Merge pull request #8174 from yousong/automated-cherry-pick-of-#8173-upstream-release-3.4

Automated cherry pick of #8173: dns: isMyDomain: match only strict subdomain of dns_domain
Merge pull request #8167 from lvyangyang/automated-cherry-pick-of-#8153-upstream-release-3.4
2026-09-20 08:03:53 +08:00 · 2020-09-30 16:31:49 +08:00 · 2020-09-30 16:30:46 +08:00 · 2020-09-30 16:17:47 +08:00 · 2020-09-30 16:15:59 +08:00 · 2020-09-30 16:13:47 +08:00
895 changed files with 85585 additions and 12952 deletions
--- a/2
+++ b/2
@@ -314,7 +314,7 @@ VERSION ?= $(shell git describe --exact-match 2> /dev/null || \
                git describe --match=$(git rev-parse --short=8 HEAD) --always --dirty --abbrev=8)

 image:
-	TAG=$(VERSION) REGISTRY=$(REGISTRY) $(ROOT_DIR)/scripts/docker_push.sh $(filter-out $@,$(MAKECMDGOALS))
+	DEBUG=$(DEBUG) ARCH=$(ARCH) TAG=$(VERSION) REGISTRY=$(REGISTRY) $(ROOT_DIR)/scripts/docker_push.sh $(filter-out $@,$(MAKECMDGOALS))

 .PHONY: image

--- a/build/docker/Dockerfile.baremetal-agent
+++ b/build/docker/Dockerfile.baremetal-agent
@@ -1,4 +1,4 @@
-FROM registry.cn-beijing.aliyuncs.com/yunionio/baremetal-base:v0.0.1
+FROM registry.cn-beijing.aliyuncs.com/yunionio/baremetal-base:v0.2

 MAINTAINER "Zexi Li <lizexi@yunionyun.com>"

--- a/build/docker/Dockerfile.baremetal-base
+++ b/build/docker/Dockerfile.baremetal-base
@@ -5,13 +5,16 @@ MAINTAINER "Yaoqi Wan <wanyaoqi@yunionyun.com>"
 RUN mkdir -p /opt/yunion/bin

 RUN apk update && \
-    apk add --no-cache ipmitool ethtool tzdata ca-certificates && \
+    apk add --no-cache ipmitool ethtool tzdata ca-certificates cdrkit coreutils && \
    rm -rf /var/cache/apk/*

 RUN cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

 RUN mkdir -p /opt/cloud/yunion/baremetal

+# udpate latest pci.ids
+RUN wget -O /opt/cloud/yunion/baremetal/pci.ids http://pci-ids.ucw.cz/v2.2/pci.ids
+
 # download baremetal-pxerom-*.x86_64.rpm and unpack rpm in current directory
 COPY ./opt/cloud/yunion/baremetal/bootia32.efi /opt/cloud/yunion/baremetal
 COPY ./opt/cloud/yunion/baremetal/bootx64.efi /opt/cloud/yunion/baremetal
@@ -27,13 +30,3 @@ COPY ./opt/cloud/yunion/baremetal/libutil.c32 /opt/cloud/yunion/baremetal
 COPY ./opt/cloud/yunion/baremetal/lpxelinux.0 /opt/cloud/yunion/baremetal
 COPY ./opt/cloud/yunion/baremetal/menu.c32 /opt/cloud/yunion/baremetal
 COPY ./opt/cloud/yunion/baremetal/pxelinux.0 /opt/cloud/yunion/baremetal
-
-# add mkisofs with bundles libraries
-ADD ./mkisofs /bin/mkisofs
-ADD ./.mkisofs.bin /bin/.mkisofs.bin
-ADD ./bundles/mkisofs /bin/bundles/mkisofs
-# use GNU timeout command replace busybox timeout command
-RUN rm /usr/bin/timeout
-ADD ./timeout /bin/timeout
-ADD ./.timeout.bin /bin/.timeout.bin
-ADD ./bundles/timeout /bin/bundles/timeout
--- a/build/docker/Dockerfile.host-deployer
+++ b/build/docker/Dockerfile.host-deployer
@@ -1,4 +1,4 @@
-FROM registry.cn-beijing.aliyuncs.com/yunionio/host-deployer-base:v0.2
+FROM registry.cn-beijing.aliyuncs.com/yunionio/host-deployer-base:v0.4

 MAINTAINER "Yaoqi Wan wanyaoqi@yunionyun.com"

--- a/build/docker/Dockerfile.monitor
+++ b/build/docker/Dockerfile.monitor
@@ -1,3 +1,4 @@
 FROM registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:v0.2

+COPY ./build/monitor/root/opt/ /opt/
 ADD ./_output/alpine-build/bin/monitor /opt/yunion/bin/monitor
--- a/build/docker/multi-arch/Dockerfile.esxi-agent
+++ b/build/docker/multi-arch/Dockerfile.esxi-agent
@@ -7,7 +7,7 @@ COPY . /root/go/src/yunion.io/x/onecloud
 WORKDIR /root/go/src/yunion.io/x/onecloud
 RUN make cmd/esxi-agent

-FROM FROM registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:v0.2
+FROM registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:v0.2

 MAINTAINER "Yaoqi Wan wanyaoqi@yunionyun.com"

