Skip to content

fix(agent): correct prefix-list action format for DPU_TO_EVPN_DROP_PREFIX_LIST#538

Merged
nvcoop merged 1 commit into
NVIDIA:mainfrom
lauragra-y:main
Mar 12, 2026
Merged

fix(agent): correct prefix-list action format for DPU_TO_EVPN_DROP_PREFIX_LIST#538
nvcoop merged 1 commit into
NVIDIA:mainfrom
lauragra-y:main

Conversation

@lauragra-y
Copy link
Copy Markdown
Contributor

Description

  • Rule 65535 in the DPU_TO_EVPN_DROP_PREFIX_LIST prefix-list was using route-map object syntax (action: {deny: {}}) instead of the string syntax required by prefix-list rules (action: deny), causing NVUE schema validation to reject the entire network config with the error: Config invalid at router.policy.prefix-list.DPU_TO_EVPN_DROP_PREFIX_LIST.rule.65535.action: {'deny': {}} is not of type 'string'
  • This rule was added in Remove config of pf0hpf_if instead of setting it to down after configuration #457 to handle the case where no VPCs are configured (making rule 10 conditional), but was copy-pasted from the adjacent route-map section which uses a different schema for action
  • Fix updates the template and 4 test expected files

Type of Change

  • Add - New feature or capability
  • Change - Changes in existing functionality
  • Fix - Bug fixes
  • Remove - Removed features or deprecated functionality
  • Internal - Internal changes (refactoring, tests, docs, etc.)

Related Issues (Optional)

Breaking Changes

  • This PR contains breaking changes

Testing

  • Unit tests added/updated
  • Integration tests added/updated
  • Manual testing performed
  • No testing required (docs, internal refactor, etc.)

Additional Notes

…EFIX_LIST

Signed-off-by: Laura Gray <lgray@nvidia.com>
@lauragra-y lauragra-y requested a review from a team as a code owner March 12, 2026 13:41
@github-actions
Copy link
Copy Markdown

🔐 TruffleHog Secret Scan

No secrets or credentials found!

Your code has been scanned for 700+ types of secrets and credentials. All clear! 🎉

🔗 View scan details

🕐 Last updated: 2026-03-12 13:43:21 UTC | Commit: 472b2a1

@github-actions
Copy link
Copy Markdown

🛡️ Vulnerability Scan

🚨 Found 74 vulnerability(ies)
📊 vs main: 74 (no change)

Severity Breakdown:

  • 🔴 Critical/High: 74
  • 🟡 Medium: 0
  • 🔵 Low/Info: 0

🔗 View full details in Security tab

🕐 Last updated: 2026-03-12 13:43:23 UTC | Commit: 472b2a1

@nvcoop nvcoop merged commit dc2b785 into NVIDIA:main Mar 12, 2026
34 checks passed
tmcroberts97 pushed a commit to tmcroberts97/infra-controller-core that referenced this pull request Mar 12, 2026
…EFIX_LIST (NVIDIA#538)

## Description
- Rule 65535 in the DPU_TO_EVPN_DROP_PREFIX_LIST prefix-list was using
route-map object syntax (action: {deny: {}}) instead of the string
syntax required by prefix-list rules (action: deny), causing NVUE schema
validation to reject the entire network config with the error: Config
invalid at
router.policy.prefix-list.DPU_TO_EVPN_DROP_PREFIX_LIST.rule.65535.action:
{'deny': {}} is not of type 'string'
- This rule was added in NVIDIA#457 to handle the case where no VPCs are
configured (making rule 10 conditional), but was copy-pasted from the
adjacent route-map section which uses a different schema for action
- Fix updates the template and 4 test expected files

## Type of Change
<!-- Check one that best describes this PR -->
- [ ] **Add** - New feature or capability
- [ ] **Change** - Changes in existing functionality  
- [x] **Fix** - Bug fixes
- [ ] **Remove** - Removed features or deprecated functionality
- [ ] **Internal** - Internal changes (refactoring, tests, docs, etc.)

## Related Issues (Optional)
<!-- If applicable, provide GitHub Issue. -->

## Breaking Changes
- [ ] This PR contains breaking changes

<!-- If checked above, describe the breaking changes and migration steps
-->

## Testing
<!-- How was this tested? Check all that apply -->
- [x] Unit tests added/updated
- [ ] Integration tests added/updated  
- [ ] Manual testing performed
- [ ] No testing required (docs, internal refactor, etc.)

## Additional Notes
<!-- Any additional context, deployment notes, or reviewer guidance -->

Signed-off-by: Laura Gray <lgray@nvidia.com>
tmcroberts97 pushed a commit to tmcroberts97/infra-controller-core that referenced this pull request Mar 12, 2026
…EFIX_LIST (NVIDIA#538)

## Description
- Rule 65535 in the DPU_TO_EVPN_DROP_PREFIX_LIST prefix-list was using
route-map object syntax (action: {deny: {}}) instead of the string
syntax required by prefix-list rules (action: deny), causing NVUE schema
validation to reject the entire network config with the error: Config
invalid at
router.policy.prefix-list.DPU_TO_EVPN_DROP_PREFIX_LIST.rule.65535.action:
{'deny': {}} is not of type 'string'
- This rule was added in NVIDIA#457 to handle the case where no VPCs are
configured (making rule 10 conditional), but was copy-pasted from the
adjacent route-map section which uses a different schema for action
- Fix updates the template and 4 test expected files

## Type of Change
<!-- Check one that best describes this PR -->
- [ ] **Add** - New feature or capability
- [ ] **Change** - Changes in existing functionality
- [x] **Fix** - Bug fixes
- [ ] **Remove** - Removed features or deprecated functionality
- [ ] **Internal** - Internal changes (refactoring, tests, docs, etc.)

