29 lines
702 B
YAML
29 lines
702 B
YAML
---
|
|
- name: Trivy Playbook (K8s)
|
|
hosts: trivy
|
|
gather_facts: true
|
|
|
|
# Specific tasks for this playbook
|
|
tasks:
|
|
- name: Set required facts
|
|
ansible.builtin.set_fact:
|
|
trivy_home: "{{ persistent_data | default('/var/lib') }}/trivy"
|
|
trivy_user_id: 1000
|
|
trivy_group_id: 1000
|
|
tags: always
|
|
|
|
- name: Create required trivy data folder
|
|
become: true
|
|
ansible.builtin.file:
|
|
state: directory
|
|
path: "{{ item }}"
|
|
mode: "0750"
|
|
owner: "{{ trivy_user_id }}"
|
|
group: "{{ trivy_group_id }}"
|
|
with_items:
|
|
- "{{ trivy_home }}"
|
|
- "{{ trivy_home }}/cache"
|
|
tags:
|
|
- tasks
|
|
- tasks::folders
|