--- a/build/monitor/root/opt/yunion/share/notify_templates/alerter/content@cn/DEFAULT
+++ b/build/monitor/root/opt/yunion/share/notify_templates/alerter/content@cn/DEFAULT
@@ -0,0 +1,17 @@
+## {{.title}}
+- 时间: {{.start_time}}
+- 级别: {{.level}}
+
+{{ range .matches}}
+- 指标: {{.metric}}
+- 触发值: {{html .value_str}}
+
+### 触发条件:
+- {{html $.description}}
+
+### 标签
+ > 名称: {{ index .tags "name" }}
+ > ip: {{ index .tags "ip" }}
+ > 平台: {{ index .tags "brand" }}
+------
+{{- end}}
--- a/build/monitor/root/opt/yunion/share/notify_templates/alerter/content@cn/DEFAULT.email
+++ b/build/monitor/root/opt/yunion/share/notify_templates/alerter/content@cn/DEFAULT.email
@@ -0,0 +1,138 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <meta http-equiv="X-UA-Compatible" content="ie=edge">
+  <title>{{.Title}}</title>
+</head>
+<style>
+  .title {
+    height: 40px;
+    line-height: 40px;
+    width: 960px;
+    background-color: #4da1ff;
+    color: #fff;
+    font-size: 16px;
+    text-align: center;
+    margin: 0 auto;
+  }
+  .table {
+    width: 960px;
+    margin: 0 auto;
+    padding: 10px 30px 0px 30px;
+    font-family:'微软雅黑',Helvetica,Arial,sans-serif;
+    font-size:14px;
+    background-color: #fbfbfb;
+  }
+  .tr-title {
+    height: 10px;
+    border-left: 5px solid #4da1ff;
+    margin-left: 10px;
+    padding: 3px 8px;
+    font-weight: bold;
+  }
+  .td {
+    width: 80px;
+    padding-left: 20px;
+    height: 35px;
+    font-weight: 400;
+  }
+  .link {
+    text-decoration: none;
+    color: #3591FF;
+  }
+  .thead-tr td {
+    border-left: 1px solid #d7d7d7;
+    border-top: 1px solid #d7d7d7;
+    height: 32px;
+    font-size: 14px;
+    background-color: #d7d7d7;
+    text-align: center;
+  }
+  .tbody-tr td {
+    border-left: 1px solid #d7d7d7;
+    border-top: 1px solid #d7d7d7;
+    height: 32px;
+    font-size: 14px;
+    font-weight: 400;
+    text-align: center;
+  }
+  .pb-3 {
+    padding-bottom: 30px;
+  }
+  .resouce-table {
+    width: 98%;
+    color: #717171;
+    border-right: 1px solid #d7d7d7;
+    border-bottom: 1px solid #d7d7d7;
+  }
+</style>
+<body>
+  <h3 class="title">报警提醒</h3>
+  <table border="0" cellspacing="0" cellpadding="0" class="table">
+    <tr><td colspan="4" class="tr-title">报警信息</td></tr>
+    <tr><td style="height: 10px;"></td></tr>
+    <tr>
+      <td class="td">报警策略：</td>
+      <td>{{.name}}</td>
+    </tr>
+    <tr>
+      <td class="td">报警级别：</td>
+      <td>{{.level}}</td>
+    </tr>
+    <tr>
+      <td class="td">报警时间：</td>
+      <td>{{.start_time}}</td>
+    </tr>
+    <tr>
+      <td class="td">策略详情：</td>
+      <td>{{.description}}</td>
+    </tr>
+  </table>
+  <table class="table" style="padding-top: 6px; padding-bottom: 10px;">
+    <tr>
+      <td style="padding-left: 20px; font-size: 14px;">若要查看详情信息，<a class="link" target="_blank" href="{{.web_url}}/commonalerts
+">请登录平台进行查看</a></td>
+    </tr>
+  </table>
+  <table border="0" cellspacing="0" cellpadding="0" class="table pb-3">
+    <tr><td colspan="4" class="tr-title">报警资源</td></tr>
+    <tr><td style="height: 10px;"></td></tr>
+    <tr>
+      <td colspan="4" style="padding: 10px 0 0 20px;">
+        <table cellspacing="0" cellpadding="0" class="resouce-table">
+          <thead>
+            <tr class="thead-tr">
+
+	          <td>名称</td>
+              <td>IP</td>
+              <td>平台</td>
+              <td>触发值</td>
+            </tr>
+          </thead>
+          <tbody>
+			{{- range $i, $Matche := .matches}}
+				<tr class="tbody-tr">
+
+				  <td>
+					{{- index .tags "name"}}
+                  </td>
+				  <td>
+					{{ index .tags "ip" }}
+                  </td>
+				  <td>
+				   	{{ index .tags "brand" }}
+				  </td>
+				  <td>{{$Matche.value_str}}</td>
+				</tr>
+			{{end}}
+          </tbody>
+        </table>
+      </td>
+    </tr>
+    <tr><td style="height: 10px;"></td></tr>
+  </table>
+  <p style="width: 960px; height: 40px; line-height: 40px; margin: 0 auto; background-color: #4da1ff; color: #fff; font-size: 12px; text-align: center; ">本邮件由系统自动发送，请勿直接回复！</p>
+</body>
+</html>
--- a/build/monitor/root/opt/yunion/share/notify_templates/alerter/content@en/DEFAULT
+++ b/build/monitor/root/opt/yunion/share/notify_templates/alerter/content@en/DEFAULT
@@ -0,0 +1,17 @@
+## {{.title}}
+- Time: {{.start_time}}
+- Level: {{.level}}
+
+{{ range .matches}}
+- Metric: {{.metric}}
+- Trigger value: {{html .value_str}}
+
+### Trigger condition:
+- {{html $.description }}
+
+### Label
+ > Name: {{ index .tags "name" }}
+ > IP: {{ index .tags "ip" }}
+ > Brand: {{ index .tags "brand" }}
+------
+{{- end}}
--- a/build/monitor/root/opt/yunion/share/notify_templates/alerter/content@en/DEFAULT.email
+++ b/build/monitor/root/opt/yunion/share/notify_templates/alerter/content@en/DEFAULT.email
@@ -0,0 +1,145 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <meta http-equiv="X-UA-Compatible" content="ie=edge">
+  <title>{{.Title}}</title>
+</head>
+<style>
+  .title {
+    height: 40px;
+    line-height: 40px;
+    width: 960px;
+    background-color: #4da1ff;
+    color: #fff;
+    font-size: 16px;
+    text-align: center;
+    margin: 0 auto;
+  }
+  .table {
+    width: 960px;
+    margin: 0 auto;
+    padding: 10px 30px 0px 30px;
+    font-family:'微软雅黑',Helvetica,Arial,sans-serif;
+    font-size:14px;
+    background-color: #fbfbfb;
+  }
+  .tr-title {
+    height: 10px;
+    border-left: 5px solid #4da1ff;
+    margin-left: 10px;
+    padding: 3px 8px;
+    font-weight: bold;
+  }
+  .td {
+    width: 80px;
+    padding-left: 20px;
+    height: 35px;
+    font-weight: 400;
+  }
+  .link {
+    text-decoration: none;
+    color: #3591FF;
+  }
+  .thead-tr td {
+    border-left: 1px solid #d7d7d7;
+    border-top: 1px solid #d7d7d7;
+    height: 32px;
+    font-size: 14px;
+    background-color: #d7d7d7;
+    text-align: center;
+  }
+  .tbody-tr td {
+    border-left: 1px solid #d7d7d7;
+    border-top: 1px solid #d7d7d7;
+    height: 32px;
+    font-size: 14px;
+    font-weight: 400;
+    text-align: center;
+  }
+  .pb-3 {
+    padding-bottom: 30px;
+  }
+  .resouce-table {
+    width: 98%;
+    color: #717171;
+    border-right: 1px solid #d7d7d7;
+    border-bottom: 1px solid #d7d7d7;
+  }
+</style>
+<body>
+  <h3 class="title">Alert</h3>
+  <table border="0" cellspacing="0" cellpadding="0" class="table">
+    <tr><td colspan="4" class="tr-title">Alert info</td></tr>
+    <tr><td style="height: 10px;"></td></tr>
+    <tr>
+      <td class="td">Alarm strategy：</td>
+      <td>{{.name}}</td>
+    </tr>
+    <tr>
+      <td class="td">Alarm level：</td>
+      <td>{{.level}}</td>
+    </tr>
+    <tr>
+      <td class="td">Alarm time：</td>
+      <td>{{.start_time}}</td>
+    </tr>
+    <tr>
+      <td class="td">Strategy details：</td>
+      <td>{{.description}}</td>
+    </tr>
+  </table>
+  <table class="table" style="padding-top: 6px; padding-bottom: 10px;">
+    <tr>
+      <td style="padding-left: 20px; font-size: 14px;">To view details，<a class="link" target="_blank" href="{{.web_url}}/commonalerts
+">Please log in to the platform to view</a></td>
+    </tr>
+  </table>
+  <table border="0" cellspacing="0" cellpadding="0" class="table pb-3">
+    <tr><td colspan="4" class="tr-title">Alarm resources</td></tr>
+    <tr><td style="height: 10px;"></td></tr>
+    <tr>
+      <td colspan="4" style="padding: 10px 0 0 20px;">
+        <table cellspacing="0" cellpadding="0" class="resouce-table">
+          <thead>
+            <tr class="thead-tr">
+
+	          <td>Name</td>
+              <td>IP</td>
+              <td>Brand</td>
+              <td>Trigger value</td>
+            </tr>
+          </thead>
+          <tbody>
+			{{- range $i, $Matche := .matches}}
+				<tr class="tbody-tr">
+
+				  <td>
+					{{- index .tags "name"}}
+                  </td>
+				  <td>
+					{{ index .tags "ip" }}
+                  </td>
+				  <td>
+				   	{{ index .tags "brand" }}
+				  </td>
+				  <td>{{$Matche.value_str}}</td>
+				</tr>
+			{{end}}
+          </tbody>
+        </table>
+      </td>
+    </tr>
+    <tr><td style="height: 10px;"></td></tr>
+  </table>
+  <p style="width: 960px; height: 40px; line-height: 40px; margin: 0 auto; background-color: #4da1ff; color: #fff; font-size: 12px; text-align: center; ">This email is sent automatically by the system. Please do not reply directly！</p>
+</body>
+</html>
+
+
+
+
+
+
+
--- a/build/monitor/root/opt/yunion/share/notify_templates/alerter/title@cn/DEFAULT
+++ b/build/monitor/root/opt/yunion/share/notify_templates/alerter/title@cn/DEFAULT
@@ -0,0 +1 @@
+{{.title}}
--- a/build/monitor/root/opt/yunion/share/notify_templates/alerter/title@cn/DEFAULT.email
+++ b/build/monitor/root/opt/yunion/share/notify_templates/alerter/title@cn/DEFAULT.email
@@ -0,0 +1 @@
+{{.title}}
--- a/build/monitor/root/opt/yunion/share/notify_templates/alerter/title@en/DEFAULT
+++ b/build/monitor/root/opt/yunion/share/notify_templates/alerter/title@en/DEFAULT
@@ -0,0 +1 @@
+{{.title}}
--- a/build/monitor/root/opt/yunion/share/notify_templates/alerter/title@en/DEFAULT.email
+++ b/build/monitor/root/opt/yunion/share/notify_templates/alerter/title@en/DEFAULT.email
@@ -0,0 +1 @@
+{{.title}}
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_CHANGE_FLAVOR
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_CHANGE_FLAVOR
@@ -1 +0,0 @@
-您的{{ .brand }}主机{{ .name }}的套餐类型已经更改为 CPU:{{ index .flavor_info "cpu" }}核，内存:{{ index .flavor_info "memory" }}M，数据盘:{{ index .flavor_info "datadisk" }}G，带宽: {{ index .flavor_info "ebw" }}M。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_CREATED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_CREATED
@@ -1 +0,0 @@
-您的{{ .brand }}主机{{ .name }}已经创建成功，服务器IP地址为{{ .ips }}，{{ if .account }}初始帐号为{{ .account }}，{{ end }}{{ if .keypair }}访问ssh密钥为{{ .keypair }}，{{ end }}{{ if .password }}初始密码为{{ .password }}，{{ end }}请使用{{ if .windows }}远程桌面连接器(RDC){{ else }}SSH{{ end }}或控制面板控制台访问云主机。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_CREATED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_CREATED_ADMIN
@@ -1 +0,0 @@
-项目{{ .tenant }}的{{ .brand }}主机{{ .name }}已经创建成功。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_DELETED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_DELETED
@@ -1 +0,0 @@
-您的{{ .brand }}主机{{ .name }}已经删除。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_DELETED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_DELETED_ADMIN
@@ -1 +0,0 @@
-项目{{ .tenant }}的{{ .brand }}主机{{ .name }}已经删除。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_PANICKED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_PANICKED
@@ -1 +0,0 @@
-您的{{ .brand }}主机{{ .name }}系统崩溃了: {{ .reason }}
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_REBUILD_ROOT
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content/SERVER_REBUILD_ROOT
@@ -1 +0,0 @@
-您的{{ .brand }}主机{{ .name }}重装系统成功，{{ if .account }}初始帐号为{{ .account }}，{{ end }}{{ if .keypair }}访问密钥为{{ .keypair }}，{{ end }}{{ if .password }}初始密码为{{ .password }}，{{ end }}请使用{{ if .windows }}远程桌面连接器(RDC){{ else }}SSH{{ end }}或控制面板控制台访问云主机。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_CHANGE_FLAVOR
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_CHANGE_FLAVOR
@@ -0,0 +1 @@
+您的{{ .brand }}虚拟机{{ .name }}的套餐类型已经更改为 CPU:{{ index .flavor_info "cpu" }}核，内存:{{ index .flavor_info "memory" }}M，数据盘:{{ index .flavor_info "datadisk" }}G，带宽: {{ index .flavor_info "ebw" }}M。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_CREATED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_CREATED
@@ -0,0 +1 @@
+您的{{ .brand }}虚拟机{{ .name }}已经创建成功，虚拟机IP地址为{{ .ips }}，{{ if .account }}初始帐号为{{ .account }}，{{ end }}{{ if .keypair }}访问ssh密钥为{{ .keypair }}，{{ end }}{{ if .password }}初始密码为{{ .password }}，{{ end }}请使用{{ if .windows }}远程桌面连接器(RDC){{ else }}SSH{{ end }}或控制面板控制台访问虚拟机。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_CREATED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_CREATED_ADMIN
@@ -0,0 +1 @@
+项目{{ .tenant }}的{{ .brand }}虚拟机{{ .name }}已经创建成功。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_DELETED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_DELETED
@@ -0,0 +1 @@
+您的{{ .brand }}虚拟机{{ .name }}已经删除。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_DELETED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_DELETED_ADMIN
@@ -0,0 +1 @@
+项目{{ .tenant }}的{{ .brand }}虚拟机{{ .name }}已经删除。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_PANICKED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_PANICKED
@@ -0,0 +1 @@
+您的{{ .brand }}虚拟机{{ .name }}系统崩溃了: {{ .reason }}
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_REBUILD_ROOT
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SERVER_REBUILD_ROOT
@@ -0,0 +1 @@
+您的{{ .brand }}虚拟机{{ .name }}重装系统成功，{{ if .account }}初始帐号为{{ .account }}，{{ end }}{{ if .keypair }}访问密钥为{{ .keypair }}，{{ end }}{{ if .password }}初始密码为{{ .password }}，{{ end }}请使用{{ if .windows }}远程桌面连接器(RDC){{ else }}SSH{{ end }}或控制面板控制台访问虚拟机。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SYSTEM_ERROR
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SYSTEM_ERROR
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SYSTEM_WARNING
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@cn/SYSTEM_WARNING
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_CHANGE_FLAVOR
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_CHANGE_FLAVOR
@@ -0,0 +1 @@
+The instance type of your {{ .brand }} virtual machine {{ .name }} has been changed to: {{ index .flavor_info "cpu" }}-core CPU, {{ index .flavor_info "memory" }}M memory, {{ index .flavor_info "datadisk" }}G data disk, {{ index .flavor_info "ebw" }}M bandwidth.
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_CREATED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_CREATED
@@ -0,0 +1 @@
+Your {{ .brand }} virtual machine {{ .name }} has been created successfully. The VM's IP address is {{ .ips }}, {{ if .account }}initial account is {{ .account }}, {{ end }}{{ if .keypair }}the access ssh key is {{ .keypair }}, {{ end }}{{ if .password }}the initial password is {{ .password }}, {{ end }}and please use {{ if .windows }}Remote Desktop Connector (RDC){{ else }}SSH{{ end }} or the control panel console to access the VM.
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_CREATED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_CREATED_ADMIN
@@ -0,0 +1 @@
+The {{ .brand }} virtual machine {{ .name }} of the project {{ .tenant }} has been created successfully.
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_DELETED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_DELETED
@@ -0,0 +1 @@
+Your {{ .brand }} virtual machine {{ .name }} has been deleted.
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_DELETED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_DELETED_ADMIN
@@ -0,0 +1 @@
+The {{ .brand }} virtual machine {{ .name }} of the project {{ .tenant }} has been deleted.
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_PANICKED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_PANICKED
@@ -0,0 +1 @@
+Your {{ .brand }} virtual machine {{ .name }} system crashed: {{ .reason }}
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_REBUILD_ROOT
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SERVER_REBUILD_ROOT
@@ -0,0 +1 @@
+Your {{ .brand }} virtual machine {{ .name }} is successfully reinstalled. The VM's {{ if .account }}initial account is {{ .account }}, {{ end }}{{ if .keypair }}the access key is {{ .keypair }}, {{ end }}{{ if .password }}the initial password is {{ .password }}, {{ end }}and please use {{ if .windows }}remote desktop connection (RDC){{ else }}SSH{{ end }} or the control panel console to access the virtual machine.
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SYSTEM_ERROR
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SYSTEM_ERROR
@@ -0,0 +1,6 @@
+System error message
+Resource: {{ .name}}
+Resource ID: {{ .id }}
+Event: {{ .event }}
+Reason: {{ .reason }}
+Time: {{ .created }}
--- a/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SYSTEM_WARNING
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/content@en/SYSTEM_WARNING
@@ -0,0 +1,6 @@
+System warning message
+Resource: {{ .name}}
+Resource ID: {{ .id }}
+Event: {{ .event }}
+Reason: {{ .reason }}
+Time: {{ .created }}
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_CHANGE_FLAVOR
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_CHANGE_FLAVOR
@@ -1 +0,0 @@
-您的{{ .brand }}主机{{ .name }}的套餐类型已经更改为 CPU:{{ index .flavor_info "cpu" }}核，内存:{{ index .flavor_info "memory" }}M，数据盘:{{ index .flavor_info "datadisk" }}G，带宽: {{ index .flavor_info "ebw" }}M。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_CREATED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_CREATED
@@ -1 +0,0 @@
-{{ .brand }}主机{{ .Name }}创建成功
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_CREATED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_CREATED_ADMIN
@@ -1 +0,0 @@
-项目{{ .tenant }}的{{ .brand }}主机{{ .name }}已经创建成功
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_DELETED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_DELETED
@@ -1 +0,0 @@
-{{ .brand }}主机{{ .name }}删除通知
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_DELETED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_DELETED_ADMIN
@@ -1 +0,0 @@
-项目{{ .tenant }}的{{ .brand }}主机{{ .name }}已经删除
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_PANICKED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_PANICKED
@@ -1 +0,0 @@
-您的{{ .brand }}主机{{ .name }}系统崩溃了
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_REBUILD_ROOT
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title/SERVER_REBUILD_ROOT
@@ -1 +0,0 @@
-{{ .brand }}主机{{ .name }}重装系统成功
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_CHANGE_FLAVOR
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_CHANGE_FLAVOR
@@ -0,0 +1 @@
+您的{{ .brand }}虚拟机{{ .name }}的套餐类型已经更改为 CPU:{{ index .flavor_info "cpu" }}核，内存:{{ index .flavor_info "memory" }}M，数据盘:{{ index .flavor_info "datadisk" }}G，带宽: {{ index .flavor_info "ebw" }}M。
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_CREATED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_CREATED
@@ -0,0 +1 @@
+{{ .brand }}虚拟机{{ .Name }}创建成功
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_CREATED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_CREATED_ADMIN
@@ -0,0 +1 @@
+项目{{ .tenant }}的{{ .brand }}虚拟机{{ .name }}已经创建成功
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_DELETED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_DELETED
@@ -0,0 +1 @@
+{{ .brand }}虚拟机{{ .name }}删除通知
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_DELETED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_DELETED_ADMIN
@@ -0,0 +1 @@
+项目{{ .tenant }}的{{ .brand }}虚拟机{{ .name }}已经删除
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_PANICKED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_PANICKED
@@ -0,0 +1 @@
+您的{{ .brand }}虚拟机{{ .name }}系统崩溃了
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_REBUILD_ROOT
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SERVER_REBUILD_ROOT
@@ -0,0 +1 @@
+{{ .brand }}虚拟机{{ .name }}重装系统成功
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SYSTEM_ERROR
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SYSTEM_ERROR
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SYSTEM_WARNING
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@cn/SYSTEM_WARNING
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_CHANGE_FLAVOR
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_CHANGE_FLAVOR
@@ -0,0 +1 @@
+The instance type of your {{ .brand }} virtual machine {{ .name }} has been changed to: {{ index .flavor_info "cpu" }}-core CPU, {{ index .flavor_info "memory" }}M memory, {{ index .flavor_info "datadisk" }}G data disk, {{ index .flavor_info "ebw" }}M bandwidth
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_CREATED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_CREATED
@@ -0,0 +1 @@
+The {{ .brand }} virtual machine {{ .Name }} created successfully
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_CREATED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_CREATED_ADMIN
@@ -0,0 +1 @@
+The {{ .brand }} virtual machine {{ .name }} of the project {{ .tenant }} has been created successfully
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_DELETED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_DELETED
@@ -0,0 +1 @@
+The {{ .brand }} virtual machine {{ .name }} has been deleted
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_DELETED_ADMIN
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_DELETED_ADMIN
@@ -0,0 +1 @@
+The {{ .brand }} virtual machine {{ .name }} of the project {{ .tenant }} has been deleted
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_PANICKED
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_PANICKED
@@ -0,0 +1 @@
+Your {{ .brand }} virtual machine {{ .name }} system crashed
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_REBUILD_ROOT
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SERVER_REBUILD_ROOT
@@ -0,0 +1 @@
+The {{ .brand }} virtual machine {{ .name }} successfully reinstalled the system
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SYSTEM_ERROR
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SYSTEM_ERROR
@@ -0,0 +1 @@
+System error message {{ .name }} {{ .event }}
--- a/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SYSTEM_WARNING
+++ b/build/region/root/opt/yunion/share/notify_templates/compute/title@en/SYSTEM_WARNING
@@ -0,0 +1 @@
+System warning message {{ .name }} {{ .event }}
--- a/cmd/climc/shell/cloudid/cloudusers.go
+++ b/cmd/climc/shell/cloudid/cloudusers.go
@@ -32,6 +32,7 @@ func init() {
 	cmd.Perform("attach-policy", &options.ClouduserPolicyOptions{})
 	cmd.Perform("detach-policy", &options.ClouduserPolicyOptions{})
 	cmd.Perform("change-owner", &options.ClouduserChangeOwnerOptions{})
+	cmd.Perform("reset-password", &options.ClouduserResetPasswordOptions{})
 	cmd.Perform("cloud-user-join-group", &options.ClouduserGroupOptions{})
 	cmd.Perform("cloud-user-leave-group", &options.ClouduserGroupOptions{})
 }
--- a/cmd/climc/shell/compute/cloudproviders.go
+++ b/cmd/climc/shell/compute/cloudproviders.go
@@ -35,6 +35,8 @@ func init() {
 		NoObjectStorage  bool     `help:"filter cloudproviders that has no object storage"`
 		Capability       []string `help:"capability filter" choices:"project|compute|network|loadbalancer|objectstore|rds|cache|event"`
 		Cloudregion      string   `help:"filter cloudproviders by cloudregion"`
+
+		HostSchedtagId string `help:"filter by host schedtag"`
 	}
 	R(&CloudproviderListOptions{}, "cloud-provider-list", "List cloud providers", func(s *mcclient.ClientSession, args *CloudproviderListOptions) error {
 		var params *jsonutils.JSONDict
@@ -62,6 +64,10 @@ func init() {
 			if len(args.Cloudregion) > 0 {
 				params.Add(jsonutils.NewString(args.Cloudregion), "cloudregion")
 			}
+
+			if len(args.HostSchedtagId) > 0 {
+				params.Add(jsonutils.NewString(args.HostSchedtagId), "host_schedtag_id")
+			}
 		}
 		result, err := modules.Cloudproviders.List(s, params)
 		if err != nil {
--- a/cmd/climc/shell/compute/dnsrecordsets.go
+++ b/cmd/climc/shell/compute/dnsrecordsets.go
@@ -0,0 +1,33 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package compute
+
+import (
+	"yunion.io/x/onecloud/cmd/climc/shell"
+	"yunion.io/x/onecloud/pkg/mcclient/modules"
+	"yunion.io/x/onecloud/pkg/mcclient/options"
+)
+
+func init() {
+	cmd := shell.NewResourceCmd(&modules.DnsRecordSets).WithKeyword("dns-recordset")
+	cmd.List(&options.DnsRecordSetListOptions{})
+	cmd.Create(&options.DnsRecordSetCreateOptions{})
+	cmd.Update(&options.DnsRecordSetUpdateOptions{})
+	cmd.Show(&options.DnsRecordSetIdOptions{})
+	cmd.Delete(&options.DnsRecordSetIdOptions{})
+	cmd.Perform("enable", &options.DnsRecordSetIdOptions{})
+	cmd.Perform("disable", &options.DnsRecordSetIdOptions{})
+	cmd.Perform("set-traffic-policies", &options.DnsRecordSetTrafficPolicyOptions{})
+}
--- a/cmd/climc/shell/compute/dnstrafficpolicy.go
+++ b/cmd/climc/shell/compute/dnstrafficpolicy.go
@@ -0,0 +1,27 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package compute
+
+import (
+	"yunion.io/x/onecloud/cmd/climc/shell"
+	"yunion.io/x/onecloud/pkg/mcclient/modules"
+	"yunion.io/x/onecloud/pkg/mcclient/options"
+)
+
+func init() {
+	cmd := shell.NewResourceCmd(&modules.DnsTrafficPolicies).WithKeyword("dns-trafficpolicy")
+	cmd.List(&options.DnsTrafficPolicyListOptions{})
+	cmd.Create(&options.DnsTrafficPolicyCreateOptions{})
+}
--- a/cmd/climc/shell/compute/dnszone.go
+++ b/cmd/climc/shell/compute/dnszone.go
@@ -0,0 +1,37 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package compute
+
+import (
+	"yunion.io/x/onecloud/cmd/climc/shell"
+	"yunion.io/x/onecloud/pkg/mcclient/modules"
+	"yunion.io/x/onecloud/pkg/mcclient/options"
+)
+
+func init() {
+	cmd := shell.NewResourceCmd(&modules.DnsZones).WithKeyword("dns-zone")
+	cmd.List(&options.SDnsZoneListOptions{})
+	cmd.Show(&options.SDnsZoneIdOptions{})
+	cmd.ClassShow(&options.DnsZoneCapabilitiesOptions{})
+	cmd.Delete(&options.SDnsZoneIdOptions{})
+	cmd.Create(&options.DnsZoneCreateOptions{})
+	cmd.Perform("syncstatus", &options.SDnsZoneIdOptions{})
+	cmd.Perform("sync-recordsets", &options.SDnsZoneIdOptions{})
+	cmd.Perform("cache", &options.DnsZoneCacheOptions{})
+	cmd.Perform("uncache", &options.DnsZoneUncacheOptions{})
+	cmd.Perform("purge", &options.SDnsZoneIdOptions{})
+	cmd.Perform("add-vpcs", &options.DnsZoneAddVpcsOptions{})
+	cmd.Perform("remove-vpcs", &options.DnsZoneRemoveVpcsOptions{})
+}
--- a/cmd/climc/shell/compute/dnszonecache.go
+++ b/cmd/climc/shell/compute/dnszonecache.go
@@ -0,0 +1,28 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package compute
+
+import (
+	"yunion.io/x/onecloud/cmd/climc/shell"
+	"yunion.io/x/onecloud/pkg/mcclient/modules"
+	"yunion.io/x/onecloud/pkg/mcclient/options"
+)
+
+func init() {
+	cmd := shell.NewResourceCmd(&modules.DnsZoneCaches).WithKeyword("dns-zone-cache")
+	cmd.List(&options.DnsZoneCacheListOptions{})
+	cmd.Show(&options.DnsZoneCacheIdOptions{})
+	cmd.Delete(&options.DnsZoneCacheIdOptions{})
+}
--- a/cmd/climc/shell/compute/networks.go
+++ b/cmd/climc/shell/compute/networks.go
@@ -20,6 +20,7 @@ import (
 	"yunion.io/x/jsonutils"

