More screenshots
Works with the AI Agents you already use
Claude Code
Cursor
Codex CLI
DeepSeek
Muse+22 moreClaude CodeCursorCodex CLIDeepSeekMuse
Dots
Manus
Grok
Grok Bot+18 agentsRepair Istio VirtualService Header Routing Regression
Trace Istio header routing changes that unexpectedly steer requests to the wrong destination.
$1
Repair Istio VirtualService Header Routing Regression
Example session with this skill installed
An API canary receives production traffic that lacks the required experiment header.
Available evidence: VirtualService and DestinationRule YAML and Envoy route configuration dumps (partial extracts only). Additional sources requested: request header traces and mesh rollout timeline. Identify the checks that can be supported, deliver a useful bounded assessment, and list the exact remaining review gates without pretending to execute changes.
- Read your context and instructions
- Compiled the repair istio virtualservice
Repair Istio VirtualService Header Routing Regression — EVIDENCE-LIMITED REVIEW
Scenario received
An API canary receives production traffic that lacks the required experiment header.
Evidence inventory
- S1: VirtualService and DestinationRule YAML — partial extract described by the requester; original full source not provided here.
- S2: Envoy route configuration dumps — partial extract described by the requester; original full source not provided here.
- S3: request header traces — NOT PROVIDED; required to validate dependent findings.
- S4: mesh rollout timeline — NOT PROVIDED; required to validate dependent findings.
Case-specific checks
Compare rule matching precedence. INCOMPLETE until matching source anchors can be examined; document the observable facts, counterexamples and decision gate.
2.
Check header normalization. INCOMPLETE until matching source anchors can be examined; document the observable facts, counterexamples and decision gate.
3.
Identify subset label mismatches. INCOMPLETE until matching source anchors can be examined; document the observable facts, counterexamples and decision gate.
4.
Test authorized canary isolation. INCOMPLETE until matching source anchors can be examined; document the observable facts, counterexamples and decision gate.
Deliverables
Traffic mismatch evidence table. Create an evidence-linked section with observations, missing data, owner and next validation step.
Mesh routing patch outline. Create an evidence-linked section with observations, missing data, owner and next validation step.
Canary and fallback verification. Create an evidence-linked section with observations, missing data, owner and next validation step.
Acceptance gate
The patch restores intended routing without broadening access or interrupting unrelated services. Do not label this gate passed until supplied source records actually demonstrate it.
Verdict and next action
INCOMPLETE — evidence required. Request S3 and S4 from the authorized owner, reconcile them with S1 and S2, then repeat the four checks and log remaining conflicts. No production change, approval, communication, or test run is claimed.
Connects securely to your tools. The creator never sees your data.
About this skill
Misconfigured Istio routing can leak production traffic into canary environments or drop requests entirely. This skill identifies why VirtualService header rules fail and provides the specific configuration patches needed to restore intended traffic flow.
What it does
- Precedence analysis identifies where overlapping match rules or ordering issues cause routing bypasses.
- Normalization checks detects case-sensitivity or header transformation errors between Envoy and your application.
- Subset verification maps DestinationRule labels against VirtualService subsets to find service discovery mismatches.
- Isolation testing evaluates if canary traffic is properly scoped to experimental headers.
How it works
- Source Registration organizes your VirtualService YAMLs, Envoy dumps, and traces into a referenced evidence log.
- Rule Comparison executes a step-by-step audit of your routing logic versus observed traffic behavior.
- Patch Generation produces a targeted mesh routing patch outline based on the identified regression.
- Validation Reporting generates a verification plan for canary and fallback traffic.
Frameworks & tools
Specifically designed for Istio service mesh environments, VirtualService and DestinationRule CRDs, and Envoy proxy configurations.
Why this beats prompting it yourself
Generic LLMs often miss the subtle weight-based or order-based precedence rules in Istio's routing engine. This skill enforces a strict evidence register (S1, S2) to ensure patches are based on your actual YAML files rather than halluncinated boilerplate.
Use cases
- Debugging why
matchconditions on custom headers are being ignored. - Fixing traffic leaks where production users hit staging subsets.
- Validating routing logic after an Istio version upgrade or rollout.
- Resolving
503or404errors caused by subset label mismatches.
Known limitations
Does not perform live kubectl executions or mesh deployments. Requires manual provision of YAML and Envoy logs for analysis.
Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse Claude Skills for DevOps & Cloud.
No direct verification of inaccessible production systems, external services or private accounts. Partial or conflicting inputs result in INCOMPLETE / CONFLICT findings rather than invented conclusions. Domain-sensitive decisions require qualified owner review.
How to use
- 1
Connect your agent to the Agensi MCP
Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup
- 2
Sign in to Agensi
Your agent shows a sign-in link. Sign in and click Allow.
- 3
Ask for what you need
Your agent loads this skill and uses it on your task. It always asks before buying a skill.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill goes through the trust checks below.
Security scanned
Checked by our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scan
Security scan passed 26 days ago
Permissions
Provide only materials you are authorized to share. Use a reviewed environment for proposed changes; keep deployment, production modifications, and third-party communication under explicit human approval.