Alibaba Cloud Flink Instance Manage
Operate Alibaba Cloud Flink VVP resources with a strict create/query scope through one wrapper script.
Scope and Entrypoint
Trigger Rules
Use this skill when prompts are about Flink instance/namespace lifecycle operations.
- Positive intent examples:
- "Create a Flink instance in cn-beijing"
- "List Flink instances and status"
- "Describe namespaces for instance f-cn-xxx"
- "查询 Flink 实例标签"
- "Flink 可用区有哪些"
- Negative intent examples:
- ECS/Kafka/OSS/DataWorks operations
- Generic questions (weather, translation, etc.)
- Flink SQL / Flink job authoring or runtime tuning
- Ambiguous prompts:
- Ask one clarification question: instance/namespace management vs SQL/job operations.
Intent to Command Mapping
| User intent |
Command |
| Query all instances in a region |
describe --region_id <REGION> |
| Create instance |
create ... --confirm |
| Query namespaces under an instance |
describe_namespaces --region_id <REGION> --instance_id <ID> |
| Create namespace |
create_namespace ... --confirm |
| Query supported regions/zones |
describe_regions / describe_zones --region_id <REGION> |
| Query tags |
list_tags --region_id <REGION> --resource_type <TYPE> [--resource_ids ...] |
Operating Rules
- Confirmation is mandatory for create commands
create and create_namespace must include --confirm.
- Verify create results with read-back
- Do not conclude success from create response alone.
- Retry policy is strict
- Maximum 2 attempts for the same command (initial + one corrected retry).
- No automatic operation switching
- If an operation fails, do not switch to a different operation without user approval.
- Lifecycle target lock
- In
create -> create_namespace flow, namespace must target the same newly created InstanceId unless user approves fallback.
- Namespace pre-check is required
- Before
create_namespace, check instance status/resources and existing namespace allocation.
- No secret exposure
- Do not output or request plaintext AK/SK. Use default credential chain guidance.
- Do not invent parameters
- Never fabricate VPC/VSwitch/instance IDs.
- Keep auditable confirmation evidence
- Lifecycle outputs must contain
SafetyCheckRequired or explicit --confirm evidence.
- No partial-completion claims for lifecycle flows
- For flows requiring both
create and create_namespace, overall status can be completed only when both create operations succeed.
- No automatic capacity scaling
- If
create_namespace fails due to insufficient resources, report it clearly and ask user to manually scale resources outside this skill scope.
Execution Protocol
Step 1: Classify request
- In-scope create/query for Flink instance/namespace/tag/region/zone -> continue.
- Out-of-scope or non-Flink -> reject or route with explanation.
Step 2: Validate parameters
- Apply
references/parameter-validation.md.
- If required parameters are missing, ask user or return clear remediation.
Step 3: Execute command
- Query commands: run once unless transient query error.
- Create commands: construct final command string and verify
--confirm is present before execution.
Step 4: Verify create outcomes
- For
create: verify with describe --region_id <REGION>.
- For
create_namespace: verify with describe_namespaces --region_id <REGION> --instance_id <ID>.
- Use up to 3 read checks with short backoff before concluding the create is not reflected yet.
- For chained
create -> create_namespace:
- poll
describe --region_id <REGION> on the same InstanceId every 30 seconds
- max wait: 10 minutes
- if still not
RUNNING, stop and provide next action (wait/retry later)
- do not switch to another instance without explicit user approval
- if namespace create fails, mark lifecycle chain as
failed/not_ready, not completed
- for
InsufficientResources, ask user to manually scale the instance and retry later
Key References
- Start here:
references/README.md
references/quick-start.md
references/trigger-recognition-guide.md
references/core-execution-flow.md
references/command-templates.md
| Document |
Purpose |
references/parameter-validation.md |
Pre-execution validation checklist |
references/e2e-playbooks.md |
Complete execution sequences |
references/common-failures.md |
Typical mistakes and fixes |
references/required-confirmation-model.md |
Confirmation gate rules |
references/instance-state-management.md |
Instance state and readiness checks |
references/output-handling.md |
Output parsing and retry policy |
references/verification-method.md |
Verification patterns after create/query |
references/acceptance-criteria.md |
Completion checklist for normal operations |
references/python-environment-setup.md |
Python dependency and auth setup |
references/cli-installation-guide.md |
Aliyun CLI diagnostics setup |
references/ram-policies.md |
Required RAM permissions |
references/related-apis.md |
API and command mapping |
Output Format
All commands return JSON:
{
"success": true,
"operation": "<command>",
"confirmation_check": {
"required_flag": "--confirm",
"provided": true,
"status": "passed"
},
"data": {},
"request_id": "..."
}
confirmation_check appears on create operations and is used for auditable safety evidence.
Exit codes: 0 = success, 1 = error.
1---2name: alibabacloud-flink-instance-manage3description: Manage Alibaba Cloud Flink VVP instances and namespaces through create/query operations only. Use when user asks to create or query Flink instances, namespaces, regions, zones, or tags in Chinese or English. Reject Flink SQL/job requests, unrelated cloud services (ECS/Kafka/OSS/DataWorks), and all update/delete operations.4license: Apache-2.05---6
7# Alibaba Cloud Flink Instance Manage
8
9Operate Alibaba Cloud Flink VVP resources with a strict create/query scope through one wrapper script.
