deleted a wrong test and stack folder
This commit is contained in:
parent
61625f80ee
commit
8bfe42cf86
1
Pipfile
1
Pipfile
@ -27,7 +27,6 @@ agent_still ="molecule test -s wazuh-agent --destroy=never"
|
|||||||
elasticsearch_still ="molecule test -s elasticsearch --destroy=never"
|
elasticsearch_still ="molecule test -s elasticsearch --destroy=never"
|
||||||
filebeat_still ="molecule test -s filebeat --destroy=never"
|
filebeat_still ="molecule test -s filebeat --destroy=never"
|
||||||
kibana_still ="molecule test -s kibana --destroy=never"
|
kibana_still ="molecule test -s kibana --destroy=never"
|
||||||
destroy_still ="molecule destroy --destroy=never"
|
|
||||||
|
|
||||||
# Destroy all the existing containers ' Created by Molecule '
|
# Destroy all the existing containers ' Created by Molecule '
|
||||||
destroy ="molecule destroy"
|
destroy ="molecule destroy"
|
||||||
|
|||||||
@ -51,9 +51,9 @@
|
|||||||
|
|
||||||
- name: Create molecule instance(s)
|
- name: Create molecule instance(s)
|
||||||
docker_container:
|
docker_container:
|
||||||
name: "{{ item.name }}"
|
name: "manager"
|
||||||
docker_host: "{{ item.docker_host | default('unix://var/run/docker.sock') }}"
|
docker_host: "{{ item.docker_host | default('unix://var/run/docker.sock') }}"
|
||||||
hostname: "{{ item.name }}"
|
hostname: "manager"
|
||||||
image: "molecule_local/{{ item.image }}"
|
image: "molecule_local/{{ item.image }}"
|
||||||
state: started
|
state: started
|
||||||
recreate: false
|
recreate: false
|
||||||
|
|||||||
@ -14,13 +14,13 @@ platforms:
|
|||||||
- nofile:262144:262144
|
- nofile:262144:262144
|
||||||
privileged: true
|
privileged: true
|
||||||
memory_reservation: 2048m
|
memory_reservation: 2048m
|
||||||
- name: xenial
|
# - name: xenial
|
||||||
image: solita/ubuntu-systemd:xenial
|
# image: solita/ubuntu-systemd:xenial
|
||||||
privileged: true
|
# privileged: true
|
||||||
memory_reservation: 2048m
|
# memory_reservation: 2048m
|
||||||
command: /sbin/init
|
# command: /sbin/init
|
||||||
ulimits:
|
# ulimits:
|
||||||
- nofile:262144:262144
|
# - nofile:262144:262144
|
||||||
# - name: trusty
|
# - name: trusty
|
||||||
# image: ubuntu:trusty
|
# image: ubuntu:trusty
|
||||||
# privileged: true
|
# privileged: true
|
||||||
@ -33,12 +33,12 @@ platforms:
|
|||||||
# memory_reservation: 2048m
|
# memory_reservation: 2048m
|
||||||
# ulimits:
|
# ulimits:
|
||||||
# - nofile:262144:262144
|
# - nofile:262144:262144
|
||||||
- name: centos7
|
# - name: centos7
|
||||||
image: milcom/centos7-systemd
|
# image: milcom/centos7-systemd
|
||||||
memory_reservation: 2048m
|
# memory_reservation: 2048m
|
||||||
privileged: true
|
# privileged: true
|
||||||
ulimits:
|
# ulimits:
|
||||||
- nofile:262144:262144
|
# - nofile:262144:262144
|
||||||
provisioner:
|
provisioner:
|
||||||
name: ansible
|
name: ansible
|
||||||
env:
|
env:
|
||||||
|
|||||||
@ -11,14 +11,14 @@ lint:
|
|||||||
platforms:
|
platforms:
|
||||||
# - name: trusty
|
# - name: trusty
|
||||||
# image: ubuntu:trusty
|
# image: ubuntu:trusty
|
||||||
- name: bionic
|
#- name: bionic
|
||||||
image: solita/ubuntu-systemd:bionic
|
# image: solita/ubuntu-systemd:bionic
|
||||||
command: /sbin/init
|
# command: /sbin/init
|
||||||
privileged: true
|
# privileged: true
|
||||||
- name: xenial
|
#- name: xenial
|
||||||
image: solita/ubuntu-systemd:xenial
|
# image: solita/ubuntu-systemd:xenial
|
||||||
privileged: true
|
# privileged: true
|
||||||
command: /sbin/init
|
# command: /sbin/init
|
||||||
#- name: centos6
|
#- name: centos6
|
||||||
# image: geerlingguy/docker-centos6-ansible
|
# image: geerlingguy/docker-centos6-ansible
|
||||||
# privileged: true
|
# privileged: true
|
||||||
|
|||||||
@ -1,14 +0,0 @@
|
|||||||
# Molecule managed
|
|
||||||
|
|
||||||
{% if item.registry is defined %}
|
|
||||||
FROM {{ item.registry.url }}/{{ item.image }}
|
|
||||||
{% else %}
|
|
||||||
FROM {{ item.image }}
|
|
||||||
{% endif %}
|
|
||||||
|
|
||||||
RUN if [ $(command -v apt-get) ]; then apt-get update && apt-get upgrade -y && apt-get install -y python sudo bash ca-certificates && apt-get clean; \
|
|
||||||
elif [ $(command -v dnf) ]; then dnf makecache && dnf --assumeyes install python sudo python-devel python2-dnf bash && dnf clean all; \
|
|
||||||
elif [ $(command -v yum) ]; then yum makecache fast && yum update -y && yum install -y python sudo yum-plugin-ovl bash && sed -i 's/plugins=0/plugins=1/g' /etc/yum.conf && yum clean all; \
|
|
||||||
elif [ $(command -v zypper) ]; then zypper refresh && zypper update -y && zypper install -y python sudo bash python-xml && zypper clean -a; \
|
|
||||||
elif [ $(command -v apk) ]; then apk update && apk add --no-cache python sudo bash ca-certificates; \
|
|
||||||
elif [ $(command -v xbps-install) ]; then xbps-install -Syu && xbps-install -y python sudo bash ca-certificates && xbps-remove -O; fi
|
|
||||||
@ -1,16 +0,0 @@
|
|||||||
*******
|
|
||||||
Install
|
|
||||||
*******
|
|
||||||
|
|
||||||
Requirements
|
|
||||||
============
|
|
||||||
|
|
||||||
* Docker Engine
|
|
||||||
* docker-py
|
|
||||||
|
|
||||||
Install
|
|
||||||
=======
|
|
||||||
|
|
||||||
.. code-block:: bash
|
|
||||||
|
|
||||||
$ sudo pip install docker-py
|
|
||||||
@ -1,81 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Create
|
|
||||||
hosts: localhost
|
|
||||||
connection: local
|
|
||||||
gather_facts: false
|
|
||||||
no_log: false
|
|
||||||
tasks:
|
|
||||||
- name: Log into a Docker registry
|
|
||||||
docker_login:
|
|
||||||
username: "{{ item.registry.credentials.username }}"
|
|
||||||
password: "{{ item.registry.credentials.password }}"
|
|
||||||
email: "{{ item.registry.credentials.email | default(omit) }}"
|
|
||||||
registry: "{{ item.registry.url }}"
|
|
||||||
docker_host: "{{ item.docker_host | default('unix://var/run/docker.sock') }}"
|
|
||||||
with_items: "{{ molecule_yml.platforms }}"
|
|
||||||
when:
|
|
||||||
- item.registry is defined
|
|
||||||
- item.registry.credentials is defined
|
|
||||||
- item.registry.credentials.username is defined
|
|
||||||
|
|
||||||
- name: Create Dockerfiles from image names
|
|
||||||
template:
|
|
||||||
src: "{{ molecule_scenario_directory }}/Dockerfile.j2"
|
|
||||||
dest: "{{ molecule_ephemeral_directory }}/Dockerfile_{{ item.image | regex_replace('[^a-zA-Z0-9_]', '_') }}"
|
|
||||||
with_items: "{{ molecule_yml.platforms }}"
|
|
||||||
register: platforms
|
|
||||||
|
|
||||||
- name: Discover local Docker images
|
|
||||||
docker_image_facts:
|
|
||||||
name: "molecule_local/{{ item.item.name }}"
|
|
||||||
docker_host: "{{ item.item.docker_host | default('unix://var/run/docker.sock') }}"
|
|
||||||
with_items: "{{ platforms.results }}"
|
|
||||||
register: docker_images
|
|
||||||
|
|
||||||
- name: Build an Ansible compatible image
|
|
||||||
docker_image:
|
|
||||||
path: "{{ molecule_ephemeral_directory }}"
|
|
||||||
name: "molecule_local/{{ item.item.image }}"
|
|
||||||
