
istioctl proxy-config cluster <pod-name>
istioctl proxy-config listener <pod-name>
istioctl proxy-config route <pod-name>
istioctl proxy-config endpoint <pod-name>

Debugging:

# Check injection status
kubectl get namespace -L istio-injection

# Describe pod with sidecar
kubectl describe pod <pod-name>

# Get Envoy logs
kubectl logs <pod-name> -c istio-proxy

# Dashboard
istioctl dashboard kiali
istioctl dashboard prometheus
istioctl dashboard grafana
istioctl dashboard jaeger

# Profile application
istioctl experimental profile diff default production

Sponsors

Details

Repository
github.com/personamanagmentlayer/pcl
Categories
Security, DevOps & CI/CD, Marketing & SEO
First seen
Jun 3, 2026

More from personamanagmentlayer/pcl

All 99

Recommended

More Security
1samhvw8 avatarmise-expertsamhvw8/dotfilesMise development environment manager (asdf + direnv + make replacement). Capabilities: tool version management (node, python, go, ruby, rust), environment varia180skills.sh installs
2bitget-wallet-ai-lab avatarbitget-walletbitget-wallet-ai-lab/bitget-wallet-skillInteract with Bitget Wallet API for crypto market data, token info, swap quotes, RWA (real-world asset) stock trading, and security audits. Use when the user as178skills.sh installs
3iii-hq avatariii-http-middlewareiii-hq/iiiRegisters engine-level middleware functions that run before HTTP handlers. Use when adding authentication, request logging, rate limiting, or any pre-handler lo178skills.sh installs
4charleswiltgen avataraxiom-app-compositioncharleswiltgen/axiomUse when structuring app entry points, managing authentication flows, switching root views, handling scene lifecycle, or asking 'how do I structure my @main', '176skills.sh installs
5charleswiltgen avataraxiom-core-location-diagcharleswiltgen/axiomUse for Core Location troubleshooting - no location updates, background location broken, authorization denied, geofence not triggering175skills.sh installs
6charleswiltgen avataraxiom-core-locationcharleswiltgen/axiomUse for Core Location implementation patterns - authorization strategy, monitoring strategy, accuracy selection, background location173skills.sh installs