10
11## Scope and Entrypoint
12
13- Always run operations through:
14 ```bash
15 python scripts/instance_ops.py <command> [options]
16 ```
17- Allowed commands: `create`, `create_namespace`, `describe`, `describe_regions`, `describe_zones`, `describe_namespaces`, `list_tags`
18- Out of scope: update/delete, Flink SQL/job runtime operations, and non-Flink services
19
20## Trigger Rules
21
22Use this skill when prompts are about Flink instance/namespace lifecycle operations.
23
24- Positive intent examples:
25 - "Create a Flink instance in cn-beijing"
26 - "List Flink instances and status"
27 - "Describe namespaces for instance f-cn-xxx"
28 - "查询 Flink 实例标签"
29 - "Flink 可用区有哪些"
30- Negative intent examples:
31 - ECS/Kafka/OSS/DataWorks operations
32 - Generic questions (weather, translation, etc.)
33 - Flink SQL / Flink job authoring or runtime tuning
34- Ambiguous prompts:
35 - Ask one clarification question: instance/namespace management vs SQL/job operations.
36
37## Intent to Command Mapping
38
39| User intent | Command |
40|---|---|
41| Query all instances in a region | `describe --region_id <REGION>` |
42| Create instance | `create ... --confirm` |
43| Query namespaces under an instance | `describe_namespaces --region_id <REGION> --instance_id <ID>` |
44| Create namespace | `create_namespace ... --confirm` |
45| Query supported regions/zones | `describe_regions` / `describe_zones --region_id <REGION>` |
46| Query tags | `list_tags --region_id <REGION> --resource_type <TYPE> [--resource_ids ...]` |
47
48## Operating Rules
49
501. **Confirmation is mandatory for create commands**
51 - `create` and `create_namespace` must include `--confirm`.
522. **Verify create results with read-back**
53 - Do not conclude success from create response alone.
543. **Retry policy is strict**
55 - Maximum 2 attempts for the same command (initial + one corrected retry).
564. **No automatic operation switching**
57 - If an operation fails, do not switch to a different operation without user approval.
585. **Lifecycle target lock**
59 - In `create -> create_namespace` flow, namespace must target the same newly created `InstanceId` unless user approves fallback.
606. **Namespace pre-check is required**
61 - Before `create_namespace`, check instance status/resources and existing namespace allocation.
627. **No secret exposure**
63 - Do not output or request plaintext AK/SK. Use default credential chain guidance.
648. **Do not invent parameters**
65 - Never fabricate VPC/VSwitch/instance IDs.
669. **Keep auditable confirmation evidence**
67 - Lifecycle outputs must contain `SafetyCheckRequired` or explicit `--confirm` evidence.
6810. **No partial-completion claims for lifecycle flows**
69 - For flows requiring both `create` and `create_namespace`, overall status can be `completed` only when both create operations succeed.
7011. **No automatic capacity scaling**
71 - If `create_namespace` fails due to insufficient resources, report it clearly and ask user to manually scale resources outside this skill scope.
72
73## Execution Protocol
74
75### Step 1: Classify request
76- In-scope create/query for Flink instance/namespace/tag/region/zone -> continue.
77- Out-of-scope or non-Flink -> reject or route with explanation.
78
79### Step 2: Validate parameters
80- Apply `references/parameter-validation.md`.
81- If required parameters are missing, ask user or return clear remediation.
82
83### Step 3: Execute command
84- Query commands: run once unless transient query error.
85- Create commands: construct final command string and verify `--confirm` is present before execution.
86
87### Step 4: Verify create outcomes
88- For `create`: verify with `describe --region_id <REGION>`.
89- For `create_namespace`: verify with `describe_namespaces --region_id <REGION> --instance_id <ID>`.
90- Use up to 3 read checks with short backoff before concluding the create is not reflected yet.
91- For chained `create -> create_namespace`:
92 - poll `describe --region_id <REGION>` on the same `InstanceId` every 30 seconds
93 - max wait: 10 minutes
94 - if still not `RUNNING`, stop and provide next action (wait/retry later)
95 - do not switch to another instance without explicit user approval
96 - if namespace create fails, mark lifecycle chain as `failed`/`not_ready`, not `completed`
97 - for `InsufficientResources`, ask user to manually scale the instance and retry later
98
99## Key References
100
101- Start here:
102 - `references/README.md`
103 - `references/quick-start.md`
104 - `references/trigger-recognition-guide.md`
105 - `references/core-execution-flow.md`
106 - `references/command-templates.md`
107
108| Document | Purpose |
109|----------|---------|
110| `references/parameter-validation.md` | Pre-execution validation checklist |
111| `references/e2e-playbooks.md` | Complete execution sequences |
112| `references/common-failures.md` | Typical mistakes and fixes |
113| `references/required-confirmation-model.md` | Confirmation gate rules |
114| `references/instance-state-management.md` | Instance state and readiness checks |
115| `references/output-handling.md` | Output parsing and retry policy |
116| `references/verification-method.md` | Verification patterns after create/query |
117| `references/acceptance-criteria.md` | Completion checklist for normal operations |
118| `references/python-environment-setup.md` | Python dependency and auth setup |
119| `references/cli-installation-guide.md` | Aliyun CLI diagnostics setup |
120| `references/ram-policies.md` | Required RAM permissions |
121| `references/related-apis.md` | API and command mapping |
122
123## Output Format
124
125All commands return JSON:
126```json
127{
128 "success": true,
129 "operation": "<command>",
130 "confirmation_check": {
131 "required_flag": "--confirm",
132 "provided": true,
133 "status": "passed"
134 },
135 "data": {},
136 "request_id": "..."
137}
138```
139
140`confirmation_check` appears on create operations and is used for auditable safety evidence.
141
142Exit codes: `0` = success, `1` = error.