Skip to content

Implement translib backend logic for the gNSI Credentialz #203

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sneelam20 merged 1 commit into from
Mar 13, 2026
Merged

Implement translib backend logic for the gNSI Credentialz #203

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 34 additions & 0 deletions models/yang/annotations/openconfig-system-annot.yang
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ module openconfig-system-annot {
import sonic-extensions {prefix sonic-ext; }
import openconfig-system-grpc { prefix oc-sys-grpc; }
import gnsi-pathz { prefix gnsi-pathz; }
import openconfig-gnsi-credentialz { prefix oc-gnsi-credz; }

deviation /oc-sys:system/oc-sys:ssh-server/oc-sys:state {
deviate add {
Expand All @@ -24,6 +25,39 @@ module openconfig-system-annot {
}
}

deviation /oc-sys:system/oc-sys:aaa/oc-sys:authentication/oc-sys:glome/oc-sys:state {
deviate add {
sonic-ext:db-name "STATE_DB";
sonic-ext:table-name "CREDENTIALS";
sonic-ext:key-name "GLOME_CONFIG";
}
}

deviation /oc-sys:system/oc-sys:aaa/oc-sys:authentication/oc-sys:glome/oc-sys:state/oc-gnsi-credz:active-glome-key-version {
deviate add {
sonic-ext:field-name "key_version";
}
}

deviation /oc-sys:system/oc-sys:aaa/oc-sys:authentication/oc-sys:glome/oc-sys:state/oc-gnsi-credz:active-glome-key-created-on {
deviate add {
sonic-ext:field-name "last_updated";
}
}

deviation /oc-sys:system/oc-sys:aaa/oc-sys:authentication/oc-sys:glome/oc-sys:state/oc-gnsi-credz:enabled {
deviate add {
sonic-ext:field-name "enabled";
}
}

deviation /oc-sys:system/oc-gnsi-credz:console {
deviate add {
sonic-ext:db-name "STATE_DB";
sonic-ext:subtree-transformer "console_counters_xfmr";
}
}

deviation /oc-sys:system/gnsi-pathz:gnmi-pathz-policies {
deviate add {
sonic-ext:key-transformer "pathz_policies_key_xfmr";
Expand Down
55 changes: 55 additions & 0 deletions translib/transformer/xfmr_system.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,9 @@ const (
PATHZ_WRITE_SUCCESS_TIMESTAMP = PATHZ_WRITES + "/last-access-accept"
PATHZ_WRITE_FAILED = PATHZ_WRITES + "/access-rejects"
PATHZ_WRITE_FAILED_TIMESTAMP = PATHZ_WRITES + "/last-access-reject"
ACCOUNT_TBL = "CREDENTIALS|SSH_ACCOUNT"
CONSOLE_TBL = "CREDENTIALS|CONSOLE_ACCOUNT"
SSH_TBL = "CREDENTIALS|SSH_HOST"
)

type sshState struct {
Expand Down Expand Up @@ -115,6 +118,8 @@ func init() {
XlateFuncBind("DbToYang_pathz_policies_xfmr", DbToYang_pathz_policies_xfmr)
XlateFuncBind("Subscribe_pathz_policies_xfmr", Subscribe_pathz_policies_xfmr)
XlateFuncBind("DbToYang_pathz_policies_key_xfmr", DbToYang_pathz_policies_key_xfmr)
XlateFuncBind("DbToYang_console_counters_xfmr", DbToYang_console_counters_xfmr)
XlateFuncBind("Subscribe_console_counters_xfmr", Subscribe_console_counters_xfmr)
}

type grpcState struct {
Expand Down Expand Up @@ -879,3 +884,53 @@ var Subscribe_pathz_policies_xfmr SubTreeXfmrSubscribe = func(inParams XfmrSubsc
nOpts: &notificationOpts{mInterval: 0, pType: OnChange},
}, nil
}

var DbToYang_console_counters_xfmr SubTreeXfmrDbToYang = func(inParams XfmrParams) error {
var counters accessCounters

table, err := inParams.dbs[inParams.curDb].GetEntry(&db.TableSpec{Name: "CREDENTIALS"}, db.Key{Comp: []string{"CONSOLE_METRICS"}})
if err != nil {
log.V(0).Infof("Failed to read from StateDB: %v", inParams.table)
return err
}

accepts := table.Get("access_accepts")
if counters.accessAccepts, err = strconv.ParseUint(accepts, 10, 64); err != nil && accepts != "" {
log.V(0).Infof("Couldn't find access_accepts: %v", err)
}
lastAccept := table.Get("last_access_accept")
if counters.lastAccessAccept, err = strconv.ParseUint(lastAccept, 10, 64); err != nil && lastAccept != "" {
log.V(0).Infof("Couldn't find last_access_accept: %v", err)
}
rejects := table.Get("access_rejects")
if counters.accessRejects, err = strconv.ParseUint(rejects, 10, 64); err != nil && rejects != "" {
log.V(0).Infof("Couldn't find access_rejects: %v", err)
}
lastReject := table.Get("last_access_reject")
if counters.lastAccessReject, err = strconv.ParseUint(lastReject, 10, 64); err != nil && lastReject != "" {
log.V(0).Infof("Couldn't find last_access_reject: %v", err)
}

sysObj := getAppRootObject(inParams)
ygot.BuildEmptyTree(sysObj)
ygot.BuildEmptyTree(sysObj.Console)
ygot.BuildEmptyTree(sysObj.Console.State)

sysObj.Console.State.Counters.AccessAccepts = &counters.accessAccepts
sysObj.Console.State.Counters.AccessRejects = &counters.accessRejects
sysObj.Console.State.Counters.LastAccessAccept = &counters.lastAccessAccept
sysObj.Console.State.Counters.LastAccessReject = &counters.lastAccessReject

return nil
}

var Subscribe_console_counters_xfmr SubTreeXfmrSubscribe = func(inParams XfmrSubscInParams) (XfmrSubscOutParams, error) {
log.V(0).Infof("Subscribe_console_counters_xfmr:%s", inParams.requestURI)

return XfmrSubscOutParams{
dbDataMap: RedisDbSubscribeMap{
db.StateDB: {"CREDENTIALS": {"CONSOLE_METRICS": {}}}},
onChange: OnchangeEnable,
nOpts: &notificationOpts{mInterval: 0, pType: OnChange},
}, nil
}