Istio service mesh patterns for Rossoctl
Scanned 9/20/2026
Install to Claude Code
Skills Directorynpx -y skills add rossoctl/rossoctl --skill istio --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Istio?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/rossoctl-istio)More formats (shields.io, HTML) on the badges page.
---
name: istio
description: Istio service mesh patterns for Rossoctl
---
# Istio Skills
Skills for configuring Istio service mesh in Ambient mode.
## Available Skills
| Skill | Description |
|-------|-------------|
| `istio:ambient-waypoint` | L7 AuthorizationPolicy with waypoint proxies |
| `istio:mesh-selfheal` | Detect/recover the Ambient expired-cert 503 outage on long-running dev clusters |
## Ambient Mode Basics
In Istio Ambient mode:
- **ztunnel**: Handles L4 traffic (TCP, mTLS)
- **Waypoint**: Handles L7 traffic (HTTP) - needed for path-based authorization
## Common Tasks
### Enable Ambient for Namespace
```bash
kubectl label namespace rossoctl-system istio.io/dataplane-mode=ambient
```
### Create Waypoint
```yaml
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
name: my-waypoint
labels:
istio.io/waypoint-for: service
spec:
gatewayClassName: istio-waypoint
listeners:
- name: mesh
port: 15008
protocol: HBONE
```
## Related Skills
- `testing:kubectl-debugging`
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
