- hosts: testhost vars_files: - vars/test_var_encrypted.yml gather_facts: False tasks: - assert: that: - 'secret_var == "secret"' - copy: src=vault-secret.txt dest={{output_dir}}/secret.txt