fix(plugin): check trunk id instead of minID in bounds validation

The condition was comparing minID against 4096 instead of the actual id value,
allowing out-of-range individual trunk IDs to slip through undetected.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Michael Filanov <mfilanov@nvidia.com>

Author: filanov

pkg/plugin/plugin.go

@@ -237,7 +237,7 @@ func SplitVlanIds(trunks []*types.Trunk) ([]uint, error) {
 		var id uint
 		if item.ID != nil {
 			id = *item.ID
-			if minID > 4096 {
+			if id > 4096 {
 				return nil, errors.New("incorrect trunk id parameter")
 			}
 			vlans[id] = true

tests/cni/plugin_test.go

@@ -972,6 +972,12 @@ var pluginTestFunc = func(version string) {
 				testSplitVlanIds(trunks, nil, errors.New("incorrect trunk maxID parameter"), false)
 			})
 		})
+		Context("specify trunk with id greater than 4096", func() {
+			trunks := `[ {"id": 15}, {"id": 5000} ]`
+			It("testSplitVlanIds method should throw appropriate error", func() {
+				testSplitVlanIds(trunks, nil, errors.New("incorrect trunk id parameter"), false)
+			})
+		})
 	})
 }