diff --git a/ansible/group_vars/all/oas.yml b/ansible/group_vars/all/oas.yml
index eeb8cc579108e2db534a08f460cee4cc9602e068..b356fa9beb693cfd1ed9523a1a7d33e86e79ae13 100644
--- a/ansible/group_vars/all/oas.yml
+++ b/ansible/group_vars/all/oas.yml
@@ -29,8 +29,9 @@ helmfile:
   version: '0.80.1'
 
 krew:
+  # https://github.com/kubernetes-sigs/krew/releases
   version: '0.2.1'
-  sha256: 'dc2f2e1ec8a0acb6f3e23580d4a8b38c44823e948c40342e13ff6e8e12edb15a'
+  checksum: 'sha256:dc2f2e1ec8a0acb6f3e23580d4a8b38c44823e948c40342e13ff6e8e12edb15a'
 
 rke:
   # https://github.com/rancher/rke/releases
diff --git a/ansible/roles/setup/tasks/krew.yml b/ansible/roles/setup/tasks/krew.yml
index 25cb1c020ea16362c271b4a11ed2771eb64d3309..b6da450e403d9417e60dd8d5a79edba3aa17cf30 100644
--- a/ansible/roles/setup/tasks/krew.yml
+++ b/ansible/roles/setup/tasks/krew.yml
@@ -23,9 +23,9 @@
     - plugin
     - krew
   get_url:
-    url: https://storage.googleapis.com/krew/v{{ krew.version }}/krew.tar.gz
-    dest: /tmp/krew.{{ krew.version }}.tar.gz
-    checksum: sha256:{{ krew.sha256 }}
+    url: 'https://storage.googleapis.com/krew/v{{ krew.version }}/krew.tar.gz'
+    dest: '/tmp/krew.{{ krew.version }}.tar.gz'
+    checksum: '{{ krew.checksum }}'
   when: krew_version.stdout != krew.version
 
 - name: Download krew resource yaml
@@ -34,8 +34,8 @@
     - plugin
     - krew
   get_url:
-    url: https://storage.googleapis.com/krew/v{{ krew.version }}/krew.yaml
-    dest: /tmp/krew.{{ krew.version }}.yaml
+    url: 'https://storage.googleapis.com/krew/v{{ krew.version }}/krew.yaml'
+    dest: '/tmp/krew.{{ krew.version }}.yaml'
   when: krew_version.stdout != krew.version
 
 - name: Unarchive downloaded krew archive
@@ -44,7 +44,7 @@
     - plugin
     - krew
   unarchive:
-    src: /tmp/krew.{{ krew.version }}.tar.gz
+    src: '/tmp/krew.{{ krew.version }}.tar.gz'
     dest: /tmp
     remote_src: yes
   when: krew_version.stdout != krew.version