neonmei
|
c921753f35
|
Merge branch 'master' into release-4.0.4
Brings in PR#540 which adds a missing role default
|
2021-01-12 16:21:19 -03:00 |
|
neonmei
|
084cc8f36d
|
roles/opendistro-elasticsearch: add missing role defaults elasticsearch_network_host
|
2021-01-12 16:03:02 -03:00 |
|
neonmei
|
539d87d3db
|
release: update copyright notice
|
2021-01-11 10:49:11 -03:00 |
|
neonmei
|
13465cf06d
|
roles/wazuh-manager: update versions for v4.0.4 release
|
2021-01-11 10:49:10 -03:00 |
|
neonmei
|
0351d0121e
|
roles/wazuh-agent: update versions for v4.0.4 release
|
2021-01-11 10:49:10 -03:00 |
|
neonmei
|
2e6a7668d3
|
roles/filebeat-oss: update versions for v4.0.4 release
|
2021-01-11 10:49:10 -03:00 |
|
neonmei
|
9ffe0526d6
|
roles/filebeat: update versions for v4.0.4 release
|
2021-01-11 10:49:10 -03:00 |
|
neonmei
|
6b3804a6a2
|
roles/opendistro-kibana: update versions for v4.0.4 release
|
2021-01-11 10:49:10 -03:00 |
|
neonmei
|
3594d21b6b
|
roles/elasticsearch-kibana: update versions for v4.0.4 release
|
2021-01-11 10:49:09 -03:00 |
|
neonmei
|
7026cf8921
|
Merge branch 'fix-opendistro-security-actions'
|
2021-01-08 14:09:04 -03:00 |
|
neonmei
|
f1cb1f7b20
|
roles/opendistro: add missing variable elasticsearch_node_master in role defaults
|
2021-01-07 15:15:38 -03:00 |
|
neonmei
|
56311f7a22
|
roles/opendistro-elasticsearch: replace od/kibana/filebeat node_name variables to role default elasticsearch_node_name to avoid confusion and potential bugs
|
2021-01-07 10:16:25 -03:00 |
|
zenidd
|
59b829dae9
|
roles/opendistro-kibana: use admininstead of kibanaserver as opendistro kibana user
|
2020-12-23 15:25:16 +01:00 |
|
Paweł Krawczyk
|
a395841104
|
Fix invalid Jinja2 syntax
|
2020-12-17 20:58:59 +00:00 |
|
Peter Dragos
|
df46716a9b
|
add localfile labels to agent ossec.conf template
This change enables generating a stanza such as
```
<localfile>
<location>/var/log/myapp/log.json</location>
<log_format>json</log_format>
<label key="@source">myapp</label>
<label key="agent.type">webserver</label>
</localfile>
```
from the `wazuh_agent_config` snippet:
```
- format: json
location: /var/log/myapp/log.json
label:
- key: "@source"
value: "myapp"
- key: "agent.type"
value: "webserver"
```
|
2020-12-14 18:05:36 -05:00 |
|
singuliere
|
0440e5dce9
|
randomly generated passwords must obey some constraints
The password constraints of security.py require at least one digit,
one lower case, one upper case and one special character.
https://github.com/wazuh/wazuh/blob/master/framework/wazuh/security.py#L22
Fixes: https://github.com/wazuh/wazuh-ansible/issues/518
|
2020-12-11 13:26:20 +01:00 |
|
neonmei
|
b084e33bd6
|
release: update wazuh-agent windows installer md5
|
2020-11-30 14:00:58 -03:00 |
|
neonmei
|
4547cde8f8
|
release: update wazuh-agent url for windows installer
|
2020-11-30 14:00:47 -03:00 |
|
neonmei
|
ea12701d6b
|
release: bump Wazuh version across roles to 4.0.3
|
2020-11-30 12:58:32 -03:00 |
|
neonmei
|
559be15986
|
role/agent: update default for variable wazuh_api_reachable_from_agent
|
2020-11-26 19:33:59 -03:00 |
|
neonmei
|
22bc08e190
|
roles/wazuh-agent: change all delegate_to REST conditionals to be uniform
|
2020-11-26 16:35:41 -03:00 |
|
neonmei
|
4d2e493cef
|
roles/wazuh-agent: fix erroneous usage of ansible_host instead of inventory_hostname
|
2020-11-26 16:34:25 -03:00 |
|
neonmei
|
333816831a
|
release: bump Wazuh version to 4.0.2
|
2020-11-23 17:17:04 -03:00 |
|
neonmei
|
30cc6875d6
|
Merge branch 'master' into feature-role-agent-registration
|
2020-11-23 14:42:57 -03:00 |
|
zenidd
|
ec831975bb
|
roles/wazuh-agent: remove default agent_name
|
2020-11-23 17:44:59 +01:00 |
|
neonmei
|
58167dbd1f
|
roles/wazuh-agent: add message explaining when auto-enrollment registration path is fired or not
|
2020-11-23 12:18:56 -03:00 |
|
neonmei
|
f7ed5f1f7f
|
roles/agent: update ossec.conf template to check against explicit yes instead of length
|
2020-11-23 11:43:59 -03:00 |
|
neonmei
|
5170c206e0
|
roles/agent: use auto-enrollment by default
|
2020-11-23 11:41:45 -03:00 |
|
neonmei
|
35c9df9c7e
|
roles/agent: add comments on role defaults and group registration related tasks
|
2020-11-23 11:41:17 -03:00 |
|
neonmei
|
7e445c7f55
|
roles/agent: add wazuh_agent_api_validate to optionally skip agent registry validation task
|
2020-11-23 11:39:27 -03:00 |
|
neonmei
|
1df3ef8699
|
roles/agent: for registration rename check_keys->client_keys_file for more clarity, update conditionals length checks to explicit "yes" check
|
2020-11-23 11:38:07 -03:00 |
|
neonmei
|
a28837a74d
|
roles/agent: in rest registration method, update manage_agents task
|
2020-11-23 11:32:01 -03:00 |
|
neonmei
|
a4c4b6cd32
|
roles/agent: refresh agent validation in rest registration method
|
2020-11-23 11:29:34 -03:00 |
|
neonmei
|
d4092bf686
|
roles/agent: update agent registry task with token, nolog and remove when, as it is checked on every task, shuld be applied to block
|
2020-11-23 11:28:37 -03:00 |
|
neonmei
|
535add6f4c
|
roles/agent: add nolog variable for registration tasks with credentials output
|
2020-11-23 11:26:39 -03:00 |
|
neonmei
|
5f6973d8d2
|
roles/agent: add task for fetching jwt token
|
2020-11-23 11:25:31 -03:00 |
|
neonmei
|
332ee7ae8b
|
roles/agent: add task for determining which wazuh_managers to use through register: yes instead of just grabbing the first one on the list, otherwise fallback to first in the list
|
2020-11-23 11:24:43 -03:00 |
|
zenidd
|
ee1124b7dd
|
Merge master changes
|
2020-11-23 14:28:59 +01:00 |
|
neonmei
|
1dfe0fdb67
|
roles/wazuh-agent: fix duplicate variable
|
2020-11-20 16:16:54 -03:00 |
|
neonmei
|
874e8a08d0
|
Merge branch 'feature-role-wazuh-manager-vars'
|
2020-11-20 14:55:44 -03:00 |
|
neonmei
|
b4d2b564b7
|
roles/wazuh-agent: update api credentials to wazuh:wazuh
|
2020-11-20 13:40:17 -03:00 |
|
neonmei
|
7fc29b720f
|
roles/wazuh-agent: remove async from install task and introduce a lock timeout configurable by wazuh_agent_yum_lock_timeout
|
2020-11-20 12:37:20 -03:00 |
|
neonmei
|
7dc67986d4
|
roles/wazuh-agent: change package module to yum, as platform is already checked on when
|
2020-11-20 12:29:08 -03:00 |
|
zenidd
|
ff78ce7d76
|
roles/wazuh-agent: Fix authd registration verify task. Use authd pass only if size > 0
|
2020-11-20 14:08:25 +01:00 |
|
zenidd
|
ed7b24ff96
|
roles/wazuh-agent: set enrollment to enabled by default
|
2020-11-20 12:36:50 +01:00 |
|
zenidd
|
0426d956ed
|
Merge master branch
|
2020-11-16 16:23:17 +01:00 |
|
neonmei
|
b2f9bc9901
|
roles/elastic-stack: update jvm.options template per upstream elasticsearch updates
|
2020-11-13 14:01:01 -03:00 |
|
zenidd
|
64cc04f5b0
|
Merge master changes
|
2020-11-13 16:55:47 +01:00 |
|
Manuel J. Bernal
|
9b516f1f73
|
Merge pull request #485 from wazuh/feature-agent-unnest
Feature agent default vars depth reduction
|
2020-11-13 16:29:24 +01:00 |
|
Manuel J. Bernal
|
19e2578682
|
Merge pull request #487 from wazuh/feature-lint-remove-unused
Feature lint remove unused variables
|
2020-11-13 16:28:52 +01:00 |
|
neonmei
|
f902bd5269
|
roles/wazuh-agent: update comment at role defaults
|
2020-11-13 12:07:26 -03:00 |
|
zenidd
|
dac3ddc1fb
|
wazuh-ansible: bump versions, update README
|
2020-11-13 10:57:20 +01:00 |
|
neonmei
|
8b26658374
|
roles/wazuh-agent: expand task declaration for clarity
|
2020-11-12 14:39:17 -03:00 |
|
neonmei
|
1dfd613f0d
|
roles/wazuh-agent: uncomment api_pass
|
2020-11-12 14:35:23 -03:00 |
|
neonmei
|
0bbdf231f2
|
roles/wazuh-agent: remove "is defined" conditionals, as authd_pass is now part of roles default, now check is only against length
|
2020-11-12 14:34:57 -03:00 |
|
neonmei
|
bab8279f73
|
roles/wazuh-agent: remove include_vars tasks
|
2020-11-12 14:29:01 -03:00 |
|
neonmei
|
92ebe86ef6
|
roles/wazuh-agent: move api_pass and authd_pass from role vars to defaults, lowering precedence required to override them
|
2020-11-12 14:24:14 -03:00 |
|
neonmei
|
88873a1759
|
roles/opendistro-kibana: add missing noqa for rules 208 and 503 false positive I forgot to push
|
2020-11-12 13:18:50 -03:00 |
|
neonmei
|
8e827552a7
|
roles/opendistro-kibana: add missing noqa for rule 503 false positive
|
2020-11-12 13:16:20 -03:00 |
|
neonmei
|
1e03700188
|
Merge branch 'feature-lint-roles-etc'
|
2020-11-12 13:07:45 -03:00 |
|
neonmei
|
f35ffeed76
|
Merge branch 'feature-lint-role-wazuh-manager'
|
2020-11-12 13:07:35 -03:00 |
|
neonmei
|
4156a75395
|
Merge branch 'feature-lint-role-wazuh-agent'
|
2020-11-12 13:07:25 -03:00 |
|
neonmei
|
b2723f69e3
|
Merge branch 'feature-lint-role-opendistro'
|
2020-11-12 13:07:15 -03:00 |
|
neonmei
|
ac796d2fdc
|
Merge branch 'feature-lint-role-filebeat-oss'
|
2020-11-12 13:07:04 -03:00 |
|
neonmei
|
a0f32789c4
|
roles/kibana: add noqa to task, as we only intend to ensure owner/group and keep mode
|
2020-11-12 12:01:25 -03:00 |
|
neonmei
|
6f5f1106b3
|
roles/wazuh-agent: add missing mode for file task
|
2020-11-12 11:42:19 -03:00 |
|
neonmei
|
7634f8cf9b
|
roles/wazuh-agent: add noqa 208 exception for Windows template task
|
2020-11-12 11:42:15 -03:00 |
|
neonmei
|
55d3039519
|
roles/wazuh-agent: change comparison to literal bool
|
2020-11-12 11:42:11 -03:00 |
|
neonmei
|
8be12f0c5a
|
roles/filebeat-oss: remove extra file permissions task
|
2020-11-12 11:33:09 -03:00 |
|
neonmei
|
68b8c6b5a0
|
roles/filebeat-oss: add missing file mode and ownership for security_actions tasks
|
2020-11-12 11:32:49 -03:00 |
|
neonmei
|
87e9c8fc23
|
roles/wazuh-manager: add missing mode and ownership to file module
|
2020-11-12 11:26:57 -03:00 |
|
neonmei
|
17e4e687a4
|
roles/elasticsearch: add linting exception to lineinfile module to avoid changing permissions of global /etc/security/limits.conf
|
2020-11-12 11:21:50 -03:00 |
|
neonmei
|
bc9b5b5849
|
roles/elasticsearch: add missing mode and ownership to lineinfile module
|
2020-11-12 11:21:49 -03:00 |
|
neonmei
|
bc27023861
|
roles/elasticsearch: expand task, add missing mode and ownership to file module
|
2020-11-12 11:21:49 -03:00 |
|
neonmei
|
84744fe8ab
|
roles/elasticsearch: add missing mode and ownership to template module at tasks/xpack_security.yml
|
2020-11-12 11:21:24 -03:00 |
|
neonmei
|
878c55a180
|
roles/opendistro-elasticsearch: add new variable opendistro_nolog_sensible to role defaults
|
2020-11-12 11:07:07 -03:00 |
|
neonmei
|
8fdfecc06f
|
roles/opendistro-elasticsearch: add missing mode for file module
|
2020-11-12 11:05:47 -03:00 |
|
neonmei
|
c0d48e3ad4
|
roles/opendistro-elasticsearch: remove use of command module with sed and change it to replace module. Also add a nolog to the tasks guarded by opendistro_nolog_sensible to avoid outputting non-hashed passwords in deploy log
|
2020-11-12 11:04:32 -03:00 |
|
neonmei
|
15f15170f3
|
roles/opendistro-elasticsearch: remove nested jinja pattern and move it to a task-local variable for clarity
|
2020-11-12 11:00:36 -03:00 |
|
neonmei
|
36e235c877
|
roles/filebeat: remove unused variable filebeat_ssl_dir
|
2020-11-10 15:53:43 -03:00 |
|
neonmei
|
f5f80aa588
|
roles/opendistro-elasticsearch: remove unused variable es_nodes
|
2020-11-10 15:53:21 -03:00 |
|
neonmei
|
e466b3c35e
|
roles/kibana: remove unused variables node_certs_generator and node_certs_source
|
2020-11-10 15:52:58 -03:00 |
|
neonmei
|
1511649944
|
roles/elasticsearch: remove unused variable elasticsearch_xpack_security_user
|
2020-11-10 15:52:29 -03:00 |
|
neonmei
|
1d93181625
|
roles/filebeat: remove unused variables node_certs_generator and node_certs_source
|
2020-11-10 15:25:41 -03:00 |
|
neonmei
|
04e242e207
|
roles/filebeat-oss: remove unused variables filebeat_security_user and filebeat_security_password
|
2020-11-10 15:24:52 -03:00 |
|
neonmei
|
200efb981c
|
roles/opendistro-kibana: remove unused variable elasticsearch_nodes
|
2020-11-10 15:24:11 -03:00 |
|
neonmei
|
b928bc81fe
|
roles/opendistro-elasticsearch: remove unused variable elasticrepo
|
2020-11-10 15:23:39 -03:00 |
|
neonmei
|
eb5e74bb02
|
roles/filebeat: remove unused variables
|
2020-11-10 15:06:42 -03:00 |
|
neonmei
|
e90ddb73e6
|
roles/filebeat-oss: remove unused variables
|
2020-11-10 15:05:38 -03:00 |
|
neonmei
|
fad82ba7d1
|
roles/opendistro-kibana: remove unused variables
|
2020-11-10 15:04:31 -03:00 |
|
neonmei
|
aa04ebad90
|
roles/opendistro-elasticsearch: remove unused variables
|
2020-11-10 15:04:21 -03:00 |
|
neonmei
|
80593c464b
|
Merge branch 'feature-filebeat-oss-package-fix'
|
2020-11-10 14:41:39 -03:00 |
|
zenidd
|
0866c54e2b
|
roles/filebeat-oss: minor fix
|
2020-11-10 18:36:26 +01:00 |
|
zenidd
|
ed8bccb3a4
|
roles/filebeat-oss: use apt/yum module instead of package
|
2020-11-10 18:30:13 +01:00 |
|
zenidd
|
52a809158a
|
roles/filebeat-oss: allow installing fixed filebeat version
|
2020-11-10 17:03:12 +01:00 |
|
neonmei
|
2a5da5f78d
|
roles/agent: add support for overlaying like role-distributed ansible.cfg setting for hash_behaviour
