From dbae1c4bf0aeee890873f9b14068d9e562b36833 Mon Sep 17 00:00:00 2001 From: Federico Fantini <122294644+federicofantini@users.noreply.github.com> Date: Sat, 10 Jan 2026 17:51:51 +0100 Subject: [PATCH 01/11] Refine conditions for private IP checks in tasks --- roles/wazuh/wazuh-indexer/tasks/main.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/wazuh/wazuh-indexer/tasks/main.yml b/roles/wazuh/wazuh-indexer/tasks/main.yml index 48034ae6..291f606b 100644 --- a/roles/wazuh/wazuh-indexer/tasks/main.yml +++ b/roles/wazuh/wazuh-indexer/tasks/main.yml @@ -108,7 +108,7 @@ delay: 5 tags: debug when: - - hostvars[inventory_hostname]['private_ip'] is not defined or not hostvars[inventory_hostname]['private_ip'] + - hostvars[inventory_hostname]['private_ip'] is not defined or (hostvars[inventory_hostname]['private_ip'] | string | length) == 0 - name: Wait for Wazuh indexer API (Private IP) uri: @@ -127,7 +127,7 @@ delay: 5 tags: debug when: - - hostvars[inventory_hostname]['private_ip'] is defined and hostvars[inventory_hostname]['private_ip'] + - hostvars[inventory_hostname]['private_ip'] is defined and (hostvars[inventory_hostname]['private_ip'] | string | length) > 0 - import_tasks: "RMRedHat.yml" when: ansible_os_family == "RedHat" From 57a9ce3b9504d7ab7d2165b1c6170fdc2e54b1a8 Mon Sep 17 00:00:00 2001 From: wazuhci <22834044+wazuhci@users.noreply.github.com> Date: Fri, 16 Jan 2026 14:12:08 +0000 Subject: [PATCH 02/11] feat: bump 4.14.4 --- CHANGELOG.md | 18 ++++++++++++++++++ VERSION.json | 2 +- .../ansible-kibana/defaults/main.yml | 2 +- .../ansible-filebeat-oss/defaults/main.yml | 2 +- .../ansible-wazuh-agent/defaults/main.yml | 2 +- .../ansible-wazuh-manager/defaults/main.yml | 2 +- roles/wazuh/check-packages/defaults/main.yml | 2 +- roles/wazuh/wazuh-dashboard/defaults/main.yml | 4 ++-- roles/wazuh/wazuh-dashboard/vars/debian.yml | 2 +- roles/wazuh/wazuh-indexer/defaults/main.yml | 2 +- 10 files changed, 28 insertions(+), 10 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ef566eec..41298808 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,24 @@ # Change Log All notable changes to this project will be documented in this file. +## [4.14.4] + +### Added + +- None + +### Changed + +- None + +### Fixed + +- None + +### Deleted + +- None + ## [4.14.3] ### Added diff --git a/VERSION.json b/VERSION.json index 0c100995..04478604 100644 --- a/VERSION.json +++ b/VERSION.json @@ -1,4 +1,4 @@ { - "version": "4.14.3", + "version": "4.14.4", "stage": "rc1" } diff --git a/roles/elastic-stack/ansible-kibana/defaults/main.yml b/roles/elastic-stack/ansible-kibana/defaults/main.yml index 9036a5de..ead0f6ba 100644 --- a/roles/elastic-stack/ansible-kibana/defaults/main.yml +++ b/roles/elastic-stack/ansible-kibana/defaults/main.yml @@ -7,7 +7,7 @@ kibana_server_host: "0.0.0.0" kibana_server_port: "5601" kibana_conf_path: /etc/kibana elastic_stack_version: 7.10.2 -wazuh_version: 4.14.3 +wazuh_version: 4.14.4 wazuh_app_url: https://packages.wazuh.com/4.x/ui/kibana/wazuh_kibana elasticrepo: diff --git a/roles/wazuh/ansible-filebeat-oss/defaults/main.yml b/roles/wazuh/ansible-filebeat-oss/defaults/main.yml index 4e1a035d..9db7cd96 100644 --- a/roles/wazuh/ansible-filebeat-oss/defaults/main.yml +++ b/roles/wazuh/ansible-filebeat-oss/defaults/main.yml @@ -1,7 +1,7 @@ --- filebeat_version: 7.10.2 -wazuh_template_branch: v4.14.3 +wazuh_template_branch: v4.14.4 filebeat_node_name: node-1 diff --git a/roles/wazuh/ansible-wazuh-agent/defaults/main.yml b/roles/wazuh/ansible-wazuh-agent/defaults/main.yml index 304ba8d3..9868cc27 100644 --- a/roles/wazuh/ansible-wazuh-agent/defaults/main.yml +++ b/roles/wazuh/ansible-wazuh-agent/defaults/main.yml @@ -1,5 +1,5 @@ --- -wazuh_agent_version: 4.14.3 +wazuh_agent_version: 4.14.4 # Custom packages installation diff --git a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml index 5b6a8be0..06d1a67b 100644 --- a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml +++ b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml @@ -1,5 +1,5 @@ --- -wazuh_manager_version: 