Merge pull request #733 from wazuh/4.3-molecule

Default converge test update

molecule/default/converge.yml

@@ -1,11 +1,23 @@
 ---
-- name: Converge
+- name: ConvergeCerts
+  hosts: localhost
+  roles:
+    - role: ../../roles/wazuh/wazuh-indexer
+      perform_installation: false
+  vars:
+    instances:
+      node1:
+        name: node-1       # Important: must be equal to indexer_node_name.
+        ip: 127.0.0.1
+        role: indexer
+  tags:
+        - generate-certs
+- name: ConvergeInstall
   hosts: all
   roles:
     - role: ../../roles/wazuh/ansible-wazuh-manager
       vars:
-    - { role: ../../roles/wazuh/ansible-filebeat, filebeat_output_elasticsearch_hosts: "elasticsearch_centos7:9200" }
-  vars:
+    - { role: ../../roles/wazuh/ansible-filebeat-oss, filebeat_output_indexer_hosts: "indexer_centos7:9200" }
   pre_tasks:
     - name: (converge) fix missing packages in cloud images
       apt:

roles/wazuh/ansible-filebeat-oss/defaults/main.yml

@@ -3,6 +3,8 @@ filebeat_version: 7.10.2
 
 wazuh_template_branch: v4.3.0
 
+filebeat_node_name: node-1
+
 filebeat_output_indexer_hosts:
   - "localhost:9200"
 
@@ -18,7 +20,7 @@ filebeat_security: true
 filebeat_ssl_dir: /etc/pki/filebeat
 
 # Local path to store the generated certificates (Opensearch security plugin)
-local_certs_path: ./indexer/certificates
+local_certs_path: "{{ playbook_dir }}/indexer/certificates"
 
 filebeatrepo:
   apt: 'deb https://packages.wazuh.com/4.x/apt/ stable main'

roles/wazuh/wazuh-indexer/tasks/local_actions.yml

@@ -44,13 +44,22 @@
     find:
       paths: "{{ local_certs_path }}/wazuh-certificates"
       patterns: "*"
+    become: yes
     register: certificate_files
 
+  - name: Change certificates directory ownership
+    file: 
+      path: "{{ local_certs_path }}/wazuh-certificates"
+      state: directory
+      mode: '777'
+    become: yes
+
   - name: Change Certificates Ownership
     file: 
       path: "{{ item.path }}"
       owner: "{{ ansible_effective_user_id }}"
       group: "{{ ansible_effective_user_id }}"
+      mode: '777'
     become: yes
     with_items: "{{ certificate_files.files }}"