Menu
Check all TLS certificates — status, expiration, ClusterIssuer health, and certificate-to-gateway mapping
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Longhorn の健全性チェック — volume robustness（degraded 検出）、node 容量、R2 バックアップの鮮度、recurring job の動作状況を一括診断
Scaffold a new infrastructure component, choosing the right layout (Helm multi-source / raw YAML / ApplicationSet) for its category
Create a new Sealed Secret — generates raw secret, seals it with kubeseal, and places it in the correct resources/ directory
Troubleshoot a specific infrastructure component — resolve namespace, check pods, events, logs, and Argo CD sync status
全 Helm Application の chart バージョン鮮度を一括チェック — 各 app.yaml の targetRevision を upstream 最新と突き合わせ、更新候補を優先度付きでレポート（/helm-upgrade の前段）
Secret 管理 4 方式（Vault dynamic / Vault static via ESO / Vault Transit / SealedSecret）の健全性を一括チェック — Vault seal 状態、ESO 同期、SealedSecret 復号、関連 cert をまとめて診断
| name | cert-check |
| description | Check all TLS certificates — status, expiration, ClusterIssuer health, and certificate-to-gateway mapping |
| argument-hint | null |
ClusterIssuer status:
kubectl get clusterissuer -o wide
kubectl describe clusterissuer
All certificates:
kubectl get certificate -A -o custom-columns='NAMESPACE:.metadata.namespace,NAME:.metadata.name,READY:.status.conditions[0].status,EXPIRY:.status.notAfter,SECRET:.spec.secretName'
Certificate-to-Gateway mapping:
| Certificate | Secret | Used By |
|---|---|---|
| wildcard-platform | wildcard-platform-tls | gateway-platform |
| wildcard-apps | wildcard-apps-tls | gateway-prod |
Check for expiring certificates:
Check certificate secrets:
kubectl get secret -A | grep tls
Summary: