From 6525691769388553a330469898312d26e4c3fb1b Mon Sep 17 00:00:00 2001 From: Jesus Garcia Date: Mon, 14 Apr 2025 08:25:59 -0500 Subject: [PATCH 1/6] Modify Filebeat installation task for arm64 (aarch64) architecture to add revision '-1' --- CHANGELOG.md | 2 +- roles/wazuh/ansible-filebeat-oss/tasks/main.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 7862dc47..3e990e33 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,7 +15,7 @@ All notable changes to this project will be documented in this file. ### Fixed -- None +- Update the Filebeat installation for arm64 to include revision ([#x](https://github.com/wazuh/wazuh-ansible/pull/x)) ### Deleted diff --git a/roles/wazuh/ansible-filebeat-oss/tasks/main.yml b/roles/wazuh/ansible-filebeat-oss/tasks/main.yml index d4255a68..3d2eff48 100644 --- a/roles/wazuh/ansible-filebeat-oss/tasks/main.yml +++ b/roles/wazuh/ansible-filebeat-oss/tasks/main.yml @@ -15,7 +15,7 @@ - name: Install Filebeat | Redhat yum: - name: "filebeat-{{ filebeat_version }}" + name: "filebeat-{{ filebeat_version }}-1" state: present lock_timeout: 200 register: install @@ -26,7 +26,7 @@ - name: Install Filebeat | Debian apt: - name: "filebeat={{ filebeat_version }}" + name: "filebeat={{ filebeat_version }}-1" state: present register: install tags: From da6d2c34a0ec82783f8fd11b146aa679a38ee2ad Mon Sep 17 00:00:00 2001 From: Jesus Garcia Date: Mon, 14 Apr 2025 10:06:12 -0500 Subject: [PATCH 2/6] Use 'wazuh_repo' variable instead of 'filebeatrepo' --- CHANGELOG.md | 2 +- roles/wazuh/ansible-filebeat-oss/defaults/main.yml | 7 ------- roles/wazuh/ansible-filebeat-oss/tasks/Debian.yml | 12 ++++++------ roles/wazuh/ansible-filebeat-oss/tasks/RMDebian.yml | 2 +- roles/wazuh/ansible-filebeat-oss/tasks/RedHat.yml | 4 ++-- roles/wazuh/ansible-filebeat-oss/tasks/main.yml | 7 +++++-- 6 files changed, 15 insertions(+), 19 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 3e990e33..bbe06a84 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,7 +15,7 @@ All notable changes to this project will be documented in this file. ### Fixed -- Update the Filebeat installation for arm64 to include revision ([#x](https://github.com/wazuh/wazuh-ansible/pull/x)) +- Update the Filebeat installation for arm64 to include revision ([#1616](https://github.com/wazuh/wazuh-ansible/pull/1616)) ### Deleted diff --git a/roles/wazuh/ansible-filebeat-oss/defaults/main.yml b/roles/wazuh/ansible-filebeat-oss/defaults/main.yml index 499ab5d0..b9d8ac8c 100644 --- a/roles/wazuh/ansible-filebeat-oss/defaults/main.yml +++ b/roles/wazuh/ansible-filebeat-oss/defaults/main.yml @@ -20,10 +20,3 @@ filebeat_ssl_dir: /etc/pki/filebeat # Local path to store the generated certificates (Opensearch security plugin) local_certs_path: "{{ playbook_dir }}/indexer/certificates" - -filebeatrepo: - keyring_path: '/usr/share/keyrings/wazuh.gpg' - apt: "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main" - yum: 'https://packages.wazuh.com/4.x/yum/' - gpg: 'https://packages.wazuh.com/key/GPG-KEY-WAZUH' - path: '/tmp/WAZUH-GPG-KEY' \ No newline at end of file diff --git a/roles/wazuh/ansible-filebeat-oss/tasks/Debian.yml b/roles/wazuh/ansible-filebeat-oss/tasks/Debian.yml index 7107b057..60c89710 100644 --- a/roles/wazuh/ansible-filebeat-oss/tasks/Debian.yml +++ b/roles/wazuh/ansible-filebeat-oss/tasks/Debian.yml @@ -11,22 +11,22 @@ - name: Debian/Ubuntu | Download Filebeat apt key. get_url: - url: "{{ filebeatrepo.gpg }}" - dest: "{{ filebeatrepo.path }}" + url: "{{ wazuh_repo.gpg }}" + dest: "{{ wazuh_repo.path }}" - name: Import Filebeat GPG key - command: "gpg --no-default-keyring --keyring gnupg-ring:{{ filebeatrepo.keyring_path }} --import {{ filebeatrepo.path }}" + command: "gpg --no-default-keyring --keyring gnupg-ring:{{ wazuh_repo.keyring_path }} --import {{ wazuh_repo.path }}" args: - creates: "{{ filebeatrepo.keyring_path }}" + creates: "{{ wazuh_repo.keyring_path }}" - name: Set permissions for Filebeat GPG key file: - path: "{{ filebeatrepo.keyring_path }}" + path: "{{ wazuh_repo.keyring_path }}" mode: '0644' - name: Debian/Ubuntu | Add Filebeat-oss repository. apt_repository: - repo: "{{ filebeatrepo.apt }}" + repo: "{{ wazuh_repo.apt }}" state: present update_cache: true changed_when: false diff --git a/roles/wazuh/ansible-filebeat-oss/tasks/RMDebian.yml b/roles/wazuh/ansible-filebeat-oss/tasks/RMDebian.yml index a51e3f73..bc573eac 100644 --- a/roles/wazuh/ansible-filebeat-oss/tasks/RMDebian.yml +++ b/roles/wazuh/ansible-filebeat-oss/tasks/RMDebian.yml @@ -1,6 +1,6 @@ --- - name: Debian/Ubuntu | Remove Filebeat repository (and clean up left-over metadata) apt_repository: - repo: "{{ filebeatrepo.apt }}" + repo: "{{ wazuh_repo.apt }}" state: absent changed_when: false diff --git a/roles/wazuh/ansible-filebeat-oss/tasks/RedHat.yml b/roles/wazuh/ansible-filebeat-oss/tasks/RedHat.yml index bdf4519b..9d1a0d12 100644 --- a/roles/wazuh/ansible-filebeat-oss/tasks/RedHat.yml +++ b/roles/wazuh/ansible-filebeat-oss/tasks/RedHat.yml @@ -3,7 +3,7 @@ yum_repository: name: wazuh_repo description: Wazuh Repo - baseurl: "{{ filebeatrepo.yum }}" - gpgkey: "{{ filebeatrepo.gpg }}" + baseurl: "{{ wazuh_repo.yum }}" + gpgkey: "{{ wazuh_repo.gpg }}" gpgcheck: true changed_when: false diff --git a/roles/wazuh/ansible-filebeat-oss/tasks/main.yml b/roles/wazuh/ansible-filebeat-oss/tasks/main.yml index 3d2eff48..cb1f87a6 100644 --- a/roles/wazuh/ansible-filebeat-oss/tasks/main.yml +++ b/roles/wazuh/ansible-filebeat-oss/tasks/main.yml @@ -7,6 +7,9 @@ - include_vars: ../../vars/repo_pre-release.yml when: packages_repository == 'pre-release' +- include_vars: ../../vars/repo_staging.yml + when: packages_repository == 'staging' + - include_tasks: RedHat.yml when: ansible_os_family == 'RedHat' @@ -15,7 +18,7 @@ - name: Install Filebeat | Redhat yum: - name: "filebeat-{{ filebeat_version }}-1" + name: "filebeat-{{ filebeat_version }}" state: present lock_timeout: 200 register: install @@ -26,7 +29,7 @@ - name: Install Filebeat | Debian apt: - name: "filebeat={{ filebeat_version }}-1" + name: "filebeat={{ filebeat_version }}-*" state: present register: install tags: From c67e3f15d0d87f924d92dcadf70936b984f58519 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Gonzalo=20Acu=C3=B1a?= Date: Wed, 16 Apr 2025 09:16:22 -0300 Subject: [PATCH 3/6] Bump 4.12.0 to beta1 --- VERSION.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION.json b/VERSION.json index 6d01df04..5c1d3515 100644 --- a/VERSION.json +++ b/VERSION.json @@ -1,4 +1,4 @@ { "version": "4.12.0", - "stage": "alpha1" + "stage": "beta1" } From 2b91bf0e500a6d0920743fda4bc310d4a1798f7a Mon Sep 17 00:00:00 2001 From: Jesus Garcia Date: Fri, 25 Apr 2025 10:43:19 -0500 Subject: [PATCH 4/6] Add gnupg dependency --- CHANGELOG.md | 1 + .../ansible-filebeat-oss/tasks/Debian.yml | 3 ++- roles/wazuh/wazuh-dashboard/tasks/Debian.yml | 8 ++++++- roles/wazuh/wazuh-indexer/tasks/Debian.yml | 22 +++++++++---------- 4 files changed, 21 insertions(+), 13 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index bbe06a84..3a00ba11 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -16,6 +16,7 @@ All notable changes to this project will be documented in this file. ### Fixed - Update the Filebeat installation for arm64 to include revision ([#1616](https://github.com/wazuh/wazuh-ansible/pull/1616)) +- Add gnupg dependency to indexer, filebeat-oss, and dashboard roles ([#1623](https://github.com/wazuh/wazuh-ansible/pull/1623)) ### Deleted diff --git a/roles/wazuh/ansible-filebeat-oss/tasks/Debian.yml b/roles/wazuh/ansible-filebeat-oss/tasks/Debian.yml index 60c89710..135f1e07 100644 --- a/roles/wazuh/ansible-filebeat-oss/tasks/Debian.yml +++ b/roles/wazuh/ansible-filebeat-oss/tasks/Debian.yml @@ -1,10 +1,11 @@ --- -- name: Debian/Ubuntu | Install apt-transport-https, ca-certificates and acl +- name: Debian/Ubuntu | Install apt-transport-https, ca-certificate, acl and gnupg apt: name: - apt-transport-https - ca-certificates - acl + - gnupg state: present register: filebeat_ca_packages_install until: filebeat_ca_packages_install is succeeded diff --git a/roles/wazuh/wazuh-dashboard/tasks/Debian.yml b/roles/wazuh/wazuh-dashboard/tasks/Debian.yml index 3f1f0c9d..2a09ac3d 100644 --- a/roles/wazuh/wazuh-dashboard/tasks/Debian.yml +++ b/roles/wazuh/wazuh-dashboard/tasks/Debian.yml @@ -6,7 +6,13 @@ get_url: url: "{{ wazuh_repo.gpg }}" dest: "{{ wazuh_repo.path }}" - + + - name: Debian/Ubuntu | Install gnupg + apt: + name: + - gnupg + state: present + - name: Import Wazuh repository GPG key command: "gpg --no-default-keyring --keyring gnupg-ring:{{ wazuh_repo.keyring_path }} --import {{ wazuh_repo.path }}" args: diff --git a/roles/wazuh/wazuh-indexer/tasks/Debian.yml b/roles/wazuh/wazuh-indexer/tasks/Debian.yml index a0c7329f..7c1d83b2 100644 --- a/roles/wazuh/wazuh-indexer/tasks/Debian.yml +++ b/roles/wazuh/wazuh-indexer/tasks/Debian.yml @@ -5,16 +5,16 @@ apt: update_cache: yes -- name: Debian 9 (Stretch) - when: (ansible_facts['distribution'] == "Debian" and ansible_facts['distribution_major_version'] == "9") - block: - - - name: Install Wazuh indexer dependencies - apt: - name: [ - 'unzip', 'wget', 'curl', 'apt-transport-https', software-properties-common - ] - state: present +- name: Install Wazuh indexer dependencies + apt: + name: + - unzip + - wget + - curl + - apt-transport-https + - software-properties-common + - gnupg + state: present - name: Add Wazuh indexer repository block: @@ -22,7 +22,7 @@ get_url: url: "{{ wazuh_repo.gpg }}" dest: "{{ wazuh_repo.path }}" - + - name: Import Wazuh repository GPG key command: "gpg --no-default-keyring --keyring gnupg-ring:{{ wazuh_repo.keyring_path }} --import {{ wazuh_repo.path }}" args: From a521189a05cc26ad60651ea72eb4e10860b7e8ed Mon Sep 17 00:00:00 2001 From: Enrique Araque Date: Wed, 30 Apr 2025 11:11:44 +0200 Subject: [PATCH 5/6] Bump revision for 4.12.0-rc1 and fix changelog --- CHANGELOG.md | 4 ++-- VERSION.