---
- name: Configuration tasks
  module_defaults:
    vault_ci_token_create: '{{ vault_plugins_module_defaults_common }}'
  block:
    - name: 'Create a test non-root token'
      vault_ci_token_create:
        # we don't need test policy, but if we don't put something here
        # it will inherit the root token's capabilities which is what
        # we're trying to avoid.
        policies: test-policy
      register: user_token_cmd
