Configure and verify Vault OIDC integration with Keycloak using HAL commands.
npx skills add https://github.com/hashimiche/hal --skill oidc
Please help me install this Agent Skill. Skill: oidc Source: https://github.com/hashimiche/hal/tree/main/internal/skills/data/vault/oidc Command: npx skills add https://github.com/hashimiche/hal --skill oidc
Deploy, verify, and troubleshoot Vault's OIDC integration with Keycloak for local development labs and demos, enabling seamless SSO and identity management.
Initiate the lab by enabling Vault OIDC with HAL using hal vault oidc enable, then verify with vault read auth/oidc/config
High-intent search queries and answers about installing and using this skill.
Configure Vault OIDC with Keycloak by enabling the auth method via HAL commands, mapping Keycloak groups to Vault identity groups, and verifying the setup using vault read auth/oidc/config.
Troubleshoot Vault OIDC login flows by verifying redirect URIs, checking the discovery URL configuration, and validating group mappings between Keycloak and Vault identity groups for a smooth demo.
Vault OIDC setup requires Vault accessible at 127.0.0.1:8200 and Keycloak accessible at port 8081 to successfully configure and verify the local development SSO integration.
Vault OIDC configurations can be reset using HAL commands hal vault oidc enable, update, and disable to manage, modify, or remove the Keycloak SSO integration during local development.
Mapping Keycloak groups to Vault identity groups links external identity provider roles to internal policies, enabling seamless SSO access control and identity management within the local Vault environment.
Vault OIDC redirect URI failures occur when the configured callback endpoint does not match Keycloak's client settings, requiring verification of discovery URLs and group mappings to resolve.
hashimicheAutomates deployment, verification, and troubleshooting of a Vault database secrets lab for HAL.
wilfriedagoConfigure Keycloak realms, clients, and authentication flows for SSO.
drdave-flexnetosCombine Keycloak authentication, OPA policy evaluation, and Vault secret handling for controlled access.
kettleofketchupDeploy and manage Authentik identity provider on Kubernetes clusters.
