database

Automates deployment, verification, and troubleshooting of a Vault database secrets lab for HAL.

29|8|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/hashimiche/hal --skill database-hashimiche
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: database
Source: https://github.com/hashimiche/hal/tree/main/internal/skills/data/vault/database
Command: npx skills add https://github.com/hashimiche/hal --skill database-hashimiche

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Vault database lab automates deploying, verifying, and troubleshooting the local database secrets engine, enabling hands-on experiments without manual setup.

Core Features & Use Cases

  • Enable the Vault database secrets engine for a local MariaDB backend and configure the mount at database/
  • Create and manage dynamic roles, configure the hal-vault-mariadb connection, and test provisioning workflows
  • Validate operational readiness by inspecting mounts and configurations, then perform day-2 operations like reading credentials with vault read database/creds/dba-role

Quick Start

Enable the MariaDB backend with hal vault database enable and validate the setup with Vault reads.

Frequently Asked Questions about database

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enable the Vault database secrets engine for a local MariaDB backend?

You can generate dynamic database credentials by running the vault read database/creds/dba-role command after enabling and configuring the Vault database secrets engine with your local MariaDB backend.

Can I rotate the root database user password using Vault?

Yes, you can rotate the root database user password as part of day-2 operations, which the local Vault database secrets lab automates and validates for your MariaDB backend environment.

Do I need a local Vault instance running to configure database secrets?

Yes, you need Vault running locally at the default address 127.0.0.1:8200 and a MariaDB backend controlled via hal vault database enable, update, and disable commands.

How do I validate my Vault database secrets configuration?

You validate the Vault database secrets configuration by inspecting mounts and configurations, then performing day-2 operations like reading credentials with vault read to verify operational readiness.

What is the best way to troubleshoot dynamic credentials in Vault?

The best way to troubleshoot dynamic credentials in Vault is using the local database secrets lab, which automates deployment and verification of the database engine for MariaDB to isolate configuration issues.