CtrlK
BlogDocsLog inGet started
Tessl Logo

shweshi/istio-upgrade-skill

Use when the user asks about upgrading Istio, checking Istio version compatibility, planning an Istio migration, performing pre-upgrade checks, preparing for a version bump, or creating an Istio upgrade plan. Checks CRD compatibility and storage version changes, validates sidecar proxy version skew against control-plane skew limits, reviews EnvoyFilter deprecated xDS API usage and Wasm ABI compatibility, analyzes east-west gateway upgrade ordering in multi-cluster environments, assesses federation controller compatibility and trust bundle exchange, identifies breaking changes across all intermediate Istio releases, and produces a scored upgrade readiness assessment with a go/no-go recommendation and rollback strategy.

84

1.18x
Quality

97%

Does it follow best practices?

Impact

96%

1.18x

Average score across 1 eval scenario

SecuritybySnyk

Advisory

Suggest reviewing before use

Overview
Quality
Evals
Security
Files

Evaluation results

96%

15%

Multi-Cluster Istio Upgrade Plan

Multi-cluster EW gateway upgrade ordering

Criteria
Without context
With context

EW-before-control-plane rule

33%

100%

EW on all clusters first

100%

100%

eu-central EW skew = HIGH RISK

75%

100%

Structured finding block

100%

100%

Non-critical namespaces first

100%

100%

Validation steps included

100%

100%

Old revision removal last

100%

100%

Rollback: namespace relabeling

100%

100%

Rollback: restart workloads

100%

100%

Multi-cluster version divergence

37%

50%

Finding categorization

100%

100%

Severity labels used

40%

100%

Evaluated
Agent
Claude Code
Model
Claude Sonnet 4.6

Table of Contents