Ansible Role: kubescape

Role to install (by default) kubescape on Debian/Ubuntu and EL systems. kubescape is a K8s open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer and image vulnerabilities scanning.

Requirements

None.

Role Variables

Available variables are listed below (located in defaults/main.yml):

Variables list:

kubescape_app: kubescape
kubescape_version: 3.0.17
kubescape_os: ubuntu
kubescape_dl_url: https://github.com/armosec/{{ kubescape_app }}/releases/download/v{{ kubescape_version }}/{{ kubescape_app }}-{{ kubescape_os }}-latest
kubescape_bin_path: "/usr/local/bin/{{ kubescape_app }}"
kubescape_file_owner: root
kubescape_file_group: root
kubescape_file_mode: '0755'

Variables table:

Variable	Description
kubescape_app	Defines the app to install i.e. kubescape
kubescape_version	Defined to dynamically fetch the desired version to install. Defaults to: 3.0.17
kubescape_os	Defines os type. Used for obtaining the correct type of binaries. Defaults to: ubuntu
kubescape_dl_url	Defines URL to download the kubescape binary from.
kubescape_bin_path	Defined to dynamically set the appropriate path to store kubescape binary into. Defaults to (as generally available on any user's PATH): /usr/local/bin/kubescape
kubescape_bin_permission_mode	Defines the permission mode level for the file.
kubescape_file_owner	Owner for the binary file of kubescape.
kubescape_file_group	Group for the binary file of kubescape.
kubescape_file_mode	Mode for the binary file of kubescape.

Dependencies

None

Example Playbook

For default behaviour of role (i.e. installation of kubescape) in ansible playbooks.

- hosts: servers
  roles:
    - darkwizard242.kubescape

For customizing behavior of role (i.e. specifying the desired kubescape version) in ansible playbooks.

- hosts: servers
  roles:
    - darkwizard242.kubescape
  vars:
    kubescape_version: 2.0.155

For customizing behavior of role (i.e. placing binary of kubescape package in different location) in ansible playbooks.

- hosts: servers
  roles:
    - darkwizard242.kubescape
  vars:
    kubescape_bin_path: /bin/

License

MIT

Author Information

This role was created by Ali Muhammad.