holorouter

Manage Holorouter appliance services, routing, certificates, and DNS via SSH and kubectl.

1|2|Updated Dec 3, 2025
One-click install
npx skills add https://github.com/Broadcom/HOLFY27-MGR-HOLUSER --skill holorouter
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: holorouter
Source: https://github.com/Broadcom/HOLFY27-MGR-HOLUSER/tree/main/.cursor/skills/holorouter
Command: npx skills add https://github.com/Broadcom/HOLFY27-MGR-HOLUSER --skill holorouter

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a centralized way to manage the complex Holorouter appliance, which acts as a router, DNS server, reverse proxy, and identity provider for the lab environment.

Core Features & Use Cases

  • Service Management: Control and configure Traefik, Technitium DNS, Vault PKI, and Authentik.
  • Network Operations: Manage BGP routing via FRR-K8s and configure Squid proxy.
  • Certificate Handling: Issue and renew TLS certificates for secure services.
  • Use Case: You need to add a new HTTPS-enabled service to the lab environment. This Skill can guide you through creating the necessary DNS records, issuing a certificate from Vault, and configuring Traefik to route traffic to your new service.

Quick Start

Use the holorouter skill to issue a TLS certificate for the hostname newservice.vcf.lab.

Frequently Asked Questions about holorouter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I issue a TLS certificate from HashiCorp Vault for a new Kubernetes service?

To issue a TLS certificate from HashiCorp Vault, you use the Holorouter Skill to interact with the Vault PKI, generating secure certificates for routing Traefik traffic to your new service.

How do I configure Traefik and Technitium DNS to route HTTPS traffic in a lab environment?

Configuring Traefik and Technitium DNS involves using the Holorouter Skill to create necessary DNS records and set up Traefik routing rules, directing HTTPS traffic to your services.

Can I manage BGP routing and Squid proxy configurations on a Photon OS Kubernetes appliance?

Yes, you can manage BGP routing via FRR-K8s and configure Squid proxy on the Photon OS Kubernetes appliance using the Holorouter Skill's network operations features.

Do I need SSH access and kubectl to manage Authentik and Vault PKI services?

Yes, you need SSH access and kubectl to manage Authentik and Vault PKI services, as the Holorouter Skill requires these tools to interact with the Kubernetes environment.

What is the best way to centralize identity provider and reverse proxy management for a lab network?

Centralizing identity provider and reverse proxy management is achieved through the Holorouter appliance, which integrates Authentik for identity and Traefik for proxying.

Why does adding a new HTTPS service require both DNS record creation and certificate issuance?

Adding an HTTPS service requires DNS records for name resolution and certificate issuance from Vault PKI for encryption, ensuring Traefik can securely route traffic to the service.