Skip to content

Commit

Permalink
Add chart for OpenConfig based config models (#284)
Browse files Browse the repository at this point in the history
* Add openconfig config model chart

* Remove cached ietf dependency

* Remove .lock file

* Update dependency to use charts repo
  • Loading branch information
kuujo authored Mar 2, 2021
1 parent 0c0c364 commit 7bc17e8
Show file tree
Hide file tree
Showing 22 changed files with 5,868 additions and 0 deletions.
21 changes: 21 additions & 0 deletions config-models/openconfig/.helmignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
# Patterns to ignore when building packages.
# This supports shell glob matching, relative path matching, and
# negation (prefixed with !). Only one pattern per line.
.DS_Store
# Common VCS dirs
.git/
.gitignore
.bzr/
.bzrignore
.hg/
.hgignore
.svn/
# Common backup files
*.swp
*.bak
*.tmp
*~
# Various IDEs
.project
.idea/
*.tmproj
18 changes: 18 additions & 0 deletions config-models/openconfig/Chart.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
apiVersion: v2
name: config-model-openconfig
version: 1.0.0
kubeVersion: ">=1.18.0"
appVersion: 1.0.0
description: OpenConfig model
keywords:
- onos
- sdn
- config
home: https://onosproject.org
maintainers:
- name: ONOS Support
email: support@opennetworking.org
dependencies:
- name: config-model-ietf
repository: https://charts.onosproject.org
version: 1.0.0
Original file line number Diff line number Diff line change
@@ -0,0 +1,174 @@
submodule openconfig-aaa-radius {

yang-version "1";

belongs-to "openconfig-aaa" {
prefix "oc-aaa";
}

// import some basic types
import ietf-inet-types { prefix inet; }
import openconfig-extensions { prefix oc-ext; }
import openconfig-aaa-types { prefix oc-aaa-types; }
import openconfig-types { prefix oc-types; }
import openconfig-yang-types { prefix oc-yang; }


// meta
organization "OpenConfig working group";

contact
"OpenConfig working group
www.openconfig.net";

description
"This module defines configuration and operational state data
related to the RADIUS protocol for authentication,
authorization, and accounting.";

oc-ext:openconfig-version "0.2.0";

revision "2017-07-06" {
description
"Move to oc-inet types, add IETF attribution, add RADIUS
counters, changed password leaf names to indicate hashed";
reference "0.2.0";
}

revision "2017-01-29" {
description
"Initial public release";
reference "0.1.0";
}

// extension statements

// feature statements

// identity statements

identity RADIUS {
base oc-aaa-types:AAA_SERVER_TYPE;
description
"Remote Authentication Dial In User Service (RADIUS) AAA
server";
reference
"RFC 2865 - Remote Authentication Dial In User Service
(RADIUS)";
}

// typedef statements

// grouping statements

grouping aaa-radius-server-config {
description
"Configuration data for a RADIUS server";

leaf auth-port {
type inet:port-number;
default 1812;
description
"Port number for authentication requests";
}

leaf acct-port {
type inet:port-number;
default 1813;
description
"Port number for accounting requests";
}

leaf secret-key {
type oc-types:routing-password;
description
"The unencrypted shared key used between the authentication
server and the device.";
}

leaf source-address {
type inet:ip-address;
description
"Source IP address to use in messages to the RADIUS server";
}

leaf retransmit-attempts {
type uint8;
description
"Number of times the system may resend a request to the
RADIUS server when it is unresponsive";
}
}

grouping aaa-radius-server-state {
description
"Operational state data for a RADIUS server";

container counters {
description
"A collection of RADIUS related state objects.";

leaf retried-access-requests {
type oc-yang:counter64;
description
"Retransmitted Access-Request messages.";
}

leaf access-accepts {
type oc-yang:counter64;
description
"Received Access-Accept messages.";
}

leaf access-rejects {
type oc-yang:counter64;
description
"Received Access-Reject messages.";
}

leaf timeout-access-requests {
type oc-yang:counter64;
description
"Access-Request messages that have timed-out,
requiring retransmission.";
}
}
}

grouping aaa-radius-server-top {
description
"Top-level grouping for RADIUS server data";

container radius {
description
"Top-level container for RADIUS server data";

container config {
description
"Configuration data for RADIUS servers";

uses aaa-radius-server-config;
}

container state {

config false;

description
"Operational state data for RADIUS servers";

uses aaa-radius-server-config;
uses aaa-radius-server-state;
}
}
}

// data definition statements

// augment statements

// rpc statements

// notification statements

}
Original file line number Diff line number Diff line change
@@ -0,0 +1,130 @@
submodule openconfig-aaa-tacacs {

yang-version "1";

belongs-to "openconfig-aaa" {
prefix "oc-aaa";
}

// import some basic types
import ietf-inet-types { prefix inet; }
import openconfig-extensions { prefix oc-ext; }
import openconfig-aaa-types { prefix oc-aaa-types; }
import openconfig-types { prefix oc-types; }


// meta
organization "OpenConfig working group";

contact
"OpenConfig working group
www.openconfig.net";

description
"This module defines configuration and operational state data
related to the TACACS+ protocol for authentication,
authorization, and accounting.";

oc-ext:openconfig-version "0.2.0";

revision "2017-07-06" {
description
"Move to oc-inet types, add IETF attribution, add RADIUS
counters, changed password leaf names to indicate hashed";
reference "0.2.0";
}

revision "2017-01-29" {
description
"Initial public release";
reference "0.1.0";
}

// extension statements

// feature statements

// identity statements

identity TACACS {
base oc-aaa-types:AAA_SERVER_TYPE;
description
"Terminal Access Controller Access Control System (TACACS+)
AAA server";
reference
"The TACACS+ Protocol (draft-ietf-opsawg-tacacs-05)
RFC 1492 - An Access Control Protocol, Sometimes Called
TACACS";
}

// typedef statements

// grouping statements

grouping aaa-tacacs-server-config {
description
"Configuration data for a TACACS+ server";

leaf port {
type inet:port-number;
default 49;
description
"The port number on which to contact the TACACS server";
}

leaf secret-key {
type oc-types:routing-password;
description
"The unencrypted shared key used between the authentication
server and the device.";
}

leaf source-address {
type inet:ip-address;
description
"Source IP address to use in messages to the TACACS server";
}
}

grouping aaa-tacacs-server-state {
description
"Operational state data for a TACACS+ server";
}

grouping aaa-tacacs-server-top {
description
"Top-level grouping for TACACS+ sever data";

container tacacs {
description
"Top-level container for TACACS+ server data";

container config {
description
"Configuration data for TACACS+ server";

uses aaa-tacacs-server-config;
}

container state {

config false;

description
"Operational state data for TACACS+ server";

uses aaa-tacacs-server-config;
uses aaa-tacacs-server-state;
}
}
}

// data definition statements

// augment statements

// rpc statements

// notification statements

}
Loading

0 comments on commit 7bc17e8

Please sign in to comment.