Skill

azure-redhat-openshift

Expert knowledge for Azure Red Hat OpenShift development including troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building, debugging, or optimizing Azure Red Hat OpenShift applications. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Container Apps (use azure-container-apps), Azure Container Instances (use azure-container-instances), Azure VMware Solution (use azure-vmware-solution).

From azure
Install
1
Run in your terminal
$
npx claudepluginhub atc-net/atc-agentic-toolkit --plugin azure
Tool Access

This skill uses the workspace's default tool permissions.

Skill Content

Azure Red Hat OpenShift Skill

This skill provides expert guidance for Azure Red Hat OpenShift. Covers troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: This file may be large. Use the Category Index below to locate relevant sections, then use read_file with specific line ranges (e.g., L136-L144) to read the sections needed for the user's question This skill requires network access to fetch documentation content. Use mcp_microsoftdocs:microsoft_docs_fetch to retrieve full articles.

  • Fallback: Use the built-in WebFetch tool if the Microsoft Learn MCP server is not available.

Category Index

CategoryLinesDescription
TroubleshootingL36-L42Recovering ARO cluster access, manually rotating/updating cluster certificates, and diagnosing/fixing common Azure Red Hat OpenShift cluster issues and failures.
Best PracticesL43-L50Guidance on sizing and deploying ARO clusters/infra nodes, optimizing OpenShift Virtualization VMs, and following supportability and scaling best practices for large ARO 4 environments
Decision MakingL51-L55Defines the shared responsibility model for Azure Red Hat OpenShift, detailing which operational tasks are handled by Microsoft, Red Hat, and the customer.
Limits & QuotasL56-L61Scaling and capacity limits for ARO clusters, including configuring multiple load balancer IPs and understanding ARO versioning, support lifecycle, and upgrade constraints.
SecurityL62-L79Securing ARO clusters: identity/auth (Entra, managed identities, service principals, workload identity), disk encryption, NSGs/egress, FIPS, Front Door protection, and support access control.
ConfigurationL80-L98Configuring ARO clusters: networking (proxy, DNS, egress, MTU), storage (Azure Files, Prometheus), registry/pull secrets, node/subnet layout, Spot VMs, tagging, and health alerts.
Integrations & Coding PatternsL99-L108Running ARO with external services: virtualization, NVIDIA GPUs, Azure NetApp Files, Prometheus→Azure Monitor, ACR auth, and Azure Key Vault secret integration.
DeploymentL109-L122Deploying and operating ARO clusters and apps: cluster creation (private/ARM/Bicep), upgrades, networking migration, backups/restores, and app runtimes (JBoss, WebSphere, S2I, serverless).

Troubleshooting

TopicURL
Regain ARO cluster access using Admin Kubeconfighttps://learn.microsoft.com/en-us/azure/openshift/howto-kubeconfig
Manually update ARO cluster certificates via CLIhttps://learn.microsoft.com/en-us/azure/openshift/howto-update-certificates
Troubleshoot common Azure Red Hat OpenShift cluster issueshttps://learn.microsoft.com/en-us/azure/openshift/troubleshoot

Best Practices

TopicURL
Optimize VM deployments on OpenShift Virtualization in AROhttps://learn.microsoft.com/en-us/azure/openshift/best-practices-openshift-virtualization
Deploy and size infrastructure nodes in AROhttps://learn.microsoft.com/en-us/azure/openshift/howto-infrastructure-nodes
Apply best practices for large ARO clustershttps://learn.microsoft.com/en-us/azure/openshift/howto-large-clusters
Follow supportability rules for ARO 4 clustershttps://learn.microsoft.com/en-us/azure/openshift/support-policies-v4

Decision Making

TopicURL
Understand responsibility matrix for ARO operationshttps://learn.microsoft.com/en-us/azure/openshift/responsibility-matrix

Limits & Quotas

TopicURL
Configure multiple load balancer IPs to scale ARO clustershttps://learn.microsoft.com/en-us/azure/openshift/howto-multiple-ips
Understand Azure Red Hat OpenShift support lifecycle and versionshttps://learn.microsoft.com/en-us/azure/openshift/support-lifecycle

