[PATCH pve-network 13/15] api: sdn: disallow BGP fabrics in EVPN zone VRFs

[Gabriel Goller <g.goller@proxmox.com>]

EVPN zones already configure a BGP router in their dedicated VRF. Reject BGP
fabrics using the same VRF to avoid conflicting FRR BGP instances.

Signed-off-by: Gabriel Goller <g.goller@proxmox.com>
---
 src/PVE/API2/Network/SDN/Fabrics/Fabric.pm | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/PVE/API2/Network/SDN/Fabrics/Fabric.pm b/src/PVE/API2/Network/SDN/Fabrics/Fabric.pm
index 2ef55259ede3..e3156b89df24 100644
--- a/src/PVE/API2/Network/SDN/Fabrics/Fabric.pm
+++ b/src/PVE/API2/Network/SDN/Fabrics/Fabric.pm
@@ -41,6 +41,8 @@ sub validate_fabric_zone {
     raise_param_exc({ zone => "zone '$zone_id' does not exist" }) if !$zone;
     raise_param_exc({ zone => "zone '$zone_id' does not provide a dedicated VRF" })
         if $zone->{type} ne 'simple' && $zone->{type} ne 'evpn';
+    raise_param_exc({ zone => "BGP fabrics cannot use an EVPN zone VRF" })
+        if $protocol eq 'bgp' && $zone->{type} eq 'evpn';
     raise_param_exc({ zone => "zone '$zone_id' is configured to use the default VRF" })
         if $zone->{type} eq 'simple' && ($zone->{'default-vrf'} // 1);
 
-- 
2.47.3