## Related Issues (Optional)
<!-- If applicable, provide GitHub Issue. -->

## Breaking Changes
- [ ] This PR contains breaking changes

<!-- If checked above, describe the breaking changes and migration steps
-->

## Testing
<!-- How was this tested? Check all that apply -->
- [x] Unit tests added/updated
- [ ] Integration tests added/updated
- [ ] Manual testing performed
- [ ] No testing required (docs, internal refactor, etc.)

## Additional Notes
<!-- Any additional context, deployment notes, or reviewer guidance -->

Signed-off-by: Laura Gray <lgray@nvidia.com>
Signed-off-by: Thomas McRoberts <tmcroberts@nvidia.com>
jd-nv pushed a commit that referenced this pull request Mar 12, 2026
…EFIX_LIST (#538)

## Description
- Rule 65535 in the DPU_TO_EVPN_DROP_PREFIX_LIST prefix-list was using
route-map object syntax (action: {deny: {}}) instead of the string
syntax required by prefix-list rules (action: deny), causing NVUE schema
validation to reject the entire network config with the error: Config
invalid at
router.policy.prefix-list.DPU_TO_EVPN_DROP_PREFIX_LIST.rule.65535.action:
{'deny': {}} is not of type 'string'
- This rule was added in #457 to handle the case where no VPCs are
configured (making rule 10 conditional), but was copy-pasted from the
adjacent route-map section which uses a different schema for action
- Fix updates the template and 4 test expected files

## Type of Change
<!-- Check one that best describes this PR -->
- [ ] **Add** - New feature or capability
- [ ] **Change** - Changes in existing functionality
- [x] **Fix** - Bug fixes
- [ ] **Remove** - Removed features or deprecated functionality
- [ ] **Internal** - Internal changes (refactoring, tests, docs, etc.)

## Related Issues (Optional)
<!-- If applicable, provide GitHub Issue. -->

## Breaking Changes
- [ ] This PR contains breaking changes

<!-- If checked above, describe the breaking changes and migration steps
-->

## Testing
<!-- How was this tested? Check all that apply -->
- [x] Unit tests added/updated
- [ ] Integration tests added/updated
- [ ] Manual testing performed
- [ ] No testing required (docs, internal refactor, etc.)

## Additional Notes
<!-- Any additional context, deployment notes, or reviewer guidance -->

Signed-off-by: Laura Gray <lgray@nvidia.com>
Signed-off-by: Thomas McRoberts <tmcroberts@nvidia.com>
nvcoop pushed a commit to nvcoop/bare-metal-manager-core that referenced this pull request Mar 12, 2026
…EFIX_LIST (NVIDIA#538)

## Description
- Rule 65535 in the DPU_TO_EVPN_DROP_PREFIX_LIST prefix-list was using
route-map object syntax (action: {deny: {}}) instead of the string
syntax required by prefix-list rules (action: deny), causing NVUE schema
validation to reject the entire network config with the error: Config
invalid at
router.policy.prefix-list.DPU_TO_EVPN_DROP_PREFIX_LIST.rule.65535.action:
{'deny': {}} is not of type 'string'
- This rule was added in NVIDIA#457 to handle the case where no VPCs are
configured (making rule 10 conditional), but was copy-pasted from the
adjacent route-map section which uses a different schema for action
- Fix updates the template and 4 test expected files

## Type of Change
<!-- Check one that best describes this PR -->
- [ ] **Add** - New feature or capability
- [ ] **Change** - Changes in existing functionality  
- [x] **Fix** - Bug fixes
- [ ] **Remove** - Removed features or deprecated functionality
- [ ] **Internal** - Internal changes (refactoring, tests, docs, etc.)

## Related Issues (Optional)
<!-- If applicable, provide GitHub Issue. -->

## Breaking Changes
- [ ] This PR contains breaking changes

<!-- If checked above, describe the breaking changes and migration steps
-->

## Testing
<!-- How was this tested? Check all that apply -->
- [x] Unit tests added/updated
- [ ] Integration tests added/updated  
- [ ] Manual testing performed
- [ ] No testing required (docs, internal refactor, etc.)

## Additional Notes
<!-- Any additional context, deployment notes, or reviewer guidance -->

Signed-off-by: Laura Gray <lgray@nvidia.com>
ajf added a commit to ajf/infra-controller that referenced this pull request Mar 13, 2026
ajf added a commit that referenced this pull request Mar 13, 2026
ajf added a commit to ajf/infra-controller that referenced this pull request Mar 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants