updates for ndk 0.5.0, bond 0.3.0 and ndk and py packages (#198)

Author: hellt

docs/ndk/guide/agent.md

@@ -145,6 +145,10 @@ application-name:
     #   'imm' - runs on the imm
     #   'cpm' - runs on the cpm (default)
     launch-restrictions: ['hw:cpm', 'hw:chassis:imm']
+    # [Optional] The list of linux capabilities to grant to the application.
+    # The capabilities are specified as a list of capability keys (without the 'CAP_' prefix).
+    capability-bounding-set:
+        - NET_ADMIN
     yang-modules:
         # [Mandatory] The names of the YANG modules to load. This is usually the file-name without '.yang'
         names: [module-name, other-module-name]

docs/ndk/guide/architecture.md

@@ -44,6 +44,10 @@ Leveraging gRPC and protobufs provides some substantial benefits for NDK users:
 
 NDK is composed of a collection of gRPC services, each of which enables custom applications to interact with a particular subsystem on an SR Linux NOS, delivering a high level of integration and extensibility.
 
+/// note
+Starting with SR Linux 25.3.1, the NDK service is disabled by default. Users should enable it by configuring the `system ndk-server admin-state enable` leaf in the system configuration.
+///
+
 With this architecture, NDK applications act as gRPC clients that execute remote procedure calls (RPC) on a system that runs a gRPC server.
 
 On SR Linux, `ndk_mgr` is the application that runs the NDK gRPC server. Fig 3. shows how custom agents interact via gRPC with NDK, and NDK facilitates communication between custom apps and the rest of the system via IDB's pub/sub interface.

docs/ndk/guide/dev/go/with-bond/index.md

@@ -26,7 +26,7 @@ cd ndk-greeter-go
 
 /// note
     attrs: {class: inline end}
-[Containerlab v0.57.2](https://containerlab.dev/install) version and SR Linux 24.3.3 are used in this tutorial. Users are advised to use these version to have the same outputs as in this tutorial.
+[Containerlab v0.68.0](https://containerlab.dev/install) version, `srl-labs/bond` v0.3.0 and SR Linux 25.3 are used in this tutorial. Users are advised to use these version to have the same outputs as in this tutorial.
 
 Newer versions of Containerlab and SR Linux should work as well, but the outputs might be slightly different.
 ///

docs/ndk/index.md

@@ -36,7 +36,7 @@ Browse our [Apps Catalog](apps/index.md) with a growing list of NDK apps that No
 A list of links to various NDK artifacts:
 
 * NDK Proto files: [`nokia/srlinux-ndk-protobufs`](https://github.com/nokia/srlinux-ndk-protobufs)
-* [Generated NDK Service documentation](https://rawcdn.githack.com/nokia/srlinux-ndk-protobufs/v0.2.0/doc/index.html)
+* [Generated NDK Service documentation](https://ndk.srlinux.dev)
 * Go bindings for NDK: [`nokia/srlinux-ndk-go`](https://github.com/nokia/srlinux-ndk-go)
 * Python bindings for NDK: [`nokia/srlinux-ndk-py`](https://github.com/nokia/srlinux-ndk-py)
 

docs/ndk/releases/0.5.md

@@ -0,0 +1,27 @@
+---
+version: v0.5.0
+prev_version: v0.4.0
+---
+# NDK -{{version}}- Release Notes
+
+* Documentation - [ndk.srlinux.dev](https://ndk.srlinux.dev/doc/sdk?version=-{{version}}-)
+* Protobuf definitions - [github.com/nokia/srlinux-ndk-protobufs](https://github.com/nokia/srlinux-ndk-protobufs/tree/-{{version}}-)
+* Language bindings - [Go](https://github.com/nokia/srlinux-ndk-go/tree/-{{version}}-), [Python](https://github.com/nokia/srlinux-ndk-py/tree/-{{version}}-).
+* Introduced with SR Linux `v25.3.1`.
+* Diff with the previous release: [`-{{prev_version}}-...-{{version}}-`](https://github.com/nokia/srlinux-ndk-protobufs/compare/-{{prev_version}}-...-{{version}}-)
+
+## NDK Admin state
+
+Release 25.3.1 changes the default enablement state of the NDK server and introduces the `system ndk-server admin-state` leaf to control the server's status. From Release 25.3.1 onwards, the NDK server is disabled by default.
+
+If a system that has NDK applications is upgraded from a previous release, the NDK server is kept enabled to ensure seamless operation.
+
+## Defining Linux capabilities for the NDK agents
+
+From Release 25.3.1 onwards, a user may specify the Linux capability set that will be granted to the NDK application. When an app needs to perform privileged operations, it may set the capability set instead of running with `sudo` privileges.
+
+A user may specify the capability bounding set as a list of capability keys (without the `CAP_` prefix) as a list under the `capability-bounding-set` key in the [application YAML file](../guide/agent.md#application-manager-and-application-configuration-file).
+
+## NDK proto messages harmonization
+
+Release 25.3.1 aligns the majority of the NDK proto messages and fields in them to the protobuf style guide as outlined in the protobuf specification. This alignment may require NDK developers to rename the methods and field accessors accordingly.

docs/ndk/releases/index.md

@@ -19,5 +19,6 @@ The following table shows the mapping between SR Linux and NDK releases:
 | [v0.2.0](0.2.md) | 23.10.1              |          |
 | [v0.3.0](0.3.md) | 24.3.1               |          |
 | [v0.4.0](0.4.md) | 24.10.1              |          |
+| [v0.5.0](0.5.md) | 25.3.1               | Breaking changes! |
 
 [^1]: SR Linux release where NDK changes were introduced.