 	"yunion.io/x/onecloud/cmd/climc/shell"
+	api "yunion.io/x/onecloud/pkg/apis/compute"
 	"yunion.io/x/onecloud/pkg/mcclient"
 	"yunion.io/x/onecloud/pkg/mcclient/modulebase"
 	"yunion.io/x/onecloud/pkg/mcclient/modules"
@@ -203,15 +204,18 @@ func init() {

 	type NetworkAddressOptions struct {
 		NETWORK string `help:"id or name of network to query"`
+
+		api.GetNetworkAddressesInput
 	}
 	R(&NetworkAddressOptions{}, "network-addresses", "Query used addresses of network", func(s *mcclient.ClientSession, args *NetworkAddressOptions) error {
-		result, err := modules.Networks.GetSpecific(s, args.NETWORK, "addresses", nil)
+		result, err := modules.Networks.GetSpecific(s, args.NETWORK, "addresses", jsonutils.Marshal(args.GetNetworkAddressesInput))
 		if err != nil {
 			return err
 		}
-		addrList, err := result.GetArray("addresses")
-		if err != nil {
-			return err
+		addrList, _ := result.GetArray("addresses")
+		if addrList == nil {
+			fmt.Println("no result")
+			return nil
 		}
 		listResult := modulebase.ListResult{Data: addrList}
 		printList(&listResult, nil)
--- a/cmd/climc/shell/compute/secgroups.go
+++ b/cmd/climc/shell/compute/secgroups.go
@@ -15,194 +15,23 @@
 package compute

 import (
-	"fmt"
-
-	"yunion.io/x/jsonutils"
-
-	"yunion.io/x/onecloud/pkg/mcclient"
+	"yunion.io/x/onecloud/cmd/climc/shell"
 	"yunion.io/x/onecloud/pkg/mcclient/modules"
 	"yunion.io/x/onecloud/pkg/mcclient/options"
 )

 func init() {
-	type SecGroupsListOptions struct {
-		Equals string `help:"Secgroup ID or Name, filter secgroups whose rules equals the specified one"`
-		Server string `help:"Filter secgroups bound to specified server"`
-		options.BaseListOptions
-		Ip        string `help:"Filter secgroup by ip"`
-		Ports     string `help:"Filter secgroup by ports"`
-		Direction string `help:"Filter secgroup by ports" choices:"all|in|out"`
-	}
-
-	R(&SecGroupsListOptions{}, "secgroup-list", "List all security group", func(s *mcclient.ClientSession, args *SecGroupsListOptions) error {
-		params, err := options.ListStructToParams(args)
-		if err != nil {
-			return err
-		}
-		result, err := modules.SecGroups.List(s, params)
-		if err != nil {
-			return err
-		}
-		printList(result, modules.SecGroups.GetColumns(s))
-		return nil
-	})
-
-	type SecGroupsCreateOptions struct {
-		NAME  string   `help:"Name of security group to create"`
-		RULES []string `help:"security rule to create"`
-		Desc  string   `help:"Description"`
-	}
-
-	R(&SecGroupsCreateOptions{}, "secgroup-create", "Create a security group", func(s *mcclient.ClientSession, args *SecGroupsCreateOptions) error {
-		params := jsonutils.NewDict()
-		params.Add(jsonutils.NewString(args.NAME), "name")
-		if len(args.Desc) > 0 {
-			params.Add(jsonutils.NewString(args.Desc), "description")
-		}
-		for i, a := range args.RULES {
-			params.Add(jsonutils.NewString(a), fmt.Sprintf("rule.%d", i))
-		}
-		secgroups, err := modules.SecGroups.Create(s, params)
-		if err != nil {
-			return err
-		}
-		printObject(secgroups)
-		return nil
-
-	})
-
-	type SecGroupsUnionOptions struct {
-		ID        string   `help:"ID or Name of security group destination"`
-		SECGROUPS []string `help:"source IDs or Names of secgroup"`
-	}
-
-	R(&SecGroupsUnionOptions{}, "secgroup-union", "Union secgroups to one secgroup", func(s *mcclient.ClientSession, args *SecGroupsUnionOptions) error {
-		params := jsonutils.NewDict()
-		secgroups := jsonutils.NewArray()
-		for i := 0; i < len(args.SECGROUPS); i++ {
-			secgroups.Add(jsonutils.NewString(args.SECGROUPS[i]))
-		}
-		params.Add(secgroups, "secgroups")
-		secgroup, err := modules.SecGroups.PerformAction(s, args.ID, "union", params)
-		if err != nil {
-			return err
-		}
-		printObject(secgroup)
-		return nil
-
-	})
-
-	type SecGroupsDetailOptions struct {
-		ID string `help:"ID or Name of security group"`
-	}
-	R(&SecGroupsDetailOptions{}, "secgroup-show", "Show details of a security group", func(s *mcclient.ClientSession, args *SecGroupsDetailOptions) error {
-		result, err := modules.SecGroups.Get(s, args.ID, nil)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-	R(&SecGroupsDetailOptions{}, "secgroup-delete", "Delete a security group", func(s *mcclient.ClientSession, args *SecGroupsDetailOptions) error {
-		secgroups, err := modules.SecGroups.Delete(s, args.ID, nil)
-		if err != nil {
-			return err
-		}
-		printObject(secgroups)
-		return nil
-	})
-
-	R(&SecGroupsDetailOptions{}, "secgroup-public", "Make a security group publicly available", func(s *mcclient.ClientSession, args *SecGroupsDetailOptions) error {
-		result, err := modules.SecGroups.PerformAction(s, args.ID, "public", nil)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	R(&SecGroupsDetailOptions{}, "secgroup-private", "Make a security group private", func(s *mcclient.ClientSession, args *SecGroupsDetailOptions) error {
-		result, err := modules.SecGroups.PerformAction(s, args.ID, "private", nil)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	type SecGroupsUpdateOptions struct {
-		ID   string `help:"ID of security group"`
-		Name string `help:"Name of security group to update"`
-		Desc string `help:"Description of security groups"`
-	}
-
-	R(&SecGroupsUpdateOptions{}, "secgroup-update", "Update details of a security group", func(s *mcclient.ClientSession, args *SecGroupsUpdateOptions) error {
-		params := jsonutils.NewDict()
-		if len(args.Name) > 0 {
-			params.Add(jsonutils.NewString(args.Name), "name")
-		}
-		if len(args.Desc) > 0 {
-			params.Add(jsonutils.NewString(args.Desc), "description")
-		}
-		secgroups, err := modules.SecGroups.Update(s, args.ID, params)
-		if err != nil {
-			return err
-		}
-		printObject(secgroups)
-		return nil
-	})
-
-	type SecGroupsAddRuleOptions struct {
-		ID          string `help:"ID or Name of security group"`
-		DIRECTION   string `help:"Direction of rule" choices:"in|out"`
-		PROTOCOL    string `help:"Protocol of rule" choices:"any|tcp|udp|icmp"`
-		ACTION      string `help:"Actin of rule" choices:"allow|deny"`
-		PRIORITY    int    `help:"Priority for rule, range 1 ~ 100"`
-		Cidr        string `help:"IP or CIRD for rule"`
-		Description string `help:"Desciption for rule"`
-		Ports       string `help:"Port for rule"`
-	}
-
-	R(&SecGroupsAddRuleOptions{}, "secgroup-add-rule", "Add rule for a security group", func(s *mcclient.ClientSession, args *SecGroupsAddRuleOptions) error {
-		params, err := options.StructToParams(args)
-		secgroups, err := modules.SecGroups.PerformAction(s, args.ID, "add-rule", params)
-		if err != nil {
-			return err
-		}
-		printObject(secgroups)
-		return nil
-	})
-
-	type SecurityGroupCacheSecurityGroup struct {
-		ID      string `help:"ID or Name of security group"`
-		VPC     string `help:"ID or Name of vpc"`
-		Classic *bool  `help:"Is classic vpc"`
-	}
-
-	R(&SecurityGroupCacheSecurityGroup{}, "secgroup-cache-secgroup", "Cache security group for special vpc", func(s *mcclient.ClientSession, args *SecurityGroupCacheSecurityGroup) error {
-		params, err := options.StructToParams(args)
-		secgroups, err := modules.SecGroups.PerformAction(s, args.ID, "cache-secgroup", params)
-		if err != nil {
-			return err
-		}
-		printObject(secgroups)
-		return nil
-	})
-
-	type SecurityGroupUncacheSecurityGroup struct {
-		ID    string `help:"ID or Name of security group"`
-		CACHE string `help:"ID of secgroup cache"`
-	}
-
-	R(&SecurityGroupUncacheSecurityGroup{}, "secgroup-uncache-secgroup", "Unache special secgroup cache", func(s *mcclient.ClientSession, args *SecurityGroupUncacheSecurityGroup) error {
-		params := jsonutils.NewDict()
-		params.Add(jsonutils.NewString(args.CACHE), "secgroupcache")
-		secgroups, err := modules.SecGroups.PerformAction(s, args.ID, "uncache-secgroup", params)
-		if err != nil {
-			return err
-		}
-		printObject(secgroups)
-		return nil
-	})
-
+	cmd := shell.NewResourceCmd(&modules.SecGroups)
+	cmd.List(&options.SecgroupListOptions{})
+	cmd.Create(&options.SecgroupCreateOptions{})
+	cmd.Show(&options.SecgroupIdOptions{})
+	cmd.Update(&options.BaseUpdateOptions{})
+	cmd.Delete(&options.SecgroupIdOptions{})
+	cmd.Perform("merge", &options.SecgroupMergeOptions{})
+	cmd.Perform("public", &options.SecgroupIdOptions{})
+	cmd.Perform("private", &options.SecgroupIdOptions{})
+	cmd.Perform("add-rule", &options.SecgroupsAddRuleOptions{})
+	cmd.Perform("cache-secgroup", &options.SecurityGroupCacheOptions{})
+	cmd.Perform("uncache-secgroup", &options.SecurityGroupUncacheSecurityGroup{})
+	cmd.Perform("purge", &options.SecgroupIdOptions{})
 }
--- a/cmd/climc/shell/compute/snapshots.go
+++ b/cmd/climc/shell/compute/snapshots.go
@@ -31,6 +31,7 @@ func init() {
 		Local       *bool  `help:"Show local snapshots"`
 		Share       *bool  `help:"Show shared snapshots"`
 		DiskType    string `help:"Filter by disk type" choices:"sys|data"`
+		Server      string `help:"Filter by server" json:"server_id"`
 	}
 	R(&SnapshotsListOptions{}, "snapshot-list", "Show snapshots", func(s *mcclient.ClientSession, args *SnapshotsListOptions) error {
 		params, err := options.ListStructToParams(args)
--- a/cmd/climc/shell/compute/specs.go
+++ b/cmd/climc/shell/compute/specs.go
@@ -70,13 +70,15 @@ func init() {

