Skip to content

HLD for gNMI Service Role Enforcement#1967

Closed
ganglyu wants to merge 1 commit intosonic-net:masterfrom
ganglyu:gnmi_role
Closed

HLD for gNMI Service Role Enforcement#1967
ganglyu wants to merge 1 commit intosonic-net:masterfrom
ganglyu:gnmi_role

Conversation

@ganglyu
Copy link
Contributor

@ganglyu ganglyu commented Apr 23, 2025

Why I did it

Microsoft ADO: 30073317

Add HLD for gNMI Service Role Enforcement

@mssonicbld
Copy link
Collaborator

/azp run

@azure-pipelines
Copy link

No pipelines are associated with this pull request.

@r12f r12f requested review from prsunny and r12f April 24, 2025 03:04
qiluo-msft pushed a commit to sonic-net/sonic-buildimage that referenced this pull request Apr 28, 2025
Improve GNMI_CLIENT_CERT table to support multiple roles.

Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

Work item tracking
Microsoft ADO (number only):31561802
How I did it
Change GNMI_CLIENT_CERT table yang model.

How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866
@prsunny prsunny requested a review from prabhataravind May 1, 2025 23:59
liuh-80 added a commit to liuh-80/sonic-buildimage that referenced this pull request Jul 23, 2025
…21849)

Improve GNMI_CLIENT_CERT table to support multiple roles.

Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

Work item tracking
Microsoft ADO (number only):31561802
How I did it
Change GNMI_CLIENT_CERT table yang model.

How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866
liuh-80 added a commit to liuh-80/sonic-buildimage that referenced this pull request Jul 23, 2025
…21849)

Improve GNMI_CLIENT_CERT table to support multiple roles.

Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

Work item tracking
Microsoft ADO (number only):31561802
How I did it
Change GNMI_CLIENT_CERT table yang model.

How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866
liuh-80 added a commit to liuh-80/sonic-buildimage that referenced this pull request Jul 23, 2025
…21849)

Improve GNMI_CLIENT_CERT table to support multiple roles.

Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

Work item tracking
Microsoft ADO (number only):31561802
How I did it
Change GNMI_CLIENT_CERT table yang model.

How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866
mssonicbld added a commit to mssonicbld/sonic-buildimage that referenced this pull request Jul 24, 2025
Improve GNMI_CLIENT_CERT table to support multiple roles.

#### Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

##### Work item tracking
- Microsoft ADO **(number only)**:31561802

#### How I did it
Change GNMI_CLIENT_CERT table yang model.

#### How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 201811
- [ ] 201911
- [ ] 202006
- [ ] 202012
- [ ] 202106
- [ ] 202111
- [ ] 202205
- [ ] 202211
- [ ] 202305

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
Improve GNMI_CLIENT_CERT table to support multiple roles.

<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

#### A picture of a cute animal (not mandatory but encouraged)
mssonicbld added a commit to mssonicbld/sonic-buildimage that referenced this pull request Jul 24, 2025
Improve GNMI_CLIENT_CERT table to support multiple roles.

#### Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

##### Work item tracking
- Microsoft ADO **(number only)**:31561802

#### How I did it
Change GNMI_CLIENT_CERT table yang model.

#### How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 201811
- [ ] 201911
- [ ] 202006
- [ ] 202012
- [ ] 202106
- [ ] 202111
- [ ] 202205
- [ ] 202211
- [ ] 202305

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
Improve GNMI_CLIENT_CERT table to support multiple roles.

<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

#### A picture of a cute animal (not mandatory but encouraged)
mssonicbld added a commit to mssonicbld/sonic-buildimage that referenced this pull request Jul 24, 2025
Improve GNMI_CLIENT_CERT table to support multiple roles.

#### Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

##### Work item tracking
- Microsoft ADO **(number only)**:31561802

#### How I did it
Change GNMI_CLIENT_CERT table yang model.

#### How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 201811
- [ ] 201911
- [ ] 202006
- [ ] 202012
- [ ] 202106
- [ ] 202111
- [ ] 202205
- [ ] 202211
- [ ] 202305

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
Improve GNMI_CLIENT_CERT table to support multiple roles.

