huawei-cloud-rds-smart-service

Huawei Cloud RDS Smart Service

Full-scenario intelligent service for Huawei Cloud RDS — covering basic Q&A, SQL optimization, daily O&M, fault diagnosis, parameter tuning, and backup recovery across all database engines.

---

Overview

This skill provides comprehensive intelligent services for Huawei Cloud Relational Database Service (RDS). It supports all database engines (MySQL, PostgreSQL, SQL Server, MariaDB, GaussDB for MySQL, TaurusDB) and covers six major capability domains:

Architecture

User Request → Skill Trigger Matching → Capability Domain Routing
  → CLI (hcloud RDS) → [fallback] → SDK (huaweicloudsdkrds.v3) → [fallback] → API (REST)
  → Result Formatting → Intelligent Analysis & Recommendations

Applicable Scenarios

• Daily inspection: DBA checks instance health, resource usage, backup status
• SQL optimization: Developer/DBA analyzes slow SQL, gets optimization suggestions
• Fault troubleshooting: SRE/DBA diagnoses unreachable instances, high latency, connection exhaustion
• Parameter tuning: DBA adjusts database parameters for performance
• Backup recovery: DBA/Ops manages backup strategy, performs recovery drills
• Basic Q&A: Developer/Junior DBA asks about RDS features and best practices

---

Prerequisites

1. hcloud CLI installed and authenticated — Reference: https://support.huaweicloud.com/qs-hcli/hcli_02_003.html
2. Python 3.8+ with huaweicloudsdkrds package — pip install huaweicloudsdkrds
3. Huawei Cloud AK/SK environment variables (HUAWEI_ACCESS_KEY / HUAWEI_SECRET_KEY or HWC_AK / HWC_SK)
4. Default region: cn-north-4 (override with --cli-region)
5. IAM permissions: RDS read/write permissions (see references/iam-policies.md)

---

Workflow

1. Basic Q&A — Product Knowledge & Instance Query

# List all RDS instances
hcloud RDS ListInstances --cli-region=cn-north-4

# List instances filtered by engine type
hcloud RDS ListInstances --cli-region=cn-north-4 --datastore_type=MySQL

# List available flavors for a specific engine
hcloud RDS ListFlavors --cli-region=cn-north-4 --database_name=MySQL --version_name=8.0

# List available database versions
hcloud RDS ListDatastores --cli-region=cn-north-4 --database_name=MySQL

# Show available upgrade versions for an instance
hcloud RDS ShowAvailableVersion --cli-region=cn-north-4 --instance_id={instance_id}

# List engine flavors (available flavors for resizing)
hcloud RDS ListEngineFlavors --cli-region=cn-north-4 --instance_id={instance_id}

# Show instance quotas
hcloud RDS ShowQuotas --cli-region=cn-north-4

2. SQL Performance Optimization

# Query slow SQL logs (within last 30 days)
hcloud RDS ListSlowLogs --cli-region=cn-north-4 --instance_id={instance_id} \
  --start_date=2024-01-01T00:00:00Z --end_date=2024-01-31T23:59:59Z

# Download slow log file
hcloud RDS DownloadSlowlog --cli-region=cn-north-4 --instance_id={instance_id} \
  --file_name={file_name}

# Query TOP SQL statements
hcloud RDS ListTopSqls --cli-region=cn-north-4 --instance_id={instance_id} --limit=10

# Query historical TOP SQL
hcloud RDS ListHistoryTopSqls --cli-region=cn-north-4 --instance_id={instance_id} \
  --start_date=2024-01-01T00:00:00Z --end_date=2024-01-31T23:59:59Z

# Query historical wait events
hcloud RDS ListHistoryWaitEvents --cli-region=cn-north-4 --instance_id={instance_id} \
  --start_date=2024-01-01T00:00:00Z --end_date=2024-01-31T23:59:59Z

# Query top objects (tables/indexes with high load)
hcloud RDS ShowTopObjects --cli-region=cn-north-4 --instance_id={instance_id}

# Set SQL limit (control SQL concurrency)
hcloud RDS CreateSqlLimit --cli-region=cn-north-4 --instance_id={instance_id} --sql_limit_rule='{"max_concurrency":10}'

