cert-manager

Diagnose and configure Kubernetes cert-manager for TLS certificates.

Updated May 19, 2024
One-click install
npx skills add https://github.com/kettleofketchup/dotfiles --skill cert-manager
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cert-manager
Source: https://github.com/kettleofketchup/dotfiles/tree/main/.claude/skills/cert-manager
Command: npx skills add https://github.com/kettleofketchup/dotfiles --skill cert-manager

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps teams diagnose and configure Kubernetes cert-manager for TLS certificates.

Core Features & Use Cases

  • Troubleshoot Certificate, CertificateRequest, and Issuer/ClusterIssuer workflows across clusters.
  • Provide guidance for private CA issuers (SelfSigned, CA, Vault) and Traefik IngressRoute TLS integration.
  • Offer step-by-step debugging workflows and reference material to resolve webhook connectivity and certificate issues.

Quick Start

Install cert-manager in your cluster and verify the Ready status of issuers, then create test Certificate and IngressRoute resources and follow the troubleshooting workflow in references/troubleshooting-workflow.md.

Frequently Asked Questions about cert-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot a stuck Kubernetes cert-manager CertificateRequest?

Troubleshoot Kubernetes cert-manager CertificateRequest issues by inspecting resource events and checking Issuer or ClusterIssuer status. This Skill provides step-by-step debugging workflows for resolving Certificate, CertificateRequest, and Issuer resource failures.

Why does my Traefik IngressRoute TLS configuration fail to resolve certificates?

Traefik IngressRoute TLS integration fails when cert-manager webhook or Issuer resources are misconfigured. This Skill diagnoses Traefik TLS integration issues and verifies webhook mutating and validating components within the Kubernetes cluster.

How do I configure a private CA Issuer in Kubernetes cert-manager?

Configure a private CA Issuer in Kubernetes cert-manager by setting up SelfSigned, CA, or Vault Issuer resources. This Skill provides guidance for configuring and debugging private CA issuers within your Kubernetes cluster.

What is the best way to debug cert-manager webhook connectivity issues?

Debug cert-manager webhook connectivity issues by verifying mutating and validating webhook components within your Kubernetes cluster. This Skill offers reference workflows specifically for resolving webhook connectivity and certificate problems.

Does cert-manager work with custom ClusterIssuer workflows for internal TLS?

Cert-manager works with custom ClusterIssuer workflows for internal TLS by enforcing Certificate and CertificateRequest resources alongside your private CA. This Skill covers diagnosing and configuring these workflows across Kubernetes clusters.