claude

service-mesh-gateway-skills

Service mesh and API gateway skills: Linkerd, Consul, Cilium eBPF, Kong, Apigee, gRPC troubleshooting, and API gateway rate-limiting/quota management.

44 on GitHubby Ops Engineering Skills Maintainersv1.0.0Apache-2.0updated 3 months agoservice-mesh
/

Plugin service-mesh-gateway-skills from marketplace ops-engineering-skills in selvarajmurugesan90/ops-engineering-skills. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (11)

  • api-gateway-rate-limiting-and-quota-management

    Designs rate-limiting and quota strategy that applies across gateway tools — token bucket vs. sliding/fixed window algorithm choice, per-client vs. global vs. tiered limit scoping, burst allowance design, and distributed counter consistency — as the vendor-neutral layer underneath tool-specific plug

  • apigee-api-management-and-governance

    Governs the full API lifecycle in Google Apigee (or comparable enterprise API-management platforms) — API proxy design, policy attachment (OAuth2/API key verification, quota, spike arrest, transformation), developer portal publishing, product-based monetization, and semantic versioning/deprecation o

  • cilium-configuration-validation

    Validates CiliumNetworkPolicy, CiliumClusterwideNetworkPolicy, and Hubble observability configuration before a production rollout — syntax-checking policy files offline, confirming which endpoints and identities a policy actually selects, and using Hubble flow data to prove a policy enforces what it

  • cilium-ebpf-cni-and-mesh-configuration

    Configures Cilium as an eBPF-based Kubernetes CNI — kube-proxy replacement, CiliumNetworkPolicy for L3/L4/L7 network policy, and Cilium's ambient-style service mesh capability built on the same eBPF datapath rather than per-pod sidecars. Use when a user asks to "install Cilium," "replace kube-proxy

  • consul-configuration-validation

    Validates Consul service definitions, config entries, and intentions (mesh-level authorization) before applying them to a production datacenter — syntax-checking agent config, dry-running catalog changes, and confirming intentions produce the intended allow/deny decisions. Use when a user asks to "v

  • consul-service-mesh-and-discovery-configuration

    Configures HashiCorp Consul as a combined service mesh and service discovery layer, especially across multi-cloud or hybrid (VM + Kubernetes, multi-datacenter) environments where a Kubernetes-only mesh doesn't reach. Covers Consul Connect sidecar injection, intentions, config entries (service-splitt

  • grpc-service-troubleshooting

    Diagnoses gRPC-specific failure modes — DEADLINE_EXCEEDED, connection and keepalive/GOAWAY issues, HTTP/2 multiplexing problems behind L4/L7 load balancers, and protobuf/proto-compatibility breakage across client/server versions — distinct from generic HTTP ingress troubleshooting. Use when a user a

  • kong-api-gateway-configuration

    Configures Kong Gateway's core objects — Services, Routes, and Plugins — including rate-limiting, authentication (key-auth, JWT, OAuth2), and request/response transformation, in both declarative (`kong.yml`) and imperative (Admin API) modes, on Kubernetes (via the Kong Ingress Controller) or standal

  • kong-configuration-validation

    Validates Kong's declarative configuration (`kong.yml`) and Kubernetes CRDs (`KongPlugin`, `KongIngress`, `KongConsumer`) before they reach production — schema-checking with `deck validate`, diffing against the live gateway state with `deck diff`, and confirming a route/plugin actually behaves as in

  • linkerd-configuration-validation

    Validates a Linkerd installation, proxy injection, and traffic/ authorization policy before a production rollout — running the built-in health checks, confirming which connections are actually mTLS-secured, and dry-running policy changes against real traffic patterns. Use when a user asks to "check

  • linkerd-service-mesh-configuration

    Guides installing and operating Linkerd as a simpler, mTLS-first alternative to Istio — choosing extensions deliberately, enabling automatic mutual TLS with zero-config identity, injecting the proxy per namespace/workload, and splitting traffic between service versions. Use when a user asks to "inst

View source on GitHub

More from selvarajmurugesan90/ops-engineering-skills

All 22 plugins →

Helm, Kustomize, Operators, Istio, NGINX Ingress, Calico/Flannel, EKS/AKS/GKE, OpenShift/ROSA, K3s, Docker/containerd, and cert-manager skills.