|
2020-11-10 10:48:12 -03:00 |
|
neonmei
|
53fbc82931
|
roles/agent: reduce depth of wazuh_agent_config by extracting internal dicts to outside variables
|
2020-11-10 10:45:43 -03:00 |
|
zenidd
|
0afaba51fc
|
Fix repository removal task condition
|
2020-11-10 13:05:05 +01:00 |
|
neonmei
|
75f1669ca8
|
Merge branch 'feature-es-cluster-check-fix'
|
2020-11-09 15:26:24 -03:00 |
|
zenidd
|
af948dff01
|
Fix ES API test task until statement. Fix block indentation
|
2020-11-09 19:08:33 +01:00 |
|
Manuel J. Bernal
|
fe67ea2d51
|
Merge pull request #482 from wazuh/feature-manager-remove-nodejs
Remove unnecesary nodejs dependency
|
2020-11-09 18:14:43 +01:00 |
|
Manuel J. Bernal
|
c462ac72bd
|
Merge pull request #478 from wazuh/feature-opendistro-runonce
Improve handling of run_once at opendistro-elasticsearch role
|
2020-11-09 18:13:49 +01:00 |
|
neonmei
|
0f6ea26123
|
roles/wazuh_manager: merge uninstall tasks in a single file
|
2020-11-09 14:04:55 -03:00 |
|
neonmei
|
d44532482a
|
roles/wazuh_manager: remove nodejs as wazuh-api was migrated to python
For more information, see: https://github.com/wazuh/wazuh/releases/tag/v4.0.0
|
2020-11-09 13:58:23 -03:00 |
|
zenidd
|
d23feddede
|
Refactor test conditions
|
2020-11-09 17:57:12 +01:00 |
|
neonmei
|
a1f4a16fd9
|
roles/wazuh_manager: add support for role-distributed ansible.cfg setting for hash_behaviour
|
2020-11-09 13:03:54 -03:00 |
|
zenidd
|
bda7de57ec
|
Elastic API check fix
|
2020-11-09 16:29:43 +01:00 |
|
neonmei
|
3b5d8651a6
|
roles/wazuh_manager: reduce depth of wazuh_manager_config by extracting contents into external dictionaries
|
2020-11-09 11:42:01 -03:00 |
|
梅
|
dc2486b339
|
roles/opendistro: switch from import_tasks to include_tasks, move block tag and conditional from security_actions.yml to main.yml
|
2020-11-06 14:21:19 -03:00 |
|
manuasir
|
e8ad26a3ca
|
Removed deprecated option
|
2020-11-03 19:18:10 +01:00 |
|
Manuel Gutierrez
|
a77be1f959
|
Add custom API user support
|
2020-10-27 15:02:27 +01:00 |
|
Manuel Gutierrez
|
912d669281
|
Use standard module format
|
2020-10-27 15:01:28 +01:00 |
|
Manuel Gutierrez
|
f4b6fa098f
|
Specify API password requirements on defaults
|
2020-10-27 15:00:53 +01:00 |
|
Manuel Gutierrez
|
13cda56e94
|
Use playbook_dir for relative paths
|
2020-10-26 19:33:25 +01:00 |
|
zenidd
|
a9f96ff495
|
Merge branch 'master' into feature-adapt-major-version
|
2020-10-23 17:30:57 +02:00 |
|
Manuel J. Bernal
|
fec24b4f6d
|
Merge pull request #467 from wazuh/odfe-1101
Bump ODFE roles to 1.10.1
|
2020-10-23 17:30:00 +02:00 |
|
zenidd
|
f1dba34f50
|
Updating default index pattern
|
2020-10-23 17:09:03 +02:00 |
|
zenidd
|
9cac95729b
|
Set empty authd pass
|
2020-10-23 14:04:18 +02:00 |
|
zenidd
|
2f33aa20c5
|
New major version fixes
|
2020-10-23 13:21:32 +02:00 |
|
zenidd
|
dee32f7b79
|
update wazuh agent repos
|
2020-10-23 12:37:32 +02:00 |
|
zenidd
|
cab1f1d520
|
update wazuh repos
|
2020-10-23 12:36:07 +02:00 |
|
zenidd
|
ac7b80d54e
|
Replace APP URL
|
2020-10-23 11:36:07 +02:00 |
|
zenidd
|
319261d29f
|
Filebeat module version update
|
2020-10-23 10:42:46 +02:00 |
|
zenidd
|
09408c3b8c
|
Update windows package md5sum
|
2020-10-23 10:35:15 +02:00 |
|
zenidd
|
8e784694bb
|
Restoring defaulf configuration
|
2020-10-20 17:52:38 +02:00 |
|
zenidd
|
583f38f19c
|
Merge master changes
|
2020-10-20 17:44:26 +02:00 |
|
zenidd
|
5ad76a1e36
|
Bump versions
|
2020-10-20 17:40:28 +02:00 |
|
zenidd
|
dbd9b1a52a
|
Update wazuh agent MD5
|
2020-10-19 14:15:35 +02:00 |
|
zenidd
|
0201da6f0f
|
Bump versions
|
2020-10-15 18:48:18 +02:00 |
|
zenidd
|
1e6e389ff4
|
Add single node option to ODFE configuration template
|
2020-10-15 18:48:05 +02:00 |
|
zenidd
|
6de730bf97
|
Avoid checking for green status on single node
|
2020-10-15 18:47:31 +02:00 |
|
zenidd
|
672470344a
|
Update certs generation tool URL. Bump versions. Set variables to correct value
|
2020-10-15 18:46:55 +02:00 |
|
zenidd
|
671b7333fa
|
Ensure recursive /usr/share/kibana permissions before installing WUI
|
2020-10-08 17:14:35 +02:00 |
|
Manuel J. Bernal
|
6a6fb15654
|
Remove vuls block from Linux tasks
|
2020-10-07 17:03:28 +02:00 |
|
Manuel J. Bernal
|
575fcc966a
|
Remove vuls integration
|
2020-10-07 16:59:46 +02:00 |
|
Manuel Gutierrez
|
48dda652b2
|
Update year
|
