T9393: new rolesmain

1 files changed, 29 insertions, 0 deletions

diff --git a/extensions/molecule/ipsec_route_based_bgp/verify.yml b/extensions/molecule/ipsec_route_based_bgp/verify.yml
new file mode 100644
index 0000000..04ad7c2
--- /dev/null
+++ b/extensions/molecule/ipsec_route_based_bgp/verify.yml
@@ -0,0 +1,29 @@
+---
+- name: Verify role state
+  hosts: vpn
+  gather_facts: false
+  tasks:
+    - name: Wait for IKE, IPsec and BGP
+      ansible.builtin.pause:
+        seconds: 60
+      run_once: true
+
+    - name: Run role checks
+      ansible.builtin.include_role:
+        name: vyos.blueprints.ipsec_route_based
+        tasks_from: verify
+
+- name: Verify traffic over BGP-learned routes through the tunnel
+  hosts: localhost
+  gather_facts: false
+  tasks:
+    - name: Ping between on-premises and the "Azure" LAN
+      ansible.builtin.command:
+        cmd: docker exec clab-bp-azure-{{ item.from }} ping -c 3 -W 2 {{ item.to }}
+      become: "{{ lookup('ansible.builtin.env', 'CLAB_BECOME', default='true') | bool }}"
+      changed_when: false
+      loop:
+        - {from: onprem, to: 10.0.1.10}
+        - {from: vm, to: 10.10.2.10}
+      loop_control:
+        label: "{{ item.from }} -> {{ item.to }}"