Commit Graph

459 Commits

Author SHA1 Message Date
singuliere
0440e5dce9
randomly generated passwords must obey some constraints
The password constraints of security.py require at least one digit,
one lower case, one upper case and one special character.

https://github.com/wazuh/wazuh/blob/master/framework/wazuh/security.py#L22

Fixes: https://github.com/wazuh/wazuh-ansible/issues/518
2020-12-11 13:26:20 +01:00
neonmei
ea12701d6b
release: bump Wazuh version across roles to 4.0.3 2020-11-30 12:58:32 -03:00
neonmei
333816831a
release: bump Wazuh version to 4.0.2 2020-11-23 17:17:04 -03:00
zenidd
dac3ddc1fb wazuh-ansible: bump versions, update README 2020-11-13 10:57:20 +01:00
neonmei
87e9c8fc23
roles/wazuh-manager: add missing mode and ownership to file module 2020-11-12 11:26:57 -03:00
zenidd
0afaba51fc Fix repository removal task condition 2020-11-10 13:05:05 +01:00
neonmei
0f6ea26123
roles/wazuh_manager: merge uninstall tasks in a single file 2020-11-09 14:04:55 -03:00
neonmei
d44532482a
roles/wazuh_manager: remove nodejs as wazuh-api was migrated to python
For more information, see: https://github.com/wazuh/wazuh/releases/tag/v4.0.0
2020-11-09 13:58:23 -03:00
neonmei
a1f4a16fd9
roles/wazuh_manager: add support for role-distributed ansible.cfg setting for hash_behaviour 2020-11-09 13:03:54 -03:00
neonmei
3b5d8651a6
roles/wazuh_manager: reduce depth of wazuh_manager_config by extracting contents into external dictionaries 2020-11-09 11:42:01 -03:00
manuasir
e8ad26a3ca Removed deprecated option 2020-11-03 19:18:10 +01:00
Manuel Gutierrez
a77be1f959
Add custom API user support 2020-10-27 15:02:27 +01:00
Manuel Gutierrez
912d669281
Use standard module format 2020-10-27 15:01:28 +01:00
Manuel Gutierrez
f4b6fa098f
Specify API password requirements on defaults 2020-10-27 15:00:53 +01:00
zenidd
2f33aa20c5 New major version fixes 2020-10-23 13:21:32 +02:00
zenidd
cab1f1d520 update wazuh repos 2020-10-23 12:36:07 +02:00
zenidd
8e784694bb Restoring defaulf configuration 2020-10-20 17:52:38 +02:00
zenidd
583f38f19c Merge master changes 2020-10-20 17:44:26 +02:00
zenidd
5ad76a1e36 Bump versions 2020-10-20 17:40:28 +02:00
Manuel J. Bernal
575fcc966a Remove vuls integration 2020-10-07 16:59:46 +02:00
manuasir
cb615b1bcf Merge branch '3.13' 2020-09-21 18:46:01 +02:00
zenidd
707aad76ad Bump to Wazuh version v3.13.2 2020-09-18 15:06:21 +02:00
Manuel J. Bernal
33d4aaedf1 Fixed unreadable token 2020-09-01 23:10:42 +02:00
Manuel J. Bernal
54443102f7 WIP: auto-enrollment implementation 2020-09-01 22:55:53 +02:00
Manuel J. Bernal
b117407c16 Fix unreadable token 2020-09-01 17:23:49 +02:00
zenidd
1bc990769b Merge branch 'feature-adapt-major-version' of github.com:wazuh/wazuh-ansible into feature-adapt-major-version 2020-09-01 17:02:14 +02:00
zenidd
4f68e701f0 Regen the install from sources fil 2020-09-01 17:01:28 +02:00
manuasir
27e913619c Merge remote-tracking branch 'origin/feature-github-actions' into feature-adapt-major-version 2020-09-01 15:36:40 +02:00
zenidd
f2e7a75b09 Using latest SearchGuard tool. Fixing Wazuh API credentials template 2020-08-26 14:05:38 +02:00
zenidd
af88cc4de8 Allow redhat sources install 2020-08-26 13:04:03 +02:00
zenidd
62ecf0325a Enabling sources install 2020-08-26 13:00:19 +02:00
