istio-traffic-management

Configure Istio traffic management including routing, load balancing, circuit breakers, and canary deployments. Use when implementing service mesh traffic policies, progressive delivery, or resilience patterns.

1.03x

Quality

76%

Does it follow best practices?

Impact

98%

1.03x

Average score across 6 eval scenarios

Securityby

Passed

No known issues

Optimize this skill with Tessl

npx tessl skill review --optimize ./plugins/cloud-infrastructure/skills/istio-traffic-management/SKILL.md

Evaluation results

100%

Canary Rollout for Recommendation Service

Canary deployment traffic splitting

Criteria

Without context

With context

VirtualService apiVersion

100%

DestinationRule apiVersion

100%

Weight-based routing

100%

Weights sum to 100

100%

Small canary percentage

100%

DestinationRule subsets

100%

Subset version labels

100%

Subset name consistency

100%

Same host reference

100%

Destination uses subsets

100%

91%

15%

Resilience Hardening for Payment Processing Service

Circuit breaker and retry resilience

Criteria

Without context

With context

DestinationRule apiVersion

100%

outlierDetection.consecutive5xxErrors

100%

outlierDetection.interval

100%

outlierDetection.baseEjectionTime

100%

outlierDetection.maxEjectionPercent

100%

outlierDetection.minHealthPercent

100%

h2UpgradePolicy UPGRADE

connectionPool.tcp.maxConnections

100%

retryOn conditions

50%

100%

retryRemoteLocalities

100%

Retry attempts bounded

100%

Timeout configured

100%

VirtualService apiVersion

100%

Shadow Testing and Chaos Validation for Order Service

Traffic mirroring and fault injection

Criteria

Without context

With context

VirtualService apiVersion

100%

Mirror field present

100%

mirrorPercentage specified

100%

Mirror to non-production

100%

Fault delay configured

100%

Fault abort configured

100%

Fault delay partial

100%

Fault abort partial

100%

Primary route destination

100%

Abort uses server error

100%

Secure External API Access via Istio Ingress

Ingress Gateway with TLS configuration

Criteria

Without context

With context

Gateway apiVersion

100%

Gateway selector

100%

HTTPS port 443

100%

TLS mode SIMPLE

100%

credentialName field

100%

VirtualService apiVersion

100%

VirtualService gateways field

100%

FQDN host in VirtualService

100%

URI prefix match

100%

Port number in destination

100%

Wildcard host in Gateway

100%

Optimize Traffic Distribution for E-Commerce Services

Load balancing and sticky session configuration

Criteria

Without context

With context

DestinationRule apiVersion

100%

Simple load balancer field

100%

consistentHash field present

100%

Consistent hash key type

100%

No conflicting LB fields

100%

trafficPolicy placement

100%

Separate DestinationRules or subsets

100%

Correct host reference

100%

Preview Environment Routing for Internal Beta Testers

Header-based routing with fallback

Criteria

Without context

With context

VirtualService apiVersion

100%

DestinationRule apiVersion

100%

Header match rule

100%

Exact header match

100%

Fallback route present

100%

Matched route uses subset

100%

Fallback route uses different subset

100%

DestinationRule subsets defined

100%

Subset version labels

100%

Consistent host reference

100%

Repository: wshobson/agents
Commit: 70444e5

Evaluated: 29 days ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Canary Rollout for Recommendation Service Resilience Hardening for Payment Processing Service Shadow Testing and Chaos Validation for Order Service Secure External API Access via Istio Ingress Optimize Traffic Distribution for E-Commerce Services Preview Environment Routing for Internal Beta Testers

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.