Commit Graph

980 Commits

Author SHA1 Message Date
neonmei
4d2e493cef
roles/wazuh-agent: fix erroneous usage of ansible_host instead of inventory_hostname 2020-11-26 16:34:25 -03:00
neonmei
333816831a
release: bump Wazuh version to 4.0.2 2020-11-23 17:17:04 -03:00
neonmei
30cc6875d6
Merge branch 'master' into feature-role-agent-registration 2020-11-23 14:42:57 -03:00
zenidd
ec831975bb roles/wazuh-agent: remove default agent_name 2020-11-23 17:44:59 +01:00
neonmei
58167dbd1f
roles/wazuh-agent: add message explaining when auto-enrollment registration path is fired or not 2020-11-23 12:18:56 -03:00
neonmei
f7ed5f1f7f
roles/agent: update ossec.conf template to check against explicit yes instead of length 2020-11-23 11:43:59 -03:00
neonmei
5170c206e0
roles/agent: use auto-enrollment by default 2020-11-23 11:41:45 -03:00
neonmei
35c9df9c7e
roles/agent: add comments on role defaults and group registration related tasks 2020-11-23 11:41:17 -03:00
neonmei
7e445c7f55
roles/agent: add wazuh_agent_api_validate to optionally skip agent registry validation task 2020-11-23 11:39:27 -03:00
neonmei
1df3ef8699
roles/agent: for registration rename check_keys->client_keys_file for more clarity, update conditionals length checks to explicit "yes" check 2020-11-23 11:38:07 -03:00
neonmei
a28837a74d
roles/agent: in rest registration method, update manage_agents task 2020-11-23 11:32:01 -03:00
neonmei
a4c4b6cd32
roles/agent: refresh agent validation in rest registration method 2020-11-23 11:29:34 -03:00
neonmei
d4092bf686
roles/agent: update agent registry task with token, nolog and remove when, as it is checked on every task, shuld be applied to block 2020-11-23 11:28:37 -03:00
neonmei
535add6f4c
roles/agent: add nolog variable for registration tasks with credentials output 2020-11-23 11:26:39 -03:00
neonmei
5f6973d8d2
roles/agent: add task for fetching jwt token 2020-11-23 11:25:31 -03:00
neonmei
332ee7ae8b
roles/agent: add task for determining which wazuh_managers to use through register: yes instead of just grabbing the first one on the list, otherwise fallback to first in the list 2020-11-23 11:24:43 -03:00
zenidd
ee1124b7dd Merge master changes 2020-11-23 14:28:59 +01:00
neonmei
1dfe0fdb67
roles/wazuh-agent: fix duplicate variable 2020-11-20 16:16:54 -03:00
neonmei
874e8a08d0
Merge branch 'feature-role-wazuh-manager-vars' 2020-11-20 14:55:44 -03:00
neonmei
b4d2b564b7
roles/wazuh-agent: update api credentials to wazuh:wazuh 2020-11-20 13:40:17 -03:00
neonmei
7fc29b720f
roles/wazuh-agent: remove async from install task and introduce a lock timeout configurable by wazuh_agent_yum_lock_timeout 2020-11-20 12:37:20 -03:00
neonmei
7dc67986d4
roles/wazuh-agent: change package module to yum, as platform is already checked on when 2020-11-20 12:29:08 -03:00
zenidd
ff78ce7d76 roles/wazuh-agent: Fix authd registration verify task. Use authd pass only if size > 0 2020-11-20 14:08:25 +01:00
zenidd
ed7b24ff96 roles/wazuh-agent: set enrollment to enabled by default 2020-11-20 12:36:50 +01:00
zenidd
0426d956ed Merge master branch 2020-11-16 16:23:17 +01:00
neonmei
b2f9bc9901
roles/elastic-stack: update jvm.options template per upstream elasticsearch updates 2020-11-13 14:01:01 -03:00
zenidd
64cc04f5b0 Merge master changes 2020-11-13 16:55:47 +01:00
Manuel J. Bernal
9b516f1f73
Merge pull request #485 from wazuh/feature-agent-unnest
Feature agent default vars depth reduction
2020-11-13 16:29:24 +01:00
Manuel J. Bernal
19e2578682
Merge pull request #487 from wazuh/feature-lint-remove-unused
Feature lint remove unused variables
2020-11-13 16:28:52 +01:00
neonmei
f902bd5269
roles/wazuh-agent: update comment at role defaults 2020-11-13 12:07:26 -03:00
zenidd
dac3ddc1fb wazuh-ansible: bump versions, update README 2020-11-13 10:57:20 +01:00
neonmei
8b26658374
roles/wazuh-agent: expand task declaration for clarity 2020-11-12 14:39:17 -03:00
neonmei
