[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6CX9A2Z9S0FEVM609XMHMPH":3,"skill-same:01M6CX9A2Z9S0FEVM609XMHMPH":54},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":27,"linkOnly":28,"markdownContent":29,"markdownBody":30,"frontMatter":31,"refName":34,"commitSha":35,"skillDirectory":5,"forksCount":36,"repositoryHtmlUrl":37,"repositoryHomepageUrl":6,"ownerHtmlUrl":38,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":39,"install":40,"resources":53},"01M6CX9A2Z9S0FEVM609XMHMPH","mesh-services",null,"Service mesh implementation and management","ffsshhttiikk\u002Fopencode-agents-skills","ffsshhttiikk","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F226346827?v=4","01M6CWD9RR3Y7VRQX3MXYC8FYH","01M6CWD9WVPYAZW0J82G1VKGHY",3,"MIT","https:\u002F\u002Fgithub.com\u002Fffsshhttiikk\u002Fopencode-agents-skills\u002Fblob\u002Fmain\u002Fmesh-services\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26],"mesh","services","mesh services","service mesh","management","devops","opencode","engineer","implementation","2026-11-10 10:12:30",false,"---\nname: mesh-services\ndescription: Service mesh implementation and management\nlicense: MIT\ncompatibility: opencode\nmetadata:\n  audience: devops-engineer, platform-engineer\n  category: devops\n---\n\n## What I do\n\n- Implement service mesh architectures (Istio, Linkerd, Consul Connect)\n- Configure traffic management and routing\n- Implement mutual TLS between services\n- Set up observability (tracing, metrics, logging)\n- Manage service discovery\n- Configure security policies\n\n## When to use me\n\n- When managing microservices communication\n- When implementing zero-trust networking\n- When debugging distributed systems\n- When requiring traffic management (canary, blue-green)\n- When implementing mTLS between services\n- When building observable service networks\n\n## Key Concepts\n\n### Istio Architecture\n\n```\n┌─────────────────────────────────────────────────────┐\n│                   Control Plane                     │\n│  (Istiod - Pilot, Citadel, Galley)                  │\n└──────────────────────┬──────────────────────────────┘\n                       │\n┌──────────────────────▼──────────────────────────────┐\n│                   Data Plane                         │\n│  (Envoy Proxies - Sidecars)                         │\n└──────────────────────┬──────────────────────────────┘\n                       │\n┌──────────────────────▼──────────────────────────────┐\n│              Service A    Service B                  │\n└─────────────────────────────────────────────────────┘\n```\n\n### Virtual Service (Traffic Routing)\n\n```yaml\napiVersion: networking.istio.io\u002Fv1alpha3\nkind: VirtualService\nmetadata:\n  name: myapp\nspec:\n  hosts:\n    - myapp\n  http:\n    # Canary routing\n    - match:\n        - headers:\n            x-canary:\n              exact: \"true\"\n      route:\n        - destination:\n            host: myapp\n            subset: v2\n          weight: 100\n    # Default routing\n    - route:\n        - destination:\n            host: myapp\n            subset: v1\n          weight: 90\n        - destination:\n            host: myapp\n            subset: v2\n          weight: 10\n    # Retry policy\n    - retries:\n        attempts: 3\n        perTryTimeout: 2s\n        retryOn: gateway-error,connect-failure,refused-stream\n      route:\n        - destination:\n            host: myapp\n```\n\n### Destination Rule\n\n```yaml\napiVersion: networking.istio.io\u002Fv1alpha3\nkind: DestinationRule\nmetadata:\n  name: myapp\nspec:\n  host: myapp\n  trafficPolicy:\n    connectionPool:\n      tcp:\n        maxConnections: 100\n      http:\n        h2UpgradePolicy: UPGRADE\n        http2MaxRequests: 1000\n    loadBalancer:\n      simple: LEAST_CONN\n    tls:\n      mode: ISTIO_MUTUAL\n  subsets:\n    - name: v1\n      labels:\n        version: v1\n    - name: v2\n      labels:\n        version: v2\n```\n\n### Peer Authentication (mTLS)\n\n```yaml\napiVersion: security.istio.io\u002Fv1beta1\nkind: PeerAuthentication\nmetadata:\n  name: default\nspec:\n  mtls:\n    mode: STRICT\n---\n# Per-namespace\napiVersion: security.istio.io\u002Fv1beta1\nkind: AuthorizationPolicy\nmetadata:\n  name: product-viewer\n  namespace: production\nspec:\n  selector:\n    matchLabels:\n      app: product\n  rules:\n    - from:\n        - source:\n            principals: [\"cluster.local\u002Fns\u002Fdefault\u002Fsa\u002Fsleep\"]\n      to:\n        - operation:\n            methods: [\"GET\"]\n```\n\n### Service Monitor\n\n```yaml\napiVersion: monitoring.coreos.com\u002Fv1\nkind: ServiceMonitor\nmetadata:\n  name: istio-component-monitor\n  labels:\n    release: prometheus\nspec:\n  selector:\n    matchLabels:\n      istio: mixer\n  endpoints:\n    - port: prometheus\n      interval: 15s\n```\n\n### Linkerd Configuration\n\n```yaml\napiVersion: linkerd.io\u002Fv1alpha2\nkind: ServiceProfile\nmetadata:\n  name: myapp.default.svc.cluster.local\nspec:\n  routes:\n    - name: GET \u002F\n      condition:\n        pathRegex: \u002F\n      responseClasses:\n        - condition:\n            status:\n              min: 500\n          isFailure: true\n      isRetryable: true\n      timeout: 10s\n```\n\n### Observability Integration\n\n```yaml\n# Jaeger tracing\napiVersion: install.istio.io\u002Fv1alpha1\nkind: IstioOperator\nmetadata:\n  name: istio-default\nspec:\n  values:\n    pilot:\n      traceSampling: 1.0\n    tracing:\n    - enabled: true\n      provider: jaeger\n```\n\n### Traffic Management Features\n\n- **Canary Deployments**: Gradually shift traffic\n- **A\u002FB Testing**: Route based on headers\u002Fcookies\n- **Circuit Breaking**: Prevent cascade failures\n- **Rate Limiting**: Protect services\n- **Fault Injection**: Test resilience\n- **Mirror Traffic**: Copy requests for testing\n","## What I do\n\n- Implement service mesh architectures (Istio, Linkerd, Consul Connect)\n- Configure traffic management and routing\n- Implement mutual TLS between services\n- Set up observability (tracing, metrics, logging)\n- Manage service discovery\n- Configure security policies\n\n## When to use me\n\n- When managing microservices communication\n- When implementing zero-trust networking\n- When debugging distributed systems\n- When requiring traffic management (canary, blue-green)\n- When implementing mTLS between services\n- When building observable service networks\n\n## Key Concepts\n\n### Istio Architecture\n\n```\n┌─────────────────────────────────────────────────────┐\n│                   Control Plane                     │\n│  (Istiod - Pilot, Citadel, Galley)                  │\n└──────────────────────┬──────────────────────────────┘\n                       │\n┌──────────────────────▼──────────────────────────────┐\n│                   Data Plane                         │\n│  (Envoy Proxies - Sidecars)                         │\n└──────────────────────┬──────────────────────────────┘\n                       │\n┌──────────────────────▼──────────────────────────────┐\n│              Service A    Service B                  │\n└─────────────────────────────────────────────────────┘\n```\n\n### Virtual Service (Traffic Routing)\n\n```yaml\napiVersion: networking.istio.io\u002Fv1alpha3\nkind: VirtualService\nmetadata:\n  name: myapp\nspec:\n  hosts:\n    - myapp\n  http:\n    # Canary routing\n    - match:\n        - headers:\n            x-canary:\n              exact: \"true\"\n      route:\n        - destination:\n            host: myapp\n            subset: v2\n          weight: 100\n    # Default routing\n    - route:\n        - destination:\n            host: myapp\n            subset: v1\n          weight: 90\n        - destination:\n            host: myapp\n            subset: v2\n          weight: 10\n    # Retry policy\n    - retries:\n        attempts: 3\n        perTryTimeout: 2s\n        retryOn: gateway-error,connect-failure,refused-stream\n      route:\n        - destination:\n            host: myapp\n```\n\n### Destination Rule\n\n```yaml\napiVersion: networking.istio.io\u002Fv1alpha3\nkind: DestinationRule\nmetadata:\n  name: myapp\nspec:\n  host: myapp\n  trafficPolicy:\n    connectionPool:\n      tcp:\n        maxConnections: 100\n      http:\n        h2UpgradePolicy: UPGRADE\n        http2MaxRequests: 1000\n    loadBalancer:\n      simple: LEAST_CONN\n    tls:\n      mode: ISTIO_MUTUAL\n  subsets:\n    - name: v1\n      labels:\n        version: v1\n    - name: v2\n      labels:\n        version: v2\n```\n\n### Peer Authentication (mTLS)\n\n```yaml\napiVersion: security.istio.io\u002Fv1beta1\nkind: PeerAuthentication\nmetadata:\n  name: default\nspec:\n  mtls:\n    mode: STRICT\n---\n# Per-namespace\napiVersion: security.istio.io\u002Fv1beta1\nkind: AuthorizationPolicy\nmetadata:\n  name: product-viewer\n  namespace: production\nspec:\n  selector:\n    matchLabels:\n      app: product\n  rules:\n    - from:\n        - source:\n            principals: [\"cluster.local\u002Fns\u002Fdefault\u002Fsa\u002Fsleep\"]\n      to:\n        - operation:\n            methods: [\"GET\"]\n```\n\n### Service Monitor\n\n```yaml\napiVersion: monitoring.coreos.com\u002Fv1\nkind: ServiceMonitor\nmetadata:\n  name: istio-component-monitor\n  labels:\n    release: prometheus\nspec:\n  selector:\n    matchLabels:\n      istio: mixer\n  endpoints:\n    - port: prometheus\n      interval: 15s\n```\n\n### Linkerd Configuration\n\n```yaml\napiVersion: linkerd.io\u002Fv1alpha2\nkind: ServiceProfile\nmetadata:\n  name: myapp.default.svc.cluster.local\nspec:\n  routes:\n    - name: GET \u002F\n      condition:\n        pathRegex: \u002F\n      responseClasses:\n        - condition:\n            status:\n              min: 500\n          isFailure: true\n      isRetryable: true\n      timeout: 10s\n```\n\n### Observability Integration\n\n```yaml\n# Jaeger tracing\napiVersion: install.istio.io\u002Fv1alpha1\nkind: IstioOperator\nmetadata:\n  name: istio-default\nspec:\n  values:\n    pilot:\n      traceSampling: 1.0\n    tracing:\n    - enabled: true\n      provider: jaeger\n```\n\n### Traffic Management Features\n\n- **Canary Deployments**: Gradually shift traffic\n- **A\u002FB Testing**: Route based on headers\u002Fcookies\n- **Circuit Breaking**: Prevent cascade failures\n- **Rate Limiting**: Protect services\n- **Fault Injection**: Test resilience\n- **Mirror Traffic**: Copy requests for testing\n",{"name":5,"license":14,"metadata":32,"description":7,"compatibility":24},{"audience":33,"category":23},"devops-engineer, platform-engineer","main","5f7a3e453c98261f93d19a6a7de44ad8f7b72d41",2,"https:\u002F\u002Fgithub.com\u002Fffsshhttiikk\u002Fopencode-agents-skills","https:\u002F\u002Fgithub.com\u002Fffsshhttiikk","2026-03-01 06:55:40",{"source":8,"skillName":5,"commands":41,"prompt":51,"zipAvailable":52},[42,45,48],{"tool":43,"command":44},"npx","npx skills add ffsshhttiikk\u002Fopencode-agents-skills --skill mesh-services",{"tool":46,"command":47},"bunx","bunx skills add ffsshhttiikk\u002Fopencode-agents-skills --skill mesh-services",{"tool":49,"command":50},"pnpm","pnpm dlx skills add ffsshhttiikk\u002Fopencode-agents-skills --skill mesh-services","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fffsshhttiikk\u002Fopencode-agents-skills\u002Fblob\u002Fmain\u002Fmesh-services\u002FSKILL.md",true,[],[55,66,76,85,95,104],{"skillNo":56,"name":57,"nameZh":6,"description":58,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":59,"categories":60,"keywords":61,"publishedAt":27},"01M6CXT9TXDF79BWJTMQAPB49G","xamarin","Xamarin cross-platform development","https:\u002F\u002Fgithub.com\u002Fffsshhttiikk\u002Fopencode-agents-skills\u002Fblob\u002Fmain\u002Fxamarin\u002FSKILL.md",[],[57,62,63,64,24,65],"platform","cross-platform","mobile","development",{"skillNo":67,"name":68,"nameZh":6,"description":69,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":70,"categories":71,"keywords":72,"publishedAt":27},"01M6CXT8AD04MFYDA32VW3FKAG","wrangling","Data wrangling fundamentals","https:\u002F\u002Fgithub.com\u002Fffsshhttiikk\u002Fopencode-agents-skills\u002Fblob\u002Fmain\u002Fwrangling\u002FSKILL.md",[],[68,73,24,74,75],"data wrangling","science","data",{"skillNo":77,"name":78,"nameZh":6,"description":79,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":80,"categories":81,"keywords":82,"publishedAt":27},"01M6CXT717GCN7SRRNPBDP4508","windows","Windows operating system administration and scripting","https:\u002F\u002Fgithub.com\u002Fffsshhttiikk\u002Fopencode-agents-skills\u002Fblob\u002Fmain\u002Fwindows\u002FSKILL.md",[],[78,83,24,84],"system","scripting",{"skillNo":86,"name":87,"nameZh":6,"description":88,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":89,"categories":90,"keywords":91,"publishedAt":27},"01M6CXT54K794NMEM3XAPZZDKT","wide-column","Wide-column data model","https:\u002F\u002Fgithub.com\u002Fffsshhttiikk\u002Fopencode-agents-skills\u002Fblob\u002Fmain\u002Fwide-column\u002FSKILL.md",[],[92,93,24,94,75],"wide column","databases","model",{"skillNo":96,"name":97,"nameZh":6,"description":98,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":99,"categories":100,"keywords":101,"publishedAt":27},"01M6CXT28FMT2P4V9GZE67WA8E","wide-column-stores","Wide-column database stores","https:\u002F\u002Fgithub.com\u002Fffsshhttiikk\u002Fopencode-agents-skills\u002Fblob\u002Fmain\u002Fwide-column-stores\u002FSKILL.md",[],[102,93,24,103],"wide column stores","database",{"skillNo":105,"name":106,"nameZh":6,"description":107,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":108,"categories":109,"keywords":110,"publishedAt":27},"01M6CXT0D0M0Q4T2N7C2RX7DSN","websockets","WebSocket implementation and best practices","https:\u002F\u002Fgithub.com\u002Fffsshhttiikk\u002Fopencode-agents-skills\u002Fblob\u002Fmain\u002Fwebsockets\u002FSKILL.md",[],[106,111,112,113,24,114,26],"websocket","real-time","time","best practices"]