Add yang models for GNMI

src/sonic-yang-models/setup.py

@@ -148,6 +148,7 @@ def run(self):
  './yang-models/sonic-system-tacacs.yang',
  './yang-models/sonic-system-radius.yang',
  './yang-models/sonic-telemetry.yang',
+ './yang-models/sonic-gnmi.yang',
  './yang-models/sonic-tunnel.yang',
  './yang-models/sonic-types.yang',
  './yang-models/sonic-versions.yang',
@@ -226,6 +227,7 @@ def run(self):
  './cvlyang-models/sonic-system-aaa.yang',
  './cvlyang-models/sonic-system-tacacs.yang',
  './cvlyang-models/sonic-telemetry.yang',
+ './cvlyang-models/sonic-gnmi.yang',
  './cvlyang-models/sonic-types.yang',
  './cvlyang-models/sonic-versions.yang',
  './cvlyang-models/sonic-vlan.yang',

src/sonic-yang-models/tests/files/sample_config_db.json

@@ -1183,6 +1183,18 @@
  "port": "50051"
  }
  },
+ "GNMI": {
+ "certs": {
+ "ca_crt": "/etc/sonic/credentials/dsmsroot.cer",
+ "server_crt": "/etc/sonic/credentials/server.cer",
+ "server_key": "/etc/sonic/credentials/server.key"
+ },
+ "gnmi": {
+ "client_auth": "true",
+ "log_level": "2",
+ "port": "50052"
+ }
+ },
  "TUNNEL": {
  "MuxTunnel0": {
  "dscp_mode": "uniform",

src/sonic-yang-models/tests/yang_model_tests/tests/gnmi.json

@@ -0,0 +1,17 @@
+{
+ "GNMI_TABLE_WITH_INCORRECT_CERT": {
+ "desc": "TABLE_WITH_INCORRECT_CERT failure.",
+ "eStrKey": "Pattern"
+ },
+ "GNMI_TABLE_WITH_INCORRECT_CLIENT_AUTH": {
+ "desc": "TABLE_WITH_INCORRECT_CLIENT_AUTH failure",
+ "eStrKey": "InvalidValue"
+ },
+ "GNMI_TABLE_WITH_INCORRECT_PORT": {
+ "desc": "TABLE_WITH_INCORRECT_PORT failure.",
+ "eStrKey": "InvalidValue"
+ },
+ "GNMI_TABLE_WITH_VALID_CONFIG": {
+ "desc": "TABLE WITH VALID CONFIG."
+ }
+}

src/sonic-yang-models/tests/yang_model_tests/tests_config/gnmi.json

@@ -0,0 +1,66 @@
+{
+ "GNMI_TABLE_WITH_INCORRECT_CERT": {
+ "sonic-gnmi:sonic-gnmi": {
+ "sonic-gnmi:GNMI": {
+ "certs": {
+ "ca_crt": "abcd.config",
+ "server_crt": "a/b/c",
+ "server_key": "123"
+ },
+ "gnmi": {
+ "client_auth": "true",
+ "log_level": "2",
+ "port": "50052"
+ }
+ }
+ }
+ },
+ "GNMI_TABLE_WITH_INCORRECT_CLIENT_AUTH": {
+ "sonic-gnmi:sonic-gnmi": {
+ "sonic-gnmi:GNMI": {
+ "certs": {
+ "ca_crt": "/etc/sonic/credentials/dsmsroot.cer",
+ "server_crt": "/etc/sonic/credentials/server.cer",
+ "server_key": "/etc/sonic/credentials/server.key"
+ },
+ "gnmi": {
+ "client_auth": "up",
+ "log_level": "2",
+ "port": "50052"
+ }
+ }
+ }
+ },
+ "GNMI_TABLE_WITH_INCORRECT_PORT": {
+ "sonic-gnmi:sonic-gnmi": {
+ "sonic-gnmi:GNMI": {
+ "certs": {
+ "ca_crt": "/etc/sonic/credentials/dsmsroot.cer",
+ "server_crt": "/etc/sonic/credentials/server.cer",
+ "server_key": "/etc/sonic/credentials/server.key"
+ },
+ "gnmi": {
+ "client_auth": "true",
+ "log_level": "2",
+ "port": "abc"
+ }
+ }
+ }
+ },
+ "GNMI_TABLE_WITH_VALID_CONFIG": {
+ "sonic-gnmi:sonic-gnmi": {
+ "sonic-gnmi:GNMI": {
+ "certs": {
+ "ca_crt": "/etc/sonic/credentials/dsmsroot.cer",
+ "server_crt": "/etc/sonic/credentials/server.cer",
+ "server_key": "/etc/sonic/credentials/server.key"
+ },
+ "gnmi": {
+ "client_auth": "true",
+ "log_level": "2",
+ "port": "50052"
+ }
+ }
+ }
+ }
+}

src/sonic-yang-models/yang-models/sonic-gnmi.yang

@@ -0,0 +1,78 @@
+module sonic-gnmi {
+
+ yang-version 1.1;
+
+ namespace "http:/sonic-net/sonic-gnmi";
+ prefix gnmi;
+
+ import ietf-inet-types {
+ prefix inet;
+ }
+
+ organization
+ "SONiC";
+
+ contact
+ "SONiC";
+
+ description "GNMI YANG Module for SONiC OS";
+
+ revision 2023-02-10 {
+ description "First Revision";
+ }
+
+ container sonic-gnmi {
+
+ container GNMI {
+
+ description "GNMI TABLE part of config_db.json";
+
+ container certs {
+
+ leaf ca_crt {
+ type string {
+ pattern '(/[a-zA-Z0-9_-]+)*/([a-zA-Z0-9_-]+).cer';
+ }
+ description "Local path for ca_crt.";
+ }
+
+ leaf server_crt {
+ type string {
+ pattern '(/[a-zA-Z0-9_-]+)*/([a-zA-Z0-9_-]+).cer';
+ }
+ description "Local path for server_crt.";
+ }
+
+ leaf server_key {
+ type string {
+ pattern '(/[a-zA-Z0-9_-]+)*/([a-zA-Z0-9_-]+).key';
+ }
+ description "Local path for server_key.";
+ }
+
+ }
+
+ container gnmi {
+
+ leaf client_auth {
+ type boolean;
+ description "Flag for requiring client auth.";
+ }
+
+ leaf log_level {
+ type uint8 {
+ range 0..100;
+ }
+ description "Log level for gnmi.";
+ }
+
+ leaf port {
+ type inet:port-number;
+ description "Port gnmi runs on.";
+ }
+
+ }
+
+ }
+ }
+}