Add GNMI client cert cname check support.

dockers/docker-sonic-gnmi/gnmi-native.sh

@@ -33,6 +33,8 @@ if [ -n "$CERTS" ]; then
     if [ ! -z $CA_CRT ]; then
         TELEMETRY_ARGS+=" --ca_crt $CA_CRT"
     fi
+
+    TELEMETRY_ARGS+=" --config_table_name GNMI_CLIENT_CERT"
 elif [ -n "$X509" ]; then
     SERVER_CRT=$(echo $X509 | jq -r '.server_crt')
     SERVER_KEY=$(echo $X509 | jq -r '.server_key')

dockers/docker-sonic-telemetry/telemetry.sh

@@ -34,6 +34,8 @@ if [ -n "$CERTS" ]; then
     if [ ! -z $CA_CRT ]; then
         TELEMETRY_ARGS+=" --ca_crt $CA_CRT"
     fi
+
+    TELEMETRY_ARGS+=" --config_table_name TELEMETRY_CLIENT_CERT"
 elif [ -n "$X509" ]; then
     SERVER_CRT=$(echo $X509 | jq -r '.server_crt')
     SERVER_KEY=$(echo $X509 | jq -r '.server_key')

src/sonic-yang-models/yang-models/sonic-gnmi.yang

@@ -72,7 +72,27 @@ module sonic-gnmi {
                 }
 
             }
+        }
+
+        container GNMI_CLIENT_CERT {
+            description "GNMI client cert list";
 
+            list GNMI_CLIENT_CERT_LIST {
+                max-elements 8;
+                key "cert_cname";
+
+                leaf cert_cname {
+                    type string;
+                    description
+                        "client cert common name";
+                }
+
+                leaf role {
+                    type string;
+                    description
+                        "role of client cert common name";
+                }
+            }
         }
     }
 }

src/sonic-yang-models/yang-models/sonic-telemetry.yang

@@ -74,5 +74,26 @@ module sonic-telemetry {
             }
 
         }
+
+        container TELEMETRY_CLIENT_CERT {
+            description "TELEMETRY client cert list";
+
+            list TELEMETRY_CLIENT_CERT_LIST {
+                max-elements 8;
+                key "cert_cname";
+
+                leaf cert_cname {
+                    type string;
+                    description
+                        "client cert common name";
+                }
+
+                leaf role {
+                    type string;
+                    description
+                        "role of client cert common name";
+                }
+            }
+        }
     }
 }