A comprehensive automation tool for managing TLS certificates, issuers, and cert-manager resources within Kubernetes clusters.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install k8s-certs
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install k8s-certs using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Kubernetes Certificate Management (cert-manager)?
The Kubernetes Certificate Management skill enables developers to handle the full lifecycle of SSL/TLS certificates through cert-manager. By integrating with Openclaw Skills, this tool provides a streamlined interface for interacting with kubectl-mcp-server to automate the deployment of production-ready certificates from authorities like Let's Encrypt or internal self-signed issuers.
This skill simplifies complex infrastructure tasks such as managing ACME solvers, monitoring certificate expiry, and ensuring secure communication across cluster services. Whether you are scaling microservices or securing a single ingress point, this utility provides the programmatic hooks needed to maintain a robust security posture without manual manifest hacking.
Kubernetes Certificate Management (cert-manager) Use Cases
- Automating the issuance of Let's Encrypt certificates for production web applications.
- Setting up staging environments with separate ACME issuers to avoid production rate limits.
- Generating self-signed certificates for internal-only cluster communication and development.
- Troubleshooting failed certificate requests and identifying DNS or HTTP-01 challenge issues.
- Integrating TLS termination automatically via Ingress annotations.
How Kubernetes Certificate Management (cert-manager) Works
- The skill utilizes the certmanager_detect_tool to verify the installation of cert-manager components within the target cluster.
- Developers define Issuers or ClusterIssuers to establish trust with certificate authorities.
- A Certificate resource is applied, defining the desired DNS names and the secret where the TLS keypair will be stored.
- The skill monitors the CertificateRequest lifecycle, tracking the progress of the challenge solvers.
- Upon successful validation, the skill confirms the certificate status is 'Ready' and provides metadata such as expiry and renewal times.
Kubernetes Certificate Management (cert-manager) Setup
To utilize this skill, ensure cert-manager is installed on your Kubernetes cluster. Add the skill to your environment using the following command within Openclaw Skills:
openclaw install k8s-certs
Verify that the agent can see your certificate infrastructure:
certmanager_detect_tool()
Kubernetes Certificate Management (cert-manager) Data Schema & Taxonomy
The skill interacts with the following Kubernetes Custom Resource Definitions (CRDs) and organizes metadata as follows:
| Resource | Key Metadata Captured | Purpose |
|---|---|---|
| Certificate | DNS names, Secret name, Expiry, Status | Defines the desired TLS state |
| Issuer | ACME Server, Solver type, Email | Namespace-scoped certificate authority |
| ClusterIssuer | Global Solver config, Secret refs | Cluster-wide certificate authority |
| CertificateRequest | Conditions, CSR data, Failure reasons | Detailed logs for the issuance process |
Kubernetes Certificate Management (cert-manager) Advanced Features
- Multi-issuer support for managing production and staging environments simultaneously.
- Automated Ingress integration for zero-touch SSL provisioning using cert-manager.io annotations.
- Deep troubleshooting capabilities that aggregate cluster events and certificate request conditions for fast debugging.
- Support for both HTTP-01 and DNS-01 challenge solvers within Openclaw Skills workflows.
- Programmatic monitoring of certificate expiry dates to prevent service downtime.
SKILL.md
Loading
Related Openclaw Skills
Kubernetes Cluster API (CAPI) Manager
Automate the provisioning, scaling, and lifecycle management of Kubernetes clusters using the Cluster API (CAPI) framework.
K8s Browser Automation
A comprehensive suite for automating interactions with Kubernetes dashboards, Grafana, and ArgoCD web interfaces.
Kubernetes Backup with Velero
A specialized AI agent skill for managing Kubernetes cluster backups, restores, and disaster recovery workflows using Velero integration.
Multi-Cluster Kubernetes Management
A robust skill for managing multiple Kubernetes clusters, switching contexts, and performing synchronized cross-cluster operations through a unified interface.
PayClaw
PayClaw is a financial infrastructure layer that enables AI agents to create wallets, send USDC payments, and manage trustless escrow transactions.
Virtuals Protocol Skill
A comprehensive tool for Openclaw Skills that enables developers to create, manage, and trade tokenized AI agents on the Virtuals Protocol via the Base L2 network.
Featured*
