Menü
Check all TLS certificates — status, expiration, ClusterIssuer health, and certificate-to-gateway mapping
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Basierend auf der SOC-Berufsklassifikation
Longhorn の健全性チェック — volume robustness（degraded 検出）、node 容量、R2 バックアップの鮮度、recurring job の動作状況を一括診断
Scaffold a new infrastructure component, choosing the right layout (Helm multi-source / raw YAML / ApplicationSet) for its category
Create a new Sealed Secret — generates raw secret, seals it with kubeseal, and places it in the correct resources/ directory
Troubleshoot a specific infrastructure component — resolve namespace, check pods, events, logs, and Argo CD sync status
全 Helm Application の chart バージョン鮮度を一括チェック — 各 app.yaml の targetRevision を upstream 最新と突き合わせ、更新候補を優先度付きでレポート（/helm-upgrade の前段）
Secret 管理 4 方式（Vault dynamic / Vault static via ESO / Vault Transit / SealedSecret）の健全性を一括チェック — Vault seal 状態、ESO 同期、SealedSecret 復号、関連 cert をまとめて診断
| name | cert-check |
| description | Check all TLS certificates — status, expiration, ClusterIssuer health, and certificate-to-gateway mapping |
| argument-hint | null |
ClusterIssuer status:
kubectl get clusterissuer -o wide
kubectl describe clusterissuer
All certificates:
kubectl get certificate -A -o custom-columns='NAMESPACE:.metadata.namespace,NAME:.metadata.name,READY:.status.conditions[0].status,EXPIRY:.status.notAfter,SECRET:.spec.secretName'
Certificate-to-Gateway mapping:
| Certificate | Secret | Used By |
|---|---|---|
| wildcard-platform | wildcard-platform-tls | gateway-platform |
| wildcard-apps | wildcard-apps-tls | gateway-prod |
Check for expiring certificates:
Check certificate secrets:
kubectl get secret -A | grep tls
Summary: