Kubernetes Skills (2)

**Quick judgment**: This skill is a solid, focused choice for environments already using Kubernetes cert-manager. It covers the main operational lifecycle of TLS certificates (creation, inspection, and troubleshooting) and provides concrete manifests for Let’s Encrypt and self-signed issuers. It’s well-suited for cluster operators and platform engineers managing HTTPS termination via Ingress. **Key risks / limitations** - Assumes cert-manager and its CRDs are installed and healthy; not useful without that dependency. - Uses kubectl_apply to change live cluster state (creating issuers, certificates, ingresses), which can impact production traffic if misconfigured. - Does not expose more advanced cert-manager features (e.g., DNS-01 solvers beyond the sample http01/ingress, external CA integrations, or fine-grained renewal policy tuning). - Safety controls (RBAC, approvals, environment separation) are left to cluster configuration rather than enforced within the skill. **Recommended scenarios** - Managing TLS certificates for HTTPS ingress in small to medium Kubernetes clusters using cert-manager. - Standing up Let’s Encrypt staging/prod ClusterIssuers and validating end-to-end certificate issuance flows. - Day-2 operations and debugging for certificates stuck in Pending/Failed states or issuers that are not ready. - Quickly bootstrapping self-signed certs and issuers in dev/test clusters to avoid external CA dependencies.