13 KiB
English | 简体中文
HuaweiCloud Python Software Development Kit (Python SDK)
The HuaweiCloud Python SDK allows you to easily work with Huawei Cloud services such as Elastic Compute Service (ECS) and Virtual Private Cloud(VPC) without the need to handle API related tasks.
This document introduces how to obtain and use HuaweiCloud Python SDK.
Getting Started
-
To use HuaweiCloud Python SDK, you must have Huawei Cloud account as well as the Access Key and Secret key of the HuaweiCloud account.
The accessKey is required when initializing
{Service}Client
. You can create an AccessKey in the Huawei Cloud console. For more information, see My Credentials. -
HuaweiCloud Python SDK requires python 3 or later.
Install Python SDK
HuaweiCloud Python SDK supports Python 3 or later. Run python --version
to check the version of Python.
You must install huaweicloudsdkcore
library no matter which product/service development kit you need to use. Take using VPC SDK for example, you need to install huaweicloudsdkcore
library and huaweicloudsdkvpc
library:
-
Use python pip
Run the following command to install the individual libraries of HuaweiCloud services:
# Install the core library pip install huaweicloudsdkcore # Install the VPC management library pip install huaweicloudsdkvpc
-
Install from source
Run the following command to install the individual libraries of HuaweiCloud services:
# Install the core library cd huaweicloudsdkcore-${version} python setup.py install # Install the VPC management library cd huaweicloudsdkvpc-${version} python setup.py install
Use Python SDK
-
Import the required modules as follows:
from huaweicloudsdkcore.auth.credentials import BasicCredentials, GlobalCredentials from huaweicloudsdkcore.exceptions import exceptions from huaweicloudsdkcore.http.http_config import HttpConfig # import specified service library huaweicloudsdk{service}, take vpc for example from huaweicloudsdkvpc.v2 import * # import specified service region file, take vpc for example from huaweicloudsdkvpc.v2.region.vpc_region import VpcRegion
-
Config
{Service}Client
Configurations2.1 Use default configuration
# Use default configuration config = HttpConfig.get_default_config()
2.2 Proxy(Optional)
# Use Proxy if needed config.proxy_protocol = 'http' config.proxy_host = 'proxy.huaweicloud.com' config.proxy_port = 80 config.proxy_user = 'username' config.proxy_password = 'password'
2.3 Connection(Optional)
# seconds to wait for the server to send data before giving up, as a float, or (connect timeout, read timeout) config.timeout = 3
2.4 SSL Certification(Optional)
# Skip ssl certifaction checking while using https protocol if needed config.ignore_ssl_verification = True # Server ca certification if needed config.ssl_ca_cert = ssl_ca_cert
-
Initialize Credentials
Notice: There are two types of HUAWEI CLOUD services, regional services and global services. Global services currently only support BSS, DevStar, EPS, IAM, RMS, TMS.
For Regional services' authentication, projectId is required. For global services' authentication, domainId is required.
If you use {Service}Region to initialize {Service}Client, projectId/domainId supports automatic acquisition, you don't need to configure it when initializing Credentials.
ak
is the access key ID for your account.sk
is the secret access key for your account.project_id
is the ID of your project depending on your region which you want to operate.domain_id
is the account ID of HUAWEI CLOUD.security_token
is the security token when using temporary AK/SK.
3.1 Use permanent AK/SK
# Region services credentials = BasicCredentials(ak, sk, project_id) # Global services credentials = GlobalCredentials(ak, sk, domain_id)
3.2 Use temporary AK/SK
It's preferred to obtain temporary access key, security key and security token first, which could be obtained through permanent access key and security key or through an agency.
Obtaining a temporary access key token through permanent access key and security key, you could refer to document: https://support.huaweicloud.com/en-us/api-iam/iam_04_0002.html . The API mentioned in the document above corresponds to the method of createTemporaryAccessKeyByToken in IAM SDK.
Obtaining a temporary access key and security token through an agency, you could refer to document: https://support.huaweicloud.com/en-us/api-iam/iam_04_0101.html . The API mentioned in the document above corresponds to the method of createTemporaryAccessKeyByAgency in IAM SDK.
# Region services credentials = BasicCredentials(ak, sk, project_id).with_security_token(security_token) # Global services credentials = GlobalCredentials(ak, sk, domain_id).with_security_token(security_token)
-
Initialize the
{Service}Client
instance (Two ways)There are two ways to initialize the instance of {Service}Client.
4.1 Specify Endpoint when initializing {Service}Client
# Initialize specified service client instance, take VpcClient for example client = VpcClient.new_builder(VpcClient) \ .with_http_config(config) \ .with_credentials(credentials) \ .with_endpoint(endpoint) \ .with_file_log(path="test.log", log_level=logging.INFO) \ # Write log files .with_stream_log(log_level=logging.INFO) \ # Write log to console .build()
where:
endpoint
: service specific endpoints, see Regions and Endpoints.with_file_log
:path
: log file path.log_level
: log level, default is INFO.max_bytes
: size of single log file, default is 10485760 bytes.backup_count
: count of log file, default is 5.
with_stream_log
:stream
: stream object, default is sys.stdout.log_level
: log level, default is INFO.
