ffsshhttiikk
ffsshhttiikk/opencode-agents-skills
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/ffsshhttiikk/opencode-agents-skills --skill mesh-services命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
基于 SOC 职业分类
| name | mesh-services |
| description | Service mesh implementation and management |
| license | MIT |
| compatibility | opencode |
| metadata | {"audience":"devops-engineer, platform-engineer","category":"devops"} |
┌─────────────────────────────────────────────────────┐
│ Control Plane │
│ (Istiod - Pilot, Citadel, Galley) │
└──────────────────────┬──────────────────────────────┘
│
┌──────────────────────▼──────────────────────────────┐
│ Data Plane │
│ (Envoy Proxies - Sidecars) │
└──────────────────────┬──────────────────────────────┘
│
┌──────────────────────▼──────────────────────────────┐
│ Service A Service B │
└─────────────────────────────────────────────────────┘
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: myapp
spec:
hosts:
- myapp
http:
# Canary routing
- match:
- headers:
x-canary:
exact: "true"
route:
- destination:
host: myapp
subset: v2
weight: 100
# Default routing
- route:
- destination:
host: myapp
subset: v1
weight: 90
- destination:
host: myapp
subset: v2
weight: 10
# Retry policy
- retries:
attempts: 3
perTryTimeout: 2s
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: myapp
spec:
host: myapp
trafficPolicy:
connectionPool:
tcp:
maxConnections: 100
http:
h2UpgradePolicy: UPGRADE
http2MaxRequests: 1000
loadBalancer:
simple: LEAST_CONN
tls:
mode: ISTIO_MUTUAL
subsets:
- name: v1
labels:
version: v1
- name: v2
labels:
version: v2
apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
name: default
spec:
mtls:
mode: STRICT
---
# Per-namespace
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: product-viewer
namespace: production
spec:
selector:
matchLabels:
app: product
rules:
- from:
- source:
principals: ["cluster.local/ns/default/sa/sleep"]
to:
- operation:
methods: ["GET"]
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: istio-component-monitor
labels:
release: prometheus
spec:
selector:
matchLabels:
istio: mixer
endpoints:
- port: prometheus
interval: 15s
apiVersion: linkerd.io/v1alpha2
kind: ServiceProfile
metadata:
name: myapp.default.svc.cluster.local
spec:
routes:
- name: GET /
condition:
pathRegex: /
responseClasses:
- condition:
status:
min: 500
isFailure: true
isRetryable: true
timeout: 10s
# Jaeger tracing
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
name: istio-default
spec:
values:
pilot:
traceSampling: 1.0
tracing:
- enabled: true
provider: jaeger