<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

#### A picture of a cute animal (not mandatory but encouraged)
mssonicbld added a commit to sonic-net/sonic-buildimage that referenced this pull request Jul 24, 2025
Improve GNMI_CLIENT_CERT table to support multiple roles.

#### Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

##### Work item tracking
- Microsoft ADO **(number only)**:31561802

#### How I did it
Change GNMI_CLIENT_CERT table yang model.

#### How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 201811
- [ ] 201911
- [ ] 202006
- [ ] 202012
- [ ] 202106
- [ ] 202111
- [ ] 202205
- [ ] 202211
- [ ] 202305

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
Improve GNMI_CLIENT_CERT table to support multiple roles.

<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

#### A picture of a cute animal (not mandatory but encouraged)
mssonicbld added a commit to sonic-net/sonic-buildimage that referenced this pull request Jul 24, 2025
Improve GNMI_CLIENT_CERT table to support multiple roles.

#### Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

##### Work item tracking
- Microsoft ADO **(number only)**:31561802

#### How I did it
Change GNMI_CLIENT_CERT table yang model.

#### How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 201811
- [ ] 201911
- [ ] 202006
- [ ] 202012
- [ ] 202106
- [ ] 202111
- [ ] 202205
- [ ] 202211
- [ ] 202305

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
Improve GNMI_CLIENT_CERT table to support multiple roles.

<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

#### A picture of a cute animal (not mandatory but encouraged)
mssonicbld added a commit to sonic-net/sonic-buildimage that referenced this pull request Jul 24, 2025
Improve GNMI_CLIENT_CERT table to support multiple roles.

#### Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

##### Work item tracking
- Microsoft ADO **(number only)**:31561802

#### How I did it
Change GNMI_CLIENT_CERT table yang model.

#### How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 201811
- [ ] 201911
- [ ] 202006
- [ ] 202012
- [ ] 202106
- [ ] 202111
- [ ] 202205
- [ ] 202211
- [ ] 202305

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
Improve GNMI_CLIENT_CERT table to support multiple roles.

<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

#### A picture of a cute animal (not mandatory but encouraged)
mssonicbld added a commit to mssonicbld/sonic-buildimage-msft that referenced this pull request Jul 30, 2025
Improve GNMI_CLIENT_CERT table to support multiple roles.

#### Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

##### Work item tracking
- Microsoft ADO **(number only)**:31561802

#### How I did it
Change GNMI_CLIENT_CERT table yang model.

#### How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 201811
- [ ] 201911
- [ ] 202006
- [ ] 202012
- [ ] 202106
- [ ] 202111
- [ ] 202205
- [ ] 202211
- [ ] 202305

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
Improve GNMI_CLIENT_CERT table to support multiple roles.

<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

#### A picture of a cute animal (not mandatory but encouraged)
r12f pushed a commit to Azure/sonic-buildimage-msft that referenced this pull request Jul 31, 2025
…e roles. (#1420)

Improve GNMI_CLIENT_CERT table to support multiple roles.

#### Why I did it
GNMI need support multiple roles.
HLD: sonic-net/SONiC#1967

##### Work item tracking
- Microsoft ADO **(number only)**:31561802

#### How I did it
Change GNMI_CLIENT_CERT table yang model.

#### How to verify it
Pass all test case.

This PR depends on following PRs:
sonic-net/sonic-gnmi#366
sonic-net/sonic-mgmt#17866

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 201811
- [ ] 201911
- [ ] 202006
- [ ] 202012
- [ ] 202106
- [ ] 202111
- [ ] 202205
- [ ] 202211
- [ ] 202305

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
Improve GNMI_CLIENT_CERT table to support multiple roles.

<!--
Ensure to add label/tag for the feature raised. example - PR#2174 under
sonic-utilities repo. where, Generic Config and Update feature has been
labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on
https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

#### A picture of a cute animal (not mandatory but encouraged)
@ganglyu ganglyu closed this Nov 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants