-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Switch to using ansible-role-assessment-tool and ansible-role-burp-suite-pro instead of the monolithic ansible-role-kali #52
Conversation
This is necessary when using ansible-role-assessment-tool multiple times.
This code now has to pull from ansible-role-burp-suite-pro's remote state instead of ansible-role-kali's remote state.
…s config option The config option is not being set, possibly because the JSON argument to --extra-vars is not being interpreted correctly and is interpreting all vars as strings.
This is necessary to define the appropriate bucket to use when building staging and production AMIs.
This is necessary since the issue has been transferred to this repo from another one.
This is done because that playbook will reinstall Python 2, so it should go last.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This looks outstanding! Thanks for all of the effort you put into this. Our future selves will be most pleased! 🥇
# The misspelling here is intentional. See | ||
# https://github.com/SimplySecurity/SimplyEmail/blob/master/setup/requirments.txt. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Helpful comment! 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
SimplySecurity/SimplyEmail#49 if that ever got merged (probably very unlikely), we would need to undo the customization.
Also use cisagov/ansible-role-assessment-tool to install the Cobalt Strike addons.
This is done because ysoserial requires a Java implementation be installed as well.
…al tasks into their own files Also update the version of the ansible-lint pre-commit hook. The older version incorrectly flags an error when using ansible.builtin.import_tasks.
5def692
to
87361d7
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Still 👍 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Excellent work here. Making assessment tool installation modular is a fantastic addition, and I am always glad to see a move away from a monolithic project. Everything here LGTM ✔
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🎉
🗣 Description
This pull request switches to using cisagov/ansible-role-assessment-tool and cisagov/ansible-role-burp-suite-pro instead of the monolithic cisagov/ansible-role-kali.
As a result of functionality added to cisagov/ansible-role-assessment-tool when splitting it out from cisagov/ansible-role-kali, this also adds Python virtual environments for the Python tools installed from source. See cisagov/ansible-role-assessment-tool#1 for more details.
💭 Motivation and Context
cisagov/ansible-role-kali had become too large and monolithic. It was doing too many things, and it was becoming difficult to add functionality. It is better for Ansible roles to serve a single purpose, so I never liked having such a monster role. It made sense to split it up before adding support for Python virtual environments.
🧪 Testing
I successfully built and deployed a new Kali AMI to our staging COOL environment.
✅ Checklist