diff --git a/test/security/k8s/tools/get_ranchercli.sh b/test/security/k8s/tools/get_ranchercli.sh
new file mode 100755
index 0000000..d36a94e
--- /dev/null
+++ b/test/security/k8s/tools/get_ranchercli.sh
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+# Prerequistes
+wget https://releases.rancher.com/cli/v0.6.12/rancher-linux-amd64-v0.6.12.tar.gz
+tar xf rancher-linux-amd64-v0.6.12.tar.gz
+
+# Installation
+echo '# Privilege elevation needed to move Rancher CLI binary to /usr/local/bin'
+sudo mv rancher-v0.6.12/rancher /usr/local/bin/
+
+# Cleanup
+rmdir rancher-v0.6.12/
+rm rancher-linux-amd64-v0.6.12.tar.gz
diff --git a/test/security/k8s/vagrant/Vagrantfile b/test/security/k8s/vagrant/Vagrantfile
index c0cbb98..b784862 100644
--- a/test/security/k8s/vagrant/Vagrantfile
+++ b/test/security/k8s/vagrant/Vagrantfile
@@ -9,14 +9,6 @@
   { name: 'worker', hostname: 'worker', ip: '172.17.0.101' }
 ]
 
-ranchercli = <<-SCRIPT
-wget https://releases.rancher.com/cli/v0.6.12/rancher-linux-amd64-v0.6.12.tar.gz
-tar xf rancher-linux-amd64-v0.6.12.tar.gz
-sudo mv rancher-v0.6.12/rancher /usr/local/bin/
-rmdir rancher-v0.6.12/
-rm rancher-linux-amd64-v0.6.12.tar.gz
-SCRIPT
-
 Vagrant.configure('2') do |config|
   cluster.each do |node|
     config.vm.define node[:name] do |config|
@@ -39,7 +31,7 @@
       if node[:name] == 'master'
         config.vm.network "forwarded_port", guest: 8080, host: 8080
         config.vm.provision :shell, path: "../tools/imported/openstack-rancher.sh"
-        config.vm.provision :shell, inline: ranchercli
+        config.vm.provision :shell, path: "../tools/get_ranchercli.sh"
       end
 
       if node[:name] == 'worker'