Bump to version v3.13.0_7.7.1

CHANGELOG.md

@@ -1,6 +1,20 @@
 # Change Log
 All notable changes to this project will be documented in this file.
 
+## [v3.13.0_7.7.1]
+
+### Added
+
+- Update to Wazuh v3.13.0
+- Open Distro-Kibana and Filebeat-oss roles ([@manuasir](https://github.com/manuasir)) [PR#424](https://github.com/wazuh/wazuh-ansible/pull/424)
+
+### Changed
+
+- Fetch ES template from wazuh/wazuh repository ([@Zenidd](https://github.com/Zenidd)) [PR#435](https://github.com/wazuh/wazuh-ansible/pull/435)
+
+### Fixed
+
+- Use local path while generating xpack certificates ([@xr09](https://github.com/xr09)) [PR#432](https://github.com/wazuh/wazuh-ansible/pull/432)
 
 ## [v3.12.3_7.6.2]
 

roles/elastic-stack/ansible-kibana/defaults/main.yml

@@ -5,8 +5,8 @@ elasticsearch_http_port: "9200"
 elasticsearch_network_host: "127.0.0.1"
 kibana_server_host: "0.0.0.0"
 kibana_server_port: "5601"
-elastic_stack_version: 7.7.0
+elastic_stack_version: 7.7.1
-wazuh_version: 3.12.3
+wazuh_version: 3.13.0
 wazuh_app_url: https://packages.wazuh.com/wazuhapp/wazuhapp
 
 elasticrepo:
@@ -47,7 +47,7 @@ nodejs:
 
 # Build from sources
 build_from_sources: false
-wazuh_plugin_branch: 3.12-7.6
+wazuh_plugin_branch: 3.13-7.7
 
 #Nodejs NODE_OPTIONS
 node_options: --no-warnings --max-old-space-size=2048 --max-http-header-size=65536

roles/opendistro/opendistro-kibana/defaults/main.yml

@@ -12,8 +12,8 @@ kibana_server_host: "0.0.0.0"
 kibana_server_port: "5601"
 kibana_server_name: "kibana"
 kibana_max_payload_bytes: 1048576
-elastic_stack_version: 7.7.0
+elastic_stack_version: 7.7.1
-wazuh_version: 3.12.3
+wazuh_version: 3.13.0
 wazuh_app_url: https://packages.wazuh.com/wazuhapp/wazuhapp
 
 # The OpenDistro package repository
@@ -56,7 +56,7 @@ nodejs:
 
 # Build from sources
 build_from_sources: false
-wazuh_plugin_branch: 3.12-7.6
+wazuh_plugin_branch: 3.13-7.7
 
 #Nodejs NODE_OPTIONS
 node_options: --no-warnings --max-old-space-size=2048 --max-http-header-size=65536

roles/wazuh/ansible-filebeat/tasks/config.yml

@@ -9,12 +9,12 @@
   notify: restart filebeat
   tags: configure
 
-- name: Copy Elasticsearch template.
+- name: Fetch latest Wazuh alerts template
-  template:
+  get_url:
-    src: elasticsearch.yml.j2
+    url: https://raw.githubusercontent.com/wazuh/wazuh/master/extensions/elasticsearch/7.x/wazuh-template.json
     dest: "/etc/filebeat/wazuh-template.json"
     owner: root
     group: root
     mode: 0400
   notify: restart filebeat
-  tags: configure
+  tags: configure

roles/wazuh/ansible-wazuh-agent/defaults/main.yml

@@ -1,5 +1,5 @@
 ---
-wazuh_agent_version: 3.12.3-1
+wazuh_agent_version: 3.13.0-1
 
 
 # Custom packages installation
@@ -12,7 +12,7 @@ wazuh_custom_packages_installation_agent_rpm_url: ""
 
 wazuh_agent_sources_installation:
   enabled: false
-  branch: "v3.12.3"
+  branch: "v3.13.0"
   user_language: "y"
   user_no_stop: "y"
   user_install_type: "agent"
@@ -21,7 +21,7 @@ wazuh_agent_sources_installation:
   user_enable_active_response: "y"
   user_enable_syscheck: "y"
   user_enable_rootcheck: "y"
-  user_enable_openscap: "y"
+  user_enable_openscap: "n"
   user_enable_sca: "y"
   user_enable_authd: "y"
   user_generate_authd_cert: "n"
@@ -64,9 +64,9 @@ wazuh_winagent_config:
   # Adding quotes to auth_path_x86 since win_shell outputs error otherwise
   auth_path_x86: C:\'Program Files (x86)'\ossec-agent\agent-auth.exe
   check_md5: True
-  md5: 4ae4e930d3ae9d572b07cd9e7207d783
+  md5: d0f13c0c417c74ccbad7b45f66518513
-wazuh_winagent_config_url: https://packages.wazuh.com/3.x/windows/wazuh-agent-3.12.3-1.msi
+wazuh_winagent_config_url: https://packages.wazuh.com/3.x/windows/wazuh-agent-3.13.0-1.msi
-wazuh_winagent_package_name: wazuh-agent-3.12.3-1.msi
+wazuh_winagent_package_name: wazuh-agent-3.13.0-1.msi
 wazuh_agent_config:
   repo:
     apt: 'deb https://packages.wazuh.com/3.x/apt/ stable main'

roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2

@@ -69,7 +69,7 @@
   {% endif %}
 
 
-  {% if ansible_system == "Linux" %}
+  {% if ansible_system == "Linux" and wazuh_agent_config.openscap.disable == 'no' %}
   <wodle name="open-scap">
     <disabled>{{ wazuh_agent_config.openscap.disable }}</disabled>
     <timeout>{{ wazuh_agent_config.openscap.timeout }}</timeout>

roles/wazuh/ansible-wazuh-manager/defaults/main.yml

@@ -1,5 +1,5 @@
 ---
-wazuh_manager_version: 3.12.3-1
+wazuh_manager_version: 3.13.0-1
 
 wazuh_manager_fqdn: "wazuh-server"
 wazuh_manager_package_state: present
@@ -15,7 +15,7 @@ wazuh_custom_packages_installation_api_rpm_url: "https://s3-us-west-1.amazonaws.
 # Sources installation
 wazuh_manager_sources_installation:
   enabled: false
-  branch: "v3.12.3"
+  branch: "v3.13.0"
   user_language: "en"
   user_no_stop: "y"
   user_install_type: "server"
@@ -24,7 +24,7 @@ wazuh_manager_sources_installation:
   user_enable_active_response: null
   user_enable_syscheck: "y"
   user_enable_rootcheck: "y"
-  user_enable_openscap: "y"
+  user_enable_openscap: "n"
   user_enable_authd: "y"
   user_generate_authd_cert: null
   user_update: "y"
@@ -40,7 +40,7 @@ wazuh_manager_sources_installation:
 
 wazuh_api_sources_installation:
   enabled: false
-  branch: "v3.12.3"
+  branch: "v3.13.0"
   update: "y"
   remove: "y"
   directory: null