3. Daily O&M — Instance Management

# Restart instance
hcloud RDS StartInstanceRestartAction --cli-region=cn-north-4 --instance_id={instance_id}

# Resize flavor (specification change)
hcloud RDS StartResizeFlavorAction --cli-region=cn-north-4 --instance_id={instance_id} \
  --flavor_ref={flavor_id}

# Enlarge disk volume
hcloud RDS StartInstanceEnlargeVolumeAction --cli-region=cn-north-4 --instance_id={instance_id} \
  --volume_size=200

# Reduce disk volume
hcloud RDS StartInstanceReduceVolumeAction --cli-region=cn-north-4 --instance_id={instance_id} \
  --volume_size=100

# Primary-standby switchover
hcloud RDS StartFailover --cli-region=cn-north-4 --instance_id={instance_id}

# Set read-only switch
hcloud RDS SetReadOnlySwitch --cli-region=cn-north-4 --instance_id={instance_id} --readonly=true

# Update instance alias
hcloud RDS UpdateInstanceAlias --cli-region=cn-north-4 --instance_id={instance_id} --alias=new_name

# List tasks (async operation status)
hcloud RDS ListTasks --cli-region=cn-north-4 --start_time=2024-01-01T00:00:00Z --end_time=2024-01-31T23:59:59Z

# Show task detail
hcloud RDS ShowTaskDetail --cli-region=cn-north-4 --instance_id={instance_id} --task_id={task_id}

# Set auto disk expansion policy
hcloud RDS SetAutoEnlargePolicy --cli-region=cn-north-4 --instance_id={instance_id} \
  --switch_status=ON --limit_size=500 --trigger_threshold=90

# Show auto disk expansion policy
hcloud RDS ShowAutoEnlargePolicy --cli-region=cn-north-4 --instance_id={instance_id}

# Show storage used space
hcloud RDS ShowStorageUsedSpace --cli-region=cn-north-4 --instance_id={instance_id}

# List volume info
hcloud RDS ListVolumeInfo --cli-region=cn-north-4 --instance_id={instance_id}

4. Fault Diagnosis & Troubleshooting

# Query error logs
hcloud RDS ListErrorLogs --cli-region=cn-north-4 --instance_id={instance_id} \
  --start_date=2024-01-01T00:00:00Z --end_date=2024-01-31T23:59:59Z

# Query error logs (v3.1 enhanced)
hcloud RDS ListErrorLogsNew --cli-region=cn-north-4 --instance_id={instance_id} \
  --start_date=2024-01-01T00:00:00Z --end_date=2024-01-31T23:59:59Z

# Download error log file
hcloud RDS DownloadErrorlog --cli-region=cn-north-4 --instance_id={instance_id} \
  --file_name={file_name}

# Show replication status (primary-standby)
hcloud RDS ShowReplicationStatus --cli-region=cn-north-4 --instance_id={instance_id}

# Show recovery time window (for point-in-time recovery)
hcloud RDS ShowRecoveryTimeWindow --cli-region=cn-north-4 --instance_id={instance_id}

# List instance diagnosis results
hcloud RDS ListInstanceDiagnosis --cli-region=cn-north-4

# List instance diagnosis info
hcloud RDS ListInstancesInfoDiagnosis --cli-region=cn-north-4

# Query historical sessions
hcloud RDS ListHistorySessions --cli-region=cn-north-4 --instance_id={instance_id}

# Intelligent kill session (kill problematic sessions)
hcloud RDS CreateIntelligentKillSession --cli-region=cn-north-4 --instance_id={instance_id}

# Show intelligent kill session history
hcloud RDS ShowIntelligentKillSessionHistory --cli-region=cn-north-4 --instance_id={instance_id}

# Show second-level monitoring
hcloud RDS ShowSecondLevelMonitoring --cli-region=cn-north-4 --instance_id={instance_id}

# Validate instance connection
hcloud RDS ValidateInstanceConnection --cli-region=cn-north-4 --instance_id={instance_id}

5. Parameter Tuning

# List all parameter groups
hcloud RDS ListConfigurations --cli-region=cn-north-4

# Show parameter group details
hcloud RDS ShowConfiguration --cli-region=cn-north-4 --config_id={config_id}

# Show instance parameter configuration
hcloud RDS ShowInstanceConfiguration --cli-region=cn-north-4 --instance_id={instance_id}

