diff --git a/defaults/main.yml b/defaults/main.yml
new file mode 100644
index 0000000..b4daffc
--- /dev/null
+++ b/defaults/main.yml
@@ -0,0 +1,95 @@
+---
+# devtools defaults/main.yml
+#
+# SPDX-FileCopyrightText: 2022 Open Networking Foundation <support@opennetworking.org>
+# SPDX-License-Identifier: Apache-2.0
+
+devtools_extras: []
+
+# code review and lint tools
+devtools_python_piptools:
+  - git-review~=2.3.1
+  - reuse~=0.14.0
+  - yamllint~=1.26.3
+
+devtools_repo_version: "2.25"
+devtools_repo_url: >-
+  https://gerrit.googlesource.com/git-repo/+/refs/tags/v{{
+  devtools_repo_version }}/repo?format=TEXT
+devtools_repo_checksum: "sha256:b727e5836b1b406a38b61789dc2b39f83206f3a1fc158744714e2a384cd7634b"
+
+devtools_shellcheck_version: "0.8.0"
+devtools_shellcheck_url: >-
+  https://github.com/koalaman/shellcheck/releases/download/v{{
+  devtools_shellcheck_version }}/shellcheck-v{{
+  devtools_shellcheck_version }}.linux.x86_64.tar.xz
+devtools_shellcheck_checksum: >-
+  sha256:ab6ee1b178f014d1b86d1e24da20d1139656c8b0ed34d2867fbb834dad02bf0a
+
+devtools_yq_version: "4.11.2"
+devtools_yq_url:
+  https://github.com/mikefarah/yq/releases/download/v{{
+  devtools_yq_version }}/yq_linux_amd64
+devtools_yq_checksum: "sha256:6b891fd5bb13820b2f6c1027b613220a690ce0ef4fc2b6c76ec5f643d5535e61"
+
+# bazel
+devtools_bazelisk_version: "1.11.0"
+devtools_bazelisk_url: >-
+  https://github.com/bazelbuild/bazelisk/releases/download/v{{
+  devtools_bazelisk_version }}/bazelisk-linux-amd64
+devtools_bazelisk_checksum: >-
+  sha256:231ec5ca8115e94c75a1f4fbada1a062b48822ca04f21f26e4cb1cd8973cd458
+
+# kubernetes
+devtools_kubectl_version: "1.22.6"
+devtools_kubectl_url: >-
+  https://storage.googleapis.com/kubernetes-release/release/v{{
+  devtools_kubectl_version }}/bin/linux/amd64/kubectl
+devtools_kubectl_checksum: >-
+  sha256:1ab07643807a45e2917072f7ba5f11140b40f19675981b199b810552d6af5c53
+
+devtools_kind_version: "0.13.0"
+devtools_kind_url: >-
+  https://github.com/kubernetes-sigs/kind/releases/download/v{{
+  devtools_kind_version }}/kind-linux-amd64
+devtools_kind_checksum: "sha256:c80c6d1013337cbbe226c2eda0a3dc2d75af16e5fa8af4ce3fc9fedcf1f9d2dc"
+
+devtools_helm_version: "3.8.2"
+devtools_helm_url: "https://get.helm.sh/helm-v{{ devtools_helm_version }}-linux-amd64.tar.gz"
+devtools_helm_checksum: "sha256:6cb9a48f72ab9ddfecab88d264c2f6508ab3cd42d9c09666be16a7bf006bed7b"
+
+devtools_kubeval_version: "0.16.1"
+devtools_kubeval_url: >-
+  https://github.com/instrumenta/kubeval/releases/download/v{{
+  devtools_kubeval_version }}/kubeval-linux-amd64.tar.gz
+devtools_kubeval_checksum: >-
+  sha256:2d6f9bda1423b93787fa05d9e8dfce2fc1190fefbcd9d0936b9635f3f78ba790
+
+devtools_conftest_version: "0.32.0"
+devtools_conftest_url: >-
+  https://github.com/open-policy-agent/conftest/releases/download/v{{
+  devtools_conftest_version }}/conftest_{{
+  devtools_conftest_version }}_Linux_x86_64.tar.gz
+devtools_conftest_checksum: >-
+  sha256:e368ef4fcb49885e9c89052ec0c29cf4d4587707a589fefcaa3dc9cc72065055
+
+devtools_fleet_version: "0.3.9"
+devtools_fleet_url: >-
+  https://github.com/rancher/fleet/releases/download/v{{
+  devtools_fleet_version }}/fleet-linux-amd64
+devtools_fleet_checksum: "sha256:9e337fe898f0683c58d527c09df333e95403ea3c1fcc8ebf64a8b5d8e403275e"
+
+# terraform
+devtools_terraform_version: "1.1.9"
+devtools_terraform_url: >-
+  https://releases.hashicorp.com/terraform/{{
+  devtools_terraform_version }}/terraform_{{
+  devtools_terraform_version }}_linux_amd64.zip
+devtools_terraform_checksum: >-
+  sha256:9d2d8a89f5cc8bc1c06cb6f34ce76ec4b99184b07eb776f8b39183b513d7798a
+
+devtools_tfmask_version: "0.7.0"
+devtools_tfmask_url: >-
+  https://github.com/cloudposse/tfmask/releases/download/{{
+  devtools_tfmask_version }}/tfmask_linux_amd64
+devtools_tfmask_checksum: "sha256:36db69e2c01f135ed8775312121ec0b0dd1e78748f54cf4ced206f6f632bcc85"