zenidd
1f32a2663b remove tasks 2020-08-26 12:53:11 +02:00
zenidd
2deb53272a Adaptation to Wazuh 4.0 and fixes 2020-08-25 16:02:06 +02:00
zenidd
255d262b62 removing unnecessary old api files 2020-08-24 16:15:02 +02:00
zenidd
1117de8d5f Create new API config template file 2020-08-21 16:17:07 +02:00
Manuel J. Bernal
45a14c128c WIP: Adapting to v4.0 2020-08-12 19:45:46 +02:00
manuasir
ca88611678 Changed manager installation task in Debian family 2020-07-28 16:49:04 +02:00
Manuel J. Bernal
3b87adf8a3
Merge pull request #194 from dsroark-dt/async_ignore_check_mode
ignore check mode for async tasks
2020-07-21 19:06:05 +02:00
Manuel J. Bernal
970b03a9f2 Bump version 2020-07-14 12:53:55 +02:00
Zenidd
d907793953 Bump to version v3.13.0_7.7.1 2020-06-23 16:51:53 +02:00
Manuel J. Bernal
356f232411
Merge pull request #424 from wazuh/feature-kibana-opendistro
OpenDistro: Kibana + Filebeat-oss
2020-06-18 18:04:49 +02:00
Manuel J. Bernal
79d58c3917 Added support for Filebeat-oss and several improvements 2020-06-04 21:17:33 +02:00
Zenidd
668eaacf96 Replacing root owner with ossec for local decoders/rules 2020-05-29 12:25:18 +02:00
Jose M
459ac46310
Fix API from sources installation conditional 2020-05-08 20:05:28 +02:00
Jose M
100ea616ed
Remove alert_new_files from ossec.conf template 2020-05-01 20:08:50 +02:00
Jose M
12090632a7
Delete "alert_new_files" occurrences 2020-04-30 17:01:24 +02:00
Jose M
883ef93af7
Bump version to 3.12.3_7.6.2 2020-04-30 12:22:59 +02:00
Manuel J. Bernal
a543fc7ed1 Added condition disabled in AWS S3 block 2020-04-27 14:31:06 +02:00
Manuel J. Bernal
d1242dbea9
Merge pull request #276 from limitup/3.10.2_7.3.2
Update Manager templates for integrations
2020-04-27 14:20:28 +02:00
Zenidd
a8d24ff3f8 Removing precise from default vuln-detector config 2020-04-13 13:46:11 +02:00
Zenidd
0c328081e7 Bump version to 3.12.2-7.6.2 2020-04-13 10:35:12 +02:00
Manuel J. Bernal
6b3f04f32c Bump version 2020-04-08 19:56:44 +02:00
Zenidd
2d8029d6bf Removing python-cryptography module 2020-04-07 10:20:33 +02:00
Jose M. Garcia
67305df536
Merge branch 'devel' into async_ignore_check_mode 2020-03-31 12:37:53 +02:00
Zenidd
1d6988768f Minor jinja template fixes 2020-03-25 16:23:46 +01:00
Zenidd
6b57e195b8 jinja template fixes 2020-03-25 15:50:47 +01:00
Zenidd
0019c7fdf2 Updating manager configuration templates and vars 2020-03-25 15:50:47 +01:00
Manuel Gutierrez
14e2a6bb47 Bump versions to 3.12.0_7.6.1 2020-03-24 16:46:01 +01:00
Rshad Zhran
e27d0d3310 Remove agent groups redundant list 2020-03-23 20:32:12 +01:00
Rshad Zhran
fd4515ab16 Merge branch 'devel' into feature-359-agent-auth-groups 2020-03-23 19:38:02 +01:00
Manuel J. Bernal
d9b6930663
Update roles/wazuh/ansible-wazuh-manager/defaults/main.yml 2020-03-23 18:24:27 +01:00
Manuel J. Bernal
d75f75b76b Fixes #390 . Removed bad formed XML comments. 2020-03-23 14:01:57 +01:00
Rshad Zhran
805695766c Merge branch 'devel' into feature-359-agent-auth-groups 2020-03-20 22:04:54 +01:00
Zenidd
33fceff612 Normalization to octal for permissions asignations 2020-03-17 16:40:39 +01:00
Jose M
3fe48ea7fd
Remove conditioinal from task that checks NodeJS 2020-03-09 09:45:23 +01:00
Manuel J. Bernal