 	type HostsQueryOptions struct {
 		options.BaseListOptions
-		HostType string   `help:"Host type filter" choices:"baremetal|hypervisor|esxi|kubelet|hyperv"`
-		Ncpu     int64    `help:"#CPU count of host" metavar:"<CPU_COUNT>"`
-		MemSize  int64    `help:"Memory MB size"`
-		DiskSpec []string `help:"Disk spec string, like 'Linux_adapter0_HDD_111Gx4'"`
-		Nic      int64    `help:"#Nics count of host" metavar:"<NIC_COUNT>"`
-		GpuModel []string `help:"GPU model, like 'GeForce GTX 1050 Ti'"`
-		Occupied bool     `help:"show occupid host" json:"-"`
+		HostType    string   `help:"Host type filter" choices:"baremetal|hypervisor|esxi|kubelet|hyperv"`
+		Ncpu        int64    `help:"#CPU count of host" metavar:"<CPU_COUNT>"`
+		MemSize     int64    `help:"Memory MB size"`
+		DiskSpec    []string `help:"Disk spec string, like 'Linux_adapter0_HDD_111Gx4'"`
+		Nic         int64    `help:"#Nics count of host" metavar:"<NIC_COUNT>"`
+		GpuModel    []string `help:"GPU model, like 'GeForce GTX 1050 Ti'"`
+		Occupied    bool     `help:"Show occupid host" json:"-"`
+		Manufacture string   `help:"Manufacture of host"`
+		Model       string   `help:"Model of host"`
 	}
 	R(&HostsQueryOptions{}, "spec-hosts-list", "List hosts according by specs", func(s *mcclient.ClientSession, args *HostsQueryOptions) error {
 		newHostSpecKeys := func() []string {
@@ -90,6 +92,12 @@ func init() {
 			if args.Nic > 0 {
 				keys = append(keys, fmt.Sprintf("nic:%d", args.Nic))
 			}
+			if args.Manufacture != "" {
+				keys = append(keys, fmt.Sprintf("manufacture:%s", args.Manufacture))
+			}
+			if args.Model != "" {
+				keys = append(keys, fmt.Sprintf("model:%s", args.Model))
+			}
 			for _, gm := range args.GpuModel {
 				keys = append(keys, fmt.Sprintf("gpu_model:%s", gm))
 			}
--- a/cmd/climc/shell/compute/storages.go
+++ b/cmd/climc/shell/compute/storages.go
@@ -35,6 +35,8 @@ func init() {
 		Zone     string `help:"List storages in zone" json:"-"`
 		Region   string `help:"List storages in region"`
 		Schedtag string `help:"filter storage by schedtag"`
+
+		HostSchedtagId string `help:"filter storage by host schedtag"`
 	}
 	R(&StorageListOptions{}, "storage-list", "List storages", func(s *mcclient.ClientSession, opts *StorageListOptions) error {
 		params, err := options.ListStructToParams(opts)
--- a/cmd/climc/shell/compute/vpcs.go
+++ b/cmd/climc/shell/compute/vpcs.go
@@ -15,235 +15,24 @@
 package compute

 import (
-	"fmt"
-
-	"yunion.io/x/jsonutils"
-
-	"yunion.io/x/onecloud/pkg/mcclient"
-	"yunion.io/x/onecloud/pkg/mcclient/modulebase"
+	"yunion.io/x/onecloud/cmd/climc/shell"
 	"yunion.io/x/onecloud/pkg/mcclient/modules"
 	"yunion.io/x/onecloud/pkg/mcclient/options"
 )

 func init() {
-	type VpcListOptions struct {
-		options.BaseListOptions
-
-		Usable             *bool  `help:"Filter usable vpcs"`
-		Region             string `help:"ID or Name of region" json:"-"`
-		Globalvpc          string `help:"Filter by globalvpc"`
-		ExternalAccessMode string `help:"Filter by external access mode" choices:"distgw|eip|eip-distgw"`
-	}
-	R(&VpcListOptions{}, "vpc-list", "List VPCs", func(s *mcclient.ClientSession, opts *VpcListOptions) error {
-		params, err := options.ListStructToParams(opts)
-		if err != nil {
-			return err
-		}
-
-		var result *modulebase.ListResult
-		if len(opts.Region) > 0 {
-			result, err = modules.Vpcs.ListInContext(s, params, &modules.Cloudregions, opts.Region)
-		} else {
-			result, err = modules.Vpcs.List(s, params)
-		}
-		if err != nil {
-			return err
-		}
-
-		if len(opts.ExportFile) > 0 {
-			exportList(result, opts.ExportFile, opts.ExportKeys, opts.ExportTexts, modules.Vpcs.GetColumns(s))
-		} else {
-			printList(result, modules.Vpcs.GetColumns(s))
-		}
-		return nil
-	})
-
-	type VpcCreateOptions struct {
-		REGION             string `help:"ID or name of the region where the VPC is created"`
-		Id                 string `help:"ID of the new VPC"`
-		NAME               string `help:"Name of the VPC"`
-		CIDR               string `help:"CIDR block"`
-		Default            bool   `help:"default VPC for the region" default:"false"`
-		Desc               string `help:"Description of the VPC"`
-		Manager            string `help:"ID or Name of Cloud provider"`
-		ExternalAccessMode string `help:"Filter by external access mode" choices:"distgw|eip|eip-distgw" default:"eip-distgw"`
-	}
-	R(&VpcCreateOptions{}, "vpc-create", "Create a VPC", func(s *mcclient.ClientSession, args *VpcCreateOptions) error {
-		params := jsonutils.NewDict()
-		params.Add(jsonutils.NewString(args.NAME), "name")
-		params.Add(jsonutils.NewString(args.CIDR), "cidr_block")
-		if len(args.Id) > 0 {
-			params.Add(jsonutils.NewString(args.Id), "id")
-		}
-		if len(args.ExternalAccessMode) > 0 {
-			params.Add(jsonutils.NewString(args.ExternalAccessMode), "external_access_mode")
-		}
-		if len(args.Desc) > 0 {
-			params.Add(jsonutils.NewString(args.Desc), "description")
-		}
-		if args.Default {
-			params.Add(jsonutils.JSONTrue, "is_default")
-		}
-		if len(args.Manager) > 0 {
-			params.Add(jsonutils.NewString(args.Manager), "manager")
-		}
-		results, err := modules.Vpcs.CreateInContext(s, params, &modules.Cloudregions, args.REGION)
-		if err != nil {
-			return err
-		}
-		printObject(results)
-		return nil
-	})
-
-	type VpcShowOptions struct {
-		ID string `help:"ID or name of the region"`
-	}
-	R(&VpcShowOptions{}, "vpc-show", "Show a VPC", func(s *mcclient.ClientSession, args *VpcShowOptions) error {
-		results, err := modules.Vpcs.Get(s, args.ID, nil)
-		if err != nil {
-			return err
-		}
-		printObject(results)
-		return nil
-	})
-
-	R(&VpcShowOptions{}, "vpc-delete", "Delete a VPC", func(s *mcclient.ClientSession, args *VpcShowOptions) error {
-		results, err := modules.Vpcs.Delete(s, args.ID, nil)
-		if err != nil {
-			return err
-		}
-		printObject(results)
-		return nil
-	})
-
-	type VpcUpdateOptions struct {
-		ID                 string `help:"ID or name of the VPC"`
-		Name               string `help:"New name of the VPC"`
-		Desc               string `help:"Description of the VPC"`
-		ExternalAccessMode string `help:"Filter by external access mode" choices:"distgw|eip|eip-distgw"`
-	}
-	R(&VpcUpdateOptions{}, "vpc-update", "Update a VPC", func(s *mcclient.ClientSession, args *VpcUpdateOptions) error {
-		params := jsonutils.NewDict()
-		if len(args.Name) > 0 {
-			params.Add(jsonutils.NewString(args.Name), "name")
-		}
-		if len(args.ExternalAccessMode) > 0 {
-			params.Add(jsonutils.NewString(args.ExternalAccessMode), "external_access_mode")
-		}
-		if len(args.Desc) > 0 {
-			params.Add(jsonutils.NewString(args.Desc), "description")
-		}
-		results, err := modules.Vpcs.Update(s, args.ID, params)
-		if err != nil {
-			return err
-		}
-		printObject(results)
-		return nil
-	})
-
-	type VpcUpdateStatusOptions struct {
-		ID string `help:"ID or name of the VPC"`
-	}
-	R(&VpcUpdateStatusOptions{}, "vpc-available", "Make vpc status available", func(s *mcclient.ClientSession, args *VpcUpdateStatusOptions) error {
-		params := jsonutils.NewDict()
-		params.Add(jsonutils.NewString("available"), "status")
-		result, err := modules.Vpcs.PerformAction(s, args.ID, "status", params)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	R(&VpcUpdateStatusOptions{}, "vpc-pending", "Make vpc status pending", func(s *mcclient.ClientSession, args *VpcUpdateStatusOptions) error {
-		params := jsonutils.NewDict()
-		params.Add(jsonutils.NewString("pending"), "status")
-		result, err := modules.Vpcs.PerformAction(s, args.ID, "status", params)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	R(&VpcUpdateStatusOptions{}, "vpc-purge", "Purge a managed VPC, not delete the remote entity", func(s *mcclient.ClientSession, args *VpcUpdateStatusOptions) error {
-		result, err := modules.Vpcs.PerformAction(s, args.ID, "purge", nil)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	R(&VpcUpdateStatusOptions{}, "vpc-sync", "Synchronize the status of a vpc", func(s *mcclient.ClientSession, args *VpcUpdateStatusOptions) error {
-		result, err := modules.Vpcs.PerformAction(s, args.ID, "sync", nil)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	R(&VpcUpdateStatusOptions{}, "vpc-syncstatus", "Sync the status of a vpc", func(s *mcclient.ClientSession, args *VpcUpdateStatusOptions) error {
-		result, err := modules.Vpcs.PerformAction(s, args.ID, "syncstatus", nil)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	type VpcPublicOptions struct {
-		ID            string   `help:"ID or name of vpc" json:"-"`
-		Scope         string   `help:"sharing scope" choices:"system|domain"`
-		SharedDomains []string `help:"share to domains"`
-	}
-	R(&VpcPublicOptions{}, "vpc-public", "Make vpc public", func(s *mcclient.ClientSession, args *VpcPublicOptions) error {
-		params := jsonutils.Marshal(args)
-		result, err := modules.Vpcs.PerformAction(s, args.ID, "public", params)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	type VpcPrivateOptions struct {
-		ID string `help:"ID or name of vpc" json:"-"`
-	}
-	R(&VpcPrivateOptions{}, "vpc-private", "Make vpc private", func(s *mcclient.ClientSession, args *VpcPrivateOptions) error {
-		params := jsonutils.Marshal(args)
-		result, err := modules.Vpcs.PerformAction(s, args.ID, "private", params)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	R(&VpcShowOptions{}, "vpc-change-owner-candidate-domains", "Show candiate domains of a vpc for changing owner", func(s *mcclient.ClientSession, args *VpcShowOptions) error {
-		result, err := modules.Vpcs.GetSpecific(s, args.ID, "change-owner-candidate-domains", nil)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	type VpcChangeOwnerOptions struct {
-		ID            string `help:"ID or name of vpc" json:"-"`
-		ProjectDomain string `json:"project_domain" help:"target domain"`
-	}
-	R(&VpcChangeOwnerOptions{}, "vpc-change-owner", "Change owner domain of vpc", func(s *mcclient.ClientSession, args *VpcChangeOwnerOptions) error {
-		if len(args.ProjectDomain) == 0 {
-			return fmt.Errorf("empty project_domain")
-		}
-		params := jsonutils.Marshal(args)
-		ret, err := modules.Vpcs.PerformAction(s, args.ID, "change-owner", params)
-		if err != nil {
-			return err
-		}
-		printObject(ret)
-		return nil
-	})
+	cmd := shell.NewResourceCmd(&modules.Vpcs).WithContextManager(&modules.Cloudregions)
+	cmd.List(&options.VpcListOptions{})
+	cmd.Create(&options.VpcCreateOptions{})
+	cmd.Show(&options.VpcIdOptions{})
+	cmd.Delete(&options.VpcIdOptions{})
+	cmd.Update(&options.VpcUpdateOptions{})
+	cmd.Perform("status", &options.VpcStatusOptions{})
+	cmd.Perform("purge", &options.VpcIdOptions{})
+	cmd.Perform("sync", &options.VpcIdOptions{})
+	cmd.Perform("syncstatus", &options.VpcIdOptions{})
+	cmd.Perform("private", &options.VpcIdOptions{})
+	cmd.Perform("public", &options.BasePublicOptions{})
+	cmd.Perform("change-owner", &options.VpcChangeOwnerOptions{})
+	cmd.Get("vpc-change-owner-candidate-domains", &options.VpcIdOptions{})
 }
--- a/cmd/climc/shell/events/events.go
+++ b/cmd/climc/shell/events/events.go
@@ -20,7 +20,6 @@ import (
 	"yunion.io/x/onecloud/pkg/mcclient"
 	"yunion.io/x/onecloud/pkg/mcclient/modulebase"
 	"yunion.io/x/onecloud/pkg/mcclient/modules"
-	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
 )

 type BaseEventListOptions struct {
@@ -54,23 +53,19 @@ type TypeEventListOptions struct {
 	ID string `help:"" metavar:"OBJ_ID"`
 }

