huawei-cloud-cce-root-cause-analyzer

Diagnose cross-domain Huawei Cloud CCE incidents and rank root causes with evidence chains.

1|Updated May 27, 2026
One-click install
npx skills add https://github.com/pancake0001/huawei-cloudnative-skills --skill huawei-cloud-cce-root-cause-analyzer-pancake0001
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: huawei-cloud-cce-root-cause-analyzer
Source: https://github.com/pancake0001/huawei-cloudnative-skills/tree/main/releases/container/cce/huawei-cloud-cce-root-cause-analyzer
Command: npx skills add https://github.com/pancake0001/huawei-cloudnative-skills --skill huawei-cloud-cce-root-cause-analyzer-pancake0001

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? When a CCE incident spans alarms, workload rollouts, Pod events, nodes, network, and storage, engineers struggle to correlate scattered signals into a single root cause. This Skill converges multi-domain evidence into ranked root cause conclusions with confidence scores and a customer-ready Markdown report. ## Core Features & Use Cases - Cross-domain evidence orchestration: Collects read-only evidence through hcloud, kubectl cce, and focused domain diagnoser skills (workload, pod, node, network, storage, change, dependency impact). - Ranked root cause analysis: Builds a unified incident timeline and ranks Top3 causes by timeline alignment, evidence strength, blast radius, counter-evidence, and recoverability. - Structured reporting: Outputs a Markdown report with Summary, Root Cause Analysis, Next Actions, Evidence Timeline, Impact Scope, and data gaps, plus a JSON output schema. - Use Case: A Deployment rollout stalls while AOM alarms fire and Pods enter CrashLoopBackOff. The Skill gathers cluster state, events, and change history, then identifies the failing image pull as the top cause with supporting evidence and verification steps. ## Quick Start Analyze the ongoing incident in my CCE cluster in region cn-north-4 for cluster ID <cluster-uuid> affecting namespace production and rank the most likely root causes.

Frequently Asked Questions about huawei-cloud-cce-root-cause-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the root cause of a CCE incident across multiple domains?▼

Provide the region, cluster ID, and symptoms, and the Skill builds an observability context package, collects Kubernetes evidence via kubectl cce, consults domain diagnosers, and ranks Top3 root causes with evidence and confidence in a Markdown report.

What tools are required for Huawei Cloud CCE root cause analysis?▼

The Skill requires hcloud, kubectl, and the kubectl-cce plugin available as platform-native binaries, plus read-only IAM and Kubernetes RBAC permissions. Missing tooling is installed through the huawei-cloud-kubectl-cce-installer skill.

Can I use a cluster name instead of a cluster UUID for CCE diagnosis?▼

Yes, but the name must match exactly one cluster. The Skill lists clusters via hcloud, resolves a unique exact name match to a UUID, and verifies it with ShowCluster; ambiguous or unmatched names stop the analysis.

Does this Skill perform remediation or modify cluster resources?▼

No, it is strictly read-only and never scales, deletes, patches, drains, or reboots resources. Remediation is only recommended or handed off to the huawei-cloud-cce-auto-remediation-runner skill after explicit user confirmation.

Why does kubectl cce fail with an x509 certificate error?▼

An x509 certificate-validation error indicates upstream TLS verification failure. Retry the same command with --cce-insecure-upstream-tls=true placed immediately after cce, and use this flag only when that specific TLS error occurs.