darkwizard242.kubescape

Ansible Role: kubescape

This role installs the kubescape tool on Debian/Ubuntu and EL systems. kubescape is an open-source tool for Kubernetes (K8s) that helps with risk analysis, security compliance, user permissions visualization, and scanning for image vulnerabilities.

Requirements

None.

Role Variables

Here are the variables you can find in defaults/main.yml:

Variables List:

kubescape_app: kubescape
kubescape_version: 3.0.16
kubescape_os: ubuntu
kubescape_dl_url: https://github.com/armosec/{{ kubescape_app }}/releases/download/v{{ kubescape_version }}/{{ kubescape_app }}-{{ kubescape_os }}-latest
kubescape_bin_path: "/usr/local/bin/{{ kubescape_app }}"
kubescape_file_owner: root
kubescape_file_group: root
kubescape_file_mode: '0755'

Variables Table:

Variable	Description
kubescape_app	The app to install, which is kubescape.
kubescape_version	The version to install. Default is 3.0.16.
kubescape_os	The type of operating system. Default is ubuntu.
kubescape_dl_url	The URL to download the kubescape binary.
kubescape_bin_path	Where to store the kubescape binary. Default is /usr/local/bin/kubescape.
kubescape_bin_permission_mode	The permission level for the binary file.
kubescape_file_owner	The owner of the kubescape binary file.
kubescape_file_group	The group of the kubescape binary file.
kubescape_file_mode	The permission mode for the kubescape binary file.

Dependencies

None

Example Playbook

To install kubescape with default settings in your ansible playbooks:

- hosts: servers
  roles:
    - darkwizard242.kubescape

To customize the version of kubescape:

- hosts: servers
  roles:
    - darkwizard242.kubescape
  vars:
    kubescape_version: 2.0.155

To change the location where the kubescape binary is installed:

- hosts: servers
  roles:
    - darkwizard242.kubescape
  vars:
    kubescape_bin_path: /bin/

License

MIT

Author Information

This role was created by Ali Muhammad.

Informazioni sul progetto

Installs/Uninstalls 'kubescape', open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer and image vulnerabilities scanning.

role kubescape security securityscanning vulnerability system os

Installa

ansible-galaxy install darkwizard242.kubescape

GitHub repository

0 stelle

1 fork

0 problemi aperti

Licenza

mit

Download

Proprietario

Ali Muhammad

Senior DevOps/CloudOps Engineer. Dedicated to Automating everything I come across. Love to work on and learn new technologies/tools everyday!