skills.rest
spigell
spigellCOMMUNITY
Explore all skills by this author →
GitHub

k8s-certs

Manage Kubernetes TLS certificates with cert-manager discovery and issuer inspection.

Updated Aug 27, 2026
Search Tags:#kubernetes#tls#cert-manager#letsencrypt#clusterissuer#certificate troubleshooting#ingress integration
One-click install
npx skills add https://github.com/spigell/my-agents --skill k8s-certs-spigell
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: k8s-certs
Source: https://github.com/spigell/my-agents/tree/main/agents/shared/src/tools/ask_kubernetes_expert/skills/k8s-certs
Command: npx skills add https://github.com/spigell/my-agents --skill k8s-certs-spigell

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

k8s-certs helps you create, validate, and troubleshoot Kubernetes TLS certificates by using cert-manager tooling instead of manually rotating secrets or guessing issuer configuration.

Core Features & Use Cases

  • Detect cert-manager and verify prerequisites: Confirms cert-manager availability before attempting any certificate operations.
  • Issuer-focused certificate troubleshooting: Checks ClusterIssuer/issuer configuration and inspects certificate details when certs are not ready.
  • Operational workflows for TLS: Covers listing certificates, inspecting requests, and applying common Certificate and Ingress patterns (including Let's Encrypt staging vs production and self-signed issuers).
  • Use Case: When an application’s Ingress has TLS enabled but the certificate never becomes Ready, use this skill to inspect the related certificate, issuer/clusterissuer, and events to determine the blocking configuration.

Quick Start

Ask the AI to use k8s-certs to detect cert-manager, list certificates in the namespace default, and get details for the certificate named my-tls.

Frequently Asked Questions about k8s-certs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot a Kubernetes TLS certificate that is stuck in a not ready state?▼

To troubleshoot a stalled Kubernetes TLS certificate, inspect the related Certificate resource, check the ClusterIssuer configuration, and review cert-manager events to identify the blocking configuration preventing readiness.

Why does my Ingress TLS certificate fail to issue after applying cert-manager manifests?▼

An Ingress TLS certificate fails to issue when the ClusterIssuer configuration is invalid or cert-manager prerequisites are missing. Inspect the CertificateRequest and issuer details to debug the stalled issuance process.

How do I configure a Let's Encrypt ClusterIssuer for cert-manager in Kubernetes?▼

To configure a Let's Encrypt ClusterIssuer, use kubectl apply to deploy the issuer manifest, verify cert-manager is running, and ensure Certificate resources reference the correct issuer name for production or staging environments.

Can I use cert-manager to manage self-signed certificates for a Kubernetes application?▼

Yes, cert-manager manages self-signed certificates by applying Certificate manifests that reference a self-signed issuer, allowing you to validate readiness and integrate the TLS secrets with your Ingress annotations.

What is the best way to debug a stalled CertificateRequest in cert-manager?▼

The best way to debug a stalled CertificateRequest is to inspect the certificate details, list the requests in the namespace, and verify the ClusterIssuer configuration to determine what is blocking the issuance workflow.

Do I need cert-manager installed before applying Certificate resources in Kubernetes?▼

Yes, you need cert-manager installed and running in your Kubernetes cluster before applying Certificate resources, as the tool handles discovery, issuer inspection, and the certificate lifecycle checks required for issuance.

Related Skills

Explore More Software Engineering Skills→
rohitg00rohitg00
944

k8s-certs

Automate Kubernetes certificate management with cert-manager for issuers and certificates.

Community
Advanced
chatermchaterm
50

service-ingress

Configures Kubernetes Service and Ingress resources for network exposure and TLS termination.

Community
Intermediate
scitixscitix
225

ingress-debug

Diagnose Ingress failures by inspecting Kubernetes resources and controller health.

Official
Intermediate
haxlyshaxlys

mtls-configuration

Configure mutual TLS policies for Istio, Linkerd, SPIRE, and cert-manager deployments.

Community
Advanced