Huawei Rds

Huawei Cloud RDS

STOP - Do not answer from general knowledge. Follow the procedure below.

Always run hcloud RDS <Operation> --help before constructing commands to discover exact parameter names and requirements.

Deployment Routing Guard

If this skill was reached via a DEPLOYMENT intent (the database is part of an application deployment, not a standalone ad-hoc operation), this is a cloud resource purchase: load huawei-iac first for orchestration (mandatory cost+balance gate, batch approval, session state, ordered destroy), then return here for the exact instance commands. Sandbox-deployed workloads (huawei-sandbox) bypass iac - no purchase involved.

Prerequisites

Before creating an RDS instance, you MUST have:

• A VPC and subnet (see huawei-vpc)
• A security group with database port open (MySQL=3306, PostgreSQL=5432, SQL Server=1433)
• Run hcloud RDS ListFlavors --database_name=<engine> --cli-region=<r> to get spec codes

KooCLI Command Format

Copy code
hcloud RDS <Operation> --cli-region=<region> [--key=value ...]

Critical Warnings

Instance Management

List

bashCopy code
hcloud RDS ListInstances --cli-region=<r>
hcloud RDS ListFlavors --database_name=<engine> --cli-region=<r>
hcloud RDS ListDatastores --database_name=<engine> --cli-region=<r>
hcloud RDS ListEngineFlavors --instance_id=<id> --availability_zone_ids=<az> --ha_mode=<mode> --cli-region=<r>

Create Instance

bashCopy code
hcloud RDS CreateInstance --cli-region=<r> \
  --region=<r> \
  --name=<name> \
  --datastore.type=<engine> \
  --datastore.version=<version> \
  --flavor_ref=<flavor-id> \
  --volume.type=<vol-type> \
  --volume.size=<size> \
  --vpc_id=<vpc-id> \
  --subnet_id=<subnet-id> \
  --security_group_id=<sg-id> \
  --availability_zone=<az> \
  --charge_info.charge_mode=<mode>

--password conflicts with a KooCLI system param. Use --cli-jsonInput (see below). The printf "b\n" pipe workaround is broken in KooCLI 7.2.12+.

--cli-jsonInput for CreateInstance

jsonCopy code
{
  "path": {
    "project_id": "<project-id>"
  },
  "body": {
    "name": "<name>",
    "region": "<region>",
    "datastore": { "type": "<engine>", "version": "<version>" },
    "ha": { "mode": "single", "replication_mode": "semisync" },
    "flavor_ref": "<flavor-id>",
    "volume": { "type": "<vol-type>", "size": <gb> },
    "vpc_id": "<vpc-id>",
    "subnet_id": "<subnet-id>",
    "security_group_id": "<sg-id>",
    "availability_zone": "<az>",
    "password": "<pw>",
    "charge_info": { "charge_mode": "postPaid" }
  }
}

Save as rds-create.json then: hcloud RDS CreateInstance --cli-jsonInput=rds-create.json. For project_id, run hcloud IAM KeystoneListProjects.

Modify / Resize

bashCopy code
hcloud RDS StartInstanceRestartAction --instance_id=<id> --cli-region=<r>
hcloud RDS StartResizeFlavorAction --instance_id=<id> --flavor_ref=<new-id> --cli-region=<r>
hcloud RDS StartInstanceEnlargeVolumeAction --instance_id=<id> --volume_size=<gb> --cli-region=<r>
hcloud RDS StartFailover --instance_id=<id> --cli-region=<r>
hcloud RDS UpdateInstanceAlias --instance_id=<id> --alias=<new-name> --cli-region=<r>

Delete

bashCopy code
hcloud RDS DeleteInstance --instance_id=<id> --cli-region=<r>

Backup & Recovery

bashCopy code
hcloud RDS ShowBackupPolicy --instance_id=<id> --cli-region=<r>
hcloud RDS SetBackupPolicy --instance_id=<id> --backup_policy='{"keep_days":7,"period":"1,2,3,4,5,6,7","start_time":"00:00-01:00"}' --cli-region=<r>
hcloud RDS ListBackups --instance_id=<id> --cli-region=<r>
hcloud RDS CreateManualBackup --instance_id=<id> --name=<name> --cli-region=<r>
hcloud RDS ShowRecoveryTimeWindow --instance_id=<id> --cli-region=<r>
hcloud RDS CreateRestoreInstance --instance_id=<id> --backup_id=<id> --name=<new-name> --flavor_ref=<id> --cli-region=<r>

Manual backup deletion is irreversible. Verify backup ID before deleting.

Read Replicas

bashCopy code
# Create a read replica via CreateInstance with --replica_of_id
hcloud RDS CreateInstance --replica_of_id=<primary-id> --name=<name> --flavor_ref=<id> --volume.type=<vol-type> --volume.size=<size> --cli-region=<r>

Fault Diagnosis

bashCopy code
hcloud RDS ListErrorLogs --instance_id=<id> --start_date=2024-01-01T00:00:00Z --end_date=2024-01-31T23:59:59Z --cli-region=<r>
hcloud RDS ListSlowLogs --instance_id=<id> --start_date=... --end_date=... --cli-region=<r>
hcloud RDS ShowReplicationStatus --instance_id=<id> --cli-region=<r>
hcloud RDS ListInstanceDiagnosis --engine=<engine> --cli-region=<r>

Connecting

bashCopy code
hcloud RDS ListInstances --cli-region=<r>  # get private_ips + port
mysql -h <private_ip> -P 3306 -u root -p --ssl-mode=REQUIRED
psql -h <private_ip> -p 5432 -U root -d postgres

hcloud does NOT support SQL execution. Use a database client. For public access, bind an EIP (see huawei-vpc).

Database Client Acquisition

If a database client is not installed on the agent's machine, install one:

If no client can be installed, use the Huawei Cloud Data Studio console: https://console.huaweicloud.com/dms/

Mutating Operations (Require Approval)

Troubleshooting

Security

• MUST use security groups, not open 0.0.0.0/0
• MUST enable SSL for connections
• MUST store passwords in DEW/CSMS (see huawei-cloud-dew-key-management)
• SHOULD enable audit logs for compliance
• SHOULD set backup policy with >= 7 day retention

Cross-Skill References

• VPC/Subnet/Security Group: huawei-vpc
• DEW secrets: huawei-cloud-dew-key-management
• EIP for public access: huawei-vpc
• OBS for backup storage: huawei-obs