diff --git a/tests/integration/targets/secretsmanager_secret/tasks/basic.yml b/tests/integration/targets/secretsmanager_secret/tasks/basic.yml index 82b420515ae..fdf6e3fee0a 100644 --- a/tests/integration/targets/secretsmanager_secret/tasks/basic.yml +++ b/tests/integration/targets/secretsmanager_secret/tasks/basic.yml @@ -688,6 +688,68 @@ that: - result is not changed + # ============================================================ + # Overwrite testing + # ============================================================ + + - name: Create secret with overwrite = False (Check mode) + aws_secret: + name: "{{ secret_name }}-2" + state: present + secret_type: 'string' + secret: "{{ super_secret_string }}" + overwrite: False + register: result + check_mode: True + + - name: assert key is changed + assert: + that: + - result is changed + + - name: Create secret with overwrite = False + aws_secret: + name: "{{ secret_name }}-2" + state: present + secret_type: 'string' + secret: "{{ super_secret_string }}" + overwrite: False + register: result + + - name: assert key is changed + assert: + that: + - result is changed + + - name: Update secret with overwrite = False (Check mode) + aws_secret: + name: "{{ secret_name }}-2" + state: present + secret_type: 'string' + secret: "{{ super_secret_string }}-2" + overwrite: False + register: result + check_mode: True + + - name: assert key is not changed + assert: + that: + - result is not changed + + - name: Create secret with overwrite = False + aws_secret: + name: "{{ secret_name }}-2" + state: present + secret_type: 'string' + secret: "{{ super_secret_string }}-2" + overwrite: False + register: result + + - name: assert key is not changed + assert: + that: + - result is not changed + # ============================================================ # Removal testing # ============================================================ @@ -748,4 +810,11 @@ name: "{{ secret_name }}" state: absent recovery_window: 0 + ignore_errors: yes - name: remove secret + + - name: remove secret 2 + aws_secret: + name: "{{ secret_name }}-2" + state: absent + recovery_window: 0 ignore_errors: yes