-func doK8sEventList(s *mcclient.ClientSession, args *EventListOptions) error {
-	return doEventList(*k8s.Logs.ResourceManager, s, args)
-}
-
 func doComputeEventList(s *mcclient.ClientSession, args *EventListOptions) error {
-	return doEventList(modules.Logs, s, args)
+	return DoEventList(modules.Logs, s, args)
 }

 func doImageEventList(s *mcclient.ClientSession, args *EventListOptions) error {
-	return doEventList(modules.ImageLogs, s, args)
+	return DoEventList(modules.ImageLogs, s, args)
 }

 func doIdentityEventList(s *mcclient.ClientSession, args *EventListOptions) error {
-	return doEventList(modules.IdentityLogs, s, args)
+	return DoEventList(modules.IdentityLogs, s, args)
 }

-func doEventList(man modulebase.ResourceManager, s *mcclient.ClientSession, args *EventListOptions) error {
+func DoEventList(man modulebase.ResourceManager, s *mcclient.ClientSession, args *EventListOptions) error {
 	params := jsonutils.NewDict()
 	if len(args.Type) > 0 {
 		params.Add(jsonutils.NewStringArray(args.Type), "obj_type")
@@ -190,16 +185,6 @@ func init() {
 		return doComputeEventList(s, &nargs)
 	})

-	R(&TypeEventListOptions{}, "kubecluster-event", "Show operation event logs of kubernetes cluster", func(s *mcclient.ClientSession, args *TypeEventListOptions) error {
-		nargs := EventListOptions{BaseEventListOptions: args.BaseEventListOptions, Id: args.ID, Type: []string{"kubecluster"}}
-		return doK8sEventList(s, &nargs)
-	})
-
-	R(&TypeEventListOptions{}, "kubemachine-event", "Show operation event logs of kubernetes machine", func(s *mcclient.ClientSession, args *TypeEventListOptions) error {
-		nargs := EventListOptions{BaseEventListOptions: args.BaseEventListOptions, Id: args.ID, Type: []string{"kubemachine"}}
-		return doK8sEventList(s, &nargs)
-	})
-
 	R(&TypeEventListOptions{}, "image-event", "Show operation event logs of glance images", func(s *mcclient.ClientSession, args *TypeEventListOptions) error {
 		nargs := EventListOptions{BaseEventListOptions: args.BaseEventListOptions, Id: args.ID, Type: []string{"image"}}
 		return doImageEventList(s, &nargs)
--- a/cmd/climc/shell/helper.go
+++ b/cmd/climc/shell/helper.go
@@ -78,7 +78,7 @@ type ICreateOpt interface {
 	IOpt
 }

-func (cmd ResourceCmd) runWithDesc(action, desc string, args interface{}, callback interface{}) {
+func (cmd ResourceCmd) RunWithDesc(action, desc string, args interface{}, callback interface{}) {
 	man := cmd.manager
 	prefix := cmd.prefix
 	if prefix != "" {
@@ -98,8 +98,8 @@ func (cmd ResourceCmd) runWithDesc(action, desc string, args interface{}, callba
 	R(args, fmt.Sprintf("%s%s-%s", prefix, cmd.keyword, action), desc, callback)
 }

-func (cmd ResourceCmd) run(action string, args interface{}, callback interface{}) {
-	cmd.runWithDesc(action, "", args, callback)
+func (cmd ResourceCmd) Run(action string, args interface{}, callback interface{}) {
+	cmd.RunWithDesc(action, "", args, callback)
 }

 func (cmd ResourceCmd) List(args IListOpt) {
@@ -130,7 +130,7 @@ func (cmd ResourceCmd) List(args IListOpt) {
 		printList(result, man.GetColumns(s))
 		return nil
 	}
-	cmd.run("list", args, callback)
+	cmd.Run("list", args, callback)
 }

 func (cmd ResourceCmd) Create(args ICreateOpt) {
@@ -147,7 +147,7 @@ func (cmd ResourceCmd) Create(args ICreateOpt) {
 		printObject(ret)
 		return nil
 	}
-	cmd.run("create", args, callback)
+	cmd.Run("create", args, callback)
 }

 type IIdOpt interface {
@@ -177,7 +177,24 @@ func (cmd ResourceCmd) Show(args IShowOpt) {
 		printObject(ret)
 		return nil
 	}
-	cmd.runWithDesc("show", fmt.Sprintf("Show details of a %s", man.GetKeyword()), args, callback)
+	cmd.RunWithDesc("show", fmt.Sprintf("Show details of a %s", man.GetKeyword()), args, callback)
+}
+
+func (cmd ResourceCmd) ClassShow(args IShowOpt) {
+	man := cmd.manager
+	callback := func(s *mcclient.ClientSession, args IShowOpt) error {
+		params, err := args.Params()
+		if err != nil {
+			return err
+		}
+		ret, err := man.(modulebase.Manager).Get(s, args.GetId(), params)
+		if err != nil {
+			return err
+		}
+		printObject(ret)
+		return nil
+	}
+	cmd.RunWithDesc(args.GetId(), fmt.Sprintf("Show %s of a %s", args.GetId(), man.GetKeyword()), args, callback)
 }

 type IGetActionOpt interface {
@@ -230,7 +247,7 @@ func (cmd ResourceCmd) Custom(action TCustomAction, funcname string, args IGetAc
 		}
 		return nil
 	}
-	cmd.runWithDesc(funcname, fmt.Sprintf("Get %s of a %s", funcname, man.GetKeyword()), args, callback)
+	cmd.RunWithDesc(funcname, fmt.Sprintf("Get %s of a %s", funcname, man.GetKeyword()), args, callback)
 }

 type IDeleteOpt interface {
@@ -252,7 +269,7 @@ func (cmd ResourceCmd) Delete(args IDeleteOpt) {
 		printObject(ret)
 		return nil
 	}
-	cmd.runWithDesc("delete", fmt.Sprintf("Delete %s", man.GetKeyword()), args, callback)
+	cmd.RunWithDesc("delete", fmt.Sprintf("Delete %s", man.GetKeyword()), args, callback)
 }

 type IWithDescOpt interface {
@@ -278,7 +295,7 @@ func (cmd ResourceCmd) Perform(action string, args IPerformOpt) {
 		printObject(ret)
 		return nil
 	}
-	cmd.run(action, args, callback)
+	cmd.Run(action, args, callback)
 }

 func (cmd ResourceCmd) PerformClass(action string, args IOpt) {
@@ -295,7 +312,7 @@ func (cmd ResourceCmd) PerformClass(action string, args IOpt) {
 		printObject(ret)
 		return nil
 	}
-	cmd.run(action, args, callback)
+	cmd.Run(action, args, callback)
 }

 type IBatchPerformOpt interface {
@@ -314,7 +331,7 @@ func (cmd ResourceCmd) BatchPerform(action string, args IBatchPerformOpt) {
 		printBatchResults(ret, man.GetColumns(s))
 		return nil
 	}
-	cmd.run(action, args, callback)
+	cmd.Run(action, args, callback)
 }

 type IGetOpt interface {
@@ -336,7 +353,7 @@ func (cmd ResourceCmd) Get(specific string, args IGetOpt) {
 		printObject(ret)
 		return nil
 	}
-	cmd.runWithDesc(specific, fmt.Sprintf("Get %s of a %s", specific, man.GetKeyword()), args, callback)
+	cmd.RunWithDesc(specific, fmt.Sprintf("Get %s of a %s", specific, man.GetKeyword()), args, callback)
 }

 type IUpdateOpt interface {
@@ -358,7 +375,7 @@ func (cmd ResourceCmd) Update(args IUpdateOpt) {
 		printObject(ret)
 		return nil
 	}
-	cmd.run("update", args, callback)
+	cmd.Run("update", args, callback)
 }

 type IMetadataOpt interface {
@@ -380,7 +397,7 @@ func (cmd ResourceCmd) GetMetadata(args IMetadataOpt) {
 		printObject(ret)
 		return nil
 	}
-	cmd.runWithDesc("metadata", fmt.Sprintf("Show metadata of a %s", man.GetKeyword()), args, callback)
+	cmd.RunWithDesc("metadata", fmt.Sprintf("Show metadata of a %s", man.GetKeyword()), args, callback)
 }

 type IBatchDeleteOpt interface {
@@ -399,7 +416,7 @@ func (cmd ResourceCmd) BatchDelete(args IBatchDeleteOpt) {
 		printBatchResults(ret, man.GetColumns(s))
 		return nil
 	}
-	cmd.run("delete", args, callback)
+	cmd.Run("delete", args, callback)
 }

 type IBatchDeleteWithParamOpt interface {
@@ -422,7 +439,7 @@ func (cmd ResourceCmd) BatchDeleteWithParam(args IBatchDeleteWithParamOpt) {
 		printBatchResults(ret, man.GetColumns(s))
 		return nil
 	}
-	cmd.run("delete", args, callback)
+	cmd.Run("delete", args, callback)
 }

 type IBatchPutOpt interface {
@@ -441,7 +458,7 @@ func (cmd ResourceCmd) BatchPut(args IBatchPutOpt) {
 		printBatchResults(ret, man.GetColumns(s))
 		return nil
 	}
-	cmd.run("update", args, callback)
+	cmd.Run("update", args, callback)
 }

 type JointCmd struct {
@@ -481,7 +498,7 @@ func (cmd JointCmd) List(args IJointListOpt) {
 		printList(result, man.GetColumns(s))
 		return nil
 	}
-	cmd.runWithDesc("list", fmt.Sprintf("list %s %s pairs", man.MasterManager().KeyString(), man.SlaveManager().KeyString()), args, callback)
+	cmd.RunWithDesc("list", fmt.Sprintf("list %s %s pairs", man.MasterManager().KeyString(), man.SlaveManager().KeyString()), args, callback)
 }

 type IJointShowOpt interface {
@@ -504,5 +521,5 @@ func (cmd JointCmd) Show(args IJointShowOpt) {
 		printObject(result)
 		return nil
 	}
-	cmd.run("show", args, callback)
+	cmd.Run("show", args, callback)
 }
--- a/cmd/climc/shell/identity/role_assignments.go
+++ b/cmd/climc/shell/identity/role_assignments.go
@@ -23,20 +23,25 @@ import (

 func init() {
 	type RoleAssignmentsOptions struct {
-		Effective     bool   `help:"Include role assignment of group members"`
-		System        bool   `help:"Include system user account"`
-		Policy        bool   `help:"Show matched policies"`
-		Domain        string `help:"Role assignments for domain"`
-		User          string `help:"For user"`
-		UserDomain    string `help:"Domain for user"`
-		Group         string `help:"For group"`
-		GroupDomain   string `help:"Domain for group"`
-		Project       string `help:"Role assignments for project"`
-		ProjectDomain string `help:"Domain for project"`
-		Role          string `help:"Role assignments for role"`
-		RoleDomain    string `help:"Domain for role"`
-		Limit         int64  `help:"maximal returned number of rows"`
-		Offset        int64  `help:"offset index of returned results"`
+		Effective     bool     `help:"Include role assignment of group members"`
+		System        bool     `help:"Include system user account"`
+		Policy        bool     `help:"Show matched policies"`
+		Domain        string   `help:"Role assignments for domain"`
+		User          string   `help:"For user"`
+		UserDomain    string   `help:"Domain for user"`
+		Group         string   `help:"For group"`
+		GroupDomain   string   `help:"Domain for group"`
+		Project       string   `help:"Role assignments for project"`
+		ProjectDomain string   `help:"Domain for project"`
+		Role          string   `help:"Role assignments for role"`
+		RoleDomain    string   `help:"Domain for role"`
+		Limit         int64    `help:"maximal returned number of rows"`
+		Offset        int64    `help:"offset index of returned results"`
+		Users         []string `help:"fitler by users id or name"`
+		Groups        []string `help:"fitler by users id or name"`
+		Roles         []string `help:"fitler by users id or name"`
+		Projects      []string `help:"fitler by users id or name"`
+		Domains       []string `help:"fitler by users id or name"`
 	}
 	R(&RoleAssignmentsOptions{}, "role-assignments", "List all role assignments", func(s *mcclient.ClientSession, args *RoleAssignmentsOptions) error {
 		query := jsonutils.NewDict()
@@ -85,6 +90,21 @@ func init() {
 			}
 			query.Add(jsonutils.NewString(rid), "role", "id")
 		}
+		if len(args.Users) > 0 {
+			query.Add(jsonutils.NewStringArray(args.Users), "users")
+		}
+		if len(args.Groups) > 0 {
+			query.Add(jsonutils.NewStringArray(args.Groups), "groups")
+		}
+		if len(args.Roles) > 0 {
+			query.Add(jsonutils.NewStringArray(args.Roles), "roles")
+		}
+		if len(args.Projects) > 0 {
+			query.Add(jsonutils.NewStringArray(args.Projects), "projects")
+		}
+		if len(args.Domains) > 0 {
+			query.Add(jsonutils.NewStringArray(args.Domains), "domains")
+		}
 		if args.Limit > 0 {
 			query.Add(jsonutils.NewInt(args.Limit), "limit")
 		}
--- a/cmd/climc/shell/identity/users.go
+++ b/cmd/climc/shell/identity/users.go
@@ -262,6 +262,8 @@ func init() {