3f0e032580 Bump version 2020-03-05 16:44:02 +01:00
Jose M
4982b2868d
Fix conditionals error related with AL2 custom packages installation 2020-03-03 13:14:13 +01:00
Jose M. Garcia
1fb14f66d4
Merge branch 'devel' into feature-376-support-centos8 2020-03-03 11:53:46 +01:00
Jose M. Garcia
fac88b8fc7
Merge pull request #371 from wazuh/feature-370-avoid-install-api
Avoid to install Wazuh API in worker nodes
2020-03-02 23:06:27 +01:00
Jose M
cf20e52938
Fix typo in .rpm package installation task using dnf 2020-03-02 23:02:58 +01:00
Jose M
03e35ada29
Adapt Manager installation from custom packages to support RHEL/Centos 8 2020-03-02 22:43:26 +01:00
manuasir
079273eb35 Fix linting 2020-02-26 17:26:01 +01:00
Rshad Zhran
543eff6342 Fix conditions in tasks: Replace variables 2020-02-26 17:06:48 +01:00
manuasir
abd4f57106 Avoid to install Wazuh API in worker nodes, fixes #370 2020-02-26 16:11:44 +01:00
Jose M
ca8b8684cf
Disable shared config by default. Update occurrences 2020-02-21 16:31:45 +01:00
Jose M
9dddd2b26e
Restore Wazuh installation to default configuration 2020-02-19 19:19:16 +01:00
Jose M
807a816cf2
Set Wazuh version to 3.12.0 for testing purposes 2020-02-19 18:12:44 +01:00
Jose M
bf6f72039c
Update conditionals in Managers tasks to filter installation from packages 2020-02-19 17:47:49 +01:00
Jose M
7fb76b42e6
Create required tasks to download and install .rpm and .deb packages 2020-02-19 17:47:13 +01:00
Jose M
9bc6d550be
Create required variables for Wazuh Manager installation from packages 2020-02-19 17:46:41 +01:00
Jose M
1366a74569
Remove API credentials as variable files and move to defaults 2020-02-14 17:13:42 +01:00
Rshad Zhran
4adc19a02f Ignore idempotence test for agent groups creation 2020-02-12 14:16:38 +01:00
Rshad Zhran
76215bf6ed Replace shell by command 2020-02-11 17:55:51 +01:00
Rshad Zhran
e11c44e72e Set group list to empty 2020-02-11 16:14:50 +01:00
Zenidd
01fb6b1d36 Sanatizing the Manager and API active status verification task 2020-02-11 14:51:10 +01:00
Rshad Zhran
8d8ed17ce9 Add task to create agent groups 2020-02-11 14:50:06 +01:00
Rshad Zhran
13e283687c Define agent_groups group list 2020-02-11 14:49:53 +01:00
Manuel J. Bernal
8cc279a053
Merge pull request #283 from sgargel/patch-1
Fix for Wazuh-API User skipped on debian
2020-02-11 14:45:10 +01:00
Manuel J. Bernal
c19b08d449
Merge pull request #348 from joschneid/master
some adjustments for systems without (direct) internet connection
2020-02-10 13:34:56 +01:00
Manuel Gutierrez
7a8d2a7f9d Upgrade to NodeJS v10 2020-02-04 11:59:19 +01:00
Jose M
b39e6debac
Bump version to 3.11.3_7.5.2 2020-01-28 12:17:53 +01:00
Jochen Schneider
5479fc5550 corrected repo key id parameter 2020-01-23 14:30:55 +01:00
Jose M
d79a14de05 Bump version to 3.11.2_7.5.1 2020-01-22 13:30:53 +01:00
Jochen Schneider
50964bd0f8 better naming for parameter kid 2020-01-21 11:57:33 +01:00
joschneider
6361eacbf0 repo gpg key id as a paramater 2020-01-21 10:56:59 +01:00
Jochen Schneider
d328609f29 repo param not needed any longer 2020-01-16 13:06:40 +01:00
Jochen Schneider
c3cc763a5e added key ID for download only when required 2020-01-16 11:58:05 +01:00
Jochen Schneider
6c4740a401 Merge remote-tracking branch 'upstream/master' 2020-01-16 11:13:23 +01:00
Jose M
e9c05e8b19 Merge branch 'master' into devel 2020-01-13 11:55:57 +01:00
Rshad Zhran
8ba493ed24 Change config. tags order 2020-01-10 13:35:41 +01:00
Rshad Zhran
50a093d071 Change default email_to 2020-01-10 13:35:11 +01:00
Rshad Zhran
cb2ded0e49 Define cdb_lists in wzuh-manger default variables 2020-01-10 11:16:15 +01:00
Rshad Zhran
144067763b Remove cdb related tasks and config 2020-01-09 19:15:14 +01:00
Rshad Zhran
a35c7bceb1 Fix rootkit files & trojans paths for manager 2020-01-09 18:05:41 +01:00
Manuel Gutierrez
99f5403d50 Update templates for Python 3 compatibility 2020-01-09 11:10:41 +01:00
Manuel Gutierrez
78a08db91c Merge branch 'devel' into wazuh-release-v3.11.1_7.5.1 2020-01-08 17:20:56 +01:00
Jose M
16495e9b91 Restore Wazuh version 3.11.0_7.5.1 2020-01-08 17:16:38 +01:00
Rshad Zhran
bfc39c1572 Merge branch 'devel' into feature-332-default-installation 2020-01-07 17:59:46 +01:00
Manuel Gutierrez
812fb81b81 Bump to version 3.11.1_7.5.1 2020-01-07 17:08:56 +01:00
Rshad Zhran
d3f73a5e58 Set source installation mode to false 2020-01-07 14:03:44 +01:00
Rshad Zhran
e5643b33cc Bump version - Wazuh = 3.11.1_7.5.1 2020-01-07 13:57:47 +01:00
Manuel Gutierrez
6eebfa4f2c Fix openscap block rendering for CentOS 8 2019-12-30 17:37:07 +01:00
Jose M
879c2782b0 Bump version to 3.11.0_7.5.1 2019-12-26 11:58:01 +01:00
Rshad Zhran
efc5ad1b07 Remove empty lines from template 2019-12-19 13:28:18 +01:00
Rshad Zhran
fe1fc854a4 Quote vulnerabilit-detector providers names 2019-12-19 11:17:09 +01:00
Rshad Zhran
39e514d515 Fix vulnerability-detector variables structure 2019-12-19 11:02:27 +01:00
Rshad Zhran
9a42faebdf Rename and Reorder <vulnerability_detector> vars. 2019-12-18 17:48:58 +01:00
Rshad Zhran
d64d26d5a5 Fix variable name in <vulnerability_detector> 2019-12-18 17:48:09 +01:00
Rshad Zhran
760057583c Bump version to wazuh 3.11.0 2019-12-17 14:15:16 +01:00
Rshad Zhran
ce013d1dde Adapt ossec.conf template and variables to v3.11 - manager 2019-12-16 21:57:10 +01:00
Rshad Zhran
2ddd8b9e72 Add conditional check for syscheck.auto_ignore 2019-12-16 21:55:54 +01:00
Jose M
f6e4468fd8 Change default installation mode to packages. 2019-12-10 10:12:32 +01:00
Jose M. Garcia
1983ec250b
Merge branch 'devel' into feature-324-support-sources-installation 2019-11-29 10:51:33 +01:00
Jose M
e45aaf6a8e Improving description for installation tasks in "RedHat.yml" 2019-11-29 10:04:09 +01:00
Jose M
eed1a11aeb Testing sources/sources installation for Manager and API respectively 2019-11-28 10:13:08 +01:00
Jose M
77145e71b8 Disable Kibana from sources and test sources/package after changes 2019-11-27 18:00:34 +01:00
Jose M
aaa68bd5bb Testing installation from packages 2019-11-27 11:27:26 +01:00
Jose M
ae5a3d6f91 Fix conditional for RHEL hosts 2019-11-27 10:04:21 +01:00
Jose M
dbf436be04 Testing installation from packages 2019-11-26 18:56:06 +01:00
Jose M
4ba0a85bf1 Fix includes for wazuh-manager role 2019-11-26 18:49:10 +01:00
Jose M
ad8ae0ed65 Testing package/sources for Manager and API respectively 2019-11-26 17:53:24 +01:00
Jose M
c772d5c983 Fix Nodejs in Kibana and rename 'repo_dic' to 'repo_dict' 2019-11-26 15:00:22 +01:00
Jose M
a25b7d9681 Fix conditionals related with Manager and API kind of installatioin 2019-11-26 14:55:57 +01:00
