test_policy_old.yml

---
- hosts: localhost
  gather_facts: no
  vars:
    bobs_rules: >
        path "secret/oldbob/*" {
          capabilities = ["create", "read", "update", "delete", "list"]
        }
        path "secret/oldbob" {
          capabilities = ["list"]
        }
  tasks:
    - hashivault_policy:
        name: oldbob
        state: absent

    - name: Set new policy
      hashivault_policy_set:
        name: oldbob
        rules: "{{bobs_rules}}"
      register: 'vault_policy_set'
    - assert: { that: "{{vault_policy_set.changed}} == True" }
    - assert: { that: "{{vault_policy_set.rc}} == 0" }

    - name: Set new policy from file
      hashivault_policy_set_from_file:
        name: oldbob
        rules_file: "templates/policy_rules.hcl"
      register: 'vault_policy_set'
    - assert: { that: "{{vault_policy_set.changed}} == True" }
    - assert: { that: "{{vault_policy_set.rc}} == 0" }

    - name: Delete new policy
      hashivault_policy_delete:
        name: oldbob
      register: 'vault_policy_delete'
    - assert: { that: "{{vault_policy_delete.changed}} == True" }
    - assert: { that: "{{vault_policy_delete.rc}} == 0" }