Bryan's way is nicer.

Author: Christopher M. Neill

ansible/roles/dock-init/tasks/main.yml

@@ -2,25 +2,12 @@
 - fail: msg="value tokens need to be defined for this role"
   when: vault_auth_token is not defined or vault_token_01 is not defined or vault_token_02 is not defined or vault_token_03 is not defined
 
-- name: clobber vault auth files
-  tags: vault_files
-  become: true
-  file:
-    dest="/opt/runnable/dock-init/consul-resources/vault/{{ node_env }}/{{ item.file_name }}"
-    state=absent
-  with_items:
-  - { file_name: 'auth-token' }
-  - { file_name: 'token-01' }
-  - { file_name: 'token-02' }
-  - { file_name: 'token-03' }
-
 - name: copy vault auth files
   tags: vault_files
   become: true
-  lineinfile:
+  copy:
     dest="/opt/runnable/dock-init/consul-resources/vault/{{ node_env }}/{{ item.file_name }}"
-    line="{{ item.value }}"
-    create=yes
+    content="{{ item.value }}"
     mode="0400"
   with_items:
   - { file_name: 'auth-token', value: "{{ vault_auth_token }}" }