Istio Skills
SkillDev toolsIstio service mesh patterns for Rossoctl
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the Istio Skills skill
What this skill tells your AI
The instructions your AI receives, as published by rossoctl/rossoctl in .claude/skills/istio/SKILL.md and read by ahel’s review.
Skills for configuring Istio service mesh in Ambient mode.
Available Skills
| Skill | Description |
|---|---|
istio:ambient-waypoint | L7 AuthorizationPolicy with waypoint proxies |
istio:mesh-selfheal | Detect/recover the Ambient expired-cert 503 outage on long-running dev clusters |
Ambient Mode Basics
In Istio Ambient mode:
- ztunnel: Handles L4 traffic (TCP, mTLS)
- Waypoint: Handles L7 traffic (HTTP) - needed for path-based authorization
Common Tasks
Enable Ambient for Namespace
kubectl label namespace rossoctl-system istio.io/dataplane-mode=ambient
Create Waypoint
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
name: my-waypoint
labels:
istio.io/waypoint-for: service
spec:
gatewayClassName: istio-waypoint
listeners:
- name: mesh
port: 15008
protocol: HBONE
Related Skills
testing:kubectl-debugging
Signals
- GitHub stars
- 300
- Forks
- 107
- Last commit
- Sep 2026
Advanced
- Catalog kind
- skill
- Gateway key
istio- Source
- github.com/rossoctl/rossoctl