Security

TopicURL
Configure Microsoft Entra auth for ARO via CLIhttps://learn.microsoft.com/en-us/azure/openshift/configure-azure-ad-cli
Configure Microsoft Entra auth for ARO via portalhttps://learn.microsoft.com/en-us/azure/openshift/configure-azure-ad-ui
Use custom Network Security Groups with Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-bring-nsg
Encrypt ARO OS disks with customer-managed keyshttps://learn.microsoft.com/en-us/azure/openshift/howto-byok
Create ARO clusters with managed identitieshttps://learn.microsoft.com/en-us/azure/openshift/howto-create-openshift-cluster
Create service principal for Azure Red Hat OpenShift deploymenthttps://learn.microsoft.com/en-us/azure/openshift/howto-create-service-principal
Configure applications with ARO workload identityhttps://learn.microsoft.com/en-us/azure/openshift/howto-deploy-configure-application
Enable FIPS-compliant cryptography on Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-enable-fips-openshift
Reconcile federated identity credentials for ARO operatorshttps://learn.microsoft.com/en-us/azure/openshift/howto-reconcile-federated-identity-credentials
Replace ARO platform and cluster identities safelyhttps://learn.microsoft.com/en-us/azure/openshift/howto-replace-cluster-identity
Restrict and allow egress traffic for ARO clustershttps://learn.microsoft.com/en-us/azure/openshift/howto-restrict-egress
Secure Azure Red Hat OpenShift apps with Azure Front Doorhttps://learn.microsoft.com/en-us/azure/openshift/howto-secure-openshift-with-front-door
Rotate service principal credentials for Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-service-principal-credential-rotation
Control Microsoft support access to ARO with Azure Lockboxhttps://learn.microsoft.com/en-us/azure/openshift/howto-use-lockbox

Configuration

TopicURL
Configure built-in container registry on ARO 4https://learn.microsoft.com/en-us/azure/openshift/built-in-container-registry
Configure cluster-wide HTTP/HTTPS proxy in AROhttps://learn.microsoft.com/en-us/azure/openshift/cluster-wide-proxy-configure
Configure egress lockdown endpoints for Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/concepts-egress-lockdown
Understand networking layout and endpoints for Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/concepts-networking
Set up DNS forwarding for Azure Red Hat OpenShift 4https://learn.microsoft.com/en-us/azure/openshift/dns-forwarding
Update Red Hat pull secret on Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-add-update-pull-secret
Enable jumbo MTU for ARO cluster networkshttps://learn.microsoft.com/en-us/azure/openshift/howto-change-maximum-transmission-unit
Configure Azure File StorageClass on ARO with managed identityhttps://learn.microsoft.com/en-us/azure/openshift/howto-configure-azure-file-storageclass
Create Azure Files StorageClass for ARO 4 clustershttps://learn.microsoft.com/en-us/azure/openshift/howto-create-a-storageclass
Configure custom DNS resolvers for ARO clustershttps://learn.microsoft.com/en-us/azure/openshift/howto-custom-dns
Configure Azure Resource Health alerts for Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-monitor-alerts
Configure persistent storage for Prometheus on Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-prometheus-persistence
Segregate ARO worker nodes into subnet groupshttps://learn.microsoft.com/en-us/azure/openshift/howto-segregate-machinesets
Configure Azure Spot VMs in ARO clustershttps://learn.microsoft.com/en-us/azure/openshift/howto-spot-nodes
Tag ARO managed resources using Azure Policyhttps://learn.microsoft.com/en-us/azure/openshift/howto-tag-resources

Integrations & Coding Patterns

TopicURL
Enable OpenShift Virtualization on Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-create-openshift-virtualization
Run NVIDIA GPU workloads on Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-gpu-workloads
Configure Azure NetApp Files storage for AROhttps://learn.microsoft.com/en-us/azure/openshift/howto-netapp-files
Send ARO Prometheus metrics to Azure Monitor via remote writehttps://learn.microsoft.com/en-us/azure/openshift/howto-remotewrite-prometheus
Configure ACR authentication with Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-use-acr-with-aro
Integrate Azure Key Vault secrets with Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-use-key-vault-secrets

Deployment

TopicURL
Back up Azure Red Hat OpenShift apps with Velerohttps://learn.microsoft.com/en-us/azure/openshift/howto-create-a-backup
Restore Azure Red Hat OpenShift apps with Velerohttps://learn.microsoft.com/en-us/azure/openshift/howto-create-a-restore
Create private Azure Red Hat OpenShift 4 clustershttps://learn.microsoft.com/en-us/azure/openshift/howto-create-private-cluster-4x
Deploy JBoss EAP on Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-deploy-java-jboss-enterprise-application-platform-app
Deploy WebSphere Liberty on Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-deploy-java-liberty-app
Deploy applications from source to ARO using S2Ihttps://learn.microsoft.com/en-us/azure/openshift/howto-deploy-with-s2i
Deploy serverless applications on Azure Red Hat OpenShifthttps://learn.microsoft.com/en-us/azure/openshift/howto-deploy-with-serverless
Migrate ARO networking from OpenShift SDN to OVN-Kuberneteshttps://learn.microsoft.com/en-us/azure/openshift/howto-sdn-to-ovn
Upgrade ARO clusters using managed identitieshttps://learn.microsoft.com/en-us/azure/openshift/howto-upgrade-aro-openshift-cluster
Understand Azure Red Hat OpenShift service definitionshttps://learn.microsoft.com/en-us/azure/openshift/openshift-service-definitions
Deploy ARO clusters using ARM or Bicep templateshttps://learn.microsoft.com/en-us/azure/openshift/quickstart-openshift-arm-bicep-template
Stats
Parent Repo Stars0
Parent Repo Forks1
Last CommitMar 19, 2026