Loading...
Loading...
Manage Istio service mesh for traffic management, security, and observability. Use for traffic shifting, canary releases, mTLS, and service mesh troubleshooting.
npx skill4agent add rohitg00/kubectl-mcp-server k8s-service-mesh| Priority | Rule | Impact | Tools |
|---|---|---|---|
| 1 | Detect Istio installation first | CRITICAL | |
| 2 | Run analyze before changes | HIGH | |
| 3 | Check proxy status for sync | HIGH | |
| 4 | Verify sidecar injection | MEDIUM | |
| Task | Tool | Example |
|---|---|---|
| Detect Istio | | |
| Analyze config | | |
| Proxy status | | |
| List VirtualServices | | |
istio_detect_tool()istio_proxy_status_tool()
istio_sidecar_status_tool(namespace)istio_analyze_tool(namespace)istio_virtualservices_list_tool(namespace)
istio_virtualservice_get_tool(name, namespace)istio_destinationrules_list_tool(namespace)istio_gateways_list_tool(namespace)apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
name: my-service
spec:
hosts:
- my-service
http:
- route:
- destination:
host: my-service
subset: stable
weight: 90
- destination:
host: my-service
subset: canary
weight: 10kubectl_apply(vs_yaml, namespace)
istio_virtualservice_get_tool("my-service", namespace)http:
- match:
- headers:
x-user-type:
exact: beta
route:
- destination:
host: my-service
subset: canary
- route:
- destination:
host: my-service
subset: stableistio_peerauthentications_list_tool(namespace)istio_authorizationpolicies_list_tool(namespace)istio_proxy_status_tool()hubble_flows_query_tool(namespace)
cilium_endpoints_list_tool(namespace)istio_sidecar_status_tool(namespace)istio_analyze_tool(namespace)
istio_virtualservice_get_tool(name, namespace)
istio_destinationrules_list_tool(namespace)
istio_proxy_status_tool()istio_peerauthentications_list_tool(namespace)| Symptom | Check | Resolution |
|---|---|---|
| 503 errors | | Fix VirtualService/DestinationRule |
| No sidecar | | Label namespace |
| Config not applied | | Wait for sync or restart pod |
istio_proxy_status_tool(context="primary")
istio_virtualservices_list_tool(namespace, context="primary")
istio_proxy_status_tool(context="remote")istioctl install --set profile=demo