By missBerg
Skills for developers deploying and configuring Envoy Gateway as a Kubernetes-native API gateway
Set up Envoy Gateway as an API gateway with authentication, rate limiting, and backend resilience
Configure authentication and authorization with SecurityPolicy — JWT, OIDC, API Key, ExtAuth, Basic Auth
Configure backend traffic policies — load balancing, retries, health checks, circuit breaking, timeouts
Configure client-facing traffic policies -- timeouts, connection limits, TLS settings, HTTP behavior
Production-grade Envoy Gateway setup with comprehensive security, observability, high availability, and operational best practices
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Agent skills that help developers adopt and contribute to the Envoy ecosystem. Install these into your coding agent (Claude Code, Cursor, Copilot, etc.) to get best-practice guidance when working with Envoy projects.
# Install all Envoy Gateway adopter skills
npx skills add missBerg/envoy-skills
# Preview available skills first
npx skills add missBerg/envoy-skills --list
# Install a specific skill
npx skills add missBerg/envoy-skills --skill eg-install
# Install AI Gateway adopter skills
npx skills add missBerg/envoy-skills --skill aigw-install
# Install to a specific agent
npx skills add missBerg/envoy-skills -a cursor
# From within your project directory
/path/to/envoy-skills/install.sh gateway/adopters # Envoy Gateway adopters
/path/to/envoy-skills/install.sh ai-gateway/adopters # Envoy AI Gateway adopters
/path/to/envoy-skills/install.sh gateway/contributors # Envoy Gateway contributors
/path/to/envoy-skills/install.sh ai-gateway/contributors # Envoy AI Gateway contributors
/path/to/envoy-skills/install.sh shared/contributors # Shared controller skills
# Envoy Gateway adopters
cp -r /path/to/envoy-skills/gateway/adopters/skills/* .claude/skills/
# Envoy AI Gateway adopters
cp -r /path/to/envoy-skills/ai-gateway/adopters/skills/* .claude/skills/
# Contributor skill sets (gateway, ai-gateway, or shared)
cp -r /path/to/envoy-skills/gateway/contributors/skills/* .claude/skills/
cp -r /path/to/envoy-skills/ai-gateway/contributors/skills/* .claude/skills/
cp -r /path/to/envoy-skills/shared/contributors/skills/* .claude/skills/
| Project | Status | Description |
|---|---|---|
| Envoy Gateway | Active | Kubernetes-native API gateway built on Envoy Proxy |
| Envoy Proxy | Planned | Core Envoy Proxy data plane |
| Envoy AI Gateway | Active | AI-specific traffic management and model routing for LLM providers |
Each project separates skills by audience:
| Skill | Purpose |
|---|---|
/eg-install | Install Envoy Gateway via Helm |
/eg-gateway | Create Gateway + GatewayClass |
/eg-route | HTTP/gRPC/TCP/UDP routing |
/eg-tls | TLS termination + cert-manager |
/eg-auth | JWT, OIDC, API Key, ExtAuth security policies |
/eg-rate-limit | Local and global rate limiting |
/eg-backend-policy | Load balancing, retries, health checks |
/eg-extension | ExtProc, Wasm, Lua extensions |
/eg-observability | Access logging, metrics, tracing |
/eg-client-policy | Client traffic policies, timeouts |
| Skill | Use Case |
|---|---|
/eg-orchestrator | Start here - interviews you about your use case and guides you |
/eg-webapp | Web application ingress with TLS and auth |
/eg-api-gateway | API gateway with rate limiting and security |
/eg-multi-tenant | Multi-tenant SaaS with namespace isolation |
/eg-enterprise | Production-grade setup with full security and observability |
/eg-extend | Build custom data plane extensions |
/eg-service-mesh | Integration with Istio or Cilium |
| Skill | Purpose |
|---|---|
/eg-version | Version compatibility matrix, upgrade readiness checks |
/eg-migrate | Step-by-step migration between Envoy Gateway versions |
| Skill | Topic |
|---|---|
/eg-fundamentals | Gateway API resource hierarchy, CRDs, naming conventions |
/eg-security-guide | Threat model findings, RBAC, TLS hardening |
/eg-production-guide | Deployment modes, performance tuning, operations |
Envoy AI Gateway extends Envoy Gateway to provide a unified API gateway for generative AI services (OpenAI, Anthropic, AWS Bedrock, Azure OpenAI, GCP Vertex AI, Cohere, etc.).
| Skill | Purpose |
|---|---|
/aigw-install | Install Envoy AI Gateway and Envoy Gateway with AI integration |
/aigw-route | Create AIGatewayRoute with model-based routing |
/aigw-backend | Create AIServiceBackend and Backend for an AI provider |
/aigw-auth | Configure BackendSecurityPolicy for provider authentication |
| Skill | Topic |
|---|---|
/aigw-fundamentals | CRDs, API schemas, resource hierarchy, provider auth types |
npx claudepluginhub missberg/envoy-skills --plugin envoy-gateway-adoptersSkills for developers deploying and configuring Envoy AI Gateway for generative AI services
Configure service mesh (Istio, Linkerd) for microservices
Configures API gateways for routing, authentication, rate limiting, and request transformation in microservice architectures. Use when setting up Kong, Nginx, AWS API Gateway, or Traefik for centralized API management.
TrueFoundry AI Gateway plugin — onboarding, model routing, MCP servers, prompts, Skills Registry workflows, observability, guardrails, and codebase migration. Works across Claude Code, Codex, and Cursor.
Enterprise microservices architecture design and implementation expert for scalable distributed systems
Practical guidance for platform engineers across Claude, Codex, Cursor, and Copilot: Kubernetes, Kyverno, Helm, Terraform, Flux CD (Flux Operator, FluxInstance, gitless OCI delivery, cluster debug, repo audit), Argo CD, GitHub Actions (composite actions, SHA pinning, OIDC, 11 production examples), AWS (CloudFront, WAF, Lambda@Edge, IAM, IRSA), Azure (AKS workload identity), GKE (Workload Identity Federation), Linkerd, Linux, networking, MCP development, observability, SOC 2 compliance, PR review, PR triage, KEDA autoscaling, Karpenter node autoscaling, supply chain security (Cosign, SBOM, SLSA), Falco runtime security, Chaos Engineering, DORA Metrics, LLM Observability (Datadog LLMObs), and animated docs. Every answer includes blast radius, validation steps, and rollback plan.
Network engineering agents providing expertise in protocols, distributed systems, and service mesh