メニュー
Manage Vault observability artifacts in hal — Prometheus scrape targets and Grafana dashboards. Use when the user asks to wire Vault metrics into the obs stack, import the Vault dashboard, or remove Vault monitoring artifacts.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
| name | vault-obs |
| description | Manage Vault observability artifacts in hal — Prometheus scrape targets and Grafana dashboards. Use when the user asks to wire Vault metrics into the obs stack, import the Vault dashboard, or remove Vault monitoring artifacts. |
hal vault obs manages Vault-specific monitoring artifacts (Prometheus targets and Grafana dashboards) attached to the shared HAL obs stack.
The shared obs stack must be running before using these commands:
hal obs status
hal obs create # if not running
hal vault obs create # register Prometheus target + import Vault Grafana dashboard
hal vault obs update # re-register targets and re-import dashboard (idempotent)
hal vault obs delete # remove Vault Prometheus target and Grafana dashboard
hal vault obs status # show obs artifact registration state for Vault
hal vault create no longer auto-registers monitoring artifacts.HAL.hal-prometheus.hal vault obs create will fail with a clear message if the obs stack is not running.http://grafana.localhost:3000 (default credentials: admin / admin)http://prometheus.localhost:9090http://vault.localhost:8200/v1/sys/metricsDeploy the local Terraform demo environment in hal. Use to provision and initialize Terraform lab resources.
Route Terraform lab requests to deploy, destroy, inspect status, and manage workspace automation in hal.
Deploy local Vault in hal. Use when the user asks to start Vault, initialize the local control plane, or recover from Vault being offline.
Route user intent to the right Vault lab skill in hal, including CE versus Enterprise constraints, observability wiring, and full-stack scenario guidance.
Deploy, verify, and troubleshoot the Vault JWT auth lab in hal. Use this skill when the user asks to enable JWT auth, configure CI/CD authentication with Vault, debug bound claims, test GitLab or pipeline logins, or reset the JWT demo. Triggers include "enable jwt", "configure jwt", "gitlab vault auth", "pipeline auth", "bound claims", and "hal vault jwt".
Deploy, verify, and troubleshoot the Vault OIDC lab in hal. Use this skill when the user asks to enable OIDC, set up human SSO, debug browser login redirects, inspect Authentik-backed roles, reset the OIDC demo, or configure SCIM provisioning. Triggers include "enable oidc", "Vault SSO", "Authentik", "OIDC callback", "configure oidc", "hal vault oidc", "enable scim", and "vault scim".