/azure-redhat-openshift

name: azure-redhat-openshift
description: Expert knowledge for Azure Red Hat OpenShift development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when sizing ARO clusters, configuring HCP/VNet topology, Entra/OIDC identity, ACR/Key Vault access, or SDN‑OVN/HCP upgrades, and other Azure Red Hat OpenShift related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Container Apps (use azure-container-apps), Azure Container Instances (use azure-container-instances), Azure Stack Edge (use azure-stack-edge).
compatibility: Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata:
  generated_at: "2026-11-08"
  generator: "docs2skills/1.0.0"

Azure Red Hat OpenShift Skill

This skill provides expert guidance for Azure Red Hat OpenShift. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file

> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)

This skill requires **network access** to fetch documentation content:

• **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.
• **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.

Category Index

| Category | Lines | Description | |----------|-------|-------------| | Troubleshooting | L37-L43 | Fixing common ARO cluster issues, restoring cluster access, and manually updating or troubleshooting cluster certificates and connectivity via CLI | | Best Practices | L44-L51 | Best practices for sizing and deploying ARO clusters and infra nodes, optimizing OpenShift Virtualization VMs, and staying within supported configurations and policies. | | Decision Making | L52-L58 | Guidance on selecting ARO architectures, choosing immutable HCP cluster settings, and understanding shared responsibilities between Microsoft and customers for ARO operations. | | Architecture & Design Patterns | L59-L63 | Planning network topology for ARO HCP clusters, including VNet design, subnets, private endpoints, connectivity options, and required ports and dependencies. | | Limits & Quotas | L64-L69 | Scaling ARO clusters with multiple load balancer IPs and understanding built‑in service limits, quotas, and standard service definitions for Azure Red Hat OpenShift. | | Security | L70-L89 | Identity, auth, and encryption for ARO: Entra/OIDC setup, managed identities, workload identity, NSGs/egress, KMS key rotation, FIPS, Front Door, and support access control. | | Configuration | L90-L117 | Configuring ARO clusters: networking (DNS, proxy, MTU, spot VMs), storage (Azure Files, Prometheus), registries/pull secrets, autoscaling/node pools, identities, logging, tagging, and capacity. | | Integrations & Coding Patterns | L118-L127 | Patterns for connecting ARO apps to Azure services: workload identity, ACR, Key Vault, NetApp Files, GPU workloads, and exporting Prometheus metrics to Azure Monitor. | | Deployment | L128-L139 | Deploying and upgrading ARO clusters and apps: private/standard clusters, ARM/Bicep, WebSphere, S2I and serverless, Velero backup/restore, SDN-to-OVN migration, and HCP control plane/node pool upgrades. |

Troubleshooting

| Topic | URL | |-------|-----| | Regain ARO cluster access using Admin Kubeconfig | https://learn.microsoft.com/en-us/azure/openshift/howto-kubeconfig | | Manually update ARO cluster certificates via CLI | https://learn.microsoft.com/en-us/azure/openshift/howto-update-certificates | | Troubleshoot common Azure Red Hat OpenShift cluster issues | https://learn.microsoft.com/en-us/azure/openshift/troubleshoot |

Best Practices

| Topic | URL | |-------|-----| | Optimize VM deployments on OpenShift Virtualization in ARO | https://learn.microsoft.com/en-us/azure/openshift/best-practices-openshift-virtualization | | Deploy and size infrastructure nodes in ARO | https://learn.microsoft.com/en-us/azure/openshift/howto-infrastructure-nodes | | Deploy and manage large OpenShift clusters on Azure | https://learn.microsoft.com/en-us/azure/openshift/howto-large-clusters | | Follow support policies for standard OpenShift clusters | https://learn.microsoft.com/en-us/azure/openshift/support-policies-v4 |

Decision Making

| Topic | URL | |-------|-----| | Choose between Azure Red Hat OpenShift architectures | https://learn.microsoft.com/en-us/azure/openshift/concepts-classic-hosted-control-planes-comparison | | Choose immutable settings for ARO HCP clusters | https://learn.microsoft.com/en-us/azure/openshift/howto-choose-cluster-configuration | | Understand responsibility matrix for ARO operations | https://learn.microsoft.com/en-us/azure/openshift/responsibility-matrix |

Architecture & Design Patterns

| Topic | URL | |-------|-----| | Plan networking for Azure Red Hat OpenShift HCP clusters | https://learn.microsoft.com/en-us/azure/openshift/howto-plan-cluster-network |

Limits & Quotas

| Topic | URL | |-------|-----| | Configure multiple load balancer IPs to scale ARO clusters | https://l