blob: 04278c619fae30ef8a789c7b5c5f92b14807dbfa [file] [log] [blame]
Tomáš Pecka04eb7372022-06-07 08:03:04 +02001{
Tomáš Peckabaf3e862022-10-03 16:59:05 +02002 "ietf-alarms:alarms": {
3 "control": {
4 "alarm-shelving": {
5 "shelf": [
6 {
7 "name": "systemd journal upload",
8 "resource": [
9 "systemd-journal-upload.service"
10 ],
11 "alarm-type": [
12 {
13 "alarm-type-id": "velia-alarms:systemd-unit-failure",
14 "alarm-type-qualifier-match": ""
15 }
16 ],
17 "description": "Ignore systemd-journal-upload.service failures"
18 }
19 ]
20 }
21 }
22 },
Tomáš Pecka04eb7372022-06-07 08:03:04 +020023 "ietf-interfaces:interfaces": {
24 "interface": [
25 {
26 "name": "br0",
27 "type": "iana-if-type:bridge",
28 "ietf-ip:ipv4": {
29 "czechlight-network:dhcp-client": true
30 },
31 "ietf-ip:ipv6": {
32 "enabled": true,
33 "autoconf": {
34 "create-global-addresses": true
35 }
36 }
37 },
38 {
39 "name": "eth1",
40 "type": "iana-if-type:ethernetCsmacd",
41 "czechlight-network:bridge": "br0"
42 },
43 {
44 "name": "eth0",
45 "type": "iana-if-type:ethernetCsmacd",
46 "czechlight-network:bridge": "br0"
Tomáš Pecka7f3212e2022-06-13 15:45:30 +020047 },
48 {
49 "name": "oscE",
50 "type": "iana-if-type:ethernetCsmacd",
51 "czechlight-network:bridge": "br0"
52 },
53 {
54 "name": "oscW",
55 "type": "iana-if-type:ethernetCsmacd",
56 "czechlight-network:bridge": "br0"
Tomáš Pecka04eb7372022-06-07 08:03:04 +020057 }
58 ]
59 },
60 "ietf-keystore:keystore": {
61 "asymmetric-keys": {
62 "asymmetric-key": [
63 {
64 "name": "genkey",
65 "algorithm": "rsa2048",
66 "public-key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/tnburJOGHcvSOKw7SdOfEvZD28WatHUfuWRCWZoElXtX1sNkBFXvRbKahOR8sZ221iRdlZ89bBVtTeX8N2wgPApy+Xi/9X1Icee2cU7QC7UfnNnWMW1C6WEZQS8zt+6IAQsOLk1AWyFeAN1EZQfjM/2UfxOW/kxXBu+MeVvdjouZYs73mW4OyV6VptMkAk4JDk5ieEp65p/rQOF0pIvpnu56nl9cybQ1s3DAQ76ZJP5qf8VdKS2WcBlS7UwXAMvXPM5TiIebnXtrF8jTd3S3ApOyZv00jxn/s5l6L1VA0p5HyB9W4DfNztINRyE56BEBvPeJePNWwNg+sVClLdmQIDAQAB",
67 "private-key": "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"
68 }
69 ]
70 }
71 },
Tomáš Pecka04eb7372022-06-07 08:03:04 +020072 "ietf-netconf-server:netconf-server": {
73 "listen": {
74 "endpoint": [
75 {
76 "name": "default-ssh",
77 "ssh": {
78 "tcp-server-parameters": {
79 "local-address": "::",
80 "keepalives": {
81 "idle-time": 1,
82 "max-probes": 10,
83 "probe-interval": 5
84 }
85 },
86 "ssh-server-parameters": {
87 "server-identity": {
88 "host-key": [
89 {
90 "name": "default-key",
91 "public-key": {
92 "keystore-reference": "genkey"
93 }
94 }
95 ]
96 },
97 "client-authentication": {
98 "supported-authentication-methods": {
99 "publickey": [null],
100 "passsword": [null],
101 "other": [
102 "interactive"
103 ]
104 }
105 }
106 }
107 }
108 }
109 ]
110 }
Tomáš Pecka6570b572023-07-18 16:56:50 +0200111 },
112 "ietf-netconf-acm:nacm": {
113 "rule-list": [
114 {
115 "name": "Permit yangnobody user/group to read only some modules",
116 "group": [
117 "yangnobody"
118 ],
119 "rule": [
120 {
121 "name": "czechlight-roadm-device",
122 "module-name": "czechlight-roadm-device",
123 "action": "permit",
124 "access-operations": "read"
125 },
126 {
127 "name": "czechlight-inline-amp",
128 "module-name": "czechlight-inline-amp",
129 "action": "permit",
130 "access-operations": "read"
131 },
132 {
Jan Kundrát6b606292024-05-07 21:01:50 +0200133 "name": "czechlight-bidi-amp",
134 "module-name": "czechlight-bidi-amp",
135 "action": "permit",
136 "access-operations": "read"
137 },
138 {
Tomáš Pecka6570b572023-07-18 16:56:50 +0200139 "name": "czechlight-coherent-add-drop",
140 "module-name": "czechlight-coherent-add-drop",
