Configuring firewall network-group with multiple network addresses via colud-init fails.
Network node under network-group is multi node, but cloud-init does not recognize it as multi node. The result configuration contains only last adress.
The reason is that the config template includes a space after 'multi:'.
https://github.com/vyos/vyatta-cfg-firewall/blob/a0fc973e321e877b3bf04bb453b0b7610e1dd8ee/templates/firewall/group/network-group/node.tag/network/node.def#L1
And vyos_userdata cloud-init module searches multi nodes by the regex ^multi:$. This does not allow any character between : and \n.
Two other nodes have the same problem.
vyatta-cfg-firewall % egrep -r 'multi:.+$' . ./templates/firewall/group/address-group/node.tag/address/node.def:multi: ./templates/firewall/group/port-group/node.tag/port/node.def:multi: ./templates/firewall/group/network-group/node.tag/network/node.def:multi: