azure-redhat-openshift

Name: azure-redhat-openshift
Author: microsoftdocs

github.com/microsoftdocsCloud & DevOps796165 installsUpdated 3d ago

About azure-redhat-openshift

Azure Red Hat OpenShift Skill provides agents managing Azure Red Hat OpenShift with documentation on deployment, networking, security, and operations. It combines local quick references with remote documentation fetching.

Key features

01Cluster troubleshooting guidance
02Architecture planning and cluster choices
03Identity and network security references
04Cluster configuration and scaling advice
05Azure service integration examples
06Deployment and upgrade guidance

Use cases

01Restore cluster access and diagnose issues
02Plan HCP cluster networking
03Configure authentication and egress rules
04Connect cluster apps to Azure services

MCP support

It can fetch documentation with mcp_microsoftdocs:microsoft_docs_fetch; fetch_webpage is listed as a fallback when that tool is unavailable.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-redhat-openshift

After installing, type/azure-redhat-openshiftin Claude Code to confirm it loaded.

Details

From the project README

Azure Red Hat OpenShift Skill

This skill provides expert guidance for Azure Red Hat OpenShift. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L43	Fixing common ARO cluster issues, restoring cluster access, and manually updating or troubleshooting cluster certificates and connectivity via CLI
Best Practices	L44-L51	Best practices for sizing and deploying ARO clusters and infra nodes, optimizing OpenShift Virtualization VMs, and staying within supported configurations and policies.
Decision Making	L52-L58	Guidance on choosing ARO architectures and immutable settings, planning networking for hosted control planes, and understanding shared responsibilities between Microsoft, Red Hat, and customers.
Architecture & Design Patterns	L59-L63	Planning network topology for ARO HCP clusters, including VNet design, subnets, private endpoints, connectivity options, and required ports and dependencies.
Limits & Quotas	L64-L69	Scaling ARO clusters with multiple load balancer IPs and understanding built‑in service limits, quotas, and standard service definitions for Azure Red Hat OpenShift.
Security	L70-L89	Identity, auth, and network security for ARO: Entra/OIDC auth, managed identities/SPs, workload identity, NSGs/egress control, disk/etcd encryption, FIPS, Front Door, and support access control.
Configuration	L90-L117	Configuring ARO clusters: networking (DNS, proxies, MTU), registries and pull secrets, storage classes, autoscaling/node pools, identities, logging, alerts, and resource tagging.
Integrations & Coding Patterns	L118-L127	Patterns for connecting ARO apps to Azure services: workload identity, ACR, Key Vault, NetApp Files, GPU workloads, and exporting Prometheus metrics to Azure Monitor.
Deployment	L128-L139	Deploying and upgrading ARO clusters and apps: private/standard clusters, ARM/Bicep, WebSphere, S2I and serverless, Velero backup/restore, SDN-to-OVN migration, and HCP control plane/node pool upgrades.

Troubleshooting

Topic	URL
Regain ARO cluster access using Admin Kubeconfig	https://learn.microsoft.com/en-us/azure/openshift/howto-kubeconfig
Manually update ARO cluster certificates via CLI	https://learn.microsoft.com/en-us/azure/openshift/howto-update-certificates
Troubleshoot common Azure Red Hat OpenShift cluster issues	https://learn.microsoft.com/en-us/azure/openshift/troubleshoot

Best Practices

Topic	URL
Optimize VM deployments on OpenShift Virtualization in ARO	https://learn.microsoft.com/en-us/azure/openshift/best-practices-openshift-virtualization
Deploy and size infrastructure nodes in ARO	https://learn.microsoft.com/en-us/azure/openshift/howto-infrastructure-nodes
Deploy and manage large OpenShift clusters on Azure	https://learn.microsoft.com/en-us/azure/openshift/howto-large-clusters
Follow support policies for standard OpenShift clusters	https://learn.microsoft.com/en-us/azure/openshift/support-policies-v4

Decision Making

Topic	URL
Choose between standard and hosted OpenShift architectures	https://learn.microsoft.com/en-us/azure/openshift/concepts-classic-hosted-control-planes-comparison
Choose immutable settings for ARO HCP clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-choose-cluster-configuration
Understand responsibility matrix for ARO operations	https://learn.microsoft.com/en-us/azure/openshift/responsibility-matrix

Architecture & Design Patterns

Topic	URL
Plan networking for Azure Red Hat OpenShift HCP clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-plan-cluster-network

Limits & Quotas

Topic	URL
Configure multiple load balancer IPs to scale ARO clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-multiple-ips
Understand Azure Red Hat OpenShift standard service definitions	https://learn.microsoft.com/en-us/azure/openshift/openshift-service-definitions

