Implement translib backend logic for the gNSI Authz

This commit adds the necessary transformer code to read authorization policy
counters and related state from the Redis databases.

Author: kanchanavelusamy

config/transformer/models_list

@@ -15,3 +15,4 @@ gnsi-authz.yang
 gnsi-pathz.yang
 gnsi-certz.yang
 gnsi-credentialz.yang
+openconfig-system-annot.yang

models/yang/annotations/openconfig-system-annot.yang

@@ -0,0 +1,25 @@
+module openconfig-system-annot {
+
+    yang-version "1";
+
+    namespace "http://openconfig.net/yang/openconfig-system-annot";
+    prefix "oc-sys-annot";
+
+    import openconfig-system { prefix oc-sys; }
+    import sonic-extensions {prefix sonic-ext; }
+    import openconfig-system-grpc { prefix oc-sys-grpc; }
+
+    deviation /oc-sys:system/oc-sys:aaa/oc-sys:authorization/oc-sys:state {
+      deviate add {
+        sonic-ext:db-name "STATE_DB";
+        sonic-ext:subtree-transformer "authz_policy_xfmr";
+      }
+    }
+
+    deviation /oc-sys:system/oc-sys-grpc:grpc-servers {
+        deviate add {
+            sonic-ext:key-transformer "grpc_server_key_xfmr";
+            sonic-ext:subtree-transformer "grpc_server_xfmr";
+        }
+    }
+}

translib/db/db_redis_opts.go

@@ -144,7 +144,7 @@ func adjustRedisOpts(dbOpt *Options) *redis.Options {
 	return &redisOpts
 }
 
-func init() {
+func initializeRedisOpts() {
 	flag.StringVar(&goRedisOpts, "go_redis_opts", "", "Options for go-redis")
 }
 