2020-10-02 13:13:00 +02:00 |
|
Manuel Gutierrez
|
6abf51a5f0
|
Bump opendistro roles to 1.10.1
|
2020-10-01 16:26:08 +02:00 |
|
zenidd
|
46b073d7dd
|
adding latest WUI package
|
2020-10-01 15:59:00 +02:00 |
|
zenidd
|
73764f5db2
|
Adding latests wazuh packages
|
2020-10-01 15:52:53 +02:00 |
|
zenidd
|
12708cf9bc
|
Bump opendistro and wazuh versions
|
2020-10-01 15:44:53 +02:00 |
|
manuasir
|
cb615b1bcf
|
Merge branch '3.13'
|
2020-09-21 18:46:01 +02:00 |
|
manuasir
|
1d025d520d
|
Merge branch 'master' into feature-github-actions
|
2020-09-21 04:48:41 +02:00 |
|
zenidd
|
707aad76ad
|
Bump to Wazuh version v3.13.2
|
2020-09-18 15:06:21 +02:00 |
|
Manuel J. Bernal
|
8adceb5833
|
Fixed authorization_pass_path XML option
|
2020-09-02 00:08:43 +02:00 |
|
Manuel J. Bernal
|
33d4aaedf1
|
Fixed unreadable token
|
2020-09-01 23:10:42 +02:00 |
|
Manuel J. Bernal
|
54443102f7
|
WIP: auto-enrollment implementation
|
2020-09-01 22:55:53 +02:00 |
|
Manuel J. Bernal
|
b117407c16
|
Fix unreadable token
|
2020-09-01 17:23:49 +02:00 |
|
zenidd
|
1bc990769b
|
Merge branch 'feature-adapt-major-version' of github.com:wazuh/wazuh-ansible into feature-adapt-major-version
|
2020-09-01 17:02:14 +02:00 |
|
zenidd
|
4f68e701f0
|
Regen the install from sources fil
|
2020-09-01 17:01:28 +02:00 |
|
manuasir
|
27e913619c
|
Merge remote-tracking branch 'origin/feature-github-actions' into feature-adapt-major-version
|
2020-09-01 15:36:40 +02:00 |
|
Manuel J. Bernal
|
bc7e1fbb8a
|
Added autoenrollment feature to agent ossec.conf template
|
2020-09-01 15:31:35 +02:00 |
|
zenidd
|
f2e7a75b09
|
Using latest SearchGuard tool. Fixing Wazuh API credentials template
|
2020-08-26 14:05:38 +02:00 |
|
zenidd
|
af88cc4de8
|
Allow redhat sources install
|
2020-08-26 13:04:03 +02:00 |
|
zenidd
|
62ecf0325a
|
Enabling sources install
|
2020-08-26 13:00:19 +02:00 |
|
zenidd
|
1f32a2663b
|
remove tasks
|
2020-08-26 12:53:11 +02:00 |
|
zenidd
|
2deb53272a
|
Adaptation to Wazuh 4.0 and fixes
|
2020-08-25 16:02:06 +02:00 |
|
zenidd
|
255d262b62
|
removing unnecessary old api files
|
2020-08-24 16:15:02 +02:00 |
|
zenidd
|
1117de8d5f
|
Create new API config template file
|
2020-08-21 16:17:07 +02:00 |
|
Manuel Gutierrez
|
87ad1cdfaf
|
Basic auth on kibana role
|
2020-08-14 17:02:11 +02:00 |
|
Manuel Gutierrez
|
f092dc34f5
|
Force basic auth
|
2020-08-14 16:34:44 +02:00 |
|
Manuel J. Bernal
|
45a14c128c
|
WIP: Adapting to v4.0
|
2020-08-12 19:45:46 +02:00 |
|
manuasir
|
f2a527b574
|
Removed restart systemd tasks
|
2020-07-29 23:55:41 +02:00 |
|
manuasir
|
ca88611678
|
Changed manager installation task in Debian family
|
2020-07-28 16:49:04 +02:00 |
|
Manuel Gutierrez
|
f870da4415
|
Check if variable is not null
|
2020-07-27 13:27:09 +02:00 |
|
Manuel Gutierrez
|
a9c4709581
|
Fix defaults typo
|
2020-07-27 13:26:36 +02:00 |
|
Manuel J. Bernal
|
e310b7b766
|
Fixed check_mode when condition
|
2020-07-23 12:32:47 +02:00 |
|
Manuel J. Bernal
|
1b50c4cb40
|
Merge pull request #451 from wazuh/pr-426-kibana_extra_ssl_option
Add kibana extra ssl option
|
2020-07-22 11:26:50 +02:00 |
|
Manuel J. Bernal
|
3b87adf8a3
|
Merge pull request #194 from dsroark-dt/async_ignore_check_mode
ignore check mode for async tasks
|
2020-07-21 19:06:05 +02:00 |
|
Pablo Escobar
|
81c2df4fff
|
add a variable to define elasticsearch.ssl.verificationMode in kibana
|
2020-07-20 13:23:05 +02:00 |
|
Pablo Escobar
|
5603faa1f2
|
added new ssl option for kibana
|
2020-07-20 13:23:05 +02:00 |
|
Manuel J. Bernal
|
dd77cb9c20
|
Added condition to ossec.conf template
|
2020-07-16 18:26:16 +02:00 |
|
manuasir
|
c05d045043
|
Merge branch 'devel' into fix-agent-default-vars
|
2020-07-16 18:04:34 +02:00 |
|
Manuel J. Bernal
|
a6ad44e4b9
|
Added new options to agent's ossec.conf
|
2020-07-16 18:03:54 +02:00 |
|
Manuel Gutierrez
|
ff8caa8995
|
Use variable for kibana conf path
|
2020-07-16 16:09:27 +02:00 |
|
amardrbarbar
|
186301a12e
|
Fix kibana optimization for debian 10
|
2020-07-16 14:42:53 +02:00 |
|
manuasir
|
954f3d9070
|
Merge branch 'devel' into wazuh_release_3.13.1_7.8.0
|
2020-07-14 16:29:27 +02:00 |
|
Manuel Gutierrez
|
f51b55860b
|
Use single variable for opendistro version
|
2020-07-14 16:23:08 +02:00 |
|
Manuel Gutierrez
|
6443e3a08c
|
Use explicit path for kibana.yml
|
2020-07-14 16:20:59 +02:00 |
|
Manuel Gutierrez
|
bbcbd02fd6
|
Avoid sudo on local_actions
|
2020-07-14 16:20:52 +02:00 |
|
Manuel J. Bernal
|
882780de2c
|
Added new ossec.conf settings
|
2020-07-14 13:02:07 +02:00 |
|
Manuel J. Bernal
|
970b03a9f2
|
Bump version
|
2020-07-14 12:53:55 +02:00 |
|
Manuel J. Bernal
|
ece42099fe
|
Merge pull request #443 from wazuh/opendistro-demo
Update Opendistro tasks
|
2020-07-06 20:15:09 +02:00 |
|
Manuel Gutierrez
|
d486e42605
|
Fix condition check
|
2020-07-06 15:54:22 +02:00 |
|
Manuel Gutierrez
|
3a63c27f9d
|
Fix Ansible linting errors
|
2020-07-03 20:06:02 +02:00 |
|
Manuel Gutierrez
|
81f8703749
|
Use opendistro_http_port variable
|
2020-07-03 20:04:10 +02:00 |
|
Jose M
|
5a845d69f1
|
Add vars and conditionals to control certs generation and installation
|
2020-06-30 19:22:42 +02:00 |
|
Hadrien
|
d6f3d91a46
|
update check on windows wazuh_agent_authd.agent_name's definition
|
2020-06-29 18:54:37 +02:00 |
|
Jose M
|
2ad6d87ef7
|
Add default cluster and discovery node
|
2020-06-29 17:27:23 +02:00 |
|
Jose M
|
d7339ee6fe
|
Add generate-certs to local_actions.yml tasks
|
2020-06-29 15:48:51 +02:00 |
|
Jose M
|
70f534693e
|
Fix syntax error on filebeat.yml.j2
|
2020-06-26 13:10:38 +02:00 |
|
Jose M
|
4b8f519256
|
Make filebeat.yml use node name instaed of inventory_hostname
|
2020-06-26 13:04:26 +02:00 |
|
Jose M
|
c72ac56b39
|
Make certs import for Filebeat use 'filebeat_node_name' var
|
2020-06-26 12:51:29 +02:00 |
|
Jose M
|
2adca9533e
|
Import root-ca.pem for Kibana and configure it in kibana.yml
|
2020-06-26 12:49:40 +02:00 |
|
Jose M
|
799827aa88
|
Fix syntax error in local_certs_path
|
2020-06-26 11:26:47 +02:00 |
|
Jose M
|
19bf669183
|
Fix syntax error in Kibana.yml template
|
2020-06-26 11:20:38 +02:00 |
|
Jose M
|
eab58033b7
|
Change local_certs_path for Kibana and Filebeat
|
2020-06-26 11:14:02 +02:00 |
|
Jose M
|
89178df8e9
|
Make Opendistro Kibana flexible version
|
2020-06-26 11:11:33 +02:00 |
|
Jose M
|
539f1930df
|
Make certs import task for Kibana use kibana_node_name
|
2020-06-26 10:53:36 +02:00 |
|
Jose M
|
4050cef2be
|
Check if certs already exists and skip the generation
|
2020-06-25 17:23:44 +02:00 |
|
Jose M
|
6427c5b4cc
|
Change local_certs_path to : ./opendistro/certificates
|
2020-06-25 17:17:02 +02:00 |
|
Jose M
|
2403031b6a
|
Add status code 201 to create user task
|
2020-06-25 13:34:21 +02:00 |
|
Jose M
|
77c75476f4
|
Fix body format in Create custom user task for OD
|
2020-06-25 13:16:53 +02:00 |
|
Jose M
|
65b0dc8ad5
|
Fix sintax on OD custom user creation task
|
2020-06-25 13:03:04 +02:00 |
|
Jose M
|
87f5eb61b9
|
Add tasks compatibility with private and public addresses
|
2020-06-25 12:53:57 +02:00 |
|
Jose M
|
9e9fd386f0
|
Update hashing tasks
|
2020-06-25 12:37:39 +02:00 |
|
Jose M
|
3c723a94ef
|
Update conditional in Wait for Elasticsaarch API (Opendistro)
|
2020-06-25 12:13:35 +02:00 |
|
Jose M
|
3c40f81939
|
Add task to check API using private IP
|
2020-06-25 12:10:49 +02:00 |
|
Jose M
|
282e3959eb
|
Fix h parameter in securityadmin.sh execution task
|
2020-06-25 11:54:12 +02:00 |
|
Jose M
|
9bedd8ad95
|
Add task to create a custom user
|
2020-06-25 11:39:02 +02:00 |
|
Jose M
|
d1a08c1a3f
|
Change ip to inventory_hostname in Wait for ES API task
|
2020-06-25 11:38:54 +02:00 |
|
Jose M
|
383d9beec1
|
Reorganize ES Opendistro vars
|
2020-06-25 11:38:32 +02:00 |
|
Jose M
|
2ec2cd39fa
|
Disable bootstrap memmory lock
|
2020-06-24 18:40:01 +02:00 |
|
Jose M
|
ccbc8f5213
|
Fix sintax on security_actions.yml
|
2020-06-24 17:48:20 +02:00 |
|
Jose M
|
d4895f41c4
|
Make security_actions.yml work with different node names
|
2020-06-24 17:39:42 +02:00 |
|
Jose M
|
f4942e58da
|
Add elasticsearch_lower_disk_requirements var
|
2020-06-24 17:03:26 +02:00 |
|
Jose M
|
0c9d77790e
|
Add elasticsearch_ne_ingest var to defaults
|
2020-06-24 16:58:15 +02:00 |
|
Jose M
|
f47d4b446f
|
Add elasticsearch_node_data variable
|
2020-06-24 16:52:16 +02:00 |
|
Jose M
|
abd9514f14
|
Fix Opendistro elasticsearch.yml syntax error
|
2020-06-24 16:41:14 +02:00 |
|
Jose M
|
ab601a52f3
|
Format fixes
|
2020-06-24 16:38:20 +02:00 |
|
Jose M
|
f355044a51
|
Update openjdk install task for Amazon Linux hosts
|
2020-06-24 16:38:08 +02:00 |
|
Jose M
|
10f3d22464
|
