
pibblokto/cert-manager-mcp-server
部署与 DevOps本页由 AI 翻译,技术细节请以原文为准。 查看原文
证书管理器 MCP 服务器
概览
MCP服务器用于管理和排查证书及其他由cert-manager管理的资源。 该 MCP 服务器提供以下工具用于与证书管理器和 Kubernetes 资源交互: - - 在命名空间内或跨所有命名空间列出证书,并提供过滤过期证书和分页选项。你还可以包含包含包含已列证书的域,参数include_domains(默认为False以便回答更简洁)- - 获取特定证书的详细信息- - 强制证书续期 - - 列出发行者或集群发行者及其状态和配置。与集群不同,发行者没有分页或过滤,除了集群/命名空间的发行者和发行者的命名空间。 - - 列出集群中的所有命名空间 - - 列出所有可用的 kubeconfig 上下文 - - 获取当前活跃的 kubeconfig 上下文 - - 切换到不同的 kubeconfig 上下文。内存内配置更新
概述(AI 翻译)
MCP服务器用于管理和排查证书及其他由cert-manager管理的资源。
Claude 桌面配置:
Claude Desktop config for GKE clusters:
工具
该 MCP 服务器提供以下工具用于与证书管理器和 Kubernetes 资源交互:
证书管理
- list_certificates - 在命名空间内或所有命名空间中列出证书,并提供过滤过期证书和分页选项。你还可以为列出的证书添加域,参数include_domains(默认为 False 以便响应更简洁)
- get_certificate - 获取特定证书的详细信息
- renew_certificate - 强制续期证书
发行人管理
- list_issuers - 列出发行者或集群发行者及其状态和配置。与list_certificates不同,除集群/命名空格发行者和发行者命名空间外,没有分页或过滤。
Kubernetes 上下文管理
- list_namespaces - 列出簇中的所有命名空间
- list_contexts - 列出所有可用的 kubeconfig 上下文
本页由 AI 翻译,技术细节请以原文为准。
README
以下为原文 README 节选,完整内容请查看原文。
cert-manager-mcp-server
MCP server for management and troubleshooting of certificates and other resources managed by cert-manager.
Claude Desktop config:
{
"mcpServers": {
"cert-manager-mcp-server": {
"command": "sh",
"args": [
"-c",
"docker run -i --rm -v ~/.kube:/home/app/.kube:ro -v ~/.config/gcloud:/home/app/.config/gcloud piblokto/cert-manager-mcp-server:v0.0.5"
]
}
}
}
Claude Desktop config for GKE clusters:
{
"mcpServers": {
"cert-manager-mcp-server": {
"command": "sh",
"args": [
"-c",
"docker run -i --rm -v ~/.kube:/home/app/.kube:ro -v ~/.config/gcloud:/home/app/.config/gcloud -e CLOUDSDK_CORE_PROJECT= -e CLOUDSDK_COMPUTE_REGION= piblokto/cert-manager-mcp-server:v0.0.5"
]
}
}
}
Tools
This MCP server provides the following tools for interacting with cert-manager and Kubernetes resources:
Certificate Management
- list_certificates - List certificates within a namespace or across all namespaces, with options for filtering expired certificates and pagination. You can also include domains for listed certificates with include_domains argument (defaults to False to make responses more compact)
- get_certificate - Get detailed information about a specific certificate
- renew_certificate - Force renewal of a certificate
Issuer Management
- list_issuers - List issuers or cluster issuers with their statuses and configuration. Unlike list_certificates there are no pagination or filtering except for cluster/namespaced issuers and namespaces for Issuers.
Kubernetes Context Management
- list_namespaces - List all namespaces in the cluster
- list_contexts - List all available kubeconfig contexts
- get_current_context - Get the currently active kubeconfig context
- switch_context - Switch to a different kubeconfig context. Updates in-memory config
Available Tools
| Tool Name | Description | Read-Only | Parameters |
|---|---|---|---|
list_certificates |
List certificates within a namespace or all namespaces, with filtering and pagination options | ✅ | namespace_name, all_namespaces, include_domains, list_expired, cursor, page_size |
get_certificate |
Get detailed information about a specific certificate | ✅ | namespace_name, certificate_name |
renew_certificate |
Force renewal of a certificate in a given namespace | ❌ | namespace_name, certificate_name |
list_issuers |
List issuers or cluster issuers with their statuses and configuration | ✅ | list_cluster_issuers, all_namespaces, namespace_name |
list_namespaces |
List all namespaces in the cluster | ✅ | None |
list_contexts |
List all available kubeconfig contexts | ✅ | None |
安装
This server does not publish a one-line install command.
Open the repository installation guide 新手?先看 mcpskill.org 教程 →配置
{
"mcpServers": {
"cert-manager-mcp-server": {
"command": "sh",
"args": [
"-c",
"docker run -i --rm -v ~/.kube:/home/app/.kube:ro -v ~/.config/gcloud:/home/app/.config/gcloud piblokto/cert-manager-mcp-server:v0.0.5"
]
}
}
}