 		// DefaultProject string `help:"Default project"`
 		// Option []string `help:"User options"`
+
+		SkipPasswordComplexityCheck bool `help:"skip_password_complexity_check"`
 	}
 	R(&UserUpdateOptions{}, "user-update", "Update a user", func(s *mcclient.ClientSession, args *UserUpdateOptions) error {
 		query := jsonutils.NewDict()
@@ -282,6 +284,9 @@ func init() {
 		}
 		if args.Password != nil {
 			params.Add(jsonutils.NewString(*args.Password), "password")
+			if args.SkipPasswordComplexityCheck {
+				params.Add(jsonutils.JSONTrue, "skip_password_complexity_check")
+			}
 		}
 		if len(args.Displayname) > 0 {
 			params.Add(jsonutils.NewString(args.Displayname), "displayname")
--- a/cmd/climc/shell/k8s/certs.go
+++ b/cmd/climc/shell/k8s/certs.go
@@ -15,27 +15,11 @@
 package k8s

 import (
-	"fmt"
-
-	"yunion.io/x/onecloud/pkg/mcclient"
 	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
 	o "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
 )

 func initKubeCerts() {
-	cmdN := func(action string) string {
-		return fmt.Sprintf("kubecert-%s", action)
-	}
-	R(&o.CertListOptions{}, cmdN("list"), "List k8s cluster certificates key pairs", func(s *mcclient.ClientSession, args *o.CertListOptions) error {
-		params, err := args.Params()
-		if err != nil {
-			return err
-		}
-		ret, err := k8s.KubeCerts.List(s, params)
-		if err != nil {
-			return err
-		}
-		printList(ret, k8s.KubeCerts.GetColumns(s))
-		return nil
-	})
+	cmd := NewK8sResourceCmd(k8s.KubeCerts)
+	cmd.List(new(o.CertListOptions))
 }
--- a/cmd/climc/shell/k8s/clusters.go
+++ b/cmd/climc/shell/k8s/clusters.go
@@ -26,38 +26,24 @@ import (

 func initKubeCluster() {
 	cmdN := func(action string) string {
-		return fmt.Sprintf("kubecluster-%s", action)
+		return fmt.Sprintf("k8s-cluster-%s", action)
 	}
-	R(&o.ClusterListOptions{}, cmdN("list"), "List k8s clusters", func(s *mcclient.ClientSession, args *o.ClusterListOptions) error {
-		result, err := k8s.KubeClusters.List(s, args.Params())
-		if err != nil {
-			return err
-		}
-		printList(result, k8s.KubeClusters.GetColumns(s))
-		return nil
-	})
-
-	R(&o.IdentOptions{}, cmdN("show"), "Show details of a cluster", func(s *mcclient.ClientSession, args *o.IdentOptions) error {
-		result, err := k8s.KubeClusters.Get(s, args.ID, nil)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	R(&o.KubeClusterCreateOptions{}, cmdN("create"), "Create k8s cluster", func(s *mcclient.ClientSession, args *o.KubeClusterCreateOptions) error {
-		params, err := args.Params()
-		if err != nil {
-			return err
-		}
-		cluster, err := k8s.KubeClusters.Create(s, params)
-		if err != nil {
-			return err
-		}
-		printObject(cluster)
-		return nil
-	})
+	cmd := NewK8sResourceCmd(k8s.KubeClusters)
+	cmd.SetKeyword("cluster")
+	cmd.ShowEvent()
+	cmd.List(new(o.ClusterListOptions))
+	cmd.Show(new(o.IdentOptions))
+	cmd.Create(new(o.KubeClusterCreateOptions))
+	cmd.Perform("sync", new(o.ClusterSyncOptions))
+	cmd.Perform("syncstatus", new(o.IdentOptions))
+	cmd.Get("components-status", new(o.IdentOptions))
+	cmd.Get("api-resources", new(o.IdentOptions))
+	cmd.Get("cluster-users", new(o.IdentOptions))
+	cmd.Get("cluster-user-groups", new(o.IdentOptions))
+	cmd.Perform("purge", new(o.ClusterPurgeOptions))
+	cmd.Perform("delete-machines", new(o.KubeClusterDeleteMachinesOptions))
+	cmd.Perform("add-machines", new(o.KubeClusterAddMachinesOptions))
+	cmd.PerformClass("gc", new(o.ClusterGCOpts))

 	R(&o.KubeClusterImportOptions{}, cmdN("import"), "Import k8s cluster", func(s *mcclient.ClientSession, args *o.KubeClusterImportOptions) error {
 		params, err := args.Params()
@@ -78,41 +64,6 @@ func initKubeCluster() {
 		return nil
 	})

-	R(&o.KubeClusterAddMachinesOptions{}, cmdN("add-machines"), "Add machines to cluster", func(s *mcclient.ClientSession, args *o.KubeClusterAddMachinesOptions) error {
-		params, err := args.Params()
-		if err != nil {
-			return err
-		}
-		ret, err := k8s.KubeClusters.PerformAction(s, args.ID, "add-machines", params)
-		if err != nil {
-			return err
-		}
-		printObject(ret)
-		return nil
-	})
-
-	R(&o.KubeClusterDeleteMachinesOptions{}, cmdN("delete-machines"), "Delete machines in cluster", func(s *mcclient.ClientSession, args *o.KubeClusterDeleteMachinesOptions) error {
-		params, err := args.Params()
-		if err != nil {
-			return err
-		}
-		ret, err := k8s.KubeClusters.PerformAction(s, args.ID, "delete-machines", params)
-		if err != nil {
-			return err
-		}
-		printObject(ret)
-		return nil
-	})
-
-	R(&o.IdentOptions{}, cmdN("terminate"), "Terminate cluster", func(s *mcclient.ClientSession, args *o.IdentOptions) error {
-		ret, err := k8s.KubeClusters.PerformAction(s, args.ID, "terminate", nil)
-		if err != nil {
-			return err
-		}
-		printObject(ret)
-		return nil
-	})
-
 	R(&o.IdentOptions{}, cmdN("kubeconfig"), "Generate kubeconfig of a cluster", func(s *mcclient.ClientSession, args *o.IdentOptions) error {
 		ret, err := k8s.KubeClusters.GetSpecific(s, args.ID, "kubeconfig", nil)
 		if err != nil {
@@ -179,55 +130,6 @@ func initKubeCluster() {
 		return nil
 	})

-	R(&o.IdentOptions{}, cmdN("syncstatus"), "Sync cluster status", func(s *mcclient.ClientSession, args *o.IdentOptions) error {
-		ret, err := k8s.KubeClusters.PerformAction(s, args.ID, "syncstatus", nil)
-		if err != nil {
-			return err
-		}
-		printObject(ret)
-		return nil
-	})
-
-	R(&o.ClusterSyncOptions{}, cmdN("sync"), "Sync cluster k8s resources", func(s *mcclient.ClientSession, args *o.ClusterSyncOptions) error {
-		param, err := args.Params()
-		if err != nil {
-			return err
-		}
-		ret, err := k8s.KubeClusters.PerformAction(s, args.ID, "sync", param)
-		if err != nil {
-			return err
-		}
-		printObject(ret)
-		return nil
-	})
-
-	R(&o.IdentOptions{}, cmdN("public"), "Make cluster public", func(s *mcclient.ClientSession, args *o.IdentOptions) error {
-		ret, err := k8s.KubeClusters.PerformAction(s, args.ID, "public", nil)
-		if err != nil {
-			return err
-		}
-		printObject(ret)
-		return nil
-	})
-
-	R(&o.IdentOptions{}, cmdN("private"), "Make cluster private", func(s *mcclient.ClientSession, args *o.IdentOptions) error {
-		ret, err := k8s.KubeClusters.PerformAction(s, args.ID, "private", nil)
-		if err != nil {
-			return err
-		}
-		printObject(ret)
-		return nil
-	})
-
-	R(&o.IdentOptions{}, cmdN("components-status"), "Get cluster component status", func(s *mcclient.ClientSession, args *o.IdentOptions) error {
-		ret, err := k8s.KubeClusters.GetSpecific(s, args.ID, "components-status", nil)
-		if err != nil {
-			return err
-		}
-		printObject(ret)
-		return nil
-	})
-
 	R(&o.ClusterComponentTypeOptions{}, cmdN("component-setting"), "Get cluster component setting", func(s *mcclient.ClientSession, args *o.ClusterComponentTypeOptions) error {
 		q := jsonutils.NewDict()
 		q.Add(jsonutils.NewString(args.TYPE), "type")
--- a/cmd/climc/shell/k8s/configmap.go
+++ b/cmd/climc/shell/k8s/configmap.go
@@ -16,8 +16,11 @@ package k8s

 import (
 	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
+	o "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
 )

 func initConfigMap() {
 	initK8sNamespaceResource("configmap", k8s.ConfigMaps)
+	cmd := NewK8sResourceCmd(k8s.ConfigMaps)
+	cmd.Create(&o.ConfigMapCreateOptions{})
 }
--- a/cmd/climc/shell/k8s/cronjob.go
+++ b/cmd/climc/shell/k8s/cronjob.go
@@ -15,30 +15,11 @@
 package k8s

 import (
-	"yunion.io/x/onecloud/pkg/mcclient"
 	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
 	o "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
 )

 func initCronJob() {
 	cmd := initK8sNamespaceResource("cronjob", k8s.CronJobs)
-	cmdN := cmd.CommandNameFactory
-	createCmd := NewCommand(
-		&o.CronJobCreateOptions{},
-		cmdN("create"),
-		"Create cronjob resource",
-		func(s *mcclient.ClientSession, args *o.CronJobCreateOptions) error {
-			params, err := args.Params()
-			if err != nil {
-				return err
-			}
-			ret, err := k8s.CronJobs.Create(s, params)
-			if err != nil {
-				return err
-			}
-			printObject(ret)
-			return nil
-		})
-
-	cmd.AddR(createCmd)
+	cmd.Create(new(o.CronJobCreateOptions))
 }
--- a/cmd/climc/shell/k8s/deployment.go
+++ b/cmd/climc/shell/k8s/deployment.go
@@ -15,48 +15,12 @@
 package k8s

 import (
-	"yunion.io/x/onecloud/pkg/mcclient"
 	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
 	o "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
 )

