Commit Graph

753 Commits

Author SHA1 Message Date
Manuel Gutierrez
1a5f74eec0
Use group es_cluster 2020-06-10 19:01:33 +02:00
Manuel Gutierrez
1062cddf06
Use variable kibana_opendistro_security 2020-06-10 19:01:09 +02:00
Manuel J. Bernal
79d58c3917 Added support for Filebeat-oss and several improvements 2020-06-04 21:17:33 +02:00
Zenidd
668eaacf96 Replacing root owner with ossec for local decoders/rules 2020-05-29 12:25:18 +02:00
Manuel J. Bernal
f21a7e9c1c - Refactoring security local actions
- Added Filebeat OSS repositories
2020-05-26 21:06:16 +02:00
Manuel J. Bernal
44ca014cc1 Trim spaces 2020-05-26 16:10:41 +02:00
Pablo Escobar
3d94c5d159 remove unneded option changed_when 2020-05-23 13:46:49 +02:00
Pablo Escobar
5d211c3b41 apply kibana certs permissions in a single task 2020-05-23 13:22:00 +02:00
Pablo Escobar
d9f7e79b7d always use 0770 for the certs folder 2020-05-23 13:20:19 +02:00
Pablo Escobar
c11cdfcf05 only execute kibana optimization during initial installation 2020-05-23 01:40:26 +02:00
Pablo Escobar
57c2a9bb76 fix permissions for kibana 2020-05-23 01:23:25 +02:00
Pablo Escobar
18d69f8b67 fix for kibana 2020-05-23 00:48:38 +02:00
Pablo Escobar
be973340ad allow elasticsearch to readh the ca file 2020-05-23 00:18:10 +02:00
Pablo Escobar
f43b885dc8 fix permission override and broken idempotence 2020-05-22 19:28:05 +02:00
Manuel J. Bernal
930125cc86 WIP: First Kibana working approach 2020-05-21 22:32:36 +02:00
Manuel J. Bernal
fdc3b0f55c Lint changes 2020-05-14 18:13:53 +02:00
Manuel J. Bernal
253f05b323
Merge pull request #422 from pescobar/filebeat_role_fix_var_override
fix override of var "filebeat_module_folder"
2020-05-14 17:12:52 +02:00
Pablo Escobar
6073873837 apply permissions 0755 2020-05-13 15:53:43 +02:00
Pablo Escobar
e7bcd54a91 remove leftover debug line 2020-05-13 14:32:09 +02:00
Pablo Escobar
3d74c3a3c3 fix override of var filebeat_module_folder 2020-05-13 13:44:40 +02:00
Manuel J. Bernal
8b278f316b
Merge branch 'feature-126-delegate-registration' into 126-agent-registration 2020-05-12 21:47:29 +02:00
Jose M. Garcia
aa4f6a01c9
Merge pull request #417 from wazuh/feature-opendistro
Open Distro for Elasticsearch deployment
2020-05-11 17:34:03 +02:00
Manuel J. Bernal
eb9925a901 Fixed variables and renamed files 2020-05-11 15:18:11 +02:00
Manuel J. Bernal
9742c4984c Changed task description 2020-05-11 13:56:03 +02:00
Manuel J. Bernal
cf14f400ba Linting and improving variables 2020-05-08 20:44:30 +02:00
Jose M
459ac46310
Fix API from sources installation conditional 2020-05-08 20:05:28 +02:00
Manuel J. Bernal
a2fe75775e Added new variables 2020-05-08 18:43:01 +02:00
Manuel J. Bernal
9152d07ac1 When statement at block level 2020-05-08 15:56:00 +02:00
Manuel J. Bernal
8fd6849275 Tasks in YAML format 2020-05-08 15:55:13 +02:00
Manuel J. Bernal
d7be137e6e Ansible linting compliant variables 2020-05-08 15:54:23 +02:00
Manuel J. Bernal
3c6e08c7cf Modified task, from shell to command module 2020-05-08 14:43:30 +02:00
Manuel J. Bernal
e83c6f8d86 Refactor of production ready actions 2020-05-07 20:03:39 +02:00
Manuel J. Bernal
0c04b22b0f Checking API status 2020-05-07 19:12:43 +02:00
Manuel J. Bernal
77c30c3bf0 Added Kibana admin password 2020-05-07 14:50:01 +02:00
Manuel J. Bernal
