Huawei Cloud VPCEP List Skill

Overview

This skill queries the list of VPCEP (VPC Endpoint / VPC Endpoint Service) resources under the current Huawei Cloud tenant / project and returns their key attributes — in particular the VPCEP name list, along with id, status and service_type. It is a read-only inspection skill: it never creates, modifies, or deletes endpoints, endpoint services, or any related resources.

VPCEP contains two resource types, both covered by this skill:

1. VPC Endpoints (终端节点) — private connections from your VPC to endpoint services; listed with hcloud VPCEP ListEndpoints. Each endpoint's display name is the endpoint_service_name field.
2. VPC Endpoint Services (终端节点服务) — services published for others to connect to; listed with hcloud VPCEP ListEndpointService. Each service's name is the service_name field.

Architecture:

Agent → hcloud CLI (KooCLI, VPCEP ListEndpoints / ListEndpointService, primary)
        → Huawei Cloud VPCEP v1 API
       ↘ huaweicloudsdkvpcep Python SDK (fallback)

API paths (verified from huaweicloudsdkvpcep v1 SDK _http_info):

Applicable Scenarios:

• VPCEP inventory: "list all VPCEP endpoints / endpoint services of this tenant"
• Daily inspection: snapshot of all endpoints with their status
• Connectivity review: enumerate endpoints to check which services they connect to
• Fast lookup: retrieve the exact endpoint / service names for follow-up operations

能力边界（Capability Boundary）： 本 Skill 仅查询 VPCEP（终端节点 / 终端节点服务）列表。不创建/删除/修改 终端节点或终端节点服务，也不查询单个资源详情（show-by-id）、连接审批、 权限管理等其它能力。 若用户询问"创建/删除终端节点"、"查询单个终端节点详情"、"审批连接"等， 请明确告知本 Skill 不提供该能力。

Prerequisites

1. hcloud CLI (KooCLI) installed and authenticated — See references/cli-installation-guide.md
2. Python 3.8+ with huaweicloudsdkvpcep package installed (SDK fallback only)
3. IAM permissions — vpcep:endpoints:list and vpcep:endpointServices:list (or the system policy VPCEndpoint ReadOnlyAccess) are required to list VPCEP resources. See references/iam-policies.md
4. A region where the tenant owns VPCEP resources; specify it with --cli-region

Workflow

1. Identify the intent — Confirm whether the user wants VPC endpoints (ListEndpoints), endpoint services (ListEndpointService), or both. The default is endpoints.
2. Confirm region — Default cn-north-4; let the user override with another region if needed.
3. Run the query — Use the CLI command below with the requested filters.
4. Present the results — Show the name (endpoint_service_name / service_name), id, status and service type for each resource; on a name-list request, output just the names.
5. Handle errors — If the CLI fails (credentials/permissions/network), retry with the SDK fallback described in references/verification-method.md.
6. Handle empty results — A filtered query may legitimately return an empty list (endpoints: [] / endpoint_services: [] with HTTP 200). Verify the filter value is legal before reporting "no matching resources" to the user.

Core Commands

KooCLI format: hcloud <Service> <Operation> --cli-region=<region> [--key=value]

List all VPC endpoints

hcloud VPCEP ListEndpoints --cli-region={region} --cli-output=json

Wrapper script (recommended — includes quality reporting)

A Python wrapper is provided at scripts/list_vpcep.py. It runs the CLI commands (or the SDK fallback), prints results as JSON lines, and reports execution quality to the skillsopr operations console via the vendored scripts/skill_quality_sdk.py. Set SKILL_QUALITY_DISABLE=1 to disable reporting (local debugging).

# List endpoint names (one per line)
python3 scripts/list_vpcep.py --names-only

# List endpoint services (names + ids + status)
python3 scripts/list_vpcep.py --resource-type services

# Filter by endpoint service name, paginated
python3 scripts/list_vpcep.py --resource-type endpoints --name my-service --limit 20 --offset 0

# Force SDK executor (fallback path)
python3 scripts/list_vpcep.py --resource-type endpoints --executor sdk

Project scoping note: the hcloud CLI resolves the account default project for the region, while the SDK region default may differ. If the SDK path returns an empty list while the CLI shows resources, pass --project-id <id> to align the SDK scope (the id is visible in the CLI output's project_id field).

List only the VPC endpoint names (endpoint_service_name)

hcloud VPCEP ListEndpoints --cli-region={region} --cli-output=json | jq -r '.endpoints[].endpoint_service_name'

Compact fields: name, id, status, service_type

hcloud VPCEP ListEndpoints --cli-region={region} --cli-output=json \
  | jq -r '.endpoints[] | [.endpoint_service_name, .id, .status, .service_type] | @tsv'

Filter endpoints by endpoint service name

hcloud VPCEP ListEndpoints --cli-region={region} --endpoint_service_name={name} --cli-output=json

Filter endpoints by VPC id

hcloud VPCEP ListEndpoints --cli-region={region} --vpc_id={vpc_id} --cli-output=json

Pagination (limit / offset)

hcloud VPCEP ListEndpoints --cli-region={region} --limit=10 --offset=0 --cli-output=json

List all VPC endpoint services

hcloud VPCEP ListEndpointService --cli-region={region} --cli-output=json

List only the endpoint service names (service_name)

hcloud VPCEP ListEndpointService --cli-region={region} --cli-output=json | jq -r '.endpoint_services[].service_name'

Filter endpoint services by name

hcloud VPCEP ListEndpointService --cli-region={region} --endpoint_service_name={name} --cli-output=json

Filter endpoint services by status

hcloud VPCEP ListEndpointService --cli-region={region} --status={status} --cli-output=json

Note: In the VPCEP v1 list responses:

• ListEndpoints returns endpoints[]; each item's display name is the endpoint_service_name field (the endpoint itself has no separate name field). id is the endpoint id, status is the endpoint status (e.g. accepted), service_type is interface or gateway.
• ListEndpointService returns endpoint_services[]; each item's name is the service_name field, id is the service id, status is the service status (e.g. available).
• limit default is 10 (range 0–500); offset must be an integer greater than 0. Use --limit=500 to fetch more records per page.

Parameter Confirmation

KooCLI Command Format Standard

The KooCLI command format is:

hcloud <Service> <Operation> --cli-region=<region> [--key=value ...]

Note: this is a generic format template, not an executable command — replace <Service>, <Operation>, <region> and the parameters with real values (e.g. hcloud VPCEP ListEndpoints --cli-region=cn-north-4).

• Service name: VPCEP (starts with uppercase).
• Operation name: PascalCase — ListEndpoints, ListEndpointService.
• Region: always pass --cli-region=<region>.
• Simple parameters use --key=value, for example --limit=50.

Reference Documents

• IAM Policies — Least-privilege IAM permissions
• CLI Installation Guide — hcloud CLI setup and authentication
• Verification Method — How to verify the skill works
• Dataflow Diagram — Request flow diagram
• Acceptance Criteria — Acceptance test checklist