istio - SKILL.md Agent Skill

name: istio description: Istio service mesh patterns for Kagenti

Istio Skills

Skills for configuring Istio service mesh in Ambient mode.

Available Skills

Skill	Description
`istio:ambient-waypoint`	L7 AuthorizationPolicy with waypoint proxies

Ambient Mode Basics

In Istio Ambient mode:

ztunnel: Handles L4 traffic (TCP, mTLS)
Waypoint: Handles L7 traffic (HTTP) - needed for path-based authorization

Common Tasks

Enable Ambient for Namespace

kubectl label namespace kagenti-system istio.io/dataplane-mode=ambient

Create Waypoint

apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: my-waypoint
  labels:
    istio.io/waypoint-for: service
spec:
  gatewayClassName: istio-waypoint
  listeners:
    - name: mesh
      port: 15008
      protocol: HBONE

Related Skills

testing:kubectl-debugging