{
  "id": "istio-dataplane-diagnostics",
  "name": "Istio Dataplane Diagnostics",
  "type": "skill",
  "provider": "istio",
  "harnesses": [
    "codex",
    "claude-code",
    "cursor",
    "gemini",
    "kiro",
    "other"
  ],
  "summary": "Diagnose Istio connectivity, 403/404/503 responses, TLS, DNS, route propagation, injection/enrollment, ztunnel or waypoint failures using supplied logs, status, manifests and metrics. Use for incidents and ambiguous proxy-versus-application failures. Produce a bounded hypothesis ledger and evidence requests, not speculative fixes. Do not collect live logs, execute into pods, enable debug logging or run network probes without a separate authorized operator.",
  "source_type": "original",
  "official_docs": [
    "https://istio.io/latest/docs/ops/common-problems/network-issues/",
    "https://istio.io/latest/docs/ops/diagnostic-tools/istioctl-analyze/",
    "https://istio.io/latest/docs/ambient/usage/l4-policy/",
    "https://gateway-api.sigs.k8s.io/docs/concepts/troubleshooting/",
    "https://istio.io/latest/docs/ops/best-practices/security/"
  ],
  "security_notes": "Static review only. Do not collect live logs or run probes; file analysis is offline only when the authorized runner explicitly disables Kubernetes access.",
  "last_verified": "2026-09-08",
  "path": "skills/istio/istio-dataplane-diagnostics",
  "author": "github: VincentChuWaiChow",
  "version": "0.1.0",
  "lifecycle": "beta",
  "execution_tier": "static-review"
}