Install amazon-linux-extras before OpenJDK on Amazon Linux hosts
|
2020-06-24 16:17:07 +02:00 |
|
Jose M
|
9aa083ff2e
|
Update opendistro_kibana.yml.j2 template
|
2020-06-24 15:48:10 +02:00 |
|
Jose M
|
4c0d16c304
|
Change variables in Opendistro Elasticsearch configuration file
|
2020-06-24 11:22:00 +02:00 |
|
Jose M
|
acc248f5d0
|
Change tlsconfig.yml.j2 to render the template using the instances var
|
2020-06-24 10:01:15 +02:00 |
|
Jose M
|
7642d7feb5
|
Make local_certs_path relative to playbook path
|
2020-06-24 10:00:52 +02:00 |
|
Zenidd
|
d82d1b51d1
|
Adding variable to parametrize elastic template URL
|
2020-06-23 17:19:37 +02:00 |
|
Zenidd
|
600dd40896
|
Adding dynamic template fetch to filebeat-oss
|
2020-06-23 17:03:33 +02:00 |
|
Zenidd
|
eb276a1f73
|
Handlers refactor
|
2020-06-23 17:01:32 +02:00 |
|
Zenidd
|
d907793953
|
Bump to version v3.13.0_7.7.1
|
2020-06-23 16:51:53 +02:00 |
|
Manuel J. Bernal
|
f5af77811d
|
Merge pull request #423 from wazuh/feature-422-fix-filebeat-module-var
Test #422 fix filebeat module
|
2020-06-19 19:00:51 +02:00 |
|
Manuel J. Bernal
|
575ddae995
|
Merge branch 'devel' into feature-422-fix-filebeat-module-var
|
2020-06-19 16:28:38 +02:00 |
|
Manuel J. Bernal
|
2212adb5bf
|
Merge branch 'devel' into wazuh-agent-fixes
|
2020-06-19 16:25:09 +02:00 |
|
Manuel J. Bernal
|
37dfb5fe12
|
Resolving conflicts
|
2020-06-19 12:49:59 +02:00 |
|
Manuel J. Bernal
|
6c630f27d5
|
Resolved conflicts
|
2020-06-19 12:46:09 +02:00 |
|
Manuel J. Bernal
|
cac89f1137
|
Merge pull request #433 from pescobar/add_elastic_option_path.repo
Add support to configure path.repo option in ES. Required for backups/snapshots
|
2020-06-18 18:21:33 +02:00 |
|
Manuel J. Bernal
|
356f232411
|
Merge pull request #424 from wazuh/feature-kibana-opendistro
OpenDistro: Kibana + Filebeat-oss
|
2020-06-18 18:04:49 +02:00 |
|
Jani Heikkine
|
7a7def1626
|
add support to configure path.repo option required for backups/snapshots
|
2020-06-18 17:14:06 +02:00 |
|
Manuel Gutierrez
|
9246d7d694
|
Merge pull request #429 from wazuh/PR425
Merge PR425
|
2020-06-18 11:46:13 +02:00 |
|
Manuel Gutierrez
|
517fc31932
|
Merge branch 'master' into devel
|
2020-06-17 11:03:06 +02:00 |
|
Manuel Gutierrez
|
76f2442cbe
|
Always prevent become for local tasks
|
2020-06-16 17:33:48 +02:00 |
|
Manuel Gutierrez
|
a3ef437df4
|
Use relative path by default for certs
|
2020-06-16 17:33:36 +02:00 |
|
Manuel Gutierrez
|
0b456a25f0
|
Remove flag to allow exec on deleted cert
|
2020-06-12 17:38:17 +02:00 |
|
Manuel Gutierrez
|
68cfc2fb10
|
Remove extra include_tasks
|
2020-06-12 17:37:02 +02:00 |
|
Manuel Gutierrez
|
bbbc656985
|
Make cert generation idempotent
|
2020-06-12 17:36:18 +02:00 |
|
Manuel Gutierrez
|
be21ad434e
|
Disable multitenancy until 3.13 fix
|
2020-06-12 13:20:23 +02:00 |
|
Manuel Gutierrez
|
473decb3fd
|
Use elasticsearch_network_host
|
2020-06-11 19:02:40 +02:00 |
|
Manuel Gutierrez
|
1a5f74eec0
|
Use group es_cluster
|
2020-06-10 19:01:33 +02:00 |
|
Manuel Gutierrez
|
1062cddf06
|
Use variable kibana_opendistro_security
|
2020-06-10 19:01:09 +02:00 |
|
Manuel J. Bernal
|
79d58c3917
|
Added support for Filebeat-oss and several improvements
|
2020-06-04 21:17:33 +02:00 |
|
Zenidd
|
668eaacf96
|
Replacing root owner with ossec for local decoders/rules
|
2020-05-29 12:25:18 +02:00 |
|
Manuel J. Bernal
|
f21a7e9c1c
|
- Refactoring security local actions
- Added Filebeat OSS repositories
|
2020-05-26 21:06:16 +02:00 |
|
Manuel J. Bernal
|
44ca014cc1
|
Trim spaces
|
2020-05-26 16:10:41 +02:00 |
|
Pablo Escobar
|
3d94c5d159
|
remove unneded option changed_when
|
2020-05-23 13:46:49 +02:00 |
|
Pablo Escobar
|
5d211c3b41
|
apply kibana certs permissions in a single task
|
2020-05-23 13:22:00 +02:00 |
|
Pablo Escobar
|
d9f7e79b7d
|
always use 0770 for the certs folder
|
2020-05-23 13:20:19 +02:00 |
|
Pablo Escobar
|
c11cdfcf05
|
only execute kibana optimization during initial installation
|
2020-05-23 01:40:26 +02:00 |
|
Pablo Escobar
|
57c2a9bb76
|
fix permissions for kibana
|
2020-05-23 01:23:25 +02:00 |
|
Pablo Escobar
|
18d69f8b67
|
fix for kibana
|
2020-05-23 00:48:38 +02:00 |
|
Pablo Escobar
|
be973340ad
|
allow elasticsearch to readh the ca file
|
2020-05-23 00:18:10 +02:00 |
|
Pablo Escobar
|
f43b885dc8
|
fix permission override and broken idempotence
