module openconfig-gnsi-credentialz {

    yang-version 1;

    namespace
      "https://github.com/openconfig/yang/gnsi/credentialz";

    prefix oc-gnsi-credz;

    import openconfig-extensions {
      prefix oc-ext;
    }
    import openconfig-system {
      prefix oc-sys;
    }
    import openconfig-types {
      prefix oc-types;
    }
    import openconfig-yang-types {
      prefix oc-yang;
    }
    import openconfig-system-grpc {
      prefix oc-sys-grpc;
    }
    import openconfig-gnsi {
      prefix oc-gnsi;
    }

    organization "OpenConfig Working Group";

    contact
      "OpenConfig working group
    netopenconfig@googlegroups.com";

    description
      "This module provides a data model for the metadata of SSH and console
    credentials installed on a networking device.

    The following leaves MUST be treated as invalid when the gNSI server is
    enabled and credentialz is supported by the implementation:
      /system/aaa/authentication/users/user/config/ssh-key
      /system/aaa/authentication/users/user/state/ssh-key
      /system/aaa/authentication/users/user/config/password
      /system/aaa/authentication/users/user/state/password
      /system/aaa/authentication/users/user/config/password-hashed
      /system/aaa/authentication/users/user/state/password-hashed";

    revision "2024-02-13" {
      description
        "Major style updates and move to openconfig/public from openconfig/gnsi.
      Last commit at
      https://github.com/openconfig/gnsi/commit/347935aac66135d5649dadb9583ed0914578aab0";
      reference
        "0.6.0";

    }

    revision "2024-01-05" {
      description "Fix typo in YANG leaves";
      reference
        "0.5.0";

    }

    revision "2023-10-03" {
      description
        "Added state leaves for admin-user";
      reference
        "0.4.0";

    }

    revision "2023-08-18" {
      description
        "Fixed the canonical order of config field.";
      reference
        "0.3.0";

    }

    revision "2022-10-30" {
      description
        "Adds success/failure counters.";
      reference
        "0.2.0";

    }

    revision "2022-08-22" {
      description "Initial revision.";
      reference
        "0.1.0";

    }

    oc-ext:openconfig-version "0.6.0";

    typedef version {
      type string;
      description
        "The version ID of the credential as provided by the credential
      manager when the credential was pushed. This leaf persists through
      a reboot.";
    }

    typedef created-on {
      type oc-types:timeticks64;
      description
        "The creation time of the credential as reported by the credential
      manager when the credential was pushed to the device. This value is
      reported as nanoseconds since epoch (January 1st, 1970 00:00:00 GMT).
      This leaf persists through a reboot.";
    }
  }  // module openconfig-gnsi-credentialz