# Create parameter group
hcloud RDS CreateConfiguration --cli-region=cn-north-4 \
  --name=custom_param_group --datastore={\"type\":\"MySQL\",\"version\":\"8.0\"}

# Update parameter group
hcloud RDS UpdateConfiguration --cli-region=cn-north-4 --config_id={config_id} \
  --values='{"key":"value"}'

# Apply parameter group to instance (async)
hcloud RDS ApplyConfigurationAsync --cli-region=cn-north-4 --config_id={config_id} \
  --instance_ids='["{instance_id}"]'

# Update instance parameter directly
hcloud RDS UpdateInstanceConfiguration --cli-region=cn-north-4 --instance_id={instance_id} \
  --values='{"key":"value"}'

# List parameter change history
hcloud RDS ListInstanceParamHistories --cli-region=cn-north-4 --instance_id={instance_id}

# Compare parameter configurations
hcloud RDS CompareConfiguration --cli-region=cn-north-4 \
  --source_config_id={source_id} --target_config_id={target_id}

6. Backup & Recovery

# Show backup policy
hcloud RDS ShowBackupPolicy --cli-region=cn-north-4 --instance_id={instance_id}

# Set backup policy
hcloud RDS SetBackupPolicy --cli-region=cn-north-4 --instance_id={instance_id} \
  --backup_policy='{"keep_days":7,"start_time":"00:00-01:00","period":"1,2,3,4,5,6,7"}'

# Show backup configuration
hcloud RDS ShowBackupConfig --cli-region=cn-north-4 --instance_id={instance_id}

# Change backup configuration
hcloud RDS ChangeBackupConfig --cli-region=cn-north-4 --instance_id={instance_id} \
  --backup_config='{"keep_days":30}'

# List backups
hcloud RDS ListBackups --cli-region=cn-north-4 --instance_id={instance_id}

# Create manual backup
hcloud RDS CreateManualBackup --cli-region=cn-north-4 \
  --instance_id={instance_id} --name=manual_backup_20240101

# Delete manual backup
hcloud RDS DeleteManualBackup --cli-region=cn-north-4 --backup_id={backup_id}

# Batch delete manual backups
hcloud RDS BatchDeleteManualBackup --cli-region=cn-north-4 \
  --backup_ids='["{backup_id_1}","{backup_id_2}"]'

# Show backup download link
hcloud RDS ShowBackupDownloadLink --cli-region=cn-north-4 --backup_id={backup_id}

# Restore to new instance
hcloud RDS CreateRestoreInstance --cli-region=cn-north-4 \
  --backup_id={backup_id} --name=restored_instance --flavor_ref={flavor_id}

# Restore to existing instance
hcloud RDS RestoreToExistingInstance --cli-region=cn-north-4 \
  --instance_id={instance_id} --backup_id={backup_id}

# Restore tables (table-level recovery)
hcloud RDS RestoreTables --cli-region=cn-north-4 --instance_id={instance_id} \
  --restore_tables='{"database":"db1","tables":["t1","t2"]}'

# List instance backup summary
hcloud RDS ListInstanceBackupSummary --cli-region=cn-north-4

# Show backup usage
hcloud RDS ShowBackupUsage --cli-region=cn-north-4 --instance_id={instance_id}

7. Security Management

# Set security group
hcloud RDS SetSecurityGroup --cli-region=cn-north-4 --instance_id={instance_id} \
  --security_group_id={sg_id}

# Switch SSL configuration
hcloud RDS SwitchSsl --cli-region=cn-north-4 --instance_id={instance_id} --ssl_option=ON

# List audit logs
hcloud RDS ListAuditlogs --cli-region=cn-north-4 --instance_id={instance_id} \
  --start_time=2024-01-01T00:00:00Z --end_time=2024-01-31T23:59:59Z

# Show audit log policy
hcloud RDS ShowAuditlogPolicy --cli-region=cn-north-4 --instance_id={instance_id}

# Set audit log policy
hcloud RDS SetAuditlogPolicy --cli-region=cn-north-4 --instance_id={instance_id} \
  --audit_log_policy='{"keep_days":30}'

# Show audit log download link
hcloud RDS ShowAuditlogDownloadLink --cli-region=cn-north-4 --instance_id={instance_id}

---

KooCLI Command Format Standard

hcloud RDS  --cli-region= [--key=value ...]