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 3a00ba11..f4641ec7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,13 +10,13 @@ All notable changes to this project will be documented in this file. ### Changed - Standardize version file format ([#1553](https://github.com/wazuh/wazuh-ansible/pull/1553)) -- Use fixed version of Ubuntu-22.04 in GHA runners instead of latest version ([#1479](https://github.com/wazuh/wazuh-ansible/pull/1479)) \- (PR Checks Workflows) - Implement minor changes for Wazuh ansible arm64 support ([#1518](https://github.com/wazuh/wazuh-ansible/pull/1518)) +- Use fixed version of Ubuntu-22.04 in GHA runners instead of latest version ([#1479](https://github.com/wazuh/wazuh-ansible/pull/1479)) \- (PR Checks Workflows) ### Fixed -- Update the Filebeat installation for arm64 to include revision ([#1616](https://github.com/wazuh/wazuh-ansible/pull/1616)) - Add gnupg dependency to indexer, filebeat-oss, and dashboard roles ([#1623](https://github.com/wazuh/wazuh-ansible/pull/1623)) +- Update the Filebeat installation for arm64 to include revision ([#1616](https://github.com/wazuh/wazuh-ansible/pull/1616)) ### Deleted diff --git a/VERSION.json b/VERSION.json index 5c1d3515..29e4047b 100644 --- a/VERSION.json +++ b/VERSION.json @@ -1,4 +1,4 @@ { "version": "4.12.0", - "stage": "beta1" + "stage": "rc1" } From 464e31ec944a2ffb6c24bf568a66f39ea26ca3c6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Gonzalo=20Acu=C3=B1a?= Date: Tue, 6 May 2025 14:27:52 -0300 Subject: [PATCH 6/6] Bump to 4.12.2 --- CHANGELOG.md | 18 ++++++++ README.md | 45 +------------------ VERSION.json | 2 +- .../ansible-filebeat-oss/defaults/main.yml | 2 +- .../ansible-wazuh-agent/defaults/main.yml | 2 +- .../ansible-wazuh-manager/defaults/main.yml | 2 +- roles/wazuh/check-packages/defaults/main.yml | 2 +- roles/wazuh/wazuh-dashboard/defaults/main.yml | 4 +- roles/wazuh/wazuh-dashboard/vars/debian.yml | 2 +- roles/wazuh/wazuh-indexer/defaults/main.yml | 2 +- 10 files changed, 28 insertions(+), 53 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0c2f4f89..5985e894 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,24 @@ # Change Log All notable changes to this project will be documented in this file. +## [4.12.2] + +### Added + +- None + +### Changed + +- None + +### Fixed + +- None + +### Deleted + +- None + ## [4.12.1] ### Added diff --git a/README.md b/README.md index 0ba52696..b9763152 100644 --- a/README.md +++ b/README.md @@ -16,50 +16,7 @@ These playbooks install and configure Wazuh agent, manager and indexer and dashb | Wazuh version | Elastic | ODFE | |---------------|---------|--------| -| v4.12.1 | | | -| v4.12.0 | | | -| v4.11.2 | | | -| v4.11.1 | | | -| v4.11.0 | | | -| v4.10.1 | | | -| v4.10.0 | | | -| v4.9.2 | | | -| v4.9.1 | | | -| v4.9.0 | | | -| v4.8.2 | | | -| v4.8.1 | | | -| v4.8.0 | | | -| v4.7.5 | | | -| v4.7.4 | | | -| v4.7.3 | | | -| v4.7.2 | | | -| v4.7.1 | | | -| v4.7.0 | | | -| v4.6.0 | | | -| v4.5.4 | | | -| v4.5.3 | | | -| v4.5.2 | | | -| v4.5.1 | | | -| v4.5.0 | | | -| v4.4.5 | | | -| v4.4.4 | | | -| v4.4.3 | | | -| v4.4.2 | | | -| v4.4.1 | | | -| v4.4.0 | | | -| v4.3.11 | | | -| v4.3.10 | | | -| v4.4.0 | | | -| v4.3.9 | | | -| v4.3.8 | | | -| v4.3.7 | | | -| v4.3.6 | | | -| v4.3.5 | | | -| v4.3.4 | | | -| v4.3.3 | | | -| v4.3.2 | | | -| v4.3.1 | | | -| v4.3.0 | | | +| v4.3.0+ | | | | v4.2.6 | 7.10.2 | 1.13.2 | | v4.2.5 | 7.10.2 | 1.13.2 | | v4.2.4 | 7.10.2 | 1.13.2 | diff --git a/VERSION.json b/VERSION.json index 116fc47a..73d8ee41 100644 --- a/VERSION.json +++ b/VERSION.json @@ -1,4 +1,4 @@ { - "version": "4.12.1", + "version": "4.12.2", "stage": "alpha0" } diff --git a/roles/wazuh/ansible-filebeat-oss/defaults/main.yml b/roles/wazuh/ansible-filebeat-oss/defaults/main.yml index 1160b3be..ad0341c9 100644 --- a/roles/wazuh/ansible-filebeat-oss/defaults/main.yml +++ b/roles/wazuh/ansible-filebeat-oss/defaults/main.yml @@ -1,7 +1,7 @@ --- filebeat_version: 7.10.2 -wazuh_template_branch: v4.12.1 +wazuh_template_branch: v4.12.2 filebeat_node_name: node-1 diff --git a/roles/wazuh/ansible-wazuh-agent/defaults/main.yml b/roles/wazuh/ansible-wazuh-agent/defaults/main.yml index 31653865..13f47f4d 100644 --- a/roles/wazuh/ansible-wazuh-agent/defaults/main.yml +++ b/roles/wazuh/ansible-wazuh-agent/defaults/main.yml @@ -1,5 +1,5 @@ --- -wazuh_agent_version: 4.12.1 +wazuh_agent_version: 4.12.2 # Custom packages installation diff --git a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml index 49f599dc..512552a7 100644 --- a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml +++ b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml @@ -1,5 +1,5 @@ --- -wazuh_manager_version: 4.12.1 +wazuh_manager_version: 4.12.2 wazuh_manager_fqdn: "wazuh-server" wazuh_manager_package_state: present diff --git a/roles/wazuh/check-packages/defaults/main.yml b/roles/wazuh/check-packages/defaults/main.yml index 55ffc925..e2cc38b6 100644 --- a/roles/wazuh/check-packages/defaults/main.yml +++ b/roles/wazuh/check-packages/defaults/main.yml @@ -1,2 +1,2 @@ --- -wazuh_version: 4.12.1 +wazuh_version: 4.12.2 diff --git a/roles/wazuh/wazuh-dashboard/defaults/main.yml b/roles/wazuh/wazuh-dashboard/defaults/main.yml index f604cd12..29da0422 100644 --- a/roles/wazuh/wazuh-dashboard/defaults/main.yml +++ b/roles/wazuh/wazuh-dashboard/defaults/main.yml @@ -8,12 +8,12 @@ dashboard_node_name: node-1 dashboard_server_host: "0.0.0.0" dashboard_server_port: "443" dashboard_server_name: "dashboard" -wazuh_version: 4.12.1 +wazuh_version: 4.12.2 indexer_cluster_nodes: - 127.0.0.1 # The Wazuh dashboard package repository -dashboard_version: "4.12.1" +dashboard_version: "4.12.2" # API credentials wazuh_api_credentials: diff --git a/roles/wazuh/wazuh-dashboard/vars/debian.yml b/roles/wazuh/wazuh-dashboard/vars/debian.yml index 523af096..ff039924 100644 --- a/roles/wazuh/wazuh-dashboard/vars/debian.yml +++ b/roles/wazuh/wazuh-dashboard/vars/debian.yml @@ -1,2 +1,2 @@ --- -dashboard_version: 4.12.1 +dashboard_version: 4.12.2 diff --git a/roles/wazuh/wazuh-indexer/defaults/main.yml b/roles/wazuh/wazuh-indexer/defaults/main.yml index 522c5cf7..3bdc5ff5 100644 --- a/roles/wazuh/wazuh-indexer/defaults/main.yml +++ b/roles/wazuh/wazuh-indexer/defaults/main.yml @@ -1,6 +1,6 @@ --- # Cluster Settings -indexer_version: 4.12.1 +indexer_version: 4.12.2 single_node: false indexer_node_name: node-1