Use checksum parameter instead of sha256 for krew

ansible/group_vars/all/oas.yml

@@ -29,8 +29,9 @@ helmfile:
   version: '0.80.1'
 
 krew:
+  # https://github.com/kubernetes-sigs/krew/releases
   version: '0.2.1'
-  sha256: 'dc2f2e1ec8a0acb6f3e23580d4a8b38c44823e948c40342e13ff6e8e12edb15a'
+  checksum: 'sha256:dc2f2e1ec8a0acb6f3e23580d4a8b38c44823e948c40342e13ff6e8e12edb15a'
 
 rke:
   # https://github.com/rancher/rke/releases

ansible/roles/setup/tasks/krew.yml

@@ -23,9 +23,9 @@
     - plugin
     - krew
   get_url:
-    url: https://storage.googleapis.com/krew/v{{ krew.version }}/krew.tar.gz
-    dest: /tmp/krew.{{ krew.version }}.tar.gz
-    checksum: sha256:{{ krew.sha256 }}
+    url: 'https://storage.googleapis.com/krew/v{{ krew.version }}/krew.tar.gz'
+    dest: '/tmp/krew.{{ krew.version }}.tar.gz'
+    checksum: '{{ krew.checksum }}'
   when: krew_version.stdout != krew.version
 
 - name: Download krew resource yaml
@@ -34,8 +34,8 @@
     - plugin
     - krew
   get_url:
-    url: https://storage.googleapis.com/krew/v{{ krew.version }}/krew.yaml
-    dest: /tmp/krew.{{ krew.version }}.yaml
+    url: 'https://storage.googleapis.com/krew/v{{ krew.version }}/krew.yaml'
+    dest: '/tmp/krew.{{ krew.version }}.yaml'
   when: krew_version.stdout != krew.version
 
 - name: Unarchive downloaded krew archive
@@ -44,7 +44,7 @@
     - plugin
     - krew
   unarchive:
-    src: /tmp/krew.{{ krew.version }}.tar.gz
+    src: '/tmp/krew.{{ krew.version }}.tar.gz'
     dest: /tmp
     remote_src: yes
   when: krew_version.stdout != krew.version