SDK Fallback (Python)

When CLI is unavailable, use the Python SDK:

from huaweicloudsdkcore.auth.credentials import BasicCredentials
from huaweicloudsdkcore.http.http_config import HttpConfig
from huaweicloudsdkrds.v3.rds_client import RdsClient
from huaweicloudsdkrds.v3.model.list_instances_request import ListInstancesRequest

credentials = BasicCredentials() \
    .with_ak(os.environ.get('HUAWEI_ACCESS_KEY')) \
    .with_sk(os.environ.get('HUAWEI_SECRET_KEY')) \
    .with_project_id('{project_id}')

client = RdsClient.new_builder() \
    .with_credentials(credentials) \
    .with_region(HwRegion.CN_NORTH_4) \
    .build()

request = ListInstancesRequest()
response = client.list_instances(request)
print(response)

API Fallback (REST)

When both CLI and SDK are unavailable, use REST API directly:

curl -X GET "https://rds.cn-north-4.myhuaweicloud.com/v3/{project_id}/instances" \
  -H "X-Auth-Token: {token}" \
  -H "Content-Type: application/json"

---

Core Commands

---

参数确认 (Parameter Confirmation)

Mutating Operations Requiring User Confirmation

The following operations modify RDS resources and must prompt the user for explicit confirmation before execution:

• Instance: Restart, Resize, Disk Expand/Reduce, Failover, Stop, Delete
• Backup: Create Manual Backup, Delete Backup, Restore Instance
• Parameter: Create/Update/Delete Configuration, Apply Configuration, Update Instance Parameter
• Security: Set Security Group, Switch SSL, Set Audit Log Policy
• Session: Intelligent Kill Session

---

输出格式 (Output Format)

All command outputs are returned as structured JSON. The skill formats results into readable tables and provides intelligent analysis:

CLI Output

{
  "instances": [
    {"id": "rds-xxxxx", "name": "my-db", "status": "ACTIVE", "type": "Single", "engine": "MySQL"}
  ]
}

Analysis Output

---

验证方法 (Verification)

• CLI verification: Run hcloud RDS ListInstances --cli-region=cn-north-4 and confirm JSON output
• SDK verification: Execute Python SDK snippet and check response.status_code == 200
• API verification: Send REST request and verify 200 OK response with valid JSON body
• End-to-end: Create a test instance, query its status, then clean up
• Reference: See Verification Method for detailed test procedures

---

Reference Documents

• IAM Policies — Least-privilege IAM policies for RDS operations
• Verification Method — Verification and testing methodology
• Dataflow Diagram — Mermaid data flow diagram
• Acceptance Criteria — Acceptance criteria for the skill
• CLI Installation Guide — CLI installation and configuration
• API Paths — REST API paths verified from SDK source
• RDS Troubleshooting Guide — Common fault diagnosis procedures
• SQL Optimization Guide — SQL performance optimization methodology

---

Best Practices

• Always specify --cli-region explicitly to avoid region confusion
• Use --datastore_type filter when listing instances to narrow results
• For slow log analysis, limit date range to 7 days for performance
• Before resizing, check available flavors with ListEngineFlavors
• Before restoring, verify recovery time window with ShowRecoveryTimeWindow
• Parameter changes should be tested on non-production instances first
• Backup deletion is irreversible — always verify backup ID before deletion
• Use audit logs for compliance and security investigation

---

Notes

• All mutating operations (Create/Update/Delete/Restart/Resize/Restore) require explicit user confirmation
• Credentials (AK/SK) are read from environment variables; hardcoding is prohibited
• CLI is the primary execution mode; SDK and API are fallbacks for unavailable CLI commands
• Date format follows ISO 8601: yyyy-mm-ddThh:mm:ssZ (e.g., 2024-01-01T00:00:00Z)
• Slow log queries are limited to the last 30 days
• The skill supports all RDS engines: MySQL, PostgreSQL, SQL Server, MariaDB, GaussDB(for MySQL), TaurusDB