After enabled log, the SDK will print the access log by default, every request will be recorded in console like: '%(asctime)s %(thread)d %(name)s %(filename)s %(lineno)d %(levelname)s %(message)s'
2020-06-16 10:44:02,019 4568 HuaweiCloud-SDK http_handler.py 28 INFO "GET https://vpc.cn-north-1.myhuaweicloud.com/v1/0904f9e1f100d2932f94c01f9aa1cfd7/vpcs" 200 11 0:00:00.543430 b5c927ffdab8401e772e70aa49972037
4.2 Specify Region when initializing {Service}Client (Recommended)
# Initialize specified service client instance, take IamClient for example client = IamClient.new_builder(IamClient) \ .with_http_config(config) \ .with_credentials(credentials) \ .with_region(IamRegion.CN_NORTH_4) \ .with_file_log(path="test.log", log_level=logging.INFO) \ # Write log files .with_stream_log(log_level=logging.INFO) \ # Write log to console .build()
where:
- If you use {Service}Region to initialize {Service}Client, projectId/domainId supports automatic acquisition, you don't need to configure it when initializing Credentials.
- Multiple ProjectId situation is not supported.
-
Send a request and print response.
# Initialize a request and print response, take interface of ListVpcs for example request = ListVpcsRequest() response = client.list_vpcs(request) print(respones)
-
Exceptions
Level 1 Notice Level 2 Notice ConnectionException Connection error HostUnreachableException Host is not reachable SslHandShakeException SSL certification error RequestTimeoutException Request timeout CallTimeoutException timeout for single request RetryOutageException no response after retrying ServiceResponseException service response error ServerResponseException server inner error, http status code: [500,] ClientRequestException invalid request, http status code: [400? 500) # handle exceptions try: request = ListVpcsRequest() response = client.list_vpcs(request) except exception.ServiceResponseException as e: print(e.status_code) print(e.request_id) print(e.error_code) print(e.error_msg)
-
Asynchronous Requests
# Initialize asynchronous client, take VpcAsyncClient for example vpc_client = VpcAsyncClient.new_builder(VpcAsyncClient) \ .with_http_config(config) \ .with_credentials(credentials) \ .with_endpoint(endpoint) \ .build() # send asynchronous request request = ListVpcsRequest() response = client.list_vpcs_async(request) # get asynchronous response print(response.result())
-
Troubleshooting
In some situation, you may need to debug your http requests, original http request and response information will be needed. The SDK provides a listener function to obtain the original encrypted http request and response information.
Warning: The original http log can only be used in troubleshooting scenarios, please do not print the original http header or body in the production environment. The log content is not encrypted and may contain sensitive information such as the password of your ECS or the password of your IAM user account, etc. When the response body is binary content, the body will be printed as "***" without detailed information.
def response_handler(**kwargs): logger = kwargs.get("logger") response = kwargs.get("response") request = response.request base = "> Request %s %s HTTP/1.1" % (request.method, request.path_url) + "\n" if len(request.headers) != 0: base = base + "> Headers:" + "\n" for each in request.headers: base = base + " %s : %s" % (each, request.headers[each]) + "\n" base = base + "> Body: %s" % request.body + "\n\n" base = base + "< Response HTTP/1.1 %s " % response.status_code + "\n" if len(response.headers) != 0: base = base + "< Headers:" + "\n" for each in response.headers: base = base + " %s : %s" % (each, response.headers[each],) + "\n" base = base + "< Body: %s" % response.content logger.debug(base) client = VpcClient.new_builder(VpcClient) \ .with_http_config(config) \ .with_credentials(credentials) \ .with_endpoint(endpoint) \ .with_file_log(path="test.log", log_level=logging.INFO) \ .with_stream_log(log_level=logging.INFO) \ .with_http_handler(HttpHandler().add_response_handler(response_handler)) \ .build()
where:
HttpHandler supports add_request_handler and add_response_handler.
Code example
-
The following example shows how to query a list of VPC in a specific region, you need to substitute your real
{Service}Client
forVpcClient
in actual use. -
Substitute the values for
{your ak string}
,{your sk string}
,{your endpoint string}
and{your project id}
.# coding: utf-8 from huaweicloudsdkcore.auth.credentials import BasicCredentials from huaweicloudsdkcore.exceptions import exceptions from huaweicloudsdkcore.http.http_config import HttpConfig from huaweicloudsdkvpc.v2 import * def list_vpc(client): try: request = ListVpcsRequest() response = client.list_vpcs(request) print(response) except exceptions.ClientRequestException as e: print(e.status_code) print(e.request_id) print(e.error_code) print(e.error_msg) if __name__ == "__main__": ak = "{your ak string}" sk = "{your sk string}" endpoint = "{your endpoint}" project_id = "{your project id}" config = HttpConfig.get_default_config() config.ignore_ssl_verification = True credentials = BasicCredentials(ak, sk, project_id) vpc_client = VpcClient.new_builder(VpcClient) \ .with_http_config(config) \ .with_credentials(credentials) \ .with_endpoint(endpoint) \ .build() list_vpc(vpc_client)