5fd4988a88 Fixed typo 2020-05-07 14:40:58 +02:00
Manuel J. Bernal
e899b1c602 WIP: Testing first secured cluster deployment 2020-05-06 17:33:53 +02:00
Jose M
100ea616ed
Remove alert_new_files from ossec.conf template 2020-05-01 20:08:50 +02:00
Jose M
12090632a7
Delete "alert_new_files" occurrences 2020-04-30 17:01:24 +02:00
Jose M
e354359e38
Update Agent Windows MD5 2020-04-30 12:25:55 +02:00
Jose M
883ef93af7
Bump version to 3.12.3_7.6.2 2020-04-30 12:22:59 +02:00
Manuel J. Bernal
7269b15041 Modified several variables 2020-04-29 18:01:11 +02:00
Manuel J. Bernal
34920f5fe5 Added task to check if root ca already exist 2020-04-29 17:27:34 +02:00
Manuel J. Bernal
7e47b561e0 Added internal_users template 2020-04-29 16:51:49 +02:00
Manuel J. Bernal
ae160cf6c3 Decoupled local actions and updated SearchGuard certificate generator binary 2020-04-29 15:54:29 +02:00
Manuel J. Bernal
53ad5c62cc Fixed unzip task and added templates 2020-04-27 15:26:13 +02:00
Manuel J. Bernal
a543fc7ed1 Added condition disabled in AWS S3 block 2020-04-27 14:31:06 +02:00
Manuel J. Bernal
d1242dbea9
Merge pull request #276 from limitup/3.10.2_7.3.2
Update Manager templates for integrations
2020-04-27 14:20:28 +02:00
Manuel J. Bernal
d0c4bac3ab
Merge pull request #412 from wazuh/bugfix-411-kibana-optimize
Update Kibana optimize task parameters and command
2020-04-27 14:07:24 +02:00
Manuel J. Bernal
b91ea1c6aa Fixed register install 2020-04-27 14:00:49 +02:00
Manuel J. Bernal
7bed850905 Changes tasks 2020-04-24 18:07:37 +02:00
Jose M
c6354e2ddc
Update Kibana optimize task parameters and command 2020-04-20 16:36:04 +02:00
Manuel J. Bernal
903e5d53d1
Merge pull request #402 from wazuh/feature-345-oracle2openjdk
Replacing Oracle Java with OpenJDK 1.8
2020-04-15 13:38:59 +02:00
Jose M
a69d632468
Merge branch 'devel' 2020-04-14 19:44:08 +02:00
Jose M
ddde86e0a9
Add changed_when:False and update permissions on Wazuh Plugin 2020-04-14 16:02:34 +02:00
Jose M
d50f89b233
Update Kibana optimize fodler permissions and onwer 2020-04-14 13:58:13 +02:00
Zenidd
a8d24ff3f8 Removing precise from default vuln-detector config 2020-04-13 13:46:11 +02:00
Zenidd
0c328081e7 Bump version to 3.12.2-7.6.2 2020-04-13 10:35:12 +02:00
Christos Pollalis
ae40cb4582 Split "Copy CA, SSL key and cert for authd" task
of the wazuh-agent playbook to allow one to perform either manager
or agent verification, or both.
2020-04-11 18:26:13 +03:00
Christos Pollalis
f6e020631e Make agent registration via the rest API idempotent
Check whether an error was returned by the HTTP POST to the `agents/`
endpoint before invoking `/var/ossec/bin/manage_agents` in order to
register a new agent.

It seems like that if an agent has already been registered under the
given name, the HTTP POST will return an error that'll cause the next
task, which is meant to retrieve the agent information, to be skipped.
That'll cause the agent registration task to fail in return. Instead,
this change will cause the aforementioned task to be skipped, too. So,
if an agent has already been successfully registered and the playbook
is re-run, it'll run all the way to the end.

If anything goes wrong (during the registration process) and the agent
fails to start, the `restart wazuh-agent` handler will still fail.
