openshift

openshift is a command for Claude Code from nitinjain999/platform-skills. It costs 27 tokens per session (3,480 once invoked), scanned A, original, Apache-2.0.

A set of commands for diagnosing and securing OpenShift clusters. OpenShift is Red Hat's Kubernetes-based platform for running containerized applications; the commands cover security rules, network routes, GitOps delivery, and upgrades.

In plain words
What is it for?
Diagnosing SecurityContextConstraints (rules controlling what containers may do), configuring Route TLS and investigating 503/504 errors, delivering applications with Argo CD GitOps, validating upgrades, and running structured debugging.
Why use it?
It organizes common OpenShift troubleshooting and validation work, reducing the need to piece together checks for rejected workloads, broken routes, deployments, or upgrades.

Command for Claude Code

Written for Claude Code: argument-hint in frontmatter.

Part of the platform-skills plugin — 1 skill, 43 commands, 1 agent shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/nitinjain999/platform-skills/openshift
Clone the repo
git clone --depth 1 https://github.com/nitinjain999/platform-skills

Made for: Claude Code.

Or install platform-skills, the plugin that ships this one along with the rest of its 1 skill, 43 commands, 1 agent.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for openshift

README.md
[![agentmods](https://agentmods.dev/badge/commands/nitinjain999/platform-skills/openshift.svg)](https://agentmods.dev/commands/nitinjain999/platform-skills/openshift)
Your own site
<a href="https://agentmods.dev/commands/nitinjain999/platform-skills/openshift"><img src="https://agentmods.dev/badge/commands/nitinjain999/platform-skills/openshift.svg" alt="Measured on agentmods" height="20"></a>
Per session 27 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 3,480 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00027 $0.03480
Opus 5 $0.00014 $0.01740
Sonnet 5 $0.00005 $0.00696
Haiku 4.5 $0.00003 $0.00348

Measured 6d ago against content hash ddd6b2a9966d, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade A, and why

openshift scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

oc run curl-test --image=curlimages/curl --restart=Never --rm -it -- \
commands/openshift.md · 434 lines

How it starts

The opening of the file, as written. The whole thing — 434 lines — stays where its author put it; the contents beside it link to each section on GitHub.

OpenShift Command

Structured guidance for OpenShift SecurityContextConstraints, Routes, GitOps app delivery, and cluster upgrades.

Activation

/platform-skills:openshift scc      # diagnose SCC rejections, grant minimum SCC, document exceptions
/platform-skills:openshift route    # Route TLS modes, troubleshoot 503/504, Route vs Ingress decision
/platform-skills:openshift gitops   # OpenShift GitOps (Argo CD) app delivery, sync waves, app-of-apps
/platform-skills:openshift upgrade  # pre-upgrade validation, operator impact, post-upgrade checks
/platform-skills:openshift debug    # structured debug — symptom → SCC | Route | Operator | Runtime

Interactive Wizard (fires when no mode is provided)

When invoked with no arguments, ask before proceeding:

Q1 — Mode?

What do you need?
  1. scc      — SCC rejection diagnosis, minimum SCC generation, Pod Security Admission interaction
  2. route    — Route TLS modes, 503/504 diagnosis, Route vs Ingress vs Gateway API decision
  3. gitops   — OpenShift GitOps (Argo CD), app-of-apps, sync waves, SCC + Argo interaction
  4. upgrade  — pre-upgrade checks, operator approval, post-upgrade validation, rollback
  5. debug    — general structured debug for any OpenShift symptom

Enter 1–5 or mode name:

Q2 — Context (after mode selected):

  • scc: Paste the rejection message or describe what the workload needs (privileged port, host path, fixed UID).
  • route: Paste the Route YAML and describe the symptom (503, cert error, timeout, no traffic).
  • gitops: New app delivery setup or debugging an existing Application? Which namespace?
  • upgrade: Current OCP version and target version. Are you upgrading control plane, nodes, or operators?
  • debug: Describe the symptom and paste any relevant events, logs, or error messages.

Mode: scc

Triggers: SCC, SecurityContextConstraints, forbidden, unable to validate, runAsUser, privileged, capability, hostPath

Read references/openshift.md → SecurityContextConstraints section before responding.

Read the full file on GitHub · 434 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 434 lines · 27 tokens per session scan A ddd6b2a9966d

Subscribe to this mod's changes

openshift is a command published in the GitHub repository nitinjain999/platform-skills (40 stars, last pushed 4d ago), licensed Apache-2.0. It adds 27 tokens to every session and 3,480 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.