菜单
Expert knowledge for TLS/SSL operations. Use when configuring certificates, debugging cert-manager, or managing Ingress TLS.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Operating the local coding agent — qwen3-coder via opencode, Claude-orchestrated, spec-driven. Use when running/troubleshooting `oc`, the ralph-qwen loop, or the laptop↔Beelink-qwen creds.
Expert knowledge for cluster backup and restore operations. Use when configuring backups, triggering manual jobs, or restoring data.
Expert knowledge for media applications (Jellyfin, Immich, Jellyseerr). Use when managing media storage, NFS mounts, or application-specific configurations.
Expert knowledge for Pi-hole and Unbound DNS operations. Use when configuring DNS, troubleshooting resolution issues, modifying adlists, or understanding the DNS data flow.
Expert knowledge for cluster observability. Use when configuring Prometheus/Grafana, Alertmanager, Uptime Kuma, or the Homepage dashboard.
Expert knowledge for Tailscale VPN operations. Use when configuring remote access, exit nodes, ACL policies, or troubleshooting VPN connectivity.
| name | cert-tls |
| description | Expert knowledge for TLS/SSL operations. Use when configuring certificates, debugging cert-manager, or managing Ingress TLS. |
| allowed-tools | Bash, Read, Grep, Glob, Edit, Write |
| Operation | MCP Tool |
|---|---|
| All certs, Ready status, expiry, challenges | get_certificate_status |
| Ingress hosts, TLS config, backend health | get_ingress_status |
| Force ExternalSecret resync | refresh_secret(namespace, name) |
*.lab.mtgibbs.dev (Wildcard)cert-managerletsencrypt-prod, letsencrypt-stagingcloudflare-api-token (Synced from 1Password)mtgibbs.dev*.lab -> 192.168.1.55 (Proxy OFF/Grey Cloud)For internal HTTPS services (like Unifi) that need re-encryption:
annotations:
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
nginx.ingress.kubernetes.io/proxy-ssl-verify: "false"
Check Certificate Status:
MCP (preferred): get_certificate_status — shows all certs, Ready status, expiry, and pending challenges.
kubectl fallback (cluster-ops):
kubectl get certificate -n <namespace>
kubectl describe certificate <name> -n <namespace>
Look for "Ready" status or error messages.
Check Challenge:
kubectl get challengerequest -A
Check Cert-Manager Logs:
kubectl logs -n cert-manager -l app=cert-manager