Deviation for Transport Security flag

feature/gnmi/tests/gnmi_ni_test/metadata.textproto

@@ -21,6 +21,7 @@ platform_exceptions: {
   }
   deviations: {
     default_ni_gnmi_server_name: "gnxi-default"
+    grpc_transport_security_false_unsupported: true
   }
 }
 platform_exceptions: {

internal/cfgplugins/system.go

@@ -68,6 +68,9 @@ func CreateGNMIServer(t testing.TB, d *ondatra.DUTDevice, batch *gnmi.SetBatch,
 	if !deviations.GrpcServerServicesUnsupported(d) {
 		gnmiServer.Services = []oc.E_SystemGrpc_GRPC_SERVICE{oc.SystemGrpc_GRPC_SERVICE_GNMI}
 	}
+	if deviations.GrpcTransportSecurityFalseUnsupported(d) {
+		gnmiServer.TransportSecurity = ygot.Bool(true)
+	}
 	gnmi.BatchUpdate(batch, gnmiServerPath.Config(), gnmiServer)
 }
 

internal/deviations/deviations.go

@@ -2064,14 +2064,14 @@
 // AcctzRecordFailCommandUnsupported  returns true if the device does not support Acctz record for fail user
 // Juniper: https://partnerissuetracker.corp.google.com/issues/500649430
 
 func AcctzRecordFailCommandUnsupported(dut *ondatra.DUTDevice) bool {
 	return lookupDUTDeviations(dut).GetAcctzRecordFailCommandUnsupported()
 }
 
 // AcctzRecordFailCommandUnsupported  returns true if the device does not support Acctz record for fail user
 // Juniper: https://partnerissuetracker.corp.google.com/issues/500627000
 
 func AcctzRecordFailGrpcUnsupported(dut *ondatra.DUTDevice) bool {
 	return lookupDUTDeviations(dut).GetAcctzRecordFailGrpcUnsupported()
 }
 
@@ -2088,7 +2088,7 @@
 	return lookupDUTDeviations(dut).GetGrpcServerServicesUnsupported()
 }
 
 // StaticRouteToNextHopGroupOCNotSupported returns true if device does not support oc state path static route to nexthop group
 func StaticRouteToNHGOCUnsupported(dut *ondatra.DUTDevice) bool {
 	return lookupDUTDeviations(dut).GetStaticRouteToNhgOcUnsupported()
 }
@@ -2116,7 +2116,7 @@
 
 // AcctzRecordSessionChannelIdUnsupported returns true if the device does not support Acctz record for fail user
 // Juniper: https://partnerissuetracker.corp.google.com/issues/500627000
 func AcctzRecordSessionChannelIdUnsupported(dut *ondatra.DUTDevice) bool {
 	return lookupDUTDeviations(dut).GetAcctzRecordSessionChannelIdUnsupported()
 }
 
@@ -2147,30 +2147,30 @@
 	return lookupDUTDeviations(dut).GetEnableMplsStaticOnInterface()
 }
 
 // Device does not support secondary controller card CPU utilization
 // Arista: https://issuetracker.google.com/issues/508666262
 func SecondaryControllerCardCpuUtilizationUnsupported(dut *ondatra.DUTDevice) bool {
 	return lookupDUTDeviations(dut).GetSecondaryControllerCardCpuUtilizationUnsupported()
 }
 
 // Device does not support secondary controller card memory utilization
 // Arista: https://issuetracker.google.com/issues/508656197
 func SecondaryControllerCardMemoryUtilizationUnsupported(dut *ondatra.DUTDevice) bool {
 	return lookupDUTDeviations(dut).GetSecondaryControllerCardMemoryUtilizationUnsupported()
 }
 
 // Device does not support interface counters in fcs errors
 // Arista: https://issuetracker.google.com/issues/508304903
 func InterfaceCountersInFcsErrorsUnsupported(dut *ondatra.DUTDevice) bool {
 	return lookupDUTDeviations(dut).GetInterfaceCountersInFcsErrorsUnsupported()
 }
 
 // Mpls static pseudowire returns true if oc is not supported
 func MplsStaticPseudowireOcUnsupported(dut *ondatra.DUTDevice) bool {
 	return lookupDUTDeviations(dut).GetMplsStaticPseudowireOcUnsupported()
 }
 
 // Vlan client encapsulation returns true if oc is not supported
 func VlanClientEncapsulationOcUnsupported(dut *ondatra.DUTDevice) bool {
 	return lookupDUTDeviations(dut).GetVlanClientEncapsulationOcUnsupported()
 }
@@ -2196,3 +2196,9 @@
 func LACPInterfaceMemberStateInterfaceUnsupported(dut *ondatra.DUTDevice) bool {
 	return lookupDUTDeviations(dut).GetLacpInterfaceMemberStateInterfaceUnsupported()
 }
+
+// GrpcTransportSecurityFalseUnsupported returns true if the device does not
+// support setting transport-security to false under grpc-server config.
+func GrpcTransportSecurityFalseUnsupported(dut *ondatra.DUTDevice) bool {
+	return lookupDUTDeviations(dut).GetGrpcTransportSecurityFalseUnsupported()
+}

proto/metadata.proto

@@ -1342,6 +1342,10 @@ message Metadata {
     // Juniper: https://partnerissuetracker.corp.google.com/issues/510547636
     bool containerz_retrieve_logs_unsupported = 426;
 
+    // Device does not support setting transport-security to false under
+    // grpc-server config.  
+    bool grpc_transport_security_false_unsupported = 427;
+
     // Reserved field numbers and identifiers.
     reserved 84, 9, 28, 20, 38, 43, 90, 97, 55, 89, 19, 36, 35, 40, 113, 131, 141, 173, 234, 254, 231, 300, 241, 49;
   }