⚠️ Security Execution Rules (Highest Priority):

1. All scripts MUST be executed via skill action=exec, NEVER run directly in shell
2. NEVER print script contents or commands containing AK/SK/Token in conversation
3. NEVER create temporary script files, prefer inline execution (python -c)
4. On execution failure, only return error info, do NOT rewrite scripts or print full commands
5. AK/SK/Token MUST be passed via environment variables, NEVER appear in conversation
6. ⚠️ ABSOLUTELY NEVER expose, log, or print AK/SK/Token values in any form - this is a critical security requirement

Huawei Cloud Flexus L Instance Lifecycle Management Skill

Overview

This skill provides core lifecycle management capabilities for Huawei Cloud Flexus L instances:

Architecture

┌─────────────────────────────────────────────────────────────┐
│                    Flexus L Lifecycle Skill                  │
├─────────────────────────────────────────────────────────────┤
│  ┌──────────┐  ┌──────────┐  ┌──────────────┐              │
│  │  Create  │  │ Renewal  │  │  Unsubscribe │              │
│  └────┬─────┘  └────┬─────┘  └──────┬───────┘              │
│       │             │                │                       │
│       └─────────────┴────────────────┘                       │
│                     │                                        │
│       ┌─────────────▼─────────────┐                         │
│       │  flexus_specs_extractor  │                         │
│       └─────────────┬─────────────┘                         │
│                     │                                        │
│              ┌──────▼──────┐                                 │
│              │  HCSS API   │  (Instance Management)          │
│              └──────┬──────┘                                 │
│              ┌──────▼──────┐                                 │
│              │  BSS API    │  (Billing & Subscription)       │
│              └──────┬──────┘                                 │
│              ┌──────▼──────┐                                 │
│              │  IAM API    │  (Project ID)                   │
│              └─────────────┘                                 │
└─────────────────────────────────────────────────────────────┘

Data Source

• Region, Image, Spec Information: Dynamically fetched from official documentation, no local config file needed
• Official Documentation: https://support.huaweicloud.com/api-flexusl/create_instance_0001.html
• On-Demand Fetch: Automatically fetches latest data when executing show-regions, show-images, show-specs, create-instance

Use Cases

1. Automated Server Provisioning - Create Flexus L instances for development, testing, or production environments
2. Cost Optimization - Renew instances during promotional periods to save costs
3. Resource Cleanup - Safely unsubscribe instances when projects end
4. Multi-Region Deployment - Create instances across different regions for disaster recovery

Applicable Scenarios

• Development and testing environment setup
• Production server lifecycle management
• Cost control and budget management
• Project resource cleanup and decommissioning

Important Notes

⚠️ All scripts and environment check scripts are inside the skill package. You must use skill action=exec to execute them; do not run them directly in the shell.

Prerequisites

Before using this skill, ensure the following conditions are met:

1. Huawei Cloud Account

• Valid Huawei Cloud account
• Account has completed real-name verification
• Account has sufficient balance or bound payment method

2. AK/SK Credentials

• Created Huawei Cloud access keys (AK/SK)
• AK/SK has the following permissions:
  • BSS: Billing service (order query, renewal, unsubscribe)
  • HCSS: Flexus L instance management
  • IAM: Project ID query (read-only)
• How to obtain: Huawei Cloud Console → My Credentials → Access Keys → Create Access Key

Credential Configuration Methods:

Credential Types (by recommendation order):

Environment Variables (Primary Method - Strongly Recommended):

Pass credentials via environment variables HW_ACCESS_KEY, HW_SECRET_KEY, HW_SECURITY_TOKEN. Temporary credentials require HW_SECURITY_TOKEN, permanent credentials do not.

Command-line Parameters (Secondary Method - Accepted):

# Temporary credentials
python3 scripts/flexus_lifecycle.py create-instance \
  --ak <AK> --sk <SK> --security-token <TOKEN> \
  --image Ubuntu --cpu 2 --memory 4

# Permanent credentials
python3 scripts/flexus_lifecycle.py create-instance \
  --ak <AK> --sk <SK> \
  --image Ubuntu --cpu 2 --memory 4

⚠️ Security Token Notes:

• Temporary AK/SK (Primary): Requires HW_SECURITY_TOKEN environment variable, higher security, strongly recommended
• Permanent AK/SK (Secondary): Only needs HW_ACCESS_KEY and HW_SECRET_KEY, no security token needed

3. IAM Permissions

Permission Failure Handling:

See references/permission-guide.md for detailed permission setup.