1dfd613f0d
roles/wazuh-agent: uncomment api_pass 2020-11-12 14:35:23 -03:00
neonmei
0bbdf231f2
roles/wazuh-agent: remove "is defined" conditionals, as authd_pass is now part of roles default, now check is only against length 2020-11-12 14:34:57 -03:00
neonmei
bab8279f73
roles/wazuh-agent: remove include_vars tasks 2020-11-12 14:29:01 -03:00
neonmei
92ebe86ef6
roles/wazuh-agent: move api_pass and authd_pass from role vars to defaults, lowering precedence required to override them 2020-11-12 14:24:14 -03:00
neonmei
88873a1759
roles/opendistro-kibana: add missing noqa for rules 208 and 503 false positive I forgot to push 2020-11-12 13:18:50 -03:00
neonmei
8e827552a7
roles/opendistro-kibana: add missing noqa for rule 503 false positive 2020-11-12 13:16:20 -03:00
neonmei
1e03700188
Merge branch 'feature-lint-roles-etc' 2020-11-12 13:07:45 -03:00
neonmei
f35ffeed76
Merge branch 'feature-lint-role-wazuh-manager' 2020-11-12 13:07:35 -03:00
neonmei
4156a75395
Merge branch 'feature-lint-role-wazuh-agent' 2020-11-12 13:07:25 -03:00
neonmei
b2723f69e3
Merge branch 'feature-lint-role-opendistro' 2020-11-12 13:07:15 -03:00
neonmei
ac796d2fdc
Merge branch 'feature-lint-role-filebeat-oss' 2020-11-12 13:07:04 -03:00
neonmei
a0f32789c4
roles/kibana: add noqa to task, as we only intend to ensure owner/group and keep mode 2020-11-12 12:01:25 -03:00
neonmei
6f5f1106b3
roles/wazuh-agent: add missing mode for file task 2020-11-12 11:42:19 -03:00
neonmei
7634f8cf9b
roles/wazuh-agent: add noqa 208 exception for Windows template task 2020-11-12 11:42:15 -03:00
neonmei
55d3039519
roles/wazuh-agent: change comparison to literal bool 2020-11-12 11:42:11 -03:00
neonmei
8be12f0c5a
roles/filebeat-oss: remove extra file permissions task 2020-11-12 11:33:09 -03:00
neonmei
68b8c6b5a0
roles/filebeat-oss: add missing file mode and ownership for security_actions tasks 2020-11-12 11:32:49 -03:00
neonmei
87e9c8fc23
roles/wazuh-manager: add missing mode and ownership to file module 2020-11-12 11:26:57 -03:00
neonmei
17e4e687a4
roles/elasticsearch: add linting exception to lineinfile module to avoid changing permissions of global /etc/security/limits.conf 2020-11-12 11:21:50 -03:00
neonmei
bc9b5b5849
roles/elasticsearch: add missing mode and ownership to lineinfile module 2020-11-12 11:21:49 -03:00
neonmei
bc27023861
roles/elasticsearch: expand task, add missing mode and ownership to file module 2020-11-12 11:21:49 -03:00
neonmei
84744fe8ab
roles/elasticsearch: add missing mode and ownership to template module at tasks/xpack_security.yml 2020-11-12 11:21:24 -03:00
neonmei
878c55a180
roles/opendistro-elasticsearch: add new variable opendistro_nolog_sensible to role defaults 2020-11-12 11:07:07 -03:00
neonmei
8fdfecc06f
roles/opendistro-elasticsearch: add missing mode for file module 2020-11-12 11:05:47 -03:00
neonmei
c0d48e3ad4
roles/opendistro-elasticsearch: remove use of command module with sed and change it to replace module. Also add a nolog to the tasks guarded by opendistro_nolog_sensible to avoid outputting non-hashed passwords in deploy log 2020-11-12 11:04:32 -03:00
neonmei
15f15170f3
roles/opendistro-elasticsearch: remove nested jinja pattern and move it to a task-local variable for clarity 2020-11-12 11:00:36 -03:00
neonmei
36e235c877
roles/filebeat: remove unused variable filebeat_ssl_dir 2020-11-10 15:53:43 -03:00
neonmei
f5f80aa588
roles/opendistro-elasticsearch: remove unused variable es_nodes 2020-11-10 15:53:21 -03:00
neonmei
e466b3c35e
roles/kibana: remove unused variables node_certs_generator and node_certs_source 2020-11-10 15:52:58 -03:00
neonmei
1511649944
roles/elasticsearch: remove unused variable elasticsearch_xpack_security_user 2020-11-10 15:52:29 -03:00
neonmei
1d93181625
roles/filebeat: remove unused variables node_certs_generator and node_certs_source 2020-11-10 15:25:41 -03:00
neonmei
04e242e207
roles/filebeat-oss: remove unused variables filebeat_security_user and filebeat_security_password 2020-11-10 15:24:52 -03:00
neonmei
200efb981c
roles/opendistro-kibana: remove unused variable elasticsearch_nodes 2020-11-10 15:24:11 -03:00
neonmei
b928bc81fe
roles/opendistro-elasticsearch: remove unused variable elasticrepo 2020-11-10 15:23:39 -03:00
neonmei
eb5e74bb02
roles/filebeat: remove unused variables 2020-11-10 15:06:42 -03:00
neonmei
e90ddb73e6
roles/filebeat-oss: remove unused variables 2020-11-10 15:05:38 -03:00
neonmei
fad82ba7d1
roles/opendistro-kibana: remove unused variables 2020-11-10 15:04:31 -03:00
neonmei
aa04ebad90
roles/opendistro-elasticsearch: remove unused variables 2020-11-10 15:04:21 -03:00
neonmei
80593c464b
Merge branch 'feature-filebeat-oss-package-fix' 2020-11-10 14:41:39 -03:00
zenidd
0866c54e2b roles/filebeat-oss: minor fix 2020-11-10 18:36:26 +01:00
zenidd
ed8bccb3a4 roles/filebeat-oss: use apt/yum module instead of package 2020-11-10 18:30:13 +01:00
zenidd
52a809158a roles/filebeat-oss: allow installing fixed filebeat version 2020-11-10 17:03:12 +01:00
neonmei
2a5da5f78d
roles/agent: add support for overlaying like role-distributed ansible.cfg setting for hash_behaviour 2020-11-10 10:48:12 -03:00
neonmei
53fbc82931
roles/agent: reduce depth of wazuh_agent_config by extracting internal dicts to outside variables 2020-11-10 10:45:43 -03:00
zenidd
0afaba51fc Fix repository removal task condition 2020-11-10 13:05:05 +01:00
neonmei
75f1669ca8
Merge branch 'feature-es-cluster-check-fix' 2020-11-09 15:26:24 -03:00
zenidd
af948dff01 Fix ES API test task until statement. Fix block indentation 2020-11-09 19:08:33 +01:00
Manuel J. Bernal
fe67ea2d51
Merge pull request #482 from wazuh/feature-manager-remove-nodejs
Remove unnecesary nodejs dependency
2020-11-09 18:14:43 +01:00
Manuel J. Bernal
c462ac72bd
Merge pull request #478 from wazuh/feature-opendistro-runonce
Improve handling of run_once at opendistro-elasticsearch role
2020-11-09 18:13:49 +01:00
neonmei
0f6ea26123
roles/wazuh_manager: merge uninstall tasks in a single file 2020-11-09 14:04:55 -03:00
neonmei
d44532482a
roles/wazuh_manager: remove nodejs as wazuh-api was migrated to python
For more information, see: https://github.com/wazuh/wazuh/releases/tag/v4.0.0
2020-11-09 13:58:23 -03:00
zenidd
d23feddede Refactor test conditions 2020-11-09 17:57:12 +01:00
neonmei
a1f4a16fd9
roles/wazuh_manager: add support for role-distributed ansible.cfg setting for hash_behaviour 2020-11-09 13:03:54 -03:00
zenidd
bda7de57ec Elastic API check fix 2020-11-09 16:29:43 +01:00
neonmei
3b5d8651a6
roles/wazuh_manager: reduce depth of wazuh_manager_config by extracting contents into external dictionaries 2020-11-09 11:42:01 -03:00
dc2486b339
roles/opendistro: switch from import_tasks to include_tasks, move block tag and conditional from security_actions.yml to main.yml 2020-11-06 14:21:19 -03:00
manuasir
e8ad26a3ca Removed deprecated option 2020-11-03 19:18:10 +01:00
Manuel Gutierrez
a77be1f959
Add custom API user support 2020-10-27 15:02:27 +01:00
Manuel Gutierrez
912d669281
Use standard module format 2020-10-27 15:01:28 +01:00
Manuel Gutierrez
f4b6fa098f
Specify API password requirements on defaults 2020-10-27 15:00:53 +01:00
Manuel Gutierrez
13cda56e94
Use playbook_dir for relative paths 2020-10-26 19:33:25 +01:00
zenidd
a9f96ff495 Merge branch 'master' into feature-adapt-major-version 2020-10-23 17:30:57 +02:00
Manuel J. Bernal
fec24b4f6d
Merge pull request #467 from wazuh/odfe-1101
Bump ODFE roles to 1.10.1
2020-10-23 17:30:00 +02:00
zenidd
f1dba34f50 Updating default index pattern 2020-10-23 17:09:03 +02:00
zenidd
9cac95729b Set empty authd pass 2020-10-23 14:04:18 +02:00
zenidd
2f33aa20c5 New major version fixes 2020-10-23 13:21:32 +02:00
zenidd
dee32f7b79 update wazuh agent repos 2020-10-23 12:37:32 +02:00
zenidd
cab1f1d520 update wazuh repos 2020-10-23 12:36:07 +02:00