kubescape
Ansible Role: kubescape
Role to install (by default) kubescape on Debian/Ubuntu and EL systems. kubescape is a K8s open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer and image vulnerabilities scanning.
Requirements
None.
Role Variables
Available variables are listed below (located in defaults/main.yml):
Variables list:
kubescape_app: kubescape
kubescape_version: 3.0.16
kubescape_os: ubuntu
kubescape_dl_url: https://github.com/armosec/{{ kubescape_app }}/releases/download/v{{ kubescape_version }}/{{ kubescape_app }}-{{ kubescape_os }}-latest
kubescape_bin_path: "/usr/local/bin/{{ kubescape_app }}"
kubescape_file_owner: root
kubescape_file_group: root
kubescape_file_mode: '0755'
Variables table:
| Variable | Description |
|---|---|
| kubescape_app | Defines the app to install i.e. kubescape |
| kubescape_version | Defined to dynamically fetch the desired version to install. Defaults to: 3.0.16 |
| kubescape_os | Defines os type. Used for obtaining the correct type of binaries. Defaults to: ubuntu |
| kubescape_dl_url | Defines URL to download the kubescape binary from. |
| kubescape_bin_path | Defined to dynamically set the appropriate path to store kubescape binary into. Defaults to (as generally available on any user's PATH): /usr/local/bin/kubescape |
| kubescape_bin_permission_mode | Defines the permission mode level for the file. |
| kubescape_file_owner | Owner for the binary file of kubescape. |
| kubescape_file_group | Group for the binary file of kubescape. |
| kubescape_file_mode | Mode for the binary file of kubescape. |
Dependencies
None
Example Playbook
For default behaviour of role (i.e. installation of kubescape) in ansible playbooks.
- hosts: servers
roles:
- darkwizard242.kubescape
For customizing behavior of role (i.e. specifying the desired kubescape version) in ansible playbooks.
- hosts: servers
roles:
- darkwizard242.kubescape
vars:
kubescape_version: 2.0.155
For customizing behavior of role (i.e. placing binary of kubescape package in different location) in ansible playbooks.
- hosts: servers
roles:
- darkwizard242.kubescape
vars:
kubescape_bin_path: /bin/
License
Author Information
This role was created by Ali Muhammad.
About
Installs/Uninstalls 'kubescape', open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer and image vulnerabilities scanning.
Install
ansible-galaxy install darkwizard242/ansible-role-kubescapeLicense
mit
Downloads
1724
Owner
Senior DevOps/CloudOps Engineer.
Dedicated to Automating everything I come across.
Love to work on and learn new technologies/tools everyday!