huawei-cloud-cce-change-impact-analyzer

Correlate recent CCE changes with incidents using read-only hcloud and kubectl-cce evidence.

1|Updated May 27, 2026
One-click install
npx skills add https://github.com/pancake0001/huawei-cloudnative-skills --skill huawei-cloud-cce-change-impact-analyzer-pancake0001
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: huawei-cloud-cce-change-impact-analyzer
Source: https://github.com/pancake0001/huawei-cloudnative-skills/tree/main/releases/container/cce/huawei-cloud-cce-change-impact-analyzer
Command: npx skills add https://github.com/pancake0001/huawei-cloudnative-skills --skill huawei-cloud-cce-change-impact-analyzer-pancake0001

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? When a Huawei Cloud CCE incident occurs, teams struggle to answer "what changed before the failure". This Skill turns scattered signals—workload rollouts, ConfigMap/Secret metadata, Service, Ingress, NetworkPolicy, RBAC, Node, and cloud-network changes—into an evidence-based causal attribution report with timeline correlation, blast radius, and risk scoring. ## Core Features & Use Cases - Change Candidate Ranking: Builds change candidates from retained ReplicaSet revisions, Kubernetes Events, AOM alarms, metrics, logs, and user-provided change records, then ranks them by temporal order, topology overlap, and response signals. - Blast Radius Mapping: Maps each candidate change to affected Pods, Services, Ingresses/Gateways, Nodes, namespaces, storage objects, and dependency paths. - Structured Evidence Report: Produces a Markdown report with Summary, Change Impact Analysis, Evidence Timeline, Blast Radius, Data Gaps, and Appendix, plus a JSON output schema. - Use Case: After a Deployment rollout, Pods in a namespace start crash-looping. Use this Skill to correlate the rollout history, Events, and AOM alarms, rank the image change as the top risk candidate, and hand off to the workload diagnoser for confirmation. ## Quick Start Analyze whether any recent change in my CCE cluster caused the incident that started at the given fault time, using the specified region, project ID, and cluster ID.

Frequently Asked Questions about huawei-cloud-cce-change-impact-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find what changed before a CCE incident?▼

Provide the region, project ID, cluster ID, and fault time. The Skill collects rollout history, Kubernetes Events, AOM alarms, metrics, and logs, builds change candidates, and ranks them by temporal order, topology overlap, and response signals into a Markdown report.

How does change impact analysis work on Huawei Cloud CCE?▼

It uses read-only hcloud commands for cluster and cloud metadata plus kubectl-cce for current topology, Events, and retained ReplicaSet revisions. Historical evidence comes from delegated event, alarm, metric, and log skills, then candidates are scored and reported.

Can this Skill roll back a faulty deployment or modify resources?▼

No. It is strictly read-only and never runs apply, patch, delete, scale, restart, drain, or rollout undo. Remediation is handed off to the auto-remediation-runner skill only after explicit user confirmation.

Does it collect Secret or ConfigMap values during analysis?▼

No. It collects ConfigMap and Secret metadata only, such as resourceVersion and creation timestamps, and never retrieves Secret values or ConfigMap data. Users may supply sanitized before/after manifests as evidence.

What happens if audit logs or CTS history are unavailable?▼

Missing audit logs, LTS streams, CTS traces, or rollout history are recorded as data gaps that lower confidence. The Skill relies on retained revisions, current Events, and user-provided change records instead of inventing a timeline.

Why does the Skill refuse to proceed without a cluster ID?▼

It requires an explicit region and cluster ID, resolving exact cluster names to a UUID via hcloud before any query. Invalid or ambiguous identifiers stop the operation; it never falls back to a region-wide query or guesses a cluster.