 func initDeployment() {
 	cmd := initK8sNamespaceResource("deployment", k8s.Deployments)
-	cmdN := cmd.CommandNameFactory
-
-	createCmd := NewCommand(
-		&o.DeploymentCreateOptions{},
-		cmdN("create"),
-		"Create deployment resource",
-		func(s *mcclient.ClientSession, args *o.DeploymentCreateOptions) error {
-			params, err := args.Params()
-			if err != nil {
-				return err
-			}
-			ret, err := k8s.Deployments.Create(s, params)
-			if err != nil {
-				return err
-			}
-			printObject(ret)
-			return nil
-		})
-
-	updateCmd := NewCommand(
-		&o.DeploymentUpdateOptions{},
-		cmdN("update"),
-		"Update deployment resource",
-		func(s *mcclient.ClientSession, args *o.DeploymentUpdateOptions) error {
-			params, err := args.Params()
-			if err != nil {
-				return err
-			}
-			ret, err := k8s.Deployments.Update(s, args.NAME, params)
-			if err != nil {
-				return err
-			}
-			printObjectYAML(ret)
-			return nil
-		})
-
-	cmd.AddR(createCmd, updateCmd)
+	cmd.Create(new(o.DeploymentCreateOptions))
+	cmd.Update(new(o.DeploymentUpdateOptions))
 }
--- a/cmd/climc/shell/k8s/fed_clusterrole.go
+++ b/cmd/climc/shell/k8s/fed_clusterrole.go
@@ -0,0 +1,37 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package k8s
+
+import (
+	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
+	options "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
+)
+
+func init() {
+	cmd := newFedResourceCmd(k8s.FederatedClusterRoles)
+	cmd.Create(new(options.FedClusterRoleCreateOptions)).
+		List(new(options.FedResourceListOptions)).
+		Show(new(options.IdentOptions)).
+		Delete(new(options.IdentOptions)).
+		AttachCluster(new(options.FedResourceJointClusterAttachOptions)).
+		DetachCluster(new(options.FedResourceJointClusterDetachOptions)).
+		SyncCluster(new(options.FedResourceJointClusterDetachOptions)).
+		Sync(new(options.FedResourceIdOptions)).
+		ShowEvent()
+
+	cmd.ClassShow(new(options.FedApiResourecesOptions))
+	cmd.ClassShow(new(options.FedClusterUsersOptions))
+	cmd.ClassShow(new(options.FedClusterUserGroupsOptions))
+}
--- a/cmd/climc/shell/k8s/fed_clusterrole_cluster.go
+++ b/cmd/climc/shell/k8s/fed_clusterrole_cluster.go
@@ -0,0 +1,27 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package k8s
+
+import (
+	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
+	options "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
+)
+
+func init() {
+	cmd := NewK8sJointCmd(&k8s.FederatedClusterRoleClusters)
+
+	cmd.List(new(options.FedJointClusterBaseListOptions))
+	cmd.Show(new(options.FedResourceJointClusterShowOptions))
+}
--- a/cmd/climc/shell/k8s/fed_clusterrolebinding.go
+++ b/cmd/climc/shell/k8s/fed_clusterrolebinding.go
@@ -0,0 +1,33 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package k8s
+
+import (
+	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
+	options "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
+)
+
+func init() {
+	cmd := newFedResourceCmd(k8s.FederatedClusterRoleBindings)
+	cmd.Create(new(options.FedClusterRoleBindingCreatOpt)).
+		List(new(options.FedResourceListOptions)).
+		Show(new(options.IdentOptions)).
+		Delete(new(options.IdentOptions)).
+		AttachCluster(new(options.FedResourceJointClusterAttachOptions)).
+		DetachCluster(new(options.FedResourceJointClusterDetachOptions)).
+		SyncCluster(new(options.FedResourceJointClusterDetachOptions)).
+		Sync(new(options.FedResourceIdOptions)).
+		ShowEvent()
+}
--- a/cmd/climc/shell/k8s/fed_helper.go
+++ b/cmd/climc/shell/k8s/fed_helper.go
@@ -0,0 +1,71 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package k8s
+
+import (
+	"yunion.io/x/onecloud/cmd/climc/shell"
+	"yunion.io/x/onecloud/pkg/mcclient/modulebase"
+)
+
+type fedResourceCmd struct {
+	*K8sResourceCmd
+}
+
+func newFedResourceCmd(manager modulebase.IBaseManager) *fedResourceCmd {
+	cmd := NewK8sResourceCmd(manager)
+	return &fedResourceCmd{
+		K8sResourceCmd: cmd,
+	}
+}
+
+func (c *fedResourceCmd) List(args shell.IListOpt) *fedResourceCmd {
+	c.K8sResourceCmd.List(args)
+	return c
+}
+
+func (c *fedResourceCmd) Show(args shell.IShowOpt) *fedResourceCmd {
+	c.K8sResourceCmd.Show(args)
+	return c
+}
+
+func (c *fedResourceCmd) Create(args shell.ICreateOpt) *fedResourceCmd {
+	c.K8sResourceCmd.Create(args)
+	return c
+}
+
+func (c *fedResourceCmd) Delete(args shell.IDeleteOpt) *fedResourceCmd {
+	c.K8sResourceCmd.Delete(args)
+	return c
+}
+
+func (c *fedResourceCmd) AttachCluster(args shell.IPerformOpt) *fedResourceCmd {
+	c.K8sResourceCmd.Perform("attach-cluster", args)
+	return c
+}
+
+func (c *fedResourceCmd) DetachCluster(args shell.IPerformOpt) *fedResourceCmd {
+	c.K8sResourceCmd.Perform("detach-cluster", args)
+	return c
+}
+
+func (c *fedResourceCmd) SyncCluster(args shell.IPerformOpt) *fedResourceCmd {
+	c.K8sResourceCmd.Perform("sync-cluster", args)
+	return c
+}
+
+func (c *fedResourceCmd) Sync(args shell.IPerformOpt) *fedResourceCmd {
+	c.K8sResourceCmd.Perform("sync", args)
+	return c
+}
--- a/cmd/climc/shell/k8s/fed_namespace.go
+++ b/cmd/climc/shell/k8s/fed_namespace.go
@@ -0,0 +1,34 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package k8s
+
+import (
+	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
+	options "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
+)
+
+func init() {
+	cmd := newFedResourceCmd(k8s.FederatedNamespaces)
+
+	cmd.List(new(options.FedNamespaceListOptions)).
+		Show(new(options.IdentOptions)).
+		Create(new(options.FedNamespaceCreateOptions)).
+		Delete(new(options.IdentOptions)).
+		AttachCluster(new(options.FedResourceJointClusterAttachOptions)).
+		DetachCluster(new(options.FedResourceJointClusterDetachOptions)).
+		SyncCluster(new(options.FedResourceJointClusterDetachOptions)).
+		Sync(new(options.IdentOptions)).
+		ShowEvent()
+}
--- a/cmd/climc/shell/k8s/fed_namespace_cluster.go
+++ b/cmd/climc/shell/k8s/fed_namespace_cluster.go
@@ -0,0 +1,27 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package k8s
+
+import (
+	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
+	options "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
+)
+
+func init() {
+	cmd := NewK8sJointCmd(&k8s.FederatedNamespaceClusters)
+
+	cmd.List(new(options.FedNamespaceClusterListOptions))
+	cmd.Show(new(options.FedResourceJointClusterShowOptions))
+}
--- a/cmd/climc/shell/k8s/fed_role.go
+++ b/cmd/climc/shell/k8s/fed_role.go
@@ -0,0 +1,37 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package k8s
+
+import (
+	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
+	options "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
+)
+
+func init() {
+	cmd := newFedResourceCmd(k8s.FederatedRoles)
+	cmd.Create(new(options.FedRoleCreateOptions)).
+		List(new(options.FedRoleListOptions)).
+		Show(new(options.IdentOptions)).
+		Delete(new(options.IdentOptions)).
+		AttachCluster(new(options.FedResourceJointClusterAttachOptions)).
+		DetachCluster(new(options.FedResourceJointClusterDetachOptions)).
+		SyncCluster(new(options.FedResourceJointClusterDetachOptions)).
+		Sync(new(options.IdentOptions)).
+		ShowEvent()
+
+	cmd.ClassShow(new(options.FedApiResourecesOptions))
+	cmd.ClassShow(new(options.FedClusterUsersOptions))
+	cmd.ClassShow(new(options.FedClusterUserGroupsOptions))
+}
--- a/cmd/climc/shell/k8s/fed_role_cluster.go
+++ b/cmd/climc/shell/k8s/fed_role_cluster.go
@@ -0,0 +1,27 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package k8s
+
+import (
+	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
+	options "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
+)
+
+func init() {
+	cmd := NewK8sJointCmd(&k8s.FederatedRoleClusters)
+
+	cmd.List(new(options.FedNamespaceJointClusterListOpt))
+	cmd.Show(new(options.FedResourceJointClusterShowOptions))
+}
--- a/cmd/climc/shell/k8s/fed_rolebinding.go
+++ b/cmd/climc/shell/k8s/fed_rolebinding.go
@@ -0,0 +1,34 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package k8s
+
+import (
+	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
+	options "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
+)
+
+func init() {
+	cmd := newFedResourceCmd(k8s.FederatedRoleBindings)
+
+	cmd.Create(new(options.FedRoleBindingCreateOpt)).
+		List(new(options.FedNamespaceResourceListOptions)).
+		Show(new(options.IdentOptions)).
+		Delete(new(options.IdentOptions)).
+		AttachCluster(new(options.FedResourceJointClusterAttachOptions)).
+		DetachCluster(new(options.FedResourceJointClusterDetachOptions)).
+		SyncCluster(new(options.FedResourceJointClusterDetachOptions)).
+		Sync(new(options.IdentOptions)).
+		ShowEvent()
+}
--- a/cmd/climc/shell/k8s/helper.go
+++ b/cmd/climc/shell/k8s/helper.go
@@ -0,0 +1,136 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package k8s
+
+import (
+	"fmt"
+	"io/ioutil"
+	"os"
+	"os/exec"
+
+	"github.com/ghodss/yaml"
+
+	"yunion.io/x/jsonutils"
+
+	"yunion.io/x/onecloud/cmd/climc/shell"
+	"yunion.io/x/onecloud/cmd/climc/shell/events"
+	"yunion.io/x/onecloud/pkg/mcclient"
+	"yunion.io/x/onecloud/pkg/mcclient/modulebase"
+	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
+)
+
+type K8sResourceCmd struct {
+	*shell.ResourceCmd
+	manager modulebase.IBaseManager
+}
+
+func NewK8sResourceCmd(manager modulebase.IBaseManager) *K8sResourceCmd {
+	cmd := new(K8sResourceCmd)
+	cmd.ResourceCmd = shell.NewResourceCmd(manager).SetPrefix("k8s")
+	cmd.manager = manager
+	return cmd
+}
+
+func (cmd *K8sResourceCmd) GetClusterResManager() k8s.IClusterResourceManager {
+	return cmd.manager.(k8s.IClusterResourceManager)
+}
+
+func (cmd *K8sResourceCmd) ShowEvent() *K8sResourceCmd {
+	callback := func(s *mcclient.ClientSession, opt *events.TypeEventListOptions) error {
+		args := &events.EventListOptions{BaseEventListOptions: opt.BaseEventListOptions, Id: opt.ID, Type: []string{cmd.manager.GetKeyword()}}
+		return events.DoEventList(*k8s.Logs.ResourceManager, s, args)
+	}
+	cmd.RunWithDesc("event", fmt.Sprintf("Show operation event logs of k8s %s", cmd.manager.GetKeyword()), new(events.TypeEventListOptions), callback)
+	return cmd
+}
+
+func (cmd *K8sResourceCmd) EditRaw(opt shell.IGetOpt) *K8sResourceCmd {
+	man := cmd.GetClusterResManager()
+	callback := func(s *mcclient.ClientSession, args shell.IGetOpt) error {
+		params, err := opt.Params()
+		if err != nil {
+			return err
+		}
+		rawData, err := man.GetRaw(s, args.GetId(), params.(*jsonutils.JSONDict))
+		if err != nil {
+			return err
+		}
+		yamlBytes := rawData.YAMLString()
+		tempfile, err := ioutil.TempFile("", fmt.Sprintf("k8s-%s*.yaml", args.GetId()))
+		if err != nil {
+			return err
+		}
+		defer os.Remove(tempfile.Name())
+		if _, err := tempfile.Write([]byte(yamlBytes)); err != nil {
+			return err
+		}
+		if err := tempfile.Close(); err != nil {
+			return err
+		}
+
+		cmd := exec.Command("vim", tempfile.Name())
+		cmd.Stdin = os.Stdin
+		cmd.Stdout = os.Stdout
+		if err := cmd.Run(); err != nil {
+			return err
+		}
+		content, err := ioutil.ReadFile(tempfile.Name())
+		if err != nil {
+			return err
+		}
+		jsonBytes, err := yaml.YAMLToJSON(content)
+		if err != nil {
+			return err
+		}
+		body, err := jsonutils.Parse(jsonBytes)
+		if err != nil {
+			return err
+		}
+		params, err = args.Params()
+		if err != nil {
+			return err
+		}
+		if _, err := man.UpdateRaw(s, args.GetId(), params.(*jsonutils.JSONDict), body.(*jsonutils.JSONDict)); err != nil {
+			return err
+		}
+		return nil
+	}
+	cmd.RunWithDesc("edit-raw", fmt.Sprintf("Edit and update k8s %s by raw data", man.GetKeyword()), opt, callback)
+	return cmd
+}
+
+func (cmd *K8sResourceCmd) ShowRaw(args shell.IGetOpt) *K8sResourceCmd {
+	man := cmd.GetClusterResManager()
+	callback := func(s *mcclient.ClientSession, args shell.IGetOpt) error {
+		params, err := args.Params()
+		if err != nil {
+			return err
+		}
+		ret, err := man.GetRaw(s, args.GetId(), params.(*jsonutils.JSONDict))
+		if err != nil {
+			return err
+		}
+		printObjectYAML(ret)
+		return nil
+	}
+	cmd.RunWithDesc("show-raw", fmt.Sprintf("Show k8s %s raw data", man.GetKeyword()), args, callback)
+	return cmd
+}
+
+func NewK8sJointCmd(manager modulebase.JointManager) *shell.JointCmd {
+	cmd := shell.NewJointCmd(manager)
+	cmd.SetPrefix("k8s")
+	return cmd
+}
--- a/cmd/climc/shell/k8s/ingress.go
+++ b/cmd/climc/shell/k8s/ingress.go
@@ -15,25 +15,11 @@
 package k8s

 import (
-	"yunion.io/x/onecloud/pkg/mcclient"
 	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
 	o "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
 )

 func initIngress() {
-	cmdN := initK8sNamespaceResource("ingress", k8s.Ingresses)
-	createCmd := NewCommand(
-		&o.IngressCreateOptions{},
-		cmdN.CommandNameFactory("create"),
-		"Create ingress rules to service",
-		func(s *mcclient.ClientSession, args *o.IngressCreateOptions) error {
-			spec := args.Params()
-			ret, err := k8s.Ingresses.Create(s, spec)
-			if err != nil {
-				return err
-			}
-			printObject(ret)
-			return nil
-		})
-	cmdN.AddR(createCmd)
+	cmd := initK8sNamespaceResource("ingress", k8s.Ingresses)
+	cmd.Create(new(o.IngressCreateOptions))
 }
--- a/cmd/climc/shell/k8s/job.go
+++ b/cmd/climc/shell/k8s/job.go
@@ -15,31 +15,12 @@
 package k8s

 import (
-	"yunion.io/x/onecloud/pkg/mcclient"
 	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
 	o "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
 )

 func initJob() {
 	cmd := initK8sNamespaceResource("job", k8s.Jobs)
-	cmdN := cmd.CommandNameFactory

-	createCmd := NewCommand(
-		&o.JobCreateOptions{},
-		cmdN("create"),
-		"Create job resource",
-		func(s *mcclient.ClientSession, args *o.JobCreateOptions) error {
-			params, err := args.Params()
-			if err != nil {
-				return err
-			}
-			ret, err := k8s.Jobs.Create(s, params)
-			if err != nil {
-				return err
-			}
-			printObject(ret)
-			return nil
-		})
-
-	cmd.AddR(createCmd)
+	cmd.Create(new(o.JobCreateOptions))
 }
--- a/cmd/climc/shell/k8s/k8s.go
+++ b/cmd/climc/shell/k8s/k8s.go
@@ -16,16 +16,10 @@ package k8s

 import (
 	"fmt"
-	"io/ioutil"
-	"os"
-	"os/exec"
-
-	"github.com/ghodss/yaml"

 	"yunion.io/x/jsonutils"

 	"yunion.io/x/onecloud/cmd/climc/shell"
-	"yunion.io/x/onecloud/pkg/mcclient"
 	"yunion.io/x/onecloud/pkg/mcclient/modulebase"
 	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
 	o "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
@@ -78,10 +72,6 @@ func resourceCmdN(prefix, suffix string) string {
 	return fmt.Sprintf("k8s-%s-%s", prefix, suffix)
 }

-func kubeResourceCmdN(prefix, suffix string) string {
-	return fmt.Sprintf("kube-%s-%s", prefix, suffix)
-}
-
 func clusterContext(clusterId string) modulebase.ManagerContext {
 	return modulebase.ManagerContext{
 		InstanceManager: k8s.KubeClusters,
@@ -93,241 +83,24 @@ func printObjectYAML(obj jsonutils.JSONObject) {
 	fmt.Println(obj.YAMLString())
 }

-type Cmd struct {
-	Options  interface{}
-	Command  string
-	Desc     string
-	Callback interface{}
+func initK8sClusterResource(kind string, manager modulebase.Manager) *K8sResourceCmd {
+	cmd := NewK8sResourceCmd(manager)
+	cmd.SetKeyword(kind)
+	cmd.List(new(o.ResourceListOptions))
+	cmd.Show(new(o.ResourceGetOptions))
+	cmd.BatchDeleteWithParam(new(o.ResourceDeleteOptions))
+	cmd.ShowEvent()
+	return cmd
 }

