personio-eng-onboarding

Automates the Personio new-hire engineering setup documented in tpf-docs first-steps — Hammock District, AWS SSO, Kubernetes, JetBrains Vault, Kotlin env, and DataAccess.

Prerequisite — GitHub setup must already be done

Installing a Claude Code marketplace requires a working GitHub SSH connection, so by the time you can use this plugin you've already completed GitHub setup (SSH key in 1Password, GPG signing, key authorized for Personio-Internal SSO).

The /onboard flow verifies GitHub access at the very first step and aborts with a pointer to the docs if it isn't working.

Usage

Trigger the orchestrator skill — any of these works:

  • Say "onboard me" / "set me up" / "I'm new to Personio" / "walk me through first-steps"
  • Type /onboard (skills are slash-invocable)

Walks you through each phase in order, idempotently:

  1. GitHub access — sanity-check (ssh -T git@github.com, commit-signing config)
  2. Local env — runs the Hammock District install script
  3. AWS SSO — verifies CLI, runs the AWS configure script, aws sso login, aws sts get-caller-identity
  4. Kubernetesaws eks update-kubeconfig for dev and prod (Product Engineer default; flags adjustable for TPE/DX)
  5. JetBrains Vault (optional — prompted) — guides you through the manual Toolbox / IDE Services dance and verifies the result. Only run if you use IntelliJ (Kotlin) or PhpStorm (monolith).
  6. Kotlin env (optional — prompted) — confirms java -version is 17, JAVA_HOME is set, and (optionally) clones a repo to run ./gradlew test. Only run if you work with Kotlin services.
  7. DataAccessbrew install dx/tap/data-access
  8. Capstone (optional) — clone developer-experience, run the hello-world demo, open your first PR. Skipped automatically if you skipped Kotlin (step 6).

Each phase first checks whether it's already complete and skips if so, so re-running /onboard after fixing one broken step is safe.

À la carte

Each phase is also a standalone skill that activates on intent. Say things like:

  • "set up AWS access" → onboard-aws
  • "get my Kubernetes contexts configured" → onboard-k8s
  • "install hammock district" → onboard-local-env
  • "configure JetBrains licenses" → onboard-jetbrains
  • "set up my Kotlin environment" → onboard-kotlin
  • "install data-access" → onboard-data-access

What it cannot do automatically

These require either a browser, a GUI app, or a one-time SSO interaction. The plugin pauses and gives you exact instructions:

  • AWS SSO login — opens your browser to confirm the device code
  • JetBrains Toolbox sign-in — Personio SSO flow inside the Toolbox app
  • IntelliJ JDK / Gradle JVM selection — done in IntelliJ's UI
  • Opening a Pull Request — the capstone is a learning step; we don't merge it for you

Capability

SkillPathPurpose
onboardskills/onboard/SKILL.mdOrchestrator — runs all phases in order
onboard-local-envskills/onboard-local-env/SKILL.mdHammock District install
onboard-awsskills/onboard-aws/SKILL.mdAWS SSO config + login + verify
onboard-k8sskills/onboard-k8s/SKILL.mdEKS kubeconfig setup
onboard-jetbrainsskills/onboard-jetbrains/SKILL.mdJetBrains Vault license walk-through
onboard-kotlinskills/onboard-kotlin/SKILL.mdJDK 17 / gradle smoke-test
onboard-data-accessskills/onboard-data-access/SKILL.mdbrew install dx/tap/data-access

All capability is delivered as skills — there are no slash commands (the deprecated model). Skills auto-trigger on intent and are also invocable as /skill-name.

Maintainer

Colm Doyle (Developer Experience).