141 "action": "permit",
142 "access-operations": "read"
143 },
144 {
145 "name": "ietf-yang-library",
146 "module-name": "ietf-yang-library",
147 "action": "permit",
148 "access-operations": "read"
149 },
150 {
151 "name": "ietf-hardware",
152 "module-name": "ietf-hardware",
153 "action": "permit",
154 "access-operations": "read"
155 },
156 {
157 "name": "ietf-interfaces",
158 "module-name": "ietf-interfaces",
159 "action": "permit",
160 "access-operations": "read"
161 },
162 {
163 "name": "ietf-system: contact",
164 "module-name": "ietf-system",
165 "action": "permit",
166 "path": "/ietf-system:system/contact",
167 "access-operations": "read"
168 },
169 {
170 "name": "ietf-system: hostname",
171 "module-name": "ietf-system",
172 "action": "permit",
173 "path": "/ietf-system:system/hostname",
174 "access-operations": "read"
175 },
176 {
177 "name": "ietf-system: location",
178 "module-name": "ietf-system",
179 "action": "permit",
180 "path": "/ietf-system:system/location",
181 "access-operations": "read"
182 },
183 {
184 "name": "ietf-system: clock",
185 "module-name": "ietf-system",
186 "action": "permit",
187 "path": "/ietf-system:system/clock",
188 "access-operations": "read"
189 },
190 {
191 "name": "ietf-system: system-state",
192 "module-name": "ietf-system",
193 "action": "permit",
194 "path": "/ietf-system:system-state",
195 "access-operations": "read"
196 },
197 {
198 "name": "czechlight-lldp",
199 "module-name": "czechlight-lldp",
200 "action": "permit",
201 "access-operations": "read"
202 },
203 {
204 "name": "czechlight-system:firmware",
205 "module-name": "czechlight-system",
206 "path": "/czechlight-system:firmware",
207 "action": "permit",
208 "access-operations": "read"
209 },
210 {
211 "name": "czechlight-system:leds",
212 "module-name": "czechlight-system",
213 "path": "/czechlight-system:leds",
214 "action": "permit",
215 "access-operations": "read"
216 },
217 {
Tomáš Pecka22d9da82024-04-30 14:55:41 +0200218 "name": "ietf-restconf-monitoring",
219 "module-name": "ietf-restconf-monitoring",
220 "action": "permit",
221 "access-operations": "read"
222 },
223 {
Tomáš Pecka6570b572023-07-18 16:56:50 +0200224 "name": "wildcard-deny",
225 "module-name": "*",
226 "action": "deny",
227 "access-operations": "*"
228 }
229 ]
230 },
231 {
232 "name": "Allow DWDM control to the optics group",
233 "group": [
234 "optics"
235 ],
236 "rule": [
237 {
238 "name": "czechlight-roadm-device",
239 "module-name": "czechlight-roadm-device",
240 "action": "permit"
241 },
242 {
243 "name": "czechlight-inline-amp",
244 "module-name": "czechlight-inline-amp",
245 "action": "permit"
246 },
247 {
Jan Kundrát6b606292024-05-07 21:01:50 +0200248 "name": "czechlight-bidi-amp",
249 "module-name": "czechlight-bidi-amp",
250 "action": "permit"
251 },
252 {
Tomáš Pecka6570b572023-07-18 16:56:50 +0200253 "name": "czechlight-coherent-add-drop",
254 "module-name": "czechlight-coherent-add-drop",
255 "action": "permit"
256 },
257 {
258 "name": "czechlight-calibration-device",
259 "module-name": "czechlight-calibration-device",
260 "action": "permit"
261 }
262 ]
Tomáš Pecka45317c82024-01-18 09:29:41 +0100263 },
264 {
265 "name": "Authentication details of current user",
266 "group": [
267 "*"
268 ],
269 "rule": [
270 {
271 "name": "Allow reading and executing actions in the context of the current user",
272 "access-operations": "read exec",
273 "module-name": "czechlight-system",
274 "action": "permit",
275 "path": "/czechlight-system:authentication/users[name=$USER]"
276 }
277 ]
Tomáš Pecka6570b572023-07-18 16:56:50 +0200278 }
279 ]
Tomáš Pecka04eb7372022-06-07 08:03:04 +0200280 }
281}