Jose M
94ed23c607 Testing Agent from packages. Testing sources/package for manager and api 2019-11-26 13:22:42 +01:00
Jose M
e4fdb984d6 Fix Linting 2019-11-26 11:38:54 +01:00
Jose M
c17424b463 Limit the npm installation to Debian hosts only 2019-11-26 11:28:22 +01:00
Jose M
85db46bbd8 Set installation type to sources 2019-11-26 10:50:03 +01:00
Jose M
0e196abb51 Add npm as dependency required for Debian 10 2019-11-26 10:35:34 +01:00
Jose M
37a59e212e Testing, Manager: package, API: package 2019-11-26 01:14:51 +01:00
Jose M
dc0811e669 Testing Manager: sources, API packages 2019-11-26 01:13:09 +01:00
Jose M
fd50b60485 Fix linting 2019-11-25 19:01:02 +01:00
Jose M
fa0e3f1640 Fix cleanup tasks for Wazuh Manager and Agent 2019-11-25 18:54:21 +01:00
Jose M
c9c00b82c2 Add Nodejs installation 2019-11-25 18:44:09 +01:00
Jose M
9c2ce76f09 Fix linting 2019-11-25 18:44:00 +01:00
Jose M
f57840b2e7 Merge #330 from wazuh/ansible 2019-11-25 18:11:27 +01:00
Jose M
dc0aa448d0 Implement blocks to cleanup old files 2019-11-25 18:11:09 +01:00
Rshad Zhran
e003a2d51e Parameterize NodeJS repo. url 2019-11-25 17:39:03 +01:00
Jose M
d91ac23d8c Update Nodejs repo variables to make it flexible for deb and rpm 2019-11-25 15:42:23 +01:00
Jose M
5fd46ab9e4 Remove conditional from wazuh-api restart handler 2019-11-25 15:42:09 +01:00
Jose M
df56764dbd Add dpeendencies to Wazuh API. Update nodejs repo installation 2019-11-25 15:41:47 +01:00
Jose M
8d667131d9 Fix conditional for ssl_agent_ca 2019-11-25 15:41:06 +01:00
Jose M
bc4f36582a Remove unused tags from sources installation "include_tasks" 2019-11-25 15:40:48 +01:00
Rshad Zhran
565a84c49f Define variables in default/main.yml 2019-11-22 13:38:11 +01:00
Rshad Zhran
5fd5ddc61f Englobe tasks with same when statement in block 2019-11-22 13:16:28 +01:00
Rshad Zhran
376628a914 Define variable in default.yml instead of playbook 2019-11-22 13:14:48 +01:00
Rshad Zhran
c32d992f89 Re-order tasks 2019-11-22 11:39:08 +01:00
Rshad Zhran
902ee2a3d1 Add a task to check if nodejs already exists 2019-11-22 11:18:09 +01:00
Jose M
6ba58b6838 Add variables for Wazuh Api installation from sources 2019-11-21 18:46:11 +01:00
Jose M
9e6966b699 Fix conditionals for Debian families. Split Manager and API install 2019-11-21 18:45:45 +01:00
Jose M
380d4d1430 Update installation_from_sources conditionals and blocks 2019-11-21 18:45:25 +01:00
Jose M
628dcb2ccc Update conditonals and add required tasks to RedHat.yml 2019-11-21 18:45:01 +01:00
Jose M
7bf823bcad Split preloaded_vars into preloaded_vars_manager and api 2019-11-21 18:44:34 +01:00
Rshad Zhran
d85d210a3e Centralize NodeJS installation tasks 2019-11-21 16:12:08 +01:00
Jose M
13b2321540 Rename wazuh_sources_installation to wazuh_manager sources_installation 2019-11-21 15:01:15 +01:00
Rshad Zhran
686c02b3d5 Add task to check if node service already exists 2019-11-21 14:48:54 +01:00
Rshad Zhran
e2cee2e45d fix conditional statement when 2019-11-21 14:00:08 +01:00
Jose M
3acdd20dff Change Wazuh API build task to log info to "/tmp/build_wazuh_api_log." 2019-11-21 13:30:43 +01:00
Rshad Zhran
3c70bc5b2a Update NodJS installation tasks 2019-11-21 13:13:36 +01:00
Jose M
