From Steve Sharman
There is currently a requirement that a global contract is pre-created so that it can be consumed by the "container" tenant.
If the contract is common is provided by vzAny in the common VRF and consumed by the shared L3out (in common) it is not possible to use this contract the "container" tenant
topology/pod-1/node-102/local/svc-policyelem-id-0/cdef-[uni/tn-common/brc-permit-to-common.vrf-01-all-ext-subnets]/epgCont-[uni/tn-containers/out-K8s_L3OUT/instP-catch_all]/fr-[uni/tn-common/brc-permit-to-common.vrf-01-all-ext-subnets/dirass/cons-[uni/tn-containers/out-K8s_L3OUT/instP-catch_all]-any-no]/to-[uni/tn-common/brc-permit-to-common.vrf-01-all-ext-subnets/any-[uni/tn-common/ctx-common.vrf-01/any]-type-prov_as_any/prov-[uni/tn-common/ctx-common.vrf-01/any]-any-yes]/nwissues
A better approach would be to create a contract in the "container" tenant, and export it to the common tenant. The contract can then be provided on the "container" vrf, and consumed (contract interface) on the shared L3out
From Steve Sharman