4. Runtime Environment

• Python 3.8 or higher
• Required dependencies installed (see Dependencies section below)

5. Network Environment

• Able to access Huawei Cloud API endpoints
• Required endpoints:
  • hcss.cn-north-4.myhuaweicloud.com
  • iam.myhuaweicloud.com
  • bss.myhuaweicloud.com
• If using proxy, configure environment variables correctly

Trigger Rules

Activate this skill when users mention:

Create related:

• "Purchase Huawei Cloud server", "Create Flexus instance", "Huawei Cloud lightweight server"
• "hcss instance", "New Flexus L"

Renewal related:

• "Renew Flexus L instance", "Flexus renewal", "Renew lightweight server"
• "Huawei Cloud renewal", "renew flexus"

Unsubscribe related:

• "Unsubscribe Flexus L instance", "Cancel Flexus instance", "Unsubscribe lightweight server"
• "Huawei Cloud unsubscribe", "cancel subscription flexus"

⚠️ Conversation Display Guidelines (Important)

When displaying "Available Specifications" or "Available Images" to users in conversation, you MUST immediately append the following note:

Note

• Spec codes vary by region and image version. Please refer to the official documentation Appendix 1 (spec codes for each image type) and Appendix 2 (spec details for each code) before purchasing.
• Official Link: https://support.huaweicloud.com/api-flexusl/create_instance_0001.html#create_instance_0001__section1881914176434

This applies to all conversation scenarios, including dry-run previews.

Security Notes

⚠️ AK/SK Security Requirements (CRITICAL):

• Environment Variables (Primary - Strongly Recommended): HW_ACCESS_KEY, HW_SECRET_KEY, HW_SECURITY_TOKEN
• Command-line Parameters (Secondary - Accepted): --ak, --sk, --security-token
• Priority: Environment variables > Command-line parameters
• Security Token: Recommended - Temporary credentials have higher security

⚠️ ABSOLUTE SECURITY RULES - NEVER VIOLATE:

1. NEVER print, log, or display AK/SK/Token values in any form
2. NEVER include AK/SK/Token in error messages or debug output
3. NEVER store AK/SK/Token in files or configuration
4. NEVER transmit AK/SK/Token over insecure channels
5. When command-line parameters are used, they MUST be masked in any output

Credential Usage (by recommendation order):

# Primary: With security token (temporary credentials, higher security)
BasicCredentials(ak, sk).with_security_token(security_token)

# Secondary: Without security token (permanent credentials)
BasicCredentials(ak, sk)

Core Commands

Parameter Confirmation

Required Parameter Validation:

Parameter Relationships:

Default Values:

⚠️ Mandatory Confirmation Mechanism

Creation, renewal, and cancellation operations involve actual costs and must be executed only after explicit confirmation from the user!

Confirmation methods (choose one):

1. Dialog confirmation: Reply "confirm" or "yes" in conversation
2. Command-line confirmation: Use --confirm flag
3. Dry-run preview: Use --dry-run to preview without executing

⚠️ Failure Handling Rule:

When user confirms the preview order and the purchase fails:

• Only make ONE request - do not retry automatically
• Return the failure reason to the user
• Guide user to repurchase - let user decide next steps
• NEVER change parameters (region, spec, image, etc.) without user's explicit request

Usage

Basic Command Format

python3 scripts/flexus_lifecycle.py <command> [options]

Global Parameters

⚠️ Global options (--ak/--sk/--security-token/--region/--dry-run/--confirm) can be written BOTH before AND after the subcommand. Both positions are equivalent and must keep working:

# Global option BEFORE subcommand (前置写法)
python3 scripts/flexus_lifecycle.py --region cn-east-3 show-images
python3 scripts/flexus_lifecycle.py --dry-run unsubscribe --resource-ids <id>
python3 scripts/flexus_lifecycle.py --confirm create-instance --image Ubuntu

# Global option AFTER subcommand (后置写法)
python3 scripts/flexus_lifecycle.py show-images --region cn-east-3
python3 scripts/flexus_lifecycle.py unsubscribe --resource-ids <id> --dry-run
python3 scripts/flexus_lifecycle.py create-instance --confirm --image Ubuntu

Regression reference (FLEXUS2-ISSUE-004): --dry-run/--region/--confirm written BEFORE the subcommand must be honored, not silently reset to default:

• --dry-run unsubscribe --resource-ids <id> must enter dry-run WITHOUT prompting for real confirmation
• --region cn-east-3 show-images must query cn-east-3, NOT the default cn-north-4
• --confirm create-instance ... must skip the interactive confirmation prompt

Credential Configuration Examples

Method 1: Using Environment Variables (Primary - Strongly Recommended)

python3 scripts/flexus_lifecycle.py create-instance --image Ubuntu --cpu 2 --memory 4

