skills.rest
ChanghwanK
ChanghwanKCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

devops:cert-lifecycle

Manage Kubernetes PKI certificate expiration and renewal for kubeadm clusters.

Updated Feb 27, 2026
Search Tags:#automation#devops#kubernetes#pki#kubeadm#certificate management#cluster api
One-click install
npx skills add https://github.com/ChanghwanK/dotfiles --skill devops-cert-lifecycle
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: devops:cert-lifecycle
Source: https://github.com/ChanghwanK/dotfiles/tree/main/claude/.claude/skills/devops%3Acert-lifecycle
Command: npx skills add https://github.com/ChanghwanK/dotfiles --skill devops-cert-lifecycle

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the management of Kubernetes PKI certificates, ensuring cluster stability by proactively handling expirations and renewals for kubeadm-based clusters.

Core Features & Use Cases

  • Certificate Expiry Monitoring: Checks for upcoming certificate expirations across management and workload clusters.
  • Automated Renewal: Manages automatic certificate rotation for Cluster API-provisioned clusters and provides steps for manual renewal on management clusters.
  • Status Reporting: Generates reports on certificate status and required actions.
  • Use Case: When an alert indicates a Kubernetes certificate is nearing expiration, this Skill can be used to verify the status, confirm the renewal mechanism (automatic via CAPI or manual), and execute the necessary renewal steps to prevent service disruption.

Quick Start

Check the expiration status of all certificates for the infra-k8s-idc cluster.

Frequently Asked Questions about devops:cert-lifecycle

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check Kubernetes certificate expiration for kubeadm clusters?▼

Check Kubernetes certificate expiration by verifying the status of PKI certificates across kubeadm-based management and workload clusters to identify upcoming expirations. This Skill generates status reports indicating which certificates require renewal action.

Does Cluster API support automatic certificate rotation for workload clusters?▼

Cluster API supports automatic certificate rotation for workload clusters by facilitating automated renewal. This Skill verifies the CAPI auto-rotation configuration to ensure certificate management operates automatically without manual intervention.

How do I manually renew PKI certificates on a kubeadm management cluster?▼

Manually renew PKI certificates on a kubeadm management cluster by following the provided manual renewal procedures. This Skill offers specific steps for renewing certificates on the management cluster node to prevent service disruption.

What is Kubernetes PKI certificate lifecycle management and when do I need it?▼

Kubernetes PKI certificate lifecycle management proactively handles certificate expirations and renewals for kubeadm clusters. You need it when an alert indicates a certificate is nearing expiration to prevent cluster service disruption.

Can I check kubelet certificate status across workload clusters?▼

You can check kubelet certificate status across workload clusters using this Skill's health check features. It verifies the renewal mechanism, confirming whether certificates rotate automatically via CAPI or require manual renewal.

Related Skills

Explore More Software Engineering Skills→
pluginagentmarketplacepluginagentmarketplace
1

cluster-admin

Automate Kubernetes cluster administration, upgrades, scaling, and RBAC governance.

Community
Advanced
lloydchanglloydchang
2

certificate-rotation

Automate TLS certificate rotation across GitOps-managed Kubernetes clusters.

Community
Advanced
zangxin75zangxin75

k8s-capi

Manage Kubernetes cluster lifecycle with Cluster API tools.

Community
Advanced
sigridjinethsigridjineth
6

kubespray-certificates

Check, renew, and automate Kubernetes certificate lifecycle management for Kubespray clusters.

Community
Intermediate