diff --git a/CHANGELOG.md b/CHANGELOG.md index b660a25c..032097c3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,12 @@ All notable changes to this project will be documented in this file. - Update to [Wazuh v4.4.0](https://github.com/wazuh/wazuh/blob/v4.4.0/CHANGELOG.md#v440) +## [v4.3.9] + +### Added + +- Update to [Wazuh v4.3.9](https://github.com/wazuh/wazuh/blob/v4.3.9/CHANGELOG.md#v439) + ## [v4.3.8] ### Added diff --git a/README.md b/README.md index 24ae8863..700ae2db 100644 --- a/README.md +++ b/README.md @@ -16,6 +16,7 @@ These playbooks install and configure Wazuh agent, manager and indexer and dashb | Wazuh version | Elastic | ODFE | |---------------|---------|--------| | v4.4.0 | | | +| v4.3.9 | | | | v4.3.8 | | | | v4.3.7 | | | | v4.3.6 | | | diff --git a/roles/wazuh/ansible-wazuh-agent/tasks/Debian.yml b/roles/wazuh/ansible-wazuh-agent/tasks/Debian.yml index 37ab9afd..1c9af638 100644 --- a/roles/wazuh/ansible-wazuh-agent/tasks/Debian.yml +++ b/roles/wazuh/ansible-wazuh-agent/tasks/Debian.yml @@ -1,15 +1,23 @@ --- -- name: Debian/Ubuntu | Install apt-transport-https, ca-certificates, gnupg and acl +- name: Debian/Ubuntu | Install ca-certificates and gnupg apt: name: - - apt-transport-https - ca-certificates - - acl - gnupg state: present register: wazuh_agent_ca_package_install until: wazuh_agent_ca_package_install is succeeded +- name: Debian/Ubuntu | Install apt-transport-https and acl + apt: + name: + - apt-transport-https + - acl + state: present + register: wazuh_agent_ca_package_install + until: wazuh_agent_ca_package_install is succeeded + when: not (ansible_distribution == "Debian" and ansible_distribution_major_version in ['11']) + - name: Debian/Ubuntu | Installing Wazuh repository key (Ubuntu 14) become: true shell: | diff --git a/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2 b/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2 index 4a9c8b72..8eef3d1d 100644 --- a/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2 +++ b/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2 @@ -260,7 +260,7 @@ {% endif %} - {% if wazuh_agent_config.syscheck.win_directories is defined and ansible_system == "Windows" %} + {% if wazuh_agent_config.syscheck.win_directories is defined and ansible_os_family == "Windows" %} {% for directory in wazuh_agent_config.syscheck.win_directories %} {{ directory.dirs }} {% endfor %} @@ -280,7 +280,7 @@ {% endfor %} {% endif %} - {% if wazuh_agent_config.syscheck.ignore is defined and ansible_system == "Windows" %} + {% if wazuh_agent_config.syscheck.ignore is defined and ansible_os_family == "Windows" %} {% for ignore in wazuh_agent_config.syscheck.ignore_win %} {{ ignore }} {% endfor %} diff --git a/roles/wazuh/wazuh-dashboard/defaults/main.yml b/roles/wazuh/wazuh-dashboard/defaults/main.yml index 2a1892a3..25ed8563 100644 --- a/roles/wazuh/wazuh-dashboard/defaults/main.yml +++ b/roles/wazuh/wazuh-dashboard/defaults/main.yml @@ -11,7 +11,7 @@ dashboard_server_name: "dashboard" wazuh_version: 4.4.0 indexer_cluster_nodes: - 127.0.0.1 - + # The Wazuh dashboard package repository dashboard_version: "4.4.0" diff --git a/roles/wazuh/wazuh-dashboard/vars/debian.yml b/roles/wazuh/wazuh-dashboard/vars/debian.yml index 1ec2563c..09be1e06 100644 --- a/roles/wazuh/wazuh-dashboard/vars/debian.yml +++ b/roles/wazuh/wazuh-dashboard/vars/debian.yml @@ -1,3 +1,2 @@ --- - dashboard_version: 4.4.0 diff --git a/roles/wazuh/wazuh-indexer/defaults/main.yml b/roles/wazuh/wazuh-indexer/defaults/main.yml index fe3e2973..7c52a696 100644 --- a/roles/wazuh/wazuh-indexer/defaults/main.yml +++ b/roles/wazuh/wazuh-indexer/defaults/main.yml @@ -26,9 +26,9 @@ minimum_master_nodes: 2 # Example es1.example.com, es2.example.com domain_name: wazuh.com -indexer_sec_plugin_conf_path: /usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig +indexer_sec_plugin_conf_path: /etc/wazuh-indexer/opensearch-security indexer_sec_plugin_tools_path: /usr/share/wazuh-indexer/plugins/opensearch-security/tools -indexer_conf_path: /etc/wazuh-indexer/ +indexer_conf_path: /etc/wazuh-indexer indexer_index_path: /var/lib/wazuh-indexer/ # Security password diff --git a/roles/wazuh/wazuh-indexer/tasks/security_actions.yml b/roles/wazuh/wazuh-indexer/tasks/security_actions.yml index 2b481cc2..26b83fd7 100644 --- a/roles/wazuh/wazuh-indexer/tasks/security_actions.yml +++ b/roles/wazuh/wazuh-indexer/tasks/security_actions.yml @@ -83,7 +83,7 @@ JAVA_HOME=/usr/share/wazuh-indexer/jdk {{ indexer_sec_plugin_tools_path }}/securityadmin.sh -cd {{ indexer_sec_plugin_conf_path }}/ - -icl -p 9300 -cd {{ indexer_sec_plugin_conf_path }}/ + -icl -p 9200 -cd {{ indexer_sec_plugin_conf_path }}/ -nhnv -cacert {{ indexer_conf_path }}/certs/root-ca.pem -cert {{ indexer_conf_path }}/certs/admin.pem