Security

Topic	URL
Configure managed identities and roles for ARO HCP	https://learn.microsoft.com/en-us/azure/openshift/concepts-managed-identities
Configure Microsoft Entra auth for ARO via CLI	https://learn.microsoft.com/en-us/azure/openshift/configure-azure-ad-cli
Configure Microsoft Entra auth for ARO via portal	https://learn.microsoft.com/en-us/azure/openshift/configure-azure-ad-ui
Use custom Network Security Groups with Azure Red Hat OpenShift	https://learn.microsoft.com/en-us/azure/openshift/howto-bring-nsg
Encrypt ARO OS disks with customer-managed keys	https://learn.microsoft.com/en-us/azure/openshift/howto-byok
Configure external OIDC authentication for ARO HCP	https://learn.microsoft.com/en-us/azure/openshift/howto-configure-external-authentication
Create service principal for Azure Red Hat OpenShift deployment	https://learn.microsoft.com/en-us/azure/openshift/howto-create-service-principal
Configure applications with ARO workload identity	https://learn.microsoft.com/en-us/azure/openshift/howto-deploy-configure-application
Enable FIPS-compliant cryptography on Azure Red Hat OpenShift	https://learn.microsoft.com/en-us/azure/openshift/howto-enable-fips-openshift
Reconcile federated identity credentials for ARO clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-reconcile-federated-identity-credentials
Restrict and allow egress traffic for ARO clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-restrict-egress
Rotate customer-managed etcd KMS keys in ARO HCP	https://learn.microsoft.com/en-us/azure/openshift/howto-rotate-encryption-key
Secure Azure Red Hat OpenShift apps with Azure Front Door	https://learn.microsoft.com/en-us/azure/openshift/howto-secure-openshift-with-front-door
Rotate Microsoft Entra service principal credentials for ARO	https://learn.microsoft.com/en-us/azure/openshift/howto-service-principal-credential-rotation
Configure and use managed identities in Azure Red Hat OpenShift	https://learn.microsoft.com/en-us/azure/openshift/howto-understand-managed-identities
Control Microsoft support access to ARO with Azure Lockbox	https://learn.microsoft.com/en-us/azure/openshift/howto-use-lockbox

Configuration

Topic	URL
Configure built-in container registry for Azure Red Hat OpenShift	https://learn.microsoft.com/en-us/azure/openshift/built-in-container-registry
Configure cluster-wide HTTP/HTTPS proxy in ARO	https://learn.microsoft.com/en-us/azure/openshift/cluster-wide-proxy-configure
Set up DNS forwarding for Azure Red Hat OpenShift 4	https://learn.microsoft.com/en-us/azure/openshift/dns-forwarding
Add pull secrets for private registries on ARO HCP	https://learn.microsoft.com/en-us/azure/openshift/how-to-add-pull-secrets
Manage Red Hat pull secrets on ARO clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-add-update-pull-secret
Configure capacity reservations with ARO machine sets	https://learn.microsoft.com/en-us/azure/openshift/howto-capacity-reservations
Enable jumbo MTU for ARO cluster networks	https://learn.microsoft.com/en-us/azure/openshift/howto-change-maximum-transmission-unit
Configure cluster autoscaling for ARO HCP	https://learn.microsoft.com/en-us/azure/openshift/howto-cluster-auto-scaling
Configure Azure File StorageClass on ARO with managed identity	https://learn.microsoft.com/en-us/azure/openshift/howto-configure-azure-file-storageclass
Configure Azure Files StorageClass on ARO HCP	https://learn.microsoft.com/en-us/azure/openshift/howto-configure-azure-files-hosted-cluster
Configure image digest mirrors for immutable images on ARO	https://learn.microsoft.com/en-us/azure/openshift/howto-configure-cluster-immutable-images
Create Azure Files storage class on ARO 4	https://learn.microsoft.com/en-us/azure/openshift/howto-create-a-storageclass
Configure custom Azure Red Hat OpenShift HCP clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-create-custom-hosted-cluster
Configure node pools for Azure Red Hat OpenShift HCP	https://learn.microsoft.com/en-us/azure/openshift/howto-create-hosted-node-pool
Configure managed identities for standard OpenShift clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-create-openshift-cluster
Configure custom DNS resolvers for ARO clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-custom-dns
Enable and route ARO HCP control plane logs	https://learn.microsoft.com/en-us/azure/openshift/howto-enable-control-plane-logs
Scale and configure ARO HCP node pools	https://learn.microsoft.com/en-us/azure/openshift/howto-manage-hosted-node-pools
Configure Azure Resource Health alerts for Azure Red Hat OpenShift	https://learn.microsoft.com/en-us/azure/openshift/howto-monitor-alerts
Configure Prometheus persistent storage on ARO clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-prometheus-persistence
Update workload and cluster identities in Azure Red Hat OpenShift	https://learn.microsoft.com/en-us/azure/openshift/howto-replace-cluster-identity
Segregate ARO worker nodes into subnet groups	https://learn.microsoft.com/en-us/azure/openshift/howto-segregate-machinesets
Configure Azure Spot VMs in ARO clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-spot-nodes
Tag ARO managed resources using Azure Policy	https://learn.microsoft.com/en-us/azure/openshift/howto-tag-resources

