By stolostron
Hub cluster certificate tools - check configuration and assess certificate changes
Assess the risk of changing hub cluster kube-apiserver certificates on clusters with ACM. Evaluates impact of certificate type changes, rotations, root CA changes, and intermediate CA changes. Provides risk analysis and mitigation guidance. Accepts --kubeconfig (optional, defaults to KUBECONFIG env var) and --new-cert (required) parameters.
Checks hub cluster kube-apiserver certificate configuration and its compatibility with ACM. Detects certificate type, validates configuration, and provides recommendations for both pre-installation and post-installation scenarios.
This repository contains Claude Code skills for ACM (Advanced Cluster Management). Skills are organized into installable plugins based on functionality.
hub-cert-tools)Certificate configuration checking and change assessment for ACM hub clusters.
/plugin
Then in the UI:
https://github.com/stolostron/claude-code.git# Add this repository as a marketplace
/plugin marketplace add https://github.com/stolostron/claude-code.git
# Install the hub certificate tools plugin
/plugin install hub-cert-tools@acm-skills-marketplace
Clone the repository and add to your Claude Code settings.json:
{
"skills": [
"/path/to/stolostron/claude-code/plugins/hub-cert-tools/skills/check-hub-cert-config",
"/path/to/stolostron/claude-code/plugins/hub-cert-tools/skills/assess-hub-cert-change"
]
}
Once installed, you can use the skills:
# Check hub cluster certificate configuration
/check-hub-cert-config --kubeconfig /path/to/kubeconfig
# Assess certificate change risk
/assess-hub-cert-change --kubeconfig /path/to/kubeconfig --new-cert /path/to/new-cert.pem
For detailed documentation, examples, and use cases, see the hub-cert-tools plugin documentation.
This repository is organized as a marketplace containing multiple plugins. Each plugin is a self-contained collection of related skills.
Benefits:
Marketplace (acm-skills-marketplace)
├── Plugin: hub-cert-tools
│ ├── Skill: check-hub-cert-config
│ └── Skill: assess-hub-cert-change
│
└── Plugin: your-future-plugin
├── Skill: your-skill-1
└── Skill: your-skill-2
Users interact with it like:
/plugin install hub-cert-tools@acm-skills-marketplace
We welcome contributions!
Want to contribute? See CONTRIBUTING.md for:
See LICENSE for details.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Submariner release management skills and workflows
npx claudepluginhub stolostron/claude-code --plugin hub-cert-toolsManage and monitor SSL/TLS certificates
Kubernetes cluster operations, health diagnostics, and operator-specific agents
Kubernetes and OpenShift node health monitoring and diagnostics
Kubernetes manifest validation and best practices
Practical guidance for platform engineers across Claude, Codex, Cursor, and Copilot: Kubernetes (baseline, RBAC, workload hardening, debug), GitHub Actions (design, security, review, debug), Azure (Workload Identity, tagging, AKS, RBAC), OpenShift (SCC, Routes, GitOps, upgrades), Secrets (ESO, Sealed Secrets, rotation, audit), Kyverno, Helm, Terraform, Flux CD (Flux Operator, FluxInstance, OCI delivery), Argo CD, AWS (CloudFront, WAF, Lambda@Edge, IAM, IRSA), Linkerd, Linux, networking, MCP development, observability, SOC 2 compliance, PR review, PR triage, KEDA, Karpenter, supply chain security (Cosign, SBOM, SLSA), Falco runtime security, Chaos Engineering, DORA Metrics, LLM Observability (Datadog LLMObs), and animated docs. Every answer includes blast radius, validation steps, and rollback plan.
Kubernetes and Helm operations - deployments, charts, releases, diagnostics