c64d331e7f Fix include_tasks for "installation_from_sources.yml" 2019-11-20 19:16:44 +01:00
Jose M
9d62860ea1 Update "installation_from_sources" to fix linting errors 2019-11-20 19:06:48 +01:00
Jose M
571abfbb2c Update untar task to pass linting, added comment 2019-11-20 19:00:53 +01:00
Jose M
2c9b18de72 Update ("user_update" and "branch") variables. 2019-11-20 16:36:56 +01:00
Rshad Zhran
4dd780504b Adapt NodeJS installation tasks in Debian 2019-11-20 16:33:14 +01:00
Jose M
d9cb1a24dd Implement "node_js_repository_url" variable 2019-11-20 15:02:18 +01:00
Jose M
9b6fd47e3a Add conditional to don't install Node repo when installing from sources 2019-11-20 15:00:50 +01:00
Jose M
219b35c2ef Add API installation tasks to installation_from_sources.yml 2019-11-20 14:58:44 +01:00
Jose M
a90b241fb0 Remove deprecated API installation tasks 2019-11-19 12:19:32 +01:00
Jose M
9e4544ae42 Add template to configure "preloaded_vars" in Wazuh Manager role 2019-11-19 12:12:36 +01:00
Jose M
cc9f28719c Fix linting 2019-11-19 12:12:11 +01:00
Jose M
d3d0edc291 Add tasks to install from sources to Wazuh Manager 2019-11-19 12:12:03 +01:00
Jose M
95ee10d7a7 Add import of "installation_from_sources" for Debian and RHEL families 2019-11-19 12:10:32 +01:00
Jose M
cbc5de68ac Set "delete_dir" and "enable_active_response" to null in manager default 2019-11-19 12:09:56 +01:00
Jose M
c1b331be79 Update Wazuh Manager default vars related to sources installation 2019-11-18 16:04:13 +01:00
Jose M
46b4d34695 Update conditionals to use new variables 2019-11-15 16:41:28 +01:00
Jose M
df016d53c6 Add variables for wazuh installation from sources 2019-11-15 16:39:12 +01:00
Manuel Gutierrez
249f6b666d Use include_tasks to reduce unnecessary output 2019-11-11 15:55:16 +01:00
Manuel Gutierrez
c1141b1e73 Remove deprecation warning 2019-11-11 15:32:15 +01:00
Manuel Gutierrez
ee6daa79d7 Disable APT recommends 2019-11-11 15:08:50 +01:00
Manuel Gutierrez
7316af3db1 Move OS dependent tasks to its own file 2019-11-11 15:02:09 +01:00
Manuel Gutierrez
75c6ee2ea9 Update apt param format 2019-11-11 14:51:18 +01:00
Manuel J. Bernal
fe727b2db7
Merge pull request #316 from wazuh/feature-fix-api_user-task
Fix Wazuh-API User task conditionals. Removed exclusion of OS's
2019-11-11 13:08:17 +01:00
Jose M
63c5fcce08 Fix Wazuh-API User task conditionals. Removed exclusion of OS's 2019-11-11 11:32:44 +01:00
Jose M. Garcia
fbba2a1373
Merge pull request #313 from wazuh/feature-312-upgrade-apt-repo
Upgrade APT Wazuh repo
2019-11-07 09:59:33 +01:00
Jose M
154e10912a Include apt repository name in debian task. Remove explicit "deb" 2019-11-06 17:38:24 +01:00
Jose M
ee7cf1a598 Change default repo.apt variable of Managers and Agents to include "deb" 2019-11-06 17:37:40 +01:00
Jose M
cc18318590 Fix trailing whitespaces for linting 2019-11-06 15:07:56 +01:00
Jose M
d64b107fbb Update tasks related to manager installation. Remove -1, update state 2019-11-06 14:16:36 +01:00
Jose M
1c2d6d41ec Update default variables for manager version and package state 2019-11-06 14:16:14 +01:00
Jose M
f36d8be92e Fixing repo_v5 | skipped ocurrences. Updating to new format 2019-11-05 10:35:59 +01:00
limitup
0252131041 Recommended changes 2019-10-31 08:33:34 -05:00