skills.rest
sigridjineth
sigridjinethCOMMUNITY
Explore all skills by this author →
GitHub

kubespray-certificates

Check, renew, and automate Kubernetes certificate lifecycle management for Kubespray clusters.

6|2|Updated Jan 31, 2026
Search Tags:#troubleshooting#kubernetes#certificates#renewal#etcd#x509#kubespray
One-click install
npx skills add https://github.com/sigridjineth/kubespray-skills --skill kubespray-certificates
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: kubespray-certificates
Source: https://github.com/sigridjineth/kubespray-skills/tree/main/kubespray-certificates
Command: npx skills add https://github.com/sigridjineth/kubespray-skills --skill kubespray-certificates

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical issue of expiring Kubernetes certificates, which can lead to cluster downtime, and provides methods for checking, renewing, and automating their lifecycle management.

Core Features & Use Cases

  • Certificate Expiration Checks: Verifies the remaining validity period of all essential Kubernetes and etcd certificates.
  • Automated Renewal Setup: Configures systemd timers for automatic certificate renewal during initial deployment.
  • Manual Renewal Procedures: Provides step-by-step instructions for manually renewing certificates when auto-renewal is not configured or fails.
  • Troubleshooting: Offers guidance on resolving common certificate-related errors like "x509 certificate has expired" or "certificate signed by unknown authority."

Quick Start

Use the kubespray-certificates skill to check the expiration dates of all Kubernetes certificates.

Frequently Asked Questions about kubespray-certificates

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check Kubernetes certificate expiration dates in a Kubespray cluster?▼

To check Kubernetes certificate expiration, you verify the remaining validity period of all essential Kubernetes and etcd certificates across your Kubespray-deployed cluster nodes to prevent unexpected downtime.

Why does my Kubernetes cluster show an x509 certificate has expired error?▼

The x509 certificate has expired error occurs when your Kubernetes or etcd certificates reach their validity limit. You can resolve it by performing manual renewal procedures or enabling auto-renewal via systemd timers.

How do I set up automatic Kubernetes certificate renewal with systemd timers?▼

To set up automatic Kubernetes certificate renewal, you configure systemd timers during your initial Kubespray deployment. This automates the lifecycle management and prevents certificate expiration issues.

What is the process to manually renew etcd and Kubernetes certificates?▼

Manual certificate renewal involves following step-by-step procedures to regenerate certificates for both Kubernetes and etcd components. This is necessary when auto-renewal is not configured or fails during operation.

How do I fix the Kubernetes certificate signed by unknown authority error?▼

The certificate signed by unknown authority error typically indicates a CA mismatch or expiration. You can troubleshoot this by following provided guidance on resolving common x509 errors and performing CA rotation.

Related Skills

Explore More Software Engineering Skills→
thc1006thc1006

k8s-deploy

Deploy Kubernetes clusters on DGX Spark ARM64 with Kubespray.

Community
Advanced
sigridjinethsigridjineth
6

kubespray-operations

Automates Kubernetes cluster lifecycle via managed Airflow deployments.

Community
Advanced
sigridjinethsigridjineth
6

kubespray-deployment

Automate Kubernetes cluster deployment with Kubespray Ansible playbooks.

Community
Advanced
ChanghwanKChanghwanK

devops:cert-lifecycle

Manage Kubernetes PKI certificate expiration and renewal for kubeadm clusters.

Community
Advanced