-func NewCommand(options interface{}, command string, desc string, callback interface{}) *Cmd {
-	return &Cmd{
-		Options:  options,
-		Command:  command,
-		Desc:     desc,
-		Callback: callback,
-	}
-}
-
-func (c Cmd) R() {
-	R(c.Options, c.Command, c.Desc, c.Callback)
-}
-
-type ShellCommands struct {
-	Commands           []*Cmd
-	CommandNameFactory func(suffix string) string
-}
-
-func NewShellCommands(cmdN func(suffix string) string) *ShellCommands {
-	c := &ShellCommands{
-		CommandNameFactory: cmdN,
-	}
-	c.Commands = make([]*Cmd, 0)
-	return c
-}
-
-func (c *ShellCommands) AddR(rs ...*Cmd) *ShellCommands {
-	for _, r := range rs {
-		r.R()
-		c.Commands = append(c.Commands, r)
-	}
-	return c
-}
-
-func initK8sClusterResource(kind string, manager modulebase.Manager) *ShellCommands {
-	cmdN := NewCmdNameFactory(kind)
-	return NewShellCommands(cmdN.Do).AddR(
-		NewK8sResourceListCmd(cmdN, manager),
-		NewK8sResourceGetCmd(cmdN, manager),
-		NewK8sResourceDeleteCmd(cmdN, manager),
-	)
-}
-
-func NewK8sResourceListCmd(cmdN CmdNameFactory, manager modulebase.Manager) *Cmd {
-	return NewCommand(
-		&o.ResourceListOptions{},
-		cmdN.Do("list"),
-		fmt.Sprintf("List k8s %s", cmdN.Kind),
-		func(s *mcclient.ClientSession, args *o.ResourceListOptions) error {
-			params, err := args.Params()
-			if err != nil {
-				return err
-			}
-			ret, err := manager.List(s, params)
-			if err != nil {
-				return err
-			}
-			PrintListResultTable(ret, manager.(k8s.ListPrinter), s)
-			return nil
-		},
-	)
-}
-
-type CmdNameFactory struct {
-	Kind string
-	Do   func(string) string
-}
-
-func NewCmdNameFactory(kind string) CmdNameFactory {
-	return CmdNameFactory{
-		Kind: kind,
-		Do: func(suffix string) string {
-			return resourceCmdN(kind, suffix)
-		},
-	}
-}
-
-func NewK8sNsResourceListCmd(cmdN CmdNameFactory, manager modulebase.Manager) *Cmd {
-	return NewCommand(
-		&o.NamespaceResourceListOptions{},
-		cmdN.Do("list"),
-		fmt.Sprintf("List k8s %s", cmdN.Kind),
-		func(s *mcclient.ClientSession, args *o.NamespaceResourceListOptions) error {
-			params, err := args.Params()
-			if err != nil {
-				return err
-			}
-			ret, err := manager.List(s, params)
-			if err != nil {
-				return err
-			}
-			PrintListResultTable(ret, manager.(k8s.ListPrinter), s)
-			return nil
-		},
-	)
-}
-
-func NewK8sResourceGetCmd(cmdN CmdNameFactory, manager modulebase.Manager) *Cmd {
-	return NewCommand(
-		&o.ResourceGetOptions{},
-		cmdN.Do("show"),
-		fmt.Sprintf("Show k8s %s", cmdN.Kind),
-		func(s *mcclient.ClientSession, args *o.ResourceGetOptions) error {
-			ret, err := manager.Get(s, args.NAME, args.Params())
-			if err != nil {
-				return err
-			}
-			printObjectYAML(ret)
-			return nil
-		},
-	)
-}
-
-func NewK8sNsResourceGetCmd(cmdN CmdNameFactory, manager modulebase.Manager) *Cmd {
-	return NewCommand(
-		&o.NamespaceResourceGetOptions{},
-		cmdN.Do("show"),
-		fmt.Sprintf("Show k8s %s", cmdN.Kind),
-		func(s *mcclient.ClientSession, args *o.NamespaceResourceGetOptions) error {
-			ret, err := manager.Get(s, args.NAME, args.Params())
-			if err != nil {
-				return err
-			}
-			printObjectYAML(ret)
-			return nil
-		},
-	)
-}
-
-func NewK8sNsResourceGetRawCmd(cmdN CmdNameFactory, manager k8s.IClusterResourceManager) *Cmd {
-	return NewCommand(
-		&o.NamespaceResourceGetOptions{},
-		cmdN.Do("show-raw"),
-		fmt.Sprintf("Show k8s %s raw data", cmdN.Kind),
-		func(s *mcclient.ClientSession, args *o.NamespaceResourceGetOptions) error {
-			ret, err := manager.GetRaw(s, args.NAME, args.Params())
-			if err != nil {
-				return err
-			}
-			printObjectYAML(ret)
-			return nil
-		},
-	)
-}
-
-func NewK8sResourceEditRawCmd(cmdN CmdNameFactory, manager k8s.IClusterResourceManager) *Cmd {
-	return NewCommand(
-		&o.NamespaceResourceGetOptions{},
-		cmdN.Do("edit-raw"),
-		fmt.Sprintf("Edit and update k8s %s raw data", cmdN.Kind),
-		func(s *mcclient.ClientSession, args *o.NamespaceResourceGetOptions) error {
-			rawData, err := manager.GetRaw(s, args.NAME, args.Params())
-			if err != nil {
-				return err
-			}
-			yamlBytes := rawData.YAMLString()
-			tempfile, err := ioutil.TempFile("", fmt.Sprintf("k8s-%s-%s*.yaml", cmdN.Kind, args.NAME))
-			if err != nil {
-				return err
-			}
-			defer os.Remove(tempfile.Name())
-			if _, err := tempfile.Write([]byte(yamlBytes)); err != nil {
-				return err
-			}
-			if err := tempfile.Close(); err != nil {
-				return err
-			}
-
-			cmd := exec.Command("vim", tempfile.Name())
-			cmd.Stdin = os.Stdin
-			cmd.Stdout = os.Stdout
-			if err := cmd.Run(); err != nil {
-				return err
-			}
-			content, err := ioutil.ReadFile(tempfile.Name())
-			if err != nil {
-				return err
-			}
-			jsonBytes, err := yaml.YAMLToJSON(content)
-			if err != nil {
-				return err
-			}
-			body, err := jsonutils.Parse(jsonBytes)
-			if err != nil {
-				return err
-			}
-			if _, err := manager.UpdateRaw(s, args.NAME, args.Params(), body.(*jsonutils.JSONDict)); err != nil {
-				return err
-			}
-			return nil
-		},
-	)
-}
-
-func NewK8sResourceDeleteCmd(cmdN CmdNameFactory, manager modulebase.Manager) *Cmd {
-	return NewCommand(
-		&o.ResourceDeleteOptions{},
-		cmdN.Do("delete"),
-		fmt.Sprintf("Delete k8s %s", cmdN.Kind),
-		func(s *mcclient.ClientSession, args *o.ResourceDeleteOptions) error {
-			ret := manager.BatchDelete(s, args.NAME, args.Params())
-			printBatchResults(ret, manager.GetColumns(s))
-			return nil
-		},
-	)
-}
-
-func NewK8sNsResourceDeleteCmd(cmdN CmdNameFactory, manager modulebase.Manager) *Cmd {
-	deleteCmd := NewCommand(
-		&o.NamespaceResourceDeleteOptions{},
-		cmdN.Do("delete"),
-		fmt.Sprintf("Delete k8s %s", cmdN.Kind),
-		func(s *mcclient.ClientSession, args *o.NamespaceResourceDeleteOptions) error {
-			ret := manager.BatchDelete(s, args.NAME, args.Params())
-			printBatchResults(ret, manager.GetColumns(s))
-			return nil
-		},
-	)
-	return deleteCmd
-}
-
-func initK8sNamespaceResource(kind string, manager k8s.IClusterResourceManager) *ShellCommands {
-	cmdN := NewCmdNameFactory(kind)
-	return NewShellCommands(cmdN.Do).AddR(
-		NewK8sNsResourceListCmd(cmdN, manager),
-		NewK8sNsResourceGetCmd(cmdN, manager),
-		NewK8sNsResourceDeleteCmd(cmdN, manager),
-		NewK8sNsResourceGetRawCmd(cmdN, manager),
-		NewK8sResourceEditRawCmd(cmdN, manager),
-	)
+func initK8sNamespaceResource(kind string, manager k8s.IClusterResourceManager) *K8sResourceCmd {
+	cmd := NewK8sResourceCmd(manager)
+	cmd.SetKeyword(kind)
+	cmd.List(new(o.NamespaceResourceListOptions))
+	cmd.Show(new(o.NamespaceResourceGetOptions))
+	cmd.BatchDeleteWithParam(new(o.NamespaceResourceDeleteOptions))
+	cmd.ShowRaw(new(o.NamespaceResourceGetOptions))
+	cmd.EditRaw(new(o.NamespaceResourceGetOptions))
+	cmd.ShowEvent()
+	return cmd
 }
--- a/cmd/climc/shell/k8s/machines.go
+++ b/cmd/climc/shell/k8s/machines.go
@@ -15,73 +15,18 @@
 package k8s

 import (
-	"fmt"
-
-	"yunion.io/x/onecloud/pkg/mcclient"
 	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
 	o "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
 )

 func initKubeMachine() {
-	cmdN := func(action string) string {
-		return fmt.Sprintf("kubemachine-%s", action)
-	}
-	R(&o.MachineListOptions{}, cmdN("list"), "List k8s node machines", func(s *mcclient.ClientSession, args *o.MachineListOptions) error {
-		params, err := args.Params()
-		if err != nil {
-			return err
-		}
-		result, err := k8s.KubeMachines.List(s, params)
-		if err != nil {
-			return err
-		}
-		printList(result, k8s.KubeMachines.GetColumns(s))
-		return nil
-	})
-
-	R(&o.MachineCreateOptions{}, cmdN("create"), "Create k8s machine", func(s *mcclient.ClientSession, args *o.MachineCreateOptions) error {
-		params, err := args.Params()
-		if err != nil {
-			return err
-		}
-		node, err := k8s.KubeMachines.Create(s, params)
-		if err != nil {
-			return err
-		}
-		printObject(node)
-		return nil
-	})
-
-	R(&o.IdentOptions{}, cmdN("show"), "Show details of a machine", func(s *mcclient.ClientSession, args *o.IdentOptions) error {
-		result, err := k8s.KubeMachines.Get(s, args.ID, nil)
-		if err != nil {
-			return err
-		}
-		printObject(result)
-		return nil
-	})
-
-	R(&o.IdentsOptions{}, cmdN("delete"), "Delete machine", func(s *mcclient.ClientSession, args *o.IdentsOptions) error {
-		ret := k8s.KubeMachines.BatchDelete(s, args.ID, nil)
-		printBatchResults(ret, k8s.KubeMachines.GetColumns(s))
-		return nil
-	})
-
-	R(&o.IdentOptions{}, cmdN("recreate"), "Re-Create machine when create fail", func(s *mcclient.ClientSession, args *o.IdentOptions) error {
-		ret, err := k8s.KubeMachines.PerformAction(s, args.ID, "recreate", nil)
-		if err != nil {
-			return err
-		}
-		printObject(ret)
-		return nil
-	})
-
-	R(&o.IdentOptions{}, cmdN("terminate"), "Terminate a machine", func(s *mcclient.ClientSession, args *o.IdentOptions) error {
-		ret, err := k8s.KubeMachines.PerformAction(s, args.ID, "terminate", nil)
-		if err != nil {
-			return err
-		}
-		printObject(ret)
-		return nil
-	})
+	cmd := NewK8sResourceCmd(k8s.KubeMachines)
+	cmd.SetKeyword("machine")
+	cmd.ShowEvent()
+	cmd.List(new(o.MachineListOptions))
+	cmd.Create(new(o.MachineCreateOptions))
+	cmd.Show(new(o.IdentOptions))
+	cmd.BatchDelete(new(o.IdentsOptions))
+	cmd.Perform("recreate", new(o.IdentOptions))
+	cmd.Perform("terminate", new(o.IdentOptions))
 }
--- a/cmd/climc/shell/k8s/namespace.go
+++ b/cmd/climc/shell/k8s/namespace.go
@@ -16,8 +16,12 @@ package k8s

 import (
 	"yunion.io/x/onecloud/pkg/mcclient/modules/k8s"
+	options "yunion.io/x/onecloud/pkg/mcclient/options/k8s"
 )

 func initNamespace() {
 	initK8sClusterResource("namespace", k8s.Namespaces)
+
+	cmd := NewK8sResourceCmd(k8s.Namespaces)
+	cmd.Create(new(options.NamespaceCreateOptions))
 }
--- a/Show More
+++ b/Show More
				`@@ -1 +0,0 @@`
				`您的{{ .brand }}主机{{ .name }}的套餐类型已经更改为 CPU:{{ index .flavor_info "cpu" }}核，内存:{{ index .flavor_info "memory" }}M，数据盘:{{ index .flavor_info "datadisk" }}G，带宽: {{ index .flavor_info "ebw" }}M。`
				`@@ -1 +0,0 @@`
				`您的{{ .brand }}主机{{ .name }}已经创建成功，服务器IP地址为{{ .ips }}，{{ if .account }}初始帐号为{{ .account }}，{{ end }}{{ if .keypair }}访问ssh密钥为{{ .keypair }}，{{ end }}{{ if .password }}初始密码为{{ .password }}，{{ end }}请使用{{ if .windows }}远程桌面连接器(RDC){{ else }}SSH{{ end }}或控制面板控制台访问云主机。`
				`@@ -1 +0,0 @@`
				`项目{{ .tenant }}的{{ .brand }}主机{{ .name }}已经创建成功。`
				`@@ -1 +0,0 @@`
				`您的{{ .brand }}主机{{ .name }}已经删除。`
				`@@ -1 +0,0 @@`
				`您的{{ .brand }}主机{{ .name }}系统崩溃了: {{ .reason }}`
				`@@ -1 +0,0 @@`
				`您的{{ .brand }}主机{{ .name }}重装系统成功，{{ if .account }}初始帐号为{{ .account }}，{{ end }}{{ if .keypair }}访问密钥为{{ .keypair }}，{{ end }}{{ if .password }}初始密码为{{ .password }}，{{ end }}请使用{{ if .windows }}远程桌面连接器(RDC){{ else }}SSH{{ end }}或控制面板控制台访问云主机。`
				`@@ -0,0 +1 @@`
				`您的{{ .brand }}虚拟机{{ .name }}的套餐类型已经更改为 CPU:{{ index .flavor_info "cpu" }}核，内存:{{ index .flavor_info "memory" }}M，数据盘:{{ index .flavor_info "datadisk" }}G，带宽: {{ index .flavor_info "ebw" }}M。`
				`@@ -0,0 +1 @@`
				`您的{{ .brand }}虚拟机{{ .name }}已经创建成功，虚拟机IP地址为{{ .ips }}，{{ if .account }}初始帐号为{{ .account }}，{{ end }}{{ if .keypair }}访问ssh密钥为{{ .keypair }}，{{ end }}{{ if .password }}初始密码为{{ .password }}，{{ end }}请使用{{ if .windows }}远程桌面连接器(RDC){{ else }}SSH{{ end }}或控制面板控制台访问虚拟机。`
				`@@ -0,0 +1 @@`
				`项目{{ .tenant }}的{{ .brand }}虚拟机{{ .name }}已经创建成功。`
				`@@ -0,0 +1 @@`
				`您的{{ .brand }}虚拟机{{ .name }}已经删除。`