An AI agent skill designed for lifecycle management of dedicated, isolated Huawei Cloud SWR enterprise container registry instances using the hcloud CLI and automated SDK tools.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install huawei-cloud-swr-enterprise-instance
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install huawei-cloud-swr-enterprise-instance using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Huawei Cloud SWR Enterprise Instance Management?
The Huawei Cloud SWR Enterprise Instance Management skill provides developers and AI agents with a comprehensive, automated workflow for managing dedicated, isolated container registry environments on Huawei Cloud. By leveraging Openclaw Skills, team members can provision instances, handle namespaces, manage repositories, and secure software distribution pipelines programmatically through the hcloud CLI and helper Python SDK scripts.
This skill provides a secure integration interface covering everything from network access control (VPC endpoints and public whitelisting) to custom domain binding and credential rotation. Using Openclaw Skills for your infrastructure tasks simplifies cloud resource provisioning, bypassing standard CLI bugs—such as the known SWR CreateInstance project_id collision—using reliable SDK fail-safes.
Huawei Cloud SWR Enterprise Instance Management Use Cases
- Automated provisioning of isolated enterprise container registry instances (swr.ee.basic or swr.ee.professional) matched to specific development or production VPCs.
- Streamlined security namespace management with automatic scanning (auto_scan=true) and vulnerability blocking (prevent_vul=true) activated directly in CI/CD environments.
- Cross-instance image replication and registry sync configurations for globally distributed applications.
- Dynamic credential generation, rotating long-term registry keys, or issuing temporary access tokens for secure Kubernetes deployments.
- Public access whitelisting and custom domain setups for publishing enterprise software products.
How Huawei Cloud SWR Enterprise Instance Management Works
- Service Authorization: The process begins with verification of SWR Enterprise Repository authorization. If unauthorized, the agent prompts the developer to visit the Huawei Cloud Console.
- Credential Loading: The execution context loads Huawei Cloud access keys (AK/SK) and region details securely from local environment variables to authenticate with the hcloud API.
- Instance Provisioning: The workflow leverages a dedicated Python SDK script to spin up the registry instance, bypassing the known duplicate --project_id argument bug in standard hcloud CLI commands.
- Namespace and Repository Setup: Once the instance is active, the skill creates secure namespaces, enabling vulnerability scanning, severity-based blocking, and access control lists.
- Network and Domain Configuration: Private endpoint connections are established inside the designated VPC, and custom domains with security certificates are configured for external access.
- Credential & Job Monitoring: The skill creates temporary or long-term credentials for access and continuously tracks synchronization statistics, background scan results, and task queues.
Huawei Cloud SWR Enterprise Instance Management Setup
Ensure you have authorized the SWR Enterprise Repository feature at the official console before setup.
1. Configure Credentials
Set your Huawei Cloud API keys as environment variables:
export HUAWEI_CLOUD_AK=<your-ak>
export HUAWEI_CLOUD_SK=<your-sk>
export HUAWEI_CLOUD_REGION=cn-north-4
2. Verify CLI Installation
Verify your hcloud CLI installation (version >= 7.2.2 is required):
# Verify version and auto-confirm first-time usage
printf "y\n" | hcloud version
3. Handle CreateInstance Command (SDK Helper)
Due to a parameter duplication bug in the standard hcloud SWR CreateInstance command, use the helper Python SDK script to create instances:
python scripts/swr_instance_helper.py create --name=my-instance --spec=swr.ee.basic \
--vpc_id=<vpc-id> --subnet_id=<subnet-id> \
--enterprise_project_id=0 --description="My enterprise registry"
All other SWR resources can be managed directly via hcloud CLI tools.
Huawei Cloud SWR Enterprise Instance Management Data Schema & Taxonomy
This skill organizes its operations across dedicated SWR resources and records metrics and jobs programmatically. Below is an overview of the key schemas and parameters managed by the skill:
| Resource | Key Attributes / Fields | Purpose |
|---|---|---|
| Instance | name, spec (swr.ee.basic/swr.ee.professional), vpc_id, subnet_id |
Core dedicated registry configurations |
| Namespace | namespace, auto_scan, prevent_vul, severity |
Isolated security boundary for image repos |
| Registry | registry_name, access_user, access_secret |
Cross-registry target settings for sync operations |
| Endpoint | vpc_id, subnet_id, whitelist |
Network isolation and public API control |
| Domain | domain_name, certificate_id |
Custom HTTPS endpoint binding |
Important Path Structure
references/command-reference.md: Detailed CLI invocation templates.references/iam-policies.md: Pre-configured security JSON policies for IAM authorization.scripts/swr_instance_helper.py: Fail-safe Python script to handle instance creation.
Huawei Cloud SWR Enterprise Instance Management Advanced Features
- Python-SDK Failover: Integrates an alternative Python SDK script to bypass the native hcloud CLI argument collision bug during instance creation.
- Automatic Vulnerability Guardrails: Programmatic integration of severity blocking (high, critical) to prevent deploying vulnerable images to production clusters.
- Cross-Region Registry Sync: Automated creation and lifecycle operations of third-party registries to synchronize artifacts seamlessly across cloud regions.
- Self-Healing Permission Workflows: If a command fails due to permission errors, the Openclaw Skills agent automatically reads local IAM reference files and presents custom policies for immediate IAM correction.
- Dual Credential Models: Supports generating both
LtCredential(long-term programmatic credentials for persistent external CI/CD pipelines) andTempCredential(expiring security tokens for ephemeral container runtimes).
SKILL.md
Loading
Related Openclaw Skills
Huawei Cloud SWR Image Automation
Automate cross-region image replication and container deployment triggers on Huawei Cloud SWR using the hcloud CLI.
Google Social Media Finder
An automated agent workflow that queries Google to aggregate a target's social media presence across over a dozen major platforms.
Huawei Cloud SWR Image Governance
Automate user permissions, image retention rules, and secure sharing configurations for Huawei Cloud SWR container registries via the hcloud CLI.
Facebook Page Posts Scraper
A powerful browser automation skill to extract structured post data, interaction counts, and reaction metrics from any public Facebook page.
Huawei Cloud CCI Instance Management
A specialized skill for managing the full lifecycle of Huawei Cloud Cloud Container Instance (CCI) serverless containers using the hcloud CLI.
Huawei Cloud CCE/UCS Workload Manager
A lifecycle management and orchestration skill for running Kubernetes workloads and UCS multi-cluster fleets on Huawei Cloud.
Featured*
