! ============================================================================
! 03-gnmi.cfg  --  gNMI dial-in for the Telegraf telemetry sink
! ============================================================================
! Enables the Telemetry-3001 dashboards (interface counters + state, and
! anything else Telegraf's cisco_telemetry_gnmi input is set to subscribe
! to). This is dial-IN telemetry: Telegraf initiates the gRPC connection
! and asks the router to stream openconfig paths on an interval.
!
! IOS-XR note: `no-tls` is only appropriate on a trusted management
! network. For any deployment reachable from an untrusted path, provision
! a server certificate and drop `no-tls` -- Telegraf's gNMI input supports
! TLS with cert verification.
! ============================================================================

! --- gRPC server for gNMI dial-in ------------------------------------------
grpc
 port 57400
 no-tls
!

! --- User for Telegraf to authenticate as ----------------------------------
! Whatever user you pick, populate GNMI_USERNAME / GNMI_PASSWORD in the
! stack's .env to match. A read-only account is sufficient.
!
!   username <GNMI_USER>
!    group root-lr
!    secret <PLAINTEXT_OR_HASHED_PASSWORD>
!   !

! --- Paths Telegraf subscribes to ------------------------------------------
! These are configured in telegraf/telegraf.conf, NOT on the router --
! openconfig paths are model-native, not sensor-groups. Reference only:
!
!   openconfig-interfaces:/interfaces/interface/state/counters   (10s)
!   openconfig-interfaces:/interfaces/interface/state            (30s)
!
! If you want additional sensors (LSDB size, CPU/mem), add the subscription
! block in telegraf/telegraf.conf and rebuild the telegraf container.

! --- Verify -----------------------------------------------------------------
!   show grpc status
!   show running-config grpc
!
! On the stack side:
!   docker logs obmp-telegraf 2>&1 | grep -i "connected"
!   Grafana -> OBMP-Telemetry -> Interface Utilization