35 skills

44

Operational skills for running production databases: PostgreSQL, MongoDB, Redis, and Elasticsearch/OpenSearch tuning, high availability, configuration validation, and schema migration.

23 skills

44

Model packaging, feature stores, training pipelines, monitoring/drift, LLMOps, experiment tracking, and serving skills.

22 skills

44

Agent architecture, MCP server development, prompt/context engineering, evaluation, RAG, and multi-agent orchestration skills.

20 skills

44

Internal developer platform skills: no-code service catalog tools (Port/Cortex/OpsLevel), Humanitec Score workload specs, golden-path template design, and developer experience measurement.

20 skills

44

SAST/DAST/SCA, secrets management, supply-chain security, policy-as-code, and secure pipeline gate skills.

17 skills

44

Similar plugins

kubeshark

claude

Network observability skills powered by Kubeshark MCP — root cause analysis, KFL traffic filtering, snapshot forensics, PCAP extraction.

4 skills · 1 MCP server

kubeshark/kubeshark 12,137

Configure service mesh (Istio, Linkerd) for microservices

1 skill · 1 command

jeremylongshore/tons-of-skills-marketplace 2,917

OpenTelemetry profiles signal and the eBPF profiler: deploying otelcol-ebpf-profiler on hosts and Kubernetes (including kind/k3d), version-pinned receiver keys, exporting OTLP profiles to backends, verification, and troubleshooting.

1 skill

ollygarden/opentelemetry-agent-skills 126

Production-grade platform engineering handbook for Claude, Codex, and Cursor. 51 slash-command workflows: Kubernetes (baseline, RBAC, workload, debug), GitHub Actions (design, security, review, debug), Azure (Workload Identity, AKS, tagging, RBAC), OpenShift (SCC, Routes, GitOps, upgrades), Secrets (ESO, Sealed Secrets, rotation, audit), Helm, Terraform, Flux CD, Argo CD, Gateway API (ingress-nginx migration), AWS, Kyverno, OPA, KEDA, Karpenter, cluster upgrades (EKS version rollback), Flagger progressive delivery, Velero backup and restore drills, FinOps (Infracost, cost tags, OpenCost), supply chain security, Kubescape posture and operator (NSA, MITRE, CIS, SOC2), Falco, chaos engineering, DORA metrics, Datadog, Dynatrace, Linkerd, AWS MCP, Renovate, Checkov, Trivy, Zizmor workflow auditing, Kingfisher secret scanning and revocation, token optimization, and multi-agent scaffolding. Every answer includes blast radius, validation steps, and rollback plan.

52 skills · 1 agent

nitinjain999/platform-skills 72

Use when networking fails on a Kubernetes cluster that runs Cilium as its CNI: traffic between pods dropped or timing out after a CiliumNetworkPolicy or CiliumClusterwideNetworkPolicy, "Policy denied" drops in Hubble, DNS that stops resolving after an egress policy, HTTP 403 "Access denied" from an L7 rule, toFQDNs rules that do not match, pods stuck ContainerCreating with "unable to connect to Cilium agent", Cilium agent or operator pods not ready, CiliumEndpoints not ready, or IPAM exhaustion. Investigates with kubectl get, describe, events and logs, asks before running cilium-dbg or hubble inside the agent, and proposes fixes. Reads first and asks before changing anything.

1 skill

k8s-servant/k8s-skills 38

Making eBPF verifier errors as friendly as Rust compiler errors, and let LLM fix it.

1 skill

eunomia-bpf/bpfix 23

Maintain service-mesh-gateway-skills?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins22 plugins