Integrations & Coding Patterns

Topic	URL
Use Azure Workload Identity in ARO HCP applications	https://learn.microsoft.com/en-us/azure/openshift/howto-deploy-configure-application-with-workload-identity
Run NVIDIA GPU workloads on Azure Red Hat OpenShift	https://learn.microsoft.com/en-us/azure/openshift/howto-gpu-workloads
Configure Azure NetApp Files storage for ARO	https://learn.microsoft.com/en-us/azure/openshift/howto-netapp-files
Send ARO Prometheus metrics to Azure Monitor via remote write	https://learn.microsoft.com/en-us/azure/openshift/howto-remotewrite-prometheus
Integrate Azure Container Registry with Azure Red Hat OpenShift	https://learn.microsoft.com/en-us/azure/openshift/howto-use-acr-with-aro
Integrate Azure Key Vault secrets with Azure Red Hat OpenShift	https://learn.microsoft.com/en-us/azure/openshift/howto-use-key-vault-secrets

Deployment

Topic	URL
Back up Azure Red Hat OpenShift apps with Velero	https://learn.microsoft.com/en-us/azure/openshift/howto-create-a-backup
Restore Azure Red Hat OpenShift apps with Velero	https://learn.microsoft.com/en-us/azure/openshift/howto-create-a-restore
Deploy private Azure Red Hat OpenShift standard clusters	https://learn.microsoft.com/en-us/azure/openshift/howto-create-private-cluster-4x
Deploy WebSphere Liberty on Azure Red Hat OpenShift	https://learn.microsoft.com/en-us/azure/openshift/howto-deploy-java-liberty-app
Deploy applications from source to ARO using S2I	https://learn.microsoft.com/en-us/azure/openshift/howto-deploy-with-s2i
Deploy serverless applications on Azure Red Hat OpenShift	https://learn.microsoft.com/en-us/azure/openshift/howto-deploy-with-serverless
Migrate ARO networking from OpenShift SDN to OVN-Kubernetes	https://learn.microsoft.com/en-us/azure/openshift/howto-sdn-to-ovn
Upgrade control plane and node pools in ARO HCP	https://learn.microsoft.com/en-us/azure/openshift/howto-upgrade-cluster
Deploy standard OpenShift clusters with ARM or Bicep	https://learn.microsoft.com/en-us/azure/openshift/quickstart-openshift-arm-bicep-template

Comments

Markdown supported

Details

Author: microsoftdocs
Repository: microsoftdocs/agent-skills
Category: Cloud & DevOps
Installs: 165
GitHub stars: 796

Report

More skills

All skills

lark-apps

open.feishu.cn

732.0k

Develop and host Miaoda (Spark/Miaoda) apps: app creation, local full-stack development, cloud generation and iteration, creative design (UI mockups / interactive prototypes / wireframes / landing pages / dashboards / slide decks / visual exploration), integration of AI-related capabilities, Feishu platform capabilities, or other external capabilities; log/Trace/monitoring metric/PV/UV queries; environment variable management; app collaborators and collaboration permissions; app roles and members; and automation triggers (scheduled / record changes / Webhook / Feishu approvals). Use when users want to develop or create a system, tool, platform, or app; develop locally or in the cloud, modify, deploy, publish, launch, or get a shareable link; create a page or website with HTML and deploy it to Miaoda; design, create a mockup, prototype, wireframe, PPT, deck, or visual exploration; or mention Miaoda/Spark/Miaoda apps (links like `/app/app_xxx` or `/page/<token>`, runtime domains like *.aiforce.cloud), app databases, app file storage, open API Keys, visibility, app collaborators/developer permissions, app roles/role members, production logs, API request volume, error volume, latency, traffic, environment variables, or setting up automation tasks, scheduled triggers, or approval-triggered automation for Miaoda apps. Not for regular cloud drive file uploads (lark-drive), Feishu document editing (lark-doc), or native slide creation (lark-slides).

azure-prepare

github.com/microsoft

571.7k

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

wizard

github.com/mattpocock

571.5k

Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.

azure-ai

github.com/microsoft

571.2k

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.