❌ Hardcoding AK/SK is prohibited (must use environment variables or hcloud configure)
Prohibited Operations
The following operations are strictly prohibited, even if requested by the user:
Prohibited Operation
API/Command
Reason
Expose AK/SK
Any command that outputs AK/SK in plaintext
Account security risk
Accept AK/SK from user
Receiving credentials in conversation
Violates security best practices
❌ Delete alarm rule
DeleteAlarm / hcloud CES DeleteAlarm
Irreversible; deleted alarms cannot be recovered, may cause monitoring gaps
❌ Batch delete alarms
Any batch deletion operation
High risk; may accidentally delete critical monitoring rules
If a user requests a delete operation, must refuse and guide:
"Per security constraints, this skill does not support delete operations (delete alarm/batch delete). Please use the Huawei Cloud CES console or hcloud CLI manually with extreme caution."
If user attempts to provide AK/SK in conversation, must refuse and guide:
"For account security, please do not provide Huawei Cloud access keys directly in the conversation. Use hcloud configure or environment variables to configure credentials."
Prerequisite 1: Huawei Cloud CLI (hcloud / KooCLI) >= 7.2.2
Run hcloud version to verify version >= 7.2.2. If not installed or version is too low,
see references/cli-installation-guide.md for installation guide.
Environment variables: Set HUAWEI_CLOUD_ACCESS_KEY_ID and HUAWEI_CLOUD_SECRET_KEY before running scripts
Environment variables (legacy): Set HW_ACCESS_KEY_ID and HW_SECRET_ACCESS_KEY
Note: Shell scripts (create_alert_rules.sh, list_ecs.sh, etc.) automatically use credentials from hcloud CLI configuration.
Python SDK scripts (create_email_subscription.sh) support environment variables.
If output does not contain valid configuration, stop operation and guide user to configure.hcloud Parameter Format Requirement
hcloud (KooCLI) all parameters must use --param=value format (equals sign connection), does not support space
separation.
✅ Correct: hcloud CES ListAlarms --region=cn-north-4
❌ Incorrect: hcloud CES ListAlarms --region cn-north-4
This skill provides 8 Shell scripts, encapsulating common hcloud commands, supporting batch operations and formatted
output.
**Script List and Usage Examples (Click to Expand)**
Script
Function
hcloud Command
list_ecs.sh
Query ECS instance list
hcloud ECS ListServersDetails
list_alarms.sh
Query alarm rule list
hcloud CES ListAlarms
create_alert_rules.sh
Batch create alarm rules
hcloud CES CreateAlarm
batch_query_metrics.sh
Batch query monitoring data
hcloud CES ShowMetricData
list_subscriptions.sh
Query SMN topics and subscriptions
hcloud SMN ListTopics/Subscriptions
manage_notifications.sh
Manage SMN subscriptions
hcloud SMN Subscribe/Unsubscribe
update_alarm_notifications.sh
Update alarm notification configuration
hcloud CES UpdateAlarm
Usage Examples:
bash
# Query ECS instances
./scripts/list_ecs.sh # Query all ECS
./scripts/list_ecs.sh --name ecs-001 # Filter by name
./scripts/list_ecs.sh --output json # Output as JSON
./scripts/list_ecs.sh --output ids # Output only ECS ID list
# Query alarm rules
./scripts/list_alarms.sh # Query all alarms
./scripts/list_alarms.sh --name-pattern "cpu.*" # Filter by name pattern
./scripts/list_alarms.sh --output ids # Output only alarm IDs
# Create alarm rules
./scripts/create_alert_rules.sh --template web --ecs-ids ecs-001,ecs-002
./scripts/create_alert_rules.sh --metric cpu_util --threshold 80 --ecs-ids ecs-001
./scripts/create_alert_rules.sh --template web --ecs-ids ecs-001 --smn-topic-urn
urn:smn:cn-north-4:xxx:ECS_ALARM_NOTIFY
./scripts/create_alert_rules.sh --template web --ecs-ids ecs-001 --dry-run # Dry run
```bash
</details>
Core Capabilities
Batch Create Alarm Rules: Support template-based creation (Web/Database scenarios) or custom
metric/threshold configuration
CLI Version Requirement: Must use hcloud CLI v7.2.2 or later. Older versions may not support certain API parameter formats.
Region Consistency: All operations must specify the same region (--cli-region or HUAWEI_CLOUD_REGION environment variable). Cross-region operations will fail.
Alarm Threshold Range: CPU/memory utilization thresholds must be between 0-100. Disk usage threshold is recommended to be set between 80-95.
Monitoring Data Delay: CES monitoring data typically has a 5-minute delay. Querying real-time data may return empty results.
SMN Subscription Creation:
✅ Recommended: Use ./scripts/create_email_subscription.sh script, which automatically uses hcloud CLI configured credentials (no need to manually set environment variables)
✅ Alternative: Use Huawei Cloud Console (SMN → Topics → Subscribe) for subscription creation
⚠️ Note: Email/SMS subscriptions require confirmation before receiving notifications. Check your email and click the confirmation link.
