Use TLS for certificate-free gNMI services - #28915

Closed

hdwhdw wants to merge 25 commits into

sonic-net:masterfrom

hdwhdw:fix/28540-insecure-fallback

Commits on Aug 7, 2026

[SmartSwitch] use TLS for certificate-free gNMI
hdwhdw
committed
ad7a54b
[submodule] Update sonic-gnmi TLS fix
hdwhdw
committed
12b20b6
[submodule] Update sonic-gnmi TLS fix
hdwhdw
committed
74b73fa

Commits on Aug 8, 2026

[submodule] Update sonic-utilities TLS fix
hdwhdw
committed
334da09
gnmi: allow clients with ephemeral TLS
hdwhdw
committed
d4c7053
gnmi: cover every ephemeral TLS fallback
hdwhdw
committed
d644062
[submodule] Update DPU gNOI caller fallbacks
hdwhdw
committed
c02431b
[submodule] Update DPU caller fallback tests
hdwhdw
committed
7f6fcc0
gnmi: quote TLS configuration values
hdwhdw
committed
335786e
gnmi: normalize missing TLS fields
hdwhdw
committed
590c2e4
gnmi: preserve jq filter arguments
hdwhdw
committed
83c56a5
gnmi: initialize ephemeral TLS selection
hdwhdw
committed
3fbc4c9
gnmi: isolate ephemeral TLS authentication
hdwhdw
committed
9b0818a
gnmi: preserve application auth with ephemeral TLS
hdwhdw
committed
15378fc
gnmi: preserve explicit auth in ephemeral TLS
hdwhdw
committed
4702de5
gnmi: make ephemeral auth policy explicit
hdwhdw
committed
bda5e7c
gnmi: preserve CA-backed client auth
hdwhdw
committed
07c9928
[submodule] Update DPU TLS security fixes
hdwhdw
committed
59c803a
[submodule] Update DPU reboot recovery
hdwhdw
committed
5d34e7c
[submodule] Update DPU detach recovery
hdwhdw
committed
4c9ed38
gnmi: normalize optional CRL setting
hdwhdw
committed
886b49b
gnmi: normalize configured auth modes
hdwhdw
committed
67c7b89
gnmi: preserve CA-backed client auth default
hdwhdw
committed
1060b68
gnmi: normalize optional client auth
hdwhdw
committed
bd2ad72
Merge remote-tracking branch 'upstream/master' into fix/28540-insecure-fallback
hdwhdw
committed
bd9a278