菜单
Configure a Terraform VCS-driven workspace automation lab with local GitLab reuse in hal. Use for `hal terraform vcs-workflow`, `hal tf vcs`, `hal tf ws`, or `hal tf workspace` commands.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Deploy the local Terraform demo environment in hal. Use to provision and initialize Terraform lab resources.
Route Terraform lab requests to deploy, destroy, inspect status, and manage workspace automation in hal.
Deploy local Vault in hal. Use when the user asks to start Vault, initialize the local control plane, or recover from Vault being offline.
Route user intent to the right Vault lab skill in hal, including CE versus Enterprise constraints, observability wiring, and full-stack scenario guidance.
Deploy, verify, and troubleshoot the Vault JWT auth lab in hal. Use this skill when the user asks to enable JWT auth, configure CI/CD authentication with Vault, debug bound claims, test GitLab or pipeline logins, or reset the JWT demo. Triggers include "enable jwt", "configure jwt", "gitlab vault auth", "pipeline auth", "bound claims", and "hal vault jwt".
Deploy, verify, and troubleshoot the Vault OIDC lab in hal. Use this skill when the user asks to enable OIDC, set up human SSO, debug browser login redirects, inspect Authentik-backed roles, reset the OIDC demo, or configure SCIM provisioning. Triggers include "enable oidc", "Vault SSO", "Authentik", "OIDC callback", "configure oidc", "hal vault oidc", "enable scim", and "vault scim".
| name | vcs-workflow |
| description | Configure a Terraform VCS-driven workspace automation lab with local GitLab reuse in hal. Use for `hal terraform vcs-workflow`, `hal tf vcs`, `hal tf ws`, or `hal tf workspace` commands. |
This skill handles the VCS-driven workspace automation lifecycle through hal terraform vcs-workflow.
Use this skill when the user asks to:
hal terraform vcs-workflow — smart status view (default when no subcommand given)hal terraform vcs-workflow enable — bootstrap GitLab VCS integration and workspace wiringhal terraform vcs-workflow disable — remove workspace-to-VCS bindingshal terraform vcs-workflow update — re-run enable over existing stateShort aliases: hal tf vcs enable, hal tf ws enable, hal tf workspace enable
All subcommands accept --target to scope to primary or twin TFE instance:
hal terraform vcs-workflow enable — primary TFE (default)hal terraform vcs-workflow enable --target twin — twin TFE instancehal terraform vcs-workflow enable --target both — both TFE instanceshttps://tfe.localhost:8443http://gitlab.localhost:8929hal-gitlabhal9000FTW (override with --gitlab-password)hal (override with --tfe-org)main/workspaces inside the helper container--gitlab-password — GitLab root password (default hal9000FTW)--tfe-org — TFE organization name (default hal)--tfe-project — TFE project to assign workspaces to--tfe-workspace — restrict operation to a single workspace--tags-regex — VCS trigger tags regex pattern--branch — VCS branch to track (default main)--auto-approve — skip confirmation promptshal terraform vcs-workflow.