translib/db/rcm.go

@@ -0,0 +1,197 @@
+package db
+
+import (
+	"flag"
+	"fmt"
+	"sync"
+	"sync/atomic"
+
+	lvl "github.com/Azure/sonic-mgmt-common/translib/log"
+	"github.com/go-redis/redis/v7"
+	log "github.com/golang/glog"
+)
+
+var usePools = flag.Bool("use_connection_pools", true, "use connection pools for Redis Clients")
+
+const (
+	POOL_SIZE = 25
+)
+
+var rcm *redisClientManager
+var initMu = &sync.Mutex{}
+
+type redisClientManager struct {
+	// clients holds one Redis Client for each DBNum
+	clients                            [MaxDB + 1]*redis.Client
+	mu                                 *sync.RWMutex
+	curTransactionalClients            atomic.Int32
+	totalPoolClientsRequested          atomic.Uint64
+	totalTransactionalClientsRequested atomic.Uint64
+}
+
+type RedisCounters struct {
+	CurTransactionalClients            uint32                      // The number of transactional clients currently opened.
+	TotalPoolClientsRequested          uint64                      // The total number of Redis Clients using a connection pool requested.
+	TotalTransactionalClientsRequested uint64                      // The total number of Transactional Redis Clients requested.
+	PoolStatsPerDB                     map[string]*redis.PoolStats // The pool counters for each Redis Client in the cache.
+}
+
+func init() {
+	initializeRedisOpts()
+	initializeRedisClientManager()
+}
+
+func initializeRedisClientManager() {
+	initMu.Lock()
+	defer initMu.Unlock()
+	if rcm != nil {
+		return
+	}
+	rcm = &redisClientManager{
+		clients:                            [MaxDB + 1]*redis.Client{},
+		mu:                                 &sync.RWMutex{},
+		curTransactionalClients:            atomic.Int32{},
+		totalPoolClientsRequested:          atomic.Uint64{},
+		totalTransactionalClientsRequested: atomic.Uint64{},
+	}
+	rcm.mu.Lock()
+	defer rcm.mu.Unlock()
+	for dbNum := DBNum(0); dbNum < MaxDB; dbNum++ {
+		if len(getDBInstName(dbNum)) == 0 {
+			continue
+		}
+		// Create a Redis Client for each database.
+		rcm.clients[int(dbNum)] = createRedisClient(dbNum, POOL_SIZE)
+	}
+}
+
+func createRedisClient(db DBNum, poolSize int) *redis.Client {
+	opts := adjustRedisOpts(&Options{DBNo: db})
+	opts.PoolSize = poolSize
+	client := redis.NewClient(opts)
+	if _, err := client.Ping().Result(); err != nil {
+		log.V(lvl.ERROR).Infof("RCM error during Redis Client creation for DBNum=%v: %v", db, err)
+	}
+	return client
+}
+
+func createRedisClientWithOpts(opts *redis.Options) *redis.Client {
+	client := redis.NewClient(opts)
+	if _, err := client.Ping().Result(); err != nil {
+		log.V(lvl.ERROR).Infof("RCM error during Redis Client creation for DBNum=%v: %v", opts.DB, err)
+	}
+	return client
+}
+
+func getClient(db DBNum) *redis.Client {
+	rcm.mu.RLock()
+	defer rcm.mu.RUnlock()
+	return rcm.clients[int(db)]
+}
+
+// RedisClient will return a Redis Client that can be used for non-transactional Redis operations.
+// The client returned by this function is shared among many DB readers/writers and uses
+// a connection pool. For transactional Redis operations, please use GetRedisClientForTransaction().
+func RedisClient(db DBNum) *redis.Client {
+	if rcm == nil {
+		initializeRedisClientManager()
+	}
+	if !(*usePools) { // Connection Pooling is disabled.
+		return TransactionalRedisClient(db)
+	}
+	if len(getDBInstName(db)) == 0 {
+		log.V(lvl.ERROR).Infof("Invalid DBNum requested: %v", db)
+		return nil
+	}
+	rcm.totalPoolClientsRequested.Add(1)
+	rc := getClient(db)
+	if rc == nil {
+		log.V(lvl.ERROR).Infof("RCM Redis client for DBNum=%v is nil!", db)
+		rcm.mu.Lock()
+		defer rcm.mu.Unlock()
+		if rc = rcm.clients[int(db)]; rc != nil {
+			return rc
+		}
+		rc = createRedisClient(db, POOL_SIZE)
+		rcm.clients[int(db)] = rc
+	}
+	return rc
+}
+
+// TransactionalRedisClient will create and return a unique Redis client. This client can be used
+// for transactional operations. These operations include MULTI, PSUBSCRIBE (PubSub), and SCAN. This
+// client must be closed using CloseRedisClient when it is no longer needed.
+func TransactionalRedisClient(db DBNum) *redis.Client {
+	if rcm == nil {
+		initializeRedisClientManager()
+	}
+	if len(getDBInstName(db)) == 0 {
+		log.V(lvl.ERROR).Infof("Invalid DBNum requested: %v", db)
+		return nil
+	}
+	rcm.totalTransactionalClientsRequested.Add(1)
+	client := createRedisClient(db, 1)
+	rcm.curTransactionalClients.Add(1)
+	return client
+}
+
+func TransactionalRedisClientWithOpts(opts *redis.Options) *redis.Client {
+	if rcm == nil {
+		initializeRedisClientManager()
+	}
+	rcm.totalTransactionalClientsRequested.Add(1)
+	opts.PoolSize = 1
+	client := createRedisClientWithOpts(opts)
+	rcm.curTransactionalClients.Add(1)
+	return client
+}
+
+// CloseUniqueRedisClient will close the Redis client that is passed in.
+func CloseRedisClient(rc *redis.Client) error {
+	if rcm == nil {
+		return fmt.Errorf("RCM is nil when trying to close Redis Client: %v", rc)
+	}
+	if rc == nil {
+		return nil
+	}
+	// Closing a Redis Client with a connection pool is a no-op because these clients need to stay open.
+	if !IsTransactionalClient(rc) {
+		return nil
+	}
+	if err := rc.Close(); err != nil {
+		return err
+	}
+	rcm.curTransactionalClients.Add(-1)
+	return nil
+}
+
+// IsTransactionalClient returns true if rc is a transactional client and false otherwise.
+func IsTransactionalClient(rc *redis.Client) bool {
+	if rc == nil {
+		return false
+	}
+	return rc.Options().PoolSize == 1
+}
+
+// RedisClientManagerCounters returns the counters stored in the RCM.
+func RedisClientManagerCounters() *RedisCounters {
+	if rcm == nil {
+		initializeRedisClientManager()
+	}
+	counters := &RedisCounters{
+		CurTransactionalClients:            uint32(rcm.curTransactionalClients.Load()),
+		TotalPoolClientsRequested:          rcm.totalPoolClientsRequested.Load(),
+		TotalTransactionalClientsRequested: rcm.totalTransactionalClientsRequested.Load(),
+		PoolStatsPerDB:                     map[string]*redis.PoolStats{},
+	}
+	rcm.mu.RLock()
+	defer rcm.mu.RUnlock()
+	for db, client := range rcm.clients {
+		dbName := getDBInstName(DBNum(db))
+		if dbName == "" || client == nil {
+			continue
+		}
+		counters.PoolStatsPerDB[dbName] = client.PoolStats()
+	}
+	return counters
+}

translib/log/level.go

@@ -0,0 +1,10 @@
+package log
+
+import "github.com/golang/glog"
+
+const (
+	ERROR glog.Level = iota
+	WARNING
+	INFO
+	DEBUG
+)

translib/tlerr/tlerr.go

@@ -31,7 +31,10 @@ package tlerr
 
 import (
 	//	"fmt"
+	"errors"
 	"github.com/Azure/sonic-mgmt-common/cvl"
+	lvl "github.com/Azure/sonic-mgmt-common/translib/log"
+	"github.com/golang/glog"
 	"golang.org/x/text/language"
 	"golang.org/x/text/message"
 	//	"errors"
@@ -190,3 +193,32 @@ type TranslibBusy struct {
 func (e TranslibBusy) Error() string {
 	return p.Sprintf("Translib Busy")
 }
+
+func IsTranslibRedisClientEntryNotExist(err error) bool {
+	switch err.(type) {
+	case *TranslibRedisClientEntryNotExist, TranslibRedisClientEntryNotExist:
+		return true
+	}
+	return false
+}
+
+// isDBEntryNotExistError returns `true` if `err` is (or wraps around) an error
+// of type `TranslibRedisClientEntryNotExist`.
+func isDBEntryNotExistError(err error) bool {
+	if IsTranslibRedisClientEntryNotExist(err) {
+		return true
+	}
+	pdberr := &TranslibRedisClientEntryNotExist{}
+	return errors.As(err, &TranslibRedisClientEntryNotExist{}) || errors.As(err, &pdberr)
+}
+
+// ErrorSeverity based on `err` calculates the VLOG level.
+func ErrorSeverity(err error) glog.Level {
+	if err == nil {
+		return lvl.DEBUG
+	}
+	if isDBEntryNotExistError(err) {
+		return lvl.DEBUG
+	}
+	return lvl.ERROR
+}

translib/transformer/subscribe_req_xlate.go

@@ -478,7 +478,7 @@ func (pathXltr *subscribePathXlator) handleSubtreeNodeXlate() error {
 		log.Info(pathXltr.subReq.reqLogId, "handleSubtreeNodeXlate: handleSubtreeNodeXlate: uriSubtree: ", uriSubtree)
 	}
 
-	subInParam := XfmrSubscInParams{uriSubtree, pathXltr.subReq.dbs, make(RedisDbMap), TRANSLATE_SUBSCRIBE}
+	subInParam := XfmrSubscInParams{uri: uriSubtree, requestURI: pathXltr.subReq.reqUri, dbs: pathXltr.subReq.dbs, dbDataMap: make(RedisDbMap), subscProc: TRANSLATE_SUBSCRIBE}
 	subOutPram, subErr := xfmrSubscSubtreeHandler(subInParam, ygXpathInfo.xfmrFunc)
 
 	if log.V(dbLgLvl) {

translib/transformer/xfmr_interface.go

@@ -76,10 +76,11 @@ type notificationOpts struct {
 
 // XfmrSubscInParams represents input to subscribe subtree callbacks - request uri, DBs info access-pointers, DB info for request uri and subscription process type from translib.
 type XfmrSubscInParams struct {
-	uri       string
-	dbs       [db.MaxDB]*db.DB
-	dbDataMap RedisDbMap
-	subscProc SubscProcType
+	uri        string
+	requestURI string
+	dbs        [db.MaxDB]*db.DB
+	dbDataMap  RedisDbMap
+	subscProc  SubscProcType
 }
 
 // XfmrSubscOutParams represents output from subscribe subtree callback - DB data for request uri, Need cache, OnChange, subscription preference and interval.