policy: T2425: verify() route-map match criterias

When we match on a community-list, extended community-list or even a large
community-list ensure that the referenced list exists on the CLI.

1 files changed, 22 insertions, 0 deletions

diff --git a/src/conf_mode/policy.py b/src/conf_mode/policy.py
index d461511f8..f0348fe06 100755
--- a/src/conf_mode/policy.py
+++ b/src/conf_mode/policy.py
@@ -80,6 +80,28 @@ def verify(policy):
                         raise ConfigError(f'Regex {mandatory_error}')
 
 
+    # route-maps tend to be a bit more complex so they get their own verify() section
+    if 'route_map' in policy:
+        for route_map, route_map_config in policy['route_map'].items():
+            if 'rule' not in route_map_config:
+                continue
+
+            for rule, rule_config in route_map_config['rule'].items():
+                # Specified community-list must exist
+                tmp = dict_search('match.community.community_list', rule_config)
+                if tmp and tmp not in policy.get('community_list', []):
+                    raise ConfigError(f'community-list {tmp} does not exist!')
+
+                # Specified extended community-list must exist
+                tmp = dict_search('match.extcommunity', rule_config)
+                if tmp and tmp not in policy.get('extcommunity_list', []):
+                    raise ConfigError(f'extcommunity-list {tmp} does not exist!')
+
+                # Specified large-community-list must exist
+                tmp = dict_search('match.large_community.large_community_list', rule_config)
+                if tmp and tmp not in policy.get('large_community_list', []):
+                    raise ConfigError(f'large-community-list {tmp} does not exist!')
+
     return None
 
 def generate(policy):