use dicts for BGP control plane protection

bcp38.ipset.j2

@@ -28,7 +28,7 @@ destroy tmp-bcp38-else-oface-v6
 
 {% if salt["pillar.get"]("control-plane-protection:bgp:IPv4",None) != None %}
 create tmp-control-plane-bgp-v4 hash:net family inet hashsize 1024 maxelem 65536
-{% for subnet in salt["pillar.get"]("control-plane-protection:bgp:IPv4",[]) %}
+{% for subnet in salt["pillar.get"]("control-plane-protection:bgp:IPv4",{}).keys() %}
 add tmp-control-plane-bgp-v4 {{ subnet }}
 {% endfor %}
 swap tmp-control-plane-bgp-v4 control-plane-bgp-v4
@@ -37,7 +37,7 @@ destroy tmp-control-plane-bgp-v4
 
 {% if salt["pillar.get"]("control-plane-protection:bgp:IPv6",None) != None %}
 create tmp-control-plane-bgp-v6 hash:net family inet6 hashsize 1024 maxelem 65536
-{% for subnet in salt["pillar.get"]("control-plane-protection:bgp:IPv6",[]) %}
+{% for subnet in salt["pillar.get"]("control-plane-protection:bgp:IPv6",{}).keys() %}
 add tmp-control-plane-bgp-v6 {{ subnet }}
 {% endfor %}
 swap tmp-control-plane-bgp-v6 control-plane-bgp-v6

top.sls

@@ -1,5 +1,5 @@
 hphr:
   hphr:
     - match: nodegroup
-    - hphr
-#    - test
+#    - hphr
+    - test