Initial commit of NSD ansible role

Change-Id: I97c6455f2513604b86156017b5b7b1d769e7bbc0
diff --git a/molecule/default/verify.yml b/molecule/default/verify.yml
new file mode 100644
index 0000000..a4851a1
--- /dev/null
+++ b/molecule/default/verify.yml
@@ -0,0 +1,32 @@
+---
+# nsd molecule/default/verify.yml
+#
+# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
+# SPDX-License-Identifier: Apache-2.0
+
+- name: Verify
+  hosts: all
+  tasks:
+
+    # NOTE: Tests do not use the ansible dig lookup, because that executes on
+    # the host running ansible-playbook, not the target host.
+
+    # Lint flags the checks as they execute every time, skip this with 'noqa 301'
+
+    - name: Check for A record
+      command:  # noqa 301
+        cmd: "dig gw.example.com @127.0.0.1"
+      register: a_dig
+      failed_when: "'gw.example.com.\t\t3600\tIN\tA\t192.168.1.1' not in a_dig.stdout"
+
+    - name: Check for NS record
+      command:  # noqa 301
+        cmd: "dig ns example.com @127.0.0.1"
+      register: ns_dig
+      failed_when: "'example.com.\t\t3600\tIN\tNS\tgw.example.com.' not in ns_dig.stdout"
+
+    - name: Check for CNAME record
+      command:  # noqa 301
+        cmd: "dig lpr.example.com @127.0.0.1"
+      register: cn_dig
+      failed_when: "'lpr.example.com.\t3600\tIN\tCNAME\tprinter.example.com.' not in cn_dig.stdout"