菜单
Deploy, verify, update, and destroy the standalone HAL observability stack (Grafana, Prometheus, Loki, Promtail). Use when the user asks to set up monitoring, wire dashboards, or check the health of the observability stack.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Deploy the local Terraform demo environment in hal. Use to provision and initialize Terraform lab resources.
Route Terraform lab requests to deploy, destroy, inspect status, and manage workspace automation in hal.
Deploy local Vault in hal. Use when the user asks to start Vault, initialize the local control plane, or recover from Vault being offline.
Route user intent to the right Vault lab skill in hal, including CE versus Enterprise constraints, observability wiring, and full-stack scenario guidance.
Deploy, verify, and troubleshoot the Vault JWT auth lab in hal. Use this skill when the user asks to enable JWT auth, configure CI/CD authentication with Vault, debug bound claims, test GitLab or pipeline logins, or reset the JWT demo. Triggers include "enable jwt", "configure jwt", "gitlab vault auth", "pipeline auth", "bound claims", and "hal vault jwt".
Deploy, verify, and troubleshoot the Vault OIDC lab in hal. Use this skill when the user asks to enable OIDC, set up human SSO, debug browser login redirects, inspect Authentik-backed roles, reset the OIDC demo, or configure SCIM provisioning. Triggers include "enable oidc", "Vault SSO", "Authentik", "OIDC callback", "configure oidc", "hal vault oidc", "enable scim", and "vault scim".
| name | obs |
| description | Deploy, verify, update, and destroy the standalone HAL observability stack (Grafana, Prometheus, Loki, Promtail). Use when the user asks to set up monitoring, wire dashboards, or check the health of the observability stack. |
The hal obs subcommand manages a standalone Grafana + Prometheus + Loki + Promtail stack that product-specific observability wiring (hal vault obs, hal terraform obs, etc.) can attach to.
hal vault obs, hal terraform obs, or any product-specific obs create command.admin / admin.hal obs create
hal obs status
hal obs update
hal obs delete
hal obs create \
--loki-version 3.7 \
--grafana-version main \
--prom-version main \
--promtail-version 3.6
hal obs create
Verify it is healthy before wiring products into it:
hal obs status
hal status
After the stack is running, enable product-level observability. Examples:
hal vault obs create
hal terraform obs create --target both
hal consul obs create
hal obs update
Pull new image versions or re-apply configuration changes.
hal obs delete
Tears down Grafana, Prometheus, Loki, and Promtail containers. Product obs artifacts are removed by their own lifecycle commands.
| Service | URL |
|---|---|
| Grafana | http://grafana.localhost:3000 |
| Prometheus | http://prometheus.localhost:9090 |
| Loki | http://loki.localhost:3100/ready |
obs create fails with a connection error, the obs stack is probably not running yet. Run hal obs create first.hal vault obs status or the equivalent for the product.hal obs delete does NOT remove product-specific dashboard artifacts — each product's obs delete must be run separately.