docker_host: "{{ item.item.docker_host | default('unix://var/run/docker.sock') }}"
|
|
||||||
dockerfile: "{{ item.item.dockerfile | default(item.invocation.module_args.dest) }}"
|
|
||||||
force: "{{ item.item.force | default(true) }}"
|
|
||||||
with_items: "{{ platforms.results }}"
|
|
||||||
when: platforms.changed or docker_images.results | map(attribute='images') | select('equalto', []) | list | count >= 0
|
|
||||||
|
|
||||||
- name: Create docker network(s)
|
|
||||||
docker_network:
|
|
||||||
name: "{{ item }}"
|
|
||||||
docker_host: "{{ item.docker_host | default('unix://var/run/docker.sock') }}"
|
|
||||||
state: present
|
|
||||||
with_items: "{{ molecule_yml.platforms | molecule_get_docker_networks }}"
|
|
||||||
|
|
||||||
- name: Create molecule instance(s)
|
|
||||||
docker_container:
|
|
||||||
name: "{{ item.name }}"
|
|
||||||
docker_host: "{{ item.docker_host | default('unix://var/run/docker.sock') }}"
|
|
||||||
hostname: "{{ item.name }}"
|
|
||||||
image: "molecule_local/{{ item.image }}"
|
|
||||||
state: started
|
|
||||||
recreate: false
|
|
||||||
log_driver: json-file
|
|
||||||
command: "{{ item.command | default('bash -c \"while true; do sleep 10000; done\"') }}"
|
|
||||||
privileged: "{{ item.privileged | default(omit) }}"
|
|
||||||
volumes: "{{ item.volumes | default(omit) }}"
|
|
||||||
capabilities: "{{ item.capabilities | default(omit) }}"
|
|
||||||
exposed_ports: "{{ item.exposed_ports | default(omit) }}"
|
|
||||||
published_ports: "{{ item.published_ports | default(omit) }}"
|
|
||||||
ulimits: "{{ item.ulimits | default(omit) }}"
|
|
||||||
networks: "{{ item.networks | default(omit) }}"
|
|
||||||
dns_servers: "{{ item.dns_servers | default(omit) }}"
|
|
||||||
register: server
|
|
||||||
with_items: "{{ molecule_yml.platforms }}"
|
|
||||||
async: 7200
|
|
||||||
poll: 0
|
|
||||||
|
|
||||||
- name: Wait for instance(s) creation to complete
|
|
||||||
async_status:
|
|
||||||
jid: "{{ item.ansible_job_id }}"
|
|
||||||
register: docker_jobs
|
|
||||||
until: docker_jobs.finished
|
|
||||||
retries: 300
|
|
||||||
with_items: "{{ server.results }}"
|
|
||||||
@ -1,32 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Destroy
|
|
||||||
hosts: localhost
|
|
||||||
connection: local
|
|
||||||
gather_facts: false
|
|
||||||
no_log: false
|
|
||||||
tasks:
|
|
||||||
- name: Destroy molecule instance(s)
|
|
||||||
docker_container:
|
|
||||||
name: "{{ item.name }}"
|
|
||||||
docker_host: "{{ item.docker_host | default('unix://var/run/docker.sock') }}"
|
|
||||||
state: absent
|
|
||||||
force_kill: "{{ item.force_kill | default(true) }}"
|
|
||||||
register: server
|
|
||||||
with_items: "{{ molecule_yml.platforms }}"
|
|
||||||
async: 7200
|
|
||||||
poll: 0
|
|
||||||
|
|
||||||
- name: Wait for instance(s) deletion to complete
|
|
||||||
async_status:
|
|
||||||
jid: "{{ item.ansible_job_id }}"
|
|
||||||
register: docker_jobs
|
|
||||||
until: docker_jobs.finished
|
|
||||||
retries: 300
|
|
||||||
with_items: "{{ server.results }}"
|
|
||||||
|
|
||||||
- name: Delete docker network(s)
|
|
||||||
docker_network:
|
|
||||||
name: "{{ item }}"
|
|
||||||
docker_host: "{{ item.docker_host | default('unix://var/run/docker.sock') }}"
|
|
||||||
state: absent
|
|
||||||
with_items: "{{ molecule_yml.platforms | molecule_get_docker_networks }}"
|
|
||||||
@ -1,69 +0,0 @@
|
|||||||
---
|
|
||||||
dependency:
|
|
||||||
name: galaxy
|
|
||||||
driver:
|
|
||||||
name: docker
|
|
||||||
lint:
|
|
||||||
name: yamllint
|
|
||||||
enabled: false
|
|
||||||
platforms:
|
|
||||||
- name: bionic
|
|
||||||
image: solita/ubuntu-systemd:bionic
|
|
||||||
command: /sbin/init
|
|
||||||
ulimits:
|
|
||||||
- nofile:262144:262144
|
|
||||||
privileged: true
|
|
||||||
memory_reservation: 2048m
|
|
||||||
- name: xenial
|
|
||||||
image: solita/ubuntu-systemd:xenial
|
|
||||||
privileged: true
|
|
||||||
memory_reservation: 2048m
|
|
||||||
command: /sbin/init
|
|
||||||
ulimits:
|
|
||||||
- nofile:262144:262144
|
|
||||||
# - name: trusty
|
|
||||||
# image: ubuntu:trusty
|
|
||||||
# privileged: true
|
|
||||||
# memory_reservation: 2048m
|
|
||||||
# ulimits:
|
|
||||||
# - nofile:262144:262144
|
|
||||||
# - name: centos6
|
|
||||||
# image: centos:6
|
|
||||||
# privileged: true
|
|
||||||
# memory_reservation: 2048m
|
|
||||||
# ulimits:
|
|
||||||
# - nofile:262144:262144
|
|
||||||
- name: centos7
|
|
||||||
image: milcom/centos7-systemd
|
|
||||||
memory_reservation: 2048m
|
|
||||||
privileged: true
|
|
||||||
ulimits:
|
|
||||||
- nofile:262144:262144
|
|
||||||
provisioner:
|
|
||||||
name: ansible
|
|
||||||
env:
|
|
||||||
ANSIBLE_ROLES_PATH: ../../roles
|
|
||||||
lint:
|
|
||||||
name: ansible-lint
|
|
||||||
enabled: true
|
|
||||||
scenario:
|
|
||||||
name: default
|
|
||||||
test_sequence:
|
|
||||||
- lint
|
|
||||||
- dependency
|
|
||||||
- cleanup
|
|
||||||
- destroy
|
|
||||||
- syntax
|
|
||||||
- create
|
|
||||||
- prepare
|
|
||||||
- converge
|
|
||||||
- idempotence
|
|
||||||
- side_effect
|
|
||||||
- verify
|
|
||||||
- cleanup
|
|
||||||
- destroy
|
|
||||||
verifier:
|
|
||||||
name: testinfra
|
|
||||||
lint:
|
|
||||||
name: flake8
|
|
||||||
enabled: true
|
|
||||||
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Converge
|
|
||||||
hosts: all
|
|
||||||
roles:
|
|
||||||
- role: wazuh/ansible-wazuh-manager
|
|
||||||
|
|
||||||
@ -1,36 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Prepare
|
|
||||||
hosts: all
|
|
||||||
gather_facts: true
|
|
||||||
tasks:
|
|
||||||
|
|
||||||
- name: "Install Python packages for Trusty to solve trust issues"
|
|
||||||
package:
|
|
||||||
name:
|
|
||||||
- python-setuptools
|
|
||||||
- python-pip
|
|
||||||
state: latest
|
|
||||||
register: wazuh_manager_trusty_packages_installed
|
|
||||||
until: wazuh_manager_trusty_packages_installed is succeeded
|
|
||||||
when:
|
|
||||||
- ansible_distribution == "Ubuntu"
|
|
||||||
- ansible_distribution_major_version | int == 14
|
|
||||||
|
|
||||||
- name: "Install dependencies"
|
|
||||||
package:
|
|
||||||
name:
|
|
||||||
- curl
|
|
||||||
- net-tools
|
|
||||||
state: latest
|
|
||||||
register: wazuh_manager_dependencies_packages_installed
|
|
||||||
until: wazuh_manager_dependencies_packages_installed is succeeded
|
|
||||||
|
|
||||||
- name: "Install (RedHat) dependencies"
|
|
||||||
package:
|
|
||||||
name:
|
|
||||||
- initscripts
|
|
||||||
state: latest
|
|
||||||
register: wazuh_manager_dependencies_packages_installed
|
|
||||||
until: wazuh_manager_dependencies_packages_installed is succeeded
|
|
||||||
when:
|
|
||||||
- ansible_os_family == 'RedHat'
|
|
||||||
@ -1,80 +0,0 @@
|
|||||||
import os
|
|
||||||
import pytest
|
|
||||||
|
|
||||||
import testinfra.utils.ansible_runner
|
|
||||||
|
|
||||||
testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
|
|
||||||
os.environ['MOLECULE_INVENTORY_FILE']).get_hosts('all')
|
|
||||||
|
|
||||||
|
|
||||||
def get_wazuh_version():
|
|
||||||
"""This return the version of Wazuh."""
