Merge branch 'devel' into feature-303-flex-app-url
This commit is contained in:
commit
6050c84046
@ -3,11 +3,20 @@ All notable changes to this project will be documented in this file.
|
||||
|
||||
## [v3.xx.x_x.x.x]
|
||||
|
||||
### Added
|
||||
|
||||
- Wazuh Agent registration task now explicitly notify restart [@jm404](https://github.com/jm404) [#302](https://github.com/wazuh/wazuh-ansible/pull/302)
|
||||
|
||||
### Changed
|
||||
|
||||
- Make Wazuh repositories installation flexible [@jm404](https://github.com/jm404) [#288](https://github.com/wazuh/wazuh-ansible/pull/288)
|
||||
- Wazuh App URL is now flexible [@jm404](https://github.com/jm404) [#304](https://github.com/wazuh/wazuh-ansible/pull/304)
|
||||
|
||||
### Fixed
|
||||
|
||||
- Wazuh Agent registration using agent name has been fixed [@jm404](https://github.com/jm404) [#298](https://github.com/wazuh/wazuh-ansible/pull/298)
|
||||
- Fix Wazuh repository and installation conditionals [@jm404](https://github.com/jm404) [#299](https://github.com/wazuh/wazuh-ansible/pull/299)
|
||||
|
||||
## [v3.10.2_7.3.2]
|
||||
|
||||
### Added
|
||||
|
||||
@ -12,6 +12,7 @@ wazuh_auto_restart: 'yes'
|
||||
wazuh_agent_authd:
|
||||
enable: false
|
||||
port: 1515
|
||||
agent_name: null
|
||||
ssl_agent_ca: null
|
||||
ssl_agent_cert: null
|
||||
ssl_agent_key: null
|
||||
|
||||
@ -10,7 +10,7 @@
|
||||
async: 90
|
||||
poll: 30
|
||||
when:
|
||||
- ansible_distribution in ['CentOS','RedHat']
|
||||
- ansible_os_family|lower == "redhat"
|
||||
tags:
|
||||
- init
|
||||
|
||||
@ -20,7 +20,7 @@
|
||||
state: present
|
||||
cache_valid_time: 3600
|
||||
when:
|
||||
- not (ansible_distribution in ['CentOS','RedHat'])
|
||||
- ansible_os_family|lower != "redhat"
|
||||
tags:
|
||||
- init
|
||||
|
||||
@ -51,7 +51,7 @@
|
||||
- name: Linux | Register agent (via authd)
|
||||
shell: >
|
||||
/var/ossec/bin/agent-auth
|
||||
-A {{ agent_name }}
|
||||
{% if wazuh_agent_authd.agent_name is not none %}-A {{ wazuh_agent_authd.agent_name }} {% endif %}
|
||||
-m {{ wazuh_managers.0.address }}
|
||||
-p {{ wazuh_agent_authd.port }}
|
||||
{% if wazuh_agent_nat %}-I "any" {% endif %}
|
||||
@ -63,6 +63,7 @@
|
||||
{% endif %}
|
||||
{% if wazuh_agent_authd.ssl_auto_negotiate == 'yes' %}-a{% endif %}
|
||||
register: agent_auth_output
|
||||
notify: restart wazuh-agent
|
||||
vars:
|
||||
agent_name: "{% if single_agent_name is defined %}{{ single_agent_name }}{% else %}{{ ansible_hostname }}{% endif %}"
|
||||
when:
|
||||
@ -99,6 +100,7 @@
|
||||
user: "{{ wazuh_managers.0.api_user }}"
|
||||
password: "{{ api_pass }}"
|
||||
register: newagent_api
|
||||
notify: restart wazuh-agent
|
||||
# changed_when: newagent_api.json.error == 0
|
||||
vars:
|
||||
agent_name: "{% if single_agent_name is defined %}{{ single_agent_name }}{% else %}{{ inventory_hostname }}{% endif %}"
|
||||
|
||||
@ -8,7 +8,7 @@
|
||||
gpgcheck: true
|
||||
changed_when: false
|
||||
when:
|
||||
- (ansible_facts['os_family']|lower == 'redhat')
|
||||
- (ansible_facts['os_family']|lower == 'redhat') and (ansible_distribution|lower != 'amazon')
|
||||
- (ansible_distribution_major_version|int <= 5)
|
||||
register: repo_v5_installed
|
||||
|
||||
@ -21,8 +21,8 @@
|
||||
gpgcheck: true
|
||||
changed_when: false
|
||||
when:
|
||||
- repo_v5_installed.skipped
|
||||
|
||||
- repo_v5_installed is skipped
|
||||
|
||||
- name: RedHat/CentOS/Fedora | download Oracle Java RPM
|
||||
get_url:
|
||||
url: https://download.oracle.com/otn-pub/java/jdk/8u202-b08/1961070e4c9b4e26a04e7f5a083f551e/jre-8u202-linux-x64.rpm
|
||||
|
||||
@ -60,6 +60,7 @@
|
||||
{{ wazuh_agent_win_auth_path }}
|
||||
-m {{ wazuh_managers.0.address }}
|
||||
-p {{ wazuh_agent_authd.port }}
|
||||
{% if wazuh_agent_authd.agent_name is not none %}-A {{ wazuh_agent_authd.agent_name }} {% endif %}
|
||||
{% if authd_pass is defined %} -P {{ authd_pass }}{% endif %}
|
||||
register: agent_auth_output
|
||||
notify: Windows | Restart Wazuh Agent
|
||||
|
||||
@ -52,7 +52,7 @@
|
||||
gpgcheck: true
|
||||
changed_when: false
|
||||
when:
|
||||
- repo_v5_manager_installed|skipped
|
||||
- repo_v5_manager_installed is skipped
|
||||
|
||||
- name: RedHat/CentOS/Fedora | Install openscap
|
||||
package: name={{ item }} state=present
|
||||
|
||||
Loading…
Reference in New Issue
Block a user