Method 2: Using Command-line Parameters (Secondary - Accepted)

# Temporary credentials
python3 scripts/flexus_lifecycle.py create-instance \
  --ak <AK> --sk <SK> --security-token <TOKEN> \
  --image Ubuntu \
  --cpu 2 \
  --memory 4

# Permanent credentials
python3 scripts/flexus_lifecycle.py create-instance \
  --ak <AK> --sk <SK> \
  --image Ubuntu \
  --cpu 2 \
  --memory 4

Module Details

0️⃣ Query Functions

Show available regions:

python3 scripts/flexus_lifecycle.py show-regions

Show available images for a region:

python3 scripts/flexus_lifecycle.py --region cn-north-4 show-images

Show available specs for an image:

python3 scripts/flexus_lifecycle.py --region cn-north-4 show-specs --image Ubuntu

1️⃣ Create Instance (create-instance)

Purchase new Flexus L instances, supports Windows/Linux.

Method 1: Auto-match Spec (Recommended)

python3 scripts/flexus_lifecycle.py create-instance \
  --region cn-north-4 \
  --image Ubuntu \
  --cpu 2 \
  --memory 4

Method 2: Specify Spec

python3 scripts/flexus_lifecycle.py create-instance \
  --region cn-north-4 \
  --image Ubuntu \
  --plan-spec hf.medium.1.linux

Method 3: Use Default Spec

python3 scripts/flexus_lifecycle.py create-instance \
  --region cn-north-4 \
  --image Ubuntu

Create Parameters:

Available Specifications Reference:

See references/image-specs-guide.md for detailed specs.

2️⃣ Renewal Instance (renewal)

Renew existing Flexus L instances.

# Preview renewal (recommended)
python3 scripts/flexus_lifecycle.py renewal \
  --resource-ids <resource-id> \
  --period-num 1 \
  --period-type month \
  --dry-run

# Confirm renewal
python3 scripts/flexus_lifecycle.py renewal \
  --resource-ids <resource-id> \
  --period-num 6 \
  --period-type month \
  --confirm

# Renew multiple instances
python3 scripts/flexus_lifecycle.py renewal \
  --resource-ids id1,id2,id3 \
  --period-num 1 \
  --period-type year \
  --confirm

Renewal Parameters:

3️⃣ Unsubscribe Instance (unsubscribe)

Cancel Flexus L instance subscription.

# Preview unsubscribe (recommended)
python3 scripts/flexus_lifecycle.py unsubscribe \
  --resource-ids <resource-id> \
  --dry-run

# Immediate unsubscribe (type 1)
python3 scripts/flexus_lifecycle.py unsubscribe \
  --resource-ids <resource-id> \
  --type 1 \
  --confirm

# Expiry unsubscribe (type 2)
python3 scripts/flexus_lifecycle.py unsubscribe \
  --resource-ids <resource-id> \
  --type 2 \
  --confirm

# Batch unsubscribe
python3 scripts/flexus_lifecycle.py unsubscribe \
  --resource-ids id1,id2,id3 \
  --type 1 \
  --reason "Project ended" \
  --confirm

Unsubscribe Parameters:

Unsubscribe Types:

Available Regions

⚠️ Note: Flexus L instances currently support only the following regions:

Dependencies

Python Dependencies

Install via pip:

pip install requests huaweicloudsdkcore huaweicloudsdkbss

Or use pyproject.toml:

cd scripts
pip install -e .

pyproject.toml

[project]
name = "flexus-lifecycle"
version = "1.0.0"
dependencies = [
    "requests>=2.28.0",
    "huaweicloudsdkcore>=3.0.0",
    "huaweicloudsdkbss>=3.0.0",
]

File Structure

skills/huawei-cloud-flexus-l-server-manage/
├── SKILL.md                    # This file
├── scripts/
│   ├── flexus_lifecycle.py     # Main lifecycle script
│   ├── flexus_specs_extractor.py  # Dynamic specs fetcher
│   └── pyproject.toml          # Dependencies
└── references/
    ├── api-reference.md        # API reference
    ├── iam-policies.md         # IAM policies
    ├── image-specs-guide.md    # Image specs guide
    ├── permission-guide.md     # Permission setup
    └── troubleshooting.md      # Troubleshooting

Error Handling

Common Errors

See references/troubleshooting.md for detailed error handling.

References

• API Reference
• IAM Policies
• Image Specs Guide
• Permission Guide
• Troubleshooting

External References

• Flexus L Instance Purchase Guide - Official API Documentation
• AK/SK Authentication - IAM Authentication Guide
• Huawei Cloud Console - Resource Management Console