|
2020-05-22 19:28:05 +02:00 |
|
Manuel J. Bernal
|
930125cc86
|
WIP: First Kibana working approach
|
2020-05-21 22:32:36 +02:00 |
|
Manuel J. Bernal
|
fdc3b0f55c
|
Lint changes
|
2020-05-14 18:13:53 +02:00 |
|
Manuel J. Bernal
|
253f05b323
|
Merge pull request #422 from pescobar/filebeat_role_fix_var_override
fix override of var "filebeat_module_folder"
|
2020-05-14 17:12:52 +02:00 |
|
Pablo Escobar
|
6073873837
|
apply permissions 0755
|
2020-05-13 15:53:43 +02:00 |
|
Pablo Escobar
|
e7bcd54a91
|
remove leftover debug line
|
2020-05-13 14:32:09 +02:00 |
|
Pablo Escobar
|
3d74c3a3c3
|
fix override of var filebeat_module_folder
|
2020-05-13 13:44:40 +02:00 |
|
Manuel J. Bernal
|
8b278f316b
|
Merge branch 'feature-126-delegate-registration' into 126-agent-registration
|
2020-05-12 21:47:29 +02:00 |
|
Jose M. Garcia
|
aa4f6a01c9
|
Merge pull request #417 from wazuh/feature-opendistro
Open Distro for Elasticsearch deployment
|
2020-05-11 17:34:03 +02:00 |
|
Manuel J. Bernal
|
eb9925a901
|
Fixed variables and renamed files
|
2020-05-11 15:18:11 +02:00 |
|
Manuel J. Bernal
|
9742c4984c
|
Changed task description
|
2020-05-11 13:56:03 +02:00 |
|
Manuel J. Bernal
|
cf14f400ba
|
Linting and improving variables
|
2020-05-08 20:44:30 +02:00 |
|
Jose M
|
459ac46310
|
Fix API from sources installation conditional
|
2020-05-08 20:05:28 +02:00 |
|
Manuel J. Bernal
|
a2fe75775e
|
Added new variables
|
2020-05-08 18:43:01 +02:00 |
|
Manuel J. Bernal
|
9152d07ac1
|
When statement at block level
|
2020-05-08 15:56:00 +02:00 |
|
Manuel J. Bernal
|
8fd6849275
|
Tasks in YAML format
|
2020-05-08 15:55:13 +02:00 |
|
Manuel J. Bernal
|
d7be137e6e
|
Ansible linting compliant variables
|
2020-05-08 15:54:23 +02:00 |
|
Manuel J. Bernal
|
3c6e08c7cf
|
Modified task, from shell to command module
|
2020-05-08 14:43:30 +02:00 |
|
Manuel J. Bernal
|
e83c6f8d86
|
Refactor of production ready actions
|
2020-05-07 20:03:39 +02:00 |
|
Manuel J. Bernal
|
0c04b22b0f
|
Checking API status
|
2020-05-07 19:12:43 +02:00 |
|
Manuel J. Bernal
|
77c30c3bf0
|
Added Kibana admin password
|
2020-05-07 14:50:01 +02:00 |
|
Manuel J. Bernal
|
5fd4988a88
|
Fixed typo
|
2020-05-07 14:40:58 +02:00 |
|
Manuel J. Bernal
|
e899b1c602
|
WIP: Testing first secured cluster deployment
|
2020-05-06 17:33:53 +02:00 |
|
Jose M
|
100ea616ed
|
Remove alert_new_files from ossec.conf template
|
2020-05-01 20:08:50 +02:00 |
|
Jose M
|
12090632a7
|
Delete "alert_new_files" occurrences
|
2020-04-30 17:01:24 +02:00 |
|
Jose M
|
e354359e38
|
Update Agent Windows MD5
|
2020-04-30 12:25:55 +02:00 |
|
Jose M
|
883ef93af7
|
Bump version to 3.12.3_7.6.2
|
2020-04-30 12:22:59 +02:00 |
|
Manuel J. Bernal
|
7269b15041
|
Modified several variables
|
2020-04-29 18:01:11 +02:00 |
|
Manuel J. Bernal
|
34920f5fe5
|
Added task to check if root ca already exist
|
2020-04-29 17:27:34 +02:00 |
|
Manuel J. Bernal
|
7e47b561e0
|
Added internal_users template
|
2020-04-29 16:51:49 +02:00 |
|
Manuel J. Bernal
|
ae160cf6c3
|
Decoupled local actions and updated SearchGuard certificate generator binary
|
2020-04-29 15:54:29 +02:00 |
|
Manuel J. Bernal
|
53ad5c62cc
|
Fixed unzip task and added templates
|
2020-04-27 15:26:13 +02:00 |
|
Manuel J. Bernal
|
a543fc7ed1
|
Added condition disabled in AWS S3 block
|
2020-04-27 14:31:06 +02:00 |
|
Manuel J. Bernal
|
d1242dbea9
|
Merge pull request #276 from limitup/3.10.2_7.3.2
Update Manager templates for integrations
|
2020-04-27 14:20:28 +02:00 |
|
Manuel J. Bernal
|
d0c4bac3ab
|
Merge pull request #412 from wazuh/bugfix-411-kibana-optimize
Update Kibana optimize task parameters and command
|
2020-04-27 14:07:24 +02:00 |
|
Manuel J. Bernal
|
b91ea1c6aa
|
Fixed register install
|
2020-04-27 14:00:49 +02:00 |
|
Manuel J. Bernal
|
7bed850905
|
Changes tasks
|
2020-04-24 18:07:37 +02:00 |
|
Jose M
|
c6354e2ddc
|
Update Kibana optimize task parameters and command
|
2020-04-20 16:36:04 +02:00 |
|
Manuel J. Bernal
|
903e5d53d1
|
Merge pull request #402 from wazuh/feature-345-oracle2openjdk
Replacing Oracle Java with OpenJDK 1.8
|
2020-04-15 13:38:59 +02:00 |
|
Jose M
|
a69d632468
|
Merge branch 'devel'
|
2020-04-14 19:44:08 +02:00 |
|
Jose M
|
ddde86e0a9
|
Add changed_when:False and update permissions on Wazuh Plugin
|
2020-04-14 16:02:34 +02:00 |
|