progressive-delivery
Skill71 starsChanged 8 days agoApache-2.0View on GitHub
Canary releases with automatic promotion and rollback using Flagger on Flux. Shifts traffic through Gateway API HTTPRoute weights (Envoy Gateway for north-south, Linkerd for east-west), gates each step on success-rate and latency metrics for the canary pods, runs smoke tests before traffic moves, and rolls back on its own when checks fail. Covers install with signed OCI charts, Canary and MetricTemplate design, GitOps ownership, and emergency rollback. Use when asked to "add canary deployments", "roll out gradually", "automatic rollback on errors", "set up Flagger", or "why did my canary roll back". Gateway and routes themselves → /platform-skills:gateway-api. Linkerd mesh issues → /platform-skills:linkerd.
We split this skill into the rules it gives an agent
7 rules. About 0 are common, 2 are distinctive, and 5 are very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈2
Distinctive · estimate
This author's own choices. Worth a look.
5
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Very specific: line 12
Read references/progressive-delivery.md before responding.
- Very specific: line 28
Start from examples/progressive-delivery/app/canary.yaml.
- Very specific: line 29
Add autoscalerRef when the app has an HPA.
- Very specific: line 31
If the Canary has webhooks, include examples/progressive-delivery/app/loadtester.yaml in the app namespace.
- Very specific: line 32
Remove the app's hand-written HTTPRoute in the same change.
- Distinctive: line 37
Use the reference's rollback table.
- Distinctive: line 41
Every mode ends with:
≈ “Common” is an estimate: at least 1 in 5 of the 308,232 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Ship a new version to a slice of real traffic first, promote it only on evidence, and roll it back without a human when the evidence says no.
Read references/progressive-delivery.md before responding. It holds how a Flagger analysis runs, the provider settings for Envoy Gateway and Linkerd, metric rules, GitOps ownership, rollback by situation, and troubleshooting. The working manifests are in examples/progressive-delivery.
This skill is interactive by default. With no arguments, ask how traffic reaches the app (shared Envoy Gateway, Linkerd east-west, both), where metrics come from (Linkerd viz, gateway Prometheus, other), and whether the app has an HPA, then run canary. Never apply resources or change a live Canary yourself.
Mode dispatch
| Mode | What it does |
install | Flagger via Flux from the signed OCI chart, with meshProvider and metricsServer for the user's traffic and metrics |
canary | Canary and MetricTemplates for one app, from examples/progressive-delivery, adapted to its ports, hostname, listener and HPA |
metrics | Design or fix the MetricTemplate queries so they measure the canary pods only, and prove they return data |
debug | Why a canary is stuck, never starts, or always rolls back, from Flagger events and route status |
rollback | The right rollback for the situation: automatic, revert in Git, skipAnalysis, or suspend |
Mode: canary
- Start from
examples/progressive-delivery/app/canary.yaml. SettargetRef,service.portandtargetPort,hosts, andgatewayRefs(the Gateway andsectionNamefor north-south; the Service for Linkerd east-west). - Add
autoscalerRefwhen the app has an HPA. - Pick
interval,stepWeight,maxWeightandthresholdfrom the app's traffic: a check needs enough requests perintervalto be meaningful; a low-traffic app needs a load-test webhook or a longer interval. - If the Canary has webhooks, include
examples/progressive-delivery/app/loadtester.yamlin the app namespace; the webhook URL must name that Service. - Remove the app's hand-written
HTTPRoutein the same change; say so explicitly. - Validate with
kubeconform -strictagainst the CRD catalog, as the example README shows.
Mode: rollback
Use the reference's rollback table. State which objects Flagger owns (primary, generated Services and HTTPRoute) and that the fix for a failed release is always a change in Git, because Flux will keep applying whatever Git says.
Output format
Every mode ends with:
- Changes, as exact files and fields
- Blast radius, in one line (which traffic and for how long)
- Validation, as commands (
kubectl describe canary, the metric query, route status) - Rollback, for the situation in question
Other versions1 project uses a version of this.
Word for word · 0
None found.
Edited · 0
None found.
Wrote their own version · 1
- d-o-hub/github-template-ai-agents★ 2same name
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository59 other files it gives its agents.
- CLAUDE.mdCLAUDE.md
- .github/copilot-instructions.mdCopilot instructions
- .cursor/rules/keda.mdcCursor rule
- .cursor/rules/kubernetes.mdcCursor rule
- .cursor/rules/platform-skills.mdcCursor rule
- .cursor/rules/terraform.mdcCursor rule
- code-reviewSkill
- platform-skillsSkill
- ai-governanceSkill
- awesome-docsSkill
- aws-profileSkill
- awsSkill
- azureSkill
- backup-drSkill
- chaosSkill
- checkovSkill
- cluster-upgradeSkill
- commitSkill
- complianceSkill
- composite-actionsSkill
- datadogSkill
- debugSkill
- documentSkill
- doraSkill
- dynatraceSkill
- finopsSkill
- fluxcdSkill
- gateway-apiSkill
- github-actionsSkill
- gitopsSkill
- helmchartSkill
- karpenterSkill
- kedaSkill
- kingfisherSkill
- kubernetesSkill
- kubescape-operatorSkill
- kubescapeSkill
- kyvernoSkill
- linkerdSkill
- linuxSkill
- mcpSkill
- observabilitySkill
- opaSkill
- openshiftSkill
- platform-skillsSkill
- preflightSkill
- productSkill
- pr-reviewSkill
- renovateSkill
- runtime-securitySkill
- secretsSkill
- self-improveSkill
- setup-agentsSkill
- supply-chainSkill
- terraformSkill
- token-optimizerSkill
- triageSkill
- trivySkill
- zizmorSkill
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
Reviews can't be read right now.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