|
|
||||||
return "3.9.5"
|
|
||||||
|
|
||||||
|
|
||||||
def test_wazuh_packages_are_installed(host):
|
|
||||||
"""Test if the main packages are installed."""
|
|
||||||
manager = host.package("wazuh-manager")
|
|
||||||
api = host.package("wazuh-api")
|
|
||||||
|
|
||||||
distribution = host.system_info.distribution.lower()
|
|
||||||
if distribution == 'centos':
|
|
||||||
if host.system_info.release == "7":
|
|
||||||
assert manager.is_installed
|
|
||||||
assert manager.version.startswith(get_wazuh_version())
|
|
||||||
assert api.is_installed
|
|
||||||
assert api.version.startswith(get_wazuh_version())
|
|
||||||
elif host.system_info.release.startswith("6"):
|
|
||||||
assert manager.is_installed
|
|
||||||
assert manager.version.startswith(get_wazuh_version())
|
|
||||||
elif distribution == 'ubuntu':
|
|
||||||
assert manager.is_installed
|
|
||||||
assert manager.version.startswith(get_wazuh_version())
|
|
||||||
|
|
||||||
|
|
||||||
def test_wazuh_services_are_running(host):
|
|
||||||
"""Test if the services are enabled and running.
|
|
||||||
|
|
||||||
When assert commands are commented, this means that the service command has
|
|
||||||
a wrong exit code: https://github.com/wazuh/wazuh-ansible/issues/107
|
|
||||||
"""
|
|
||||||
manager = host.service("wazuh-manager")
|
|
||||||
api = host.service("wazuh-api")
|
|
||||||
|
|
||||||
distribution = host.system_info.distribution.lower()
|
|
||||||
if distribution == 'centos':
|
|
||||||
# assert manager.is_running
|
|
||||||
assert manager.is_enabled
|
|
||||||
# assert not api.is_running
|
|
||||||
assert not api.is_enabled
|
|
||||||
elif distribution == 'ubuntu':
|
|
||||||
# assert manager.is_running
|
|
||||||
assert manager.is_enabled
|
|
||||||
# assert api.is_running
|
|
||||||
assert api.is_enabled
|
|
||||||
|
|
||||||
|
|
||||||
@pytest.mark.parametrize("wazuh_file, wazuh_owner, wazuh_group, wazuh_mode", [
|
|
||||||
("/var/ossec/etc/sslmanager.cert", "root", "root", 0o640),
|
|
||||||
("/var/ossec/etc/sslmanager.key", "root", "root", 0o640),
|
|
||||||
("/var/ossec/etc/rules/local_rules.xml", "root", "ossec", 0o640),
|
|
||||||
("/var/ossec/etc/lists/audit-keys", "root", "ossec", 0o640),
|
|
||||||
])
|
|
||||||
def test_wazuh_files(host, wazuh_file, wazuh_owner, wazuh_group, wazuh_mode):
|
|
||||||
"""Test if Wazuh related files exist and have proper owners and mode."""
|
|
||||||
wazuh_file_host = host.file(wazuh_file)
|
|
||||||
|
|
||||||
assert wazuh_file_host.user == wazuh_owner
|
|
||||||
assert wazuh_file_host.group == wazuh_group
|
|
||||||
assert wazuh_file_host.mode == wazuh_mode
|
|
||||||
|
|
||||||
|
|
||||||
def test_open_ports(host):
|
|
||||||
"""Test if the main port is open and the agent-auth is not open."""
|
|
||||||
distribution = host.system_info.distribution.lower()
|
|
||||||
if distribution == 'ubuntu':
|
|
||||||
assert host.socket("tcp://0.0.0.0:1515").is_listening
|
|
||||||
assert host.socket("tcp://0.0.0.0:1514").is_listening
|
|
||||||
elif distribution == 'centos':
|
|
||||||
assert host.socket("tcp://127.0.0.1:1515").is_listening
|
|
||||||
assert host.socket("tcp://127.0.0.1:1514").is_listening
|
|
||||||
Loading…
Reference in New Issue
Block a user