Huawei Cloud Getting Started
STOP - Do not answer from general knowledge. Follow the procedure below.
KooCLI Installation
This plugin is paired with KooCLI v7.2.12. Install the pinned version:
| OS | Command |
|---|---|
| Windows (PowerShell) | See https://support.huaweicloud.com/qs-hcli/hcli_02_003.html for MSI download |
| Linux | curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-linux-amd64.tar.gz" && tar -zxvf huaweicloud-cli-linux-amd64.tar.gz |
| macOS | curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-mac-amd64.tar.gz" && tar -zxvf huaweicloud-cli-mac-amd64.tar.gz |
See
huaweicloud-cli-and-authskill for arm64 variants and the one-liner (latest) option.
First-Time Setup
- Install KooCLI using command above
- Accept privacy policy (first run only): KooCLI requires one-time privacy agreement. Run
hcloud versionto read the agreement, then respondyto accept. Do not pipeecho "y" |— you must review the terms first. - Configure credentials (unified):
npx huaweicloud-devkit auth init— prefer this overhcloud configure init, which only covers KooCLI. - Verify:
hcloud configure listto confirm profile, thenhcloud ECS ListServersDetails --cli-region=cn-north-4 - For detailed auth guidance, see
huaweicloud-cli-and-authskill
Security: Never pass AK/SK as command-line arguments (
--ak=...). Always usenpx huaweicloud-devkit auth init(unified, interactive) orhcloud configure init(KooCLI only) to avoid secrets in shell history.
Non-Interactive Setup (Agent/CI Environments)
When the interactive TUI is unavailable (Agent tools, CI/CD), configure credentials outside agent chat using the unified entry point:
# User executes in their terminal (NOT in agent chat):
npx huaweicloud-devkit auth init
# Agent verifies through redacted tooling only:
hcloud configure list
Do not instruct the user to run
hcloud configure set --cli-access-key=... --cli-secret-key=...— AK/SK would enter shell history. Usenpx huaweicloud-devkit auth initinstead.
Critical Warnings
| Trap | Why |
|---|---|
| AK/SK must be kept secret | Never commit to git or share |
| Default region applies to all commands | Override with --cli-region= per command |
| Some services region-specific | Not all services available in all regions |
| Privacy policy blocks first run | Run hcloud version to read and accept the agreement. Review the terms before responding y |
What Can I Do? (Quick Index)
| Goal | Skill |
|---|---|
| Create a VM | huawei-ecs |
| Store files | huawei-obs |
| Set up a database | huawei-rds / huawei-gaussdb |
| Create a network | huawei-vpc |
| Manage access | huawei-iam |
| Deploy an app | huawei-deployment |
| Run containers | huawei-cce |
| Build an API | huawei-apig |
| Run serverless | huawei-functiongraph |
| Monitor resources | huawei-cloud-eye |
Pro Tips
- Use
hcloud <Service> --helpto discover operations (see huaweicloud-capability-discovery) - Prepend
hcloud configure set --cli-region=<r>to avoid per-command region flags - Pipe sensitive output through IAM with
--cli-output-format=json