2020-04-11 02:15:42 +03:00
Manuel J. Bernal
b57623b916 Bump MD5 hash 2020-04-08 19:59:52 +02:00
Manuel J. Bernal
6b3f04f32c Bump version 2020-04-08 19:56:44 +02:00
Manuel J. Bernal
9fc2b1e3c4 Added opendistro tasks and templates 2020-04-08 17:38:44 +02:00
Zenidd
6e12764ff5 Setting optimize --max-old-space-size default value to 2048mb 2020-04-08 14:06:53 +02:00
Manuel J. Bernal
dbeb8b31fb First OpenDistro default installation 2020-04-07 18:54:12 +02:00
Zenidd
584950532f Replacing Oracle Java with OpenJDK 1.8 2020-04-07 11:41:00 +02:00
Zenidd
2d8029d6bf Removing python-cryptography module 2020-04-07 10:20:33 +02:00
Zenidd
488508815b Removing owner:group and permissions masks to be idempotence compliant 2020-04-06 15:39:33 +02:00
Manuel J. Bernal
605ec63caf Removed duplicated block 2020-04-02 15:03:08 +02:00
Jose M. Garcia
05955a89d6
Merge branch 'devel' into feature-387-kibana-app-changes 2020-03-26 14:52:28 +01:00
Manuel Gutierrez
9cdce6e988 Fix permissions 2020-03-26 14:43:47 +01:00
Zenidd
02d945bed4 Empty custom agent packages url 2020-03-25 18:07:29 +01:00
Zenidd
1d6988768f Minor jinja template fixes 2020-03-25 16:23:46 +01:00
Zenidd
6b57e195b8 jinja template fixes 2020-03-25 15:50:47 +01:00
Zenidd
0019c7fdf2 Updating manager configuration templates and vars 2020-03-25 15:50:47 +01:00
Manuel Gutierrez
cd5a006331 Update path for wazuh.yml 2020-03-25 11:35:44 +01:00
Manuel Gutierrez
14307bd22a Merge branch 'wazuh-release-v3.12.0_7.6.1' of github.com:wazuh/wazuh-ansible into wazuh-release-v3.12.0_7.6.1 2020-03-24 20:27:31 +01:00
Manuel Gutierrez
c872140f28 Update path for wazuh.yml 2020-03-24 20:25:38 +01:00
Manuel Gutierrez
bee5986b03 Bump branch when building from sources 2020-03-24 20:24:59 +01:00
Manuel J. Bernal
0936d47786
Merge branch 'master' into wazuh-release-v3.12.0_7.6.1 2020-03-24 19:20:51 +01:00
Manuel J. Bernal
2cdc6fd731 Updated elasticsearch template 2020-03-24 18:31:13 +01:00
Zenidd
dfc7bbf4b3 Updates to adapt ossec.conf templates to Wazuh v3.12 default ones 2020-03-24 18:21:46 +01:00
Manuel Gutierrez
14e2a6bb47 Bump versions to 3.12.0_7.6.1 2020-03-24 16:46:01 +01:00
Rshad Zhran
e27d0d3310 Remove agent groups redundant list 2020-03-23 20:32:12 +01:00
Rshad Zhran
fd4515ab16 Merge branch 'devel' into feature-359-agent-auth-groups 2020-03-23 19:38:02 +01:00
Manuel J. Bernal
d9b6930663
Update roles/wazuh/ansible-wazuh-manager/defaults/main.yml 2020-03-23 18:24:27 +01:00
Rshad Zhran
aba02c801a Merge branch 'devel' into feature-359-agent-auth-groups 2020-03-23 16:21:37 +01:00
Zenidd
ec481c790a Fixing lint warnings 2020-03-23 15:37:52 +01:00
manuasir
f0bf926c8d Merge branch 'devel' into fix-390-xml 2020-03-23 15:18:25 +01:00
Manuel J. Bernal
d75f75b76b Fixes #390 . Removed bad formed XML comments. 2020-03-23 14:01:57 +01:00
Zenidd
b67a5e5e97 Adding new registration_adress ansible var 2020-03-23 12:47:58 +01:00
Rshad Zhran
805695766c Merge branch 'devel' into feature-359-agent-auth-groups 2020-03-20 22:04:54 +01:00
Rshad Zhran
c63756d541 Fix list check if it's empty 2020-03-20 21:35:18 +01:00
Zenidd
4b9fb53549 Removing readall perms in certs files. Minor syntax normalizations 2020-03-17 18:21:33 +01:00
Zenidd
33fceff612 Normalization to octal for permissions asignations 2020-03-17 16:40:39 +01:00
Zenidd
c6a3dda23a Restricting already existing cert permissions and setting missing ones 2020-03-17 15:50:22 +01:00
Zenidd
eff4b38bed Restricting too open xpack and kibana permissions 2020-03-17 12:17:49 +01:00
Zenidd
3ba86f7cd8 minor fix 2020-03-13 14:15:50 +01:00
Zenidd
824395a258 Updating with the Kibana optimization fixes 2020-03-13 14:04:55 +01:00
Zenidd
f4b70ab1c6 removing kibana script extra node options 2020-03-13 12:27:18 +01:00
Zenidd
84b5510e30 Removing whitespaces surrounding node_options var 2020-03-13 12:11:07 +01:00