This PR enhances site-to-site VPN reliability and provides a batch test CLI.

• Added a one-time retry for VPN create/delete operations to handle transient CSP timing issues
• Extended support for AWS-Site VPNs to OpenStack and added BGP peering CIDR model fields for Azure
• Added an optional refresh query param to the VPN GET API (includes updated Swagger/documentation)
• Replaced the existing gcp-aws script with a configuration-based cross-site batch test CLI that generates reports
• Updated the mc-terrarium integration to v0.1.2 and aligned local configuration documentation and make targets

Changes in details

1. VPN reliability improvements

   • Added a one-time retry policy to create/delete API calls to improve resilience against transient failures.

2. CSP-support expansion and model updates

   • Added AWS-to-OpenStack support coverage.
   • Extended Azure BGP peering CIDR-related model fields.

3. API and documentation updates

   • Added a refresh query parameter for VPN detail retrieval (i.e., read resource info from CSPs).
   • Updated Swagger descriptions and schemas to match current behavior.

4. Test CLI enhancement

   • Removed the legacy CLI at src/testclient/test-clis/vpn-tunnel/gcp-aws.
   • Added a batch VPN test CLI at src/testclient/test-clis/site-to-site-vpn.
   • Supports CSP auto-filtering, step-by-step API logging, and Markdown report output.

5. Operations and developer experience

   • Upgraded mc-terrarium and aligned related configuration.
   • Updated ignore rules for .env and VPN test result directories.

Testing

• Executed the following site-to-site VPN test cases locally
  • After waiting 1 minute, the connectivity check (i.e., ping test) was performed.
  • Even if the resource status is 'Ready' or 'Available', it may still take several minutes for actual traffic to start flowing.
• Results:
  • aws-to-azure: Passed
  • aws-to-gcp: Passed
  • aws-to-alibaba: Passed
  • aws-to-tencent: Passed
  • aws-to-ibm: Passed
  • aws-to-openstack: Partially passed
    • VPN lifecycle operations passed (create/get/list/delete),
    • but end-to-end ping connectivity failed. (see [OpenStack] Inquiry regarding Router Mode cb-spider#1677)

Notes

• The attached sample below is masked to protect project identifiers, resource IDs, IP addresses, and endpoints.
• Full test outputs are not included in the PR body because they contain sensitive environment-specific information.

{
	"name": "vpn-aws-gcp",
	"site1": {
		"cspSpecificProperty": {
			"aws": {
				"bgpAsn": "64512"
			}
		},
		"vNetId": "<AWS_VNET_ID>"
	},
	"site2": {
		"cspSpecificProperty": {
			"gcp": {
				"bgpAsn": "65530"
			}
		},
		"vNetId": "<GCP_VNET_ID>"
	}
}

{
	"id": "vpn-aws-gcp",
	"status": "Available",
	"uid": "<VPN_UID>",
	"vpnSites": [
		{
			"connectionName": "<AWS_CONN>",
			"resourceDetails": [
				{ "cspResourceId": "<AWS_CGW_ID_1>", "cspResourceName": "<AWS_CGW_NAME_1>" },
				{ "cspResourceId": "<AWS_CGW_ID_2>", "cspResourceName": "<AWS_CGW_NAME_2>" },
				{ "cspResourceId": "<AWS_VPN_CONN_ID_1>", "cspResourceName": "<AWS_VPN_CONN_NAME_1>" },
				{ "cspResourceId": "<AWS_VPN_CONN_ID_2>", "cspResourceName": "<AWS_VPN_CONN_NAME_2>" },
				{ "cspResourceId": "<AWS_VGW_ID>", "cspResourceName": "<AWS_VGW_NAME>" }
			]
		},
		{
			"connectionName": "<GCP_CONN>",
			"resourceDetails": [
				{ "cspResourceId": "projects/<GCP_PROJECT>/global/externalVpnGateways/<GW>", "cspResourceName": "<GW_NAME>" },
				{ "cspResourceId": "projects/<GCP_PROJECT>/regions/<REGION>/vpnTunnels/<TUNNEL_1>", "cspResourceName": "<TUNNEL_1>" },
				{ "cspResourceId": "projects/<GCP_PROJECT>/regions/<REGION>/vpnTunnels/<TUNNEL_2>", "cspResourceName": "<TUNNEL_2>" },
				{ "cspResourceId": "projects/<GCP_PROJECT>/regions/<REGION>/vpnTunnels/<TUNNEL_3>", "cspResourceName": "<TUNNEL_3>" },
				{ "cspResourceId": "projects/<GCP_PROJECT>/regions/<REGION>/vpnTunnels/<TUNNEL_4>", "cspResourceName": "<TUNNEL_4>" }
			]
		}
	]
}

{
	"vpnIdList": ["vpn-aws-gcp"]
}

{
	"command": ["ping <GCP_PRIVATE_IP_MASKED> -c 1"],
	"userName": "cb-user"
}

{
	"results": [
		{
			"error": "",
			"stdout": {
				"0": "1 packets transmitted, 1 received, 0% packet loss"
			},
			"vmId": "<AWS_VM_ID>",
			"vmIp": "<AWS_PUBLIC_IP_MASKED>"
		}
	]
}

{
	"message": "successfully deleted the site-to-site VPN (vpn-aws-gcp)"
}