policy: T9394: reject route-map deletion if still used inside VRF instance

A route-map referenced via BGP "address-family <afi> route-map vrf|vpn
import|export" could be deleted, leaving FRR with a dangling reference, because
only direct import/export children of a route-map node were inspected.

Routing policies used by protocols inside a VRF were only checked by accident,
through the copy of each VRF kept for BGP in the default VRF. Without BGP in
the default VRF, no VRF reference was checked at all.

Now nested vrf/vpn route-maps are inspected and every VRF's routing protocols
are checked explicitly.

BGP dependency copies are skipped, as they may hold the effective config and
would block deleting a VRF together with its policies in one commit.

0 files changed, 0 insertions, 0 deletions