4.14.3 +wazuh_manager_version: 4.14.4 wazuh_manager_fqdn: "wazuh-server" wazuh_manager_package_state: present diff --git a/roles/wazuh/check-packages/defaults/main.yml b/roles/wazuh/check-packages/defaults/main.yml index 5c780343..57d8f5e3 100644 --- a/roles/wazuh/check-packages/defaults/main.yml +++ b/roles/wazuh/check-packages/defaults/main.yml @@ -1,2 +1,2 @@ --- -wazuh_version: 4.14.3 +wazuh_version: 4.14.4 diff --git a/roles/wazuh/wazuh-dashboard/defaults/main.yml b/roles/wazuh/wazuh-dashboard/defaults/main.yml index 5a50ecae..b4e19f1d 100644 --- a/roles/wazuh/wazuh-dashboard/defaults/main.yml +++ b/roles/wazuh/wazuh-dashboard/defaults/main.yml @@ -8,12 +8,12 @@ dashboard_node_name: node-1 dashboard_server_host: "0.0.0.0" dashboard_server_port: "443" dashboard_server_name: "dashboard" -wazuh_version: 4.14.3 +wazuh_version: 4.14.4 indexer_cluster_nodes: - 127.0.0.1 # The Wazuh dashboard package repository -dashboard_version: "4.14.3" +dashboard_version: "4.14.4" # API credentials wazuh_api_credentials: diff --git a/roles/wazuh/wazuh-dashboard/vars/debian.yml b/roles/wazuh/wazuh-dashboard/vars/debian.yml index a3b66e60..c403caea 100644 --- a/roles/wazuh/wazuh-dashboard/vars/debian.yml +++ b/roles/wazuh/wazuh-dashboard/vars/debian.yml @@ -1,2 +1,2 @@ --- -dashboard_version: 4.14.3 +dashboard_version: 4.14.4 diff --git a/roles/wazuh/wazuh-indexer/defaults/main.yml b/roles/wazuh/wazuh-indexer/defaults/main.yml index 3cfe27de..3752d8c4 100644 --- a/roles/wazuh/wazuh-indexer/defaults/main.yml +++ b/roles/wazuh/wazuh-indexer/defaults/main.yml @@ -1,6 +1,6 @@ --- # Cluster Settings -indexer_version: 4.14.3 +indexer_version: 4.14.4 single_node: false indexer_node_name: node-1 From ea84ae86df44f313f46d7423cfa8fb6366e14ba3 Mon Sep 17 00:00:00 2001 From: Federico Fantini <122294644+federicofantini@users.noreply.github.com> Date: Sat, 17 Jan 2026 11:57:12 +0100 Subject: [PATCH 03/11] Update conditions for custom user creation in YAML --- roles/wazuh/wazuh-indexer/tasks/security_actions.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/roles/wazuh/wazuh-indexer/tasks/security_actions.yml b/roles/wazuh/wazuh-indexer/tasks/security_actions.yml index 6df4de92..28c88c38 100644 --- a/roles/wazuh/wazuh-indexer/tasks/security_actions.yml +++ b/roles/wazuh/wazuh-indexer/tasks/security_actions.yml @@ -114,5 +114,6 @@ register: result until: result.status in [200,201,401] when: - - indexer_custom_user is defined and indexer_custom_user + - indexer_create_custom_user | default(false) | bool + - indexer_custom_user | default('') | trim | length > 0 - inventory_hostname == ansible_play_hosts[0] From e698280eb887524d72535ab7df35af27efc7f3fe Mon Sep 17 00:00:00 2001 From: Jesus Garcia Date: Tue, 20 Jan 2026 09:54:27 -0500 Subject: [PATCH 04/11] Update changelog --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 41298808..90246d6d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,7 +9,7 @@ All notable changes to this project will be documented in this file. ### Changed -- None +- Ensure boolean condition evaluations - from community PR #1897 ([#1911](https://github.com/wazuh/wazuh-ansible/pull/1911)) ### Fixed From 4b002a62abb397b0b27229aa498a5b52e13b5c32 Mon Sep 17 00:00:00 2001 From: Jesus Garcia Date: Wed, 21 Jan 2026 00:21:21 -0500 Subject: [PATCH 05/11] Remove unused parameter indexer_create_custom_user --- roles/wazuh/wazuh-indexer/tasks/security_actions.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/roles/wazuh/wazuh-indexer/tasks/security_actions.yml b/roles/wazuh/wazuh-indexer/tasks/security_actions.yml index 28c88c38..f29a9b16 100644 --- a/roles/wazuh/wazuh-indexer/tasks/security_actions.yml +++ b/roles/wazuh/wazuh-indexer/tasks/security_actions.yml @@ -114,6 +114,5 @@ register: result until: result.status in [200,201,401] when: - - indexer_create_custom_user | default(false) | bool - indexer_custom_user | default('') | trim | length > 0 - inventory_hostname == ansible_play_hosts[0] From efb6d1a4f469c5a98cff9547194e123077b2c43b Mon Sep 17 00:00:00 2001 From: Jesus Garcia Date: Fri, 23 Jan 2026 13:25:16 -0500 Subject: [PATCH 06/11] Ensure boolean condition evaluations --- roles/wazuh/ansible-wazuh-manager/tasks/main.yml | 10 +++++----- roles/wazuh/wazuh-indexer/tasks/main.yml | 6 ++++-- 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/roles/wazuh/ansible-wazuh-manager/tasks/main.yml b/roles/wazuh/ansible-wazuh-manager/tasks/main.yml index 1614ed84..6bbd5b33 100644 --- a/roles/wazuh/ansible-wazuh-manager/tasks/main.yml +++ b/roles/wazuh/ansible-wazuh-manager/tasks/main.yml @@ -10,7 +10,7 @@ - tar state: present register: package_status - until: "package_status is not failed" + until: "package_status is not failed" retries: 10 delay: 10 @@ -20,7 +20,7 @@ state: present when: ansible_distribution != "Amazon" and ansible_distribution_version != "2023" register: package_status - until: "package_status is not failed" + until: "package_status is not failed" retries: 10 delay: 10 @@ -30,7 +30,7 @@ state: present when: ansible_distribution == "Amazon" and ansible_distribution_version == "2023" register: package_status - until: "package_status is not failed" + until: "package_status is not failed" retries: 10 delay: 10 @@ -73,7 +73,7 @@ tags: - init - config - + - name: Install expect package: name: expect @@ -242,7 +242,7 @@ notify: restart wazuh-manager when: - csyslog_enabled.stdout == '0' or "skipped" in csyslog_enabled.stdout - - syslog_output is defined and syslog_output + - syslog_output is defined and (syslog_output | bool) tags: - config diff --git a/roles/wazuh/wazuh-indexer/tasks/main.yml b/roles/wazuh/wazuh-indexer/tasks/main.yml index 291f606b..24a2291f 100644 --- a/roles/wazuh/wazuh-indexer/tasks/main.yml +++ b/roles/wazuh/wazuh-indexer/tasks/main.yml @@ -108,7 +108,8 @@ delay: 5 tags: debug when: - - hostvars[inventory_hostname]['private_ip'] is not defined or (hostvars[inventory_hostname]['private_ip'] | string | length) == 0 + - hostvars[inventory_hostname]['private_ip'] is not defined or + (hostvars[inventory_hostname]['private_ip'] | length) == 0 - name: Wait for Wazuh indexer API (Private IP) uri: @@ -127,7 +128,8 @@ delay: 5 tags: debug when: - - hostvars[inventory_hostname]['private_ip'] is defined and (hostvars[inventory_hostname]['private_ip'] | string | length) > 0 + - hostvars[inventory_hostname]['private_ip'] is defined and + (hostvars[inventory_hostname]['private_ip'] | length) > 0 - import_tasks: "RMRedHat.yml" when: ansible_os_family == "RedHat" From f51f12be75b1bef8ed8d091dccffa48a38a045e1 Mon Sep 17 00:00:00 2001 From: Jesus Garcia Date: Fri, 23 Jan 2026 16:02:42 -0500 Subject: [PATCH 07/11] Update changelog --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 90246d6d..defecdee 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,7 +9,7 @@ All notable changes to this project will be documented in this file. ### Changed -- Ensure boolean condition evaluations - from community PR #1897 ([#1911](https://github.com/wazuh/wazuh-ansible/pull/1911)) +- Ensure boolean condition evaluations - from community PR #1897 ([#1916](https://github.com/wazuh/wazuh-ansible/pull/1916)) ### Fixed From 8cd29d1597fdb6eaa515ebf75d411b02efaddbff Mon Sep 17 00:00:00 2001 From: Kris Latter Date: Thu, 9 Oct 2025 17:08:30 -0400 Subject: [PATCH 08/11] fix: Remove meta yamls that prevent complete role installation --- .../wazuh/ansible-filebeat-oss/meta/main.yml | 29 ------------------- roles/wazuh/ansible-wazuh-agent/meta/main.yml | 23 --------------- .../wazuh/ansible-wazuh-manager/meta/main.yml | 23 --------------- roles/wazuh/wazuh-indexer/meta/main.yml | 24 --------------- 4 files changed, 99 deletions(-) delete mode 100644 roles/wazuh/ansible-filebeat-oss/meta/main.yml delete mode 100644 roles/wazuh/ansible-wazuh-agent/meta/main.yml delete mode 100644 roles/wazuh/ansible-wazuh-manager/meta/main.yml delete mode 100644 roles/wazuh/wazuh-indexer/meta/main.yml diff --git a/roles/wazuh/ansible-filebeat-oss/meta/main.yml b/roles/wazuh/ansible-filebeat-oss/meta/main.yml deleted file mode 100644 index 4fd7e900..00000000 --- a/roles/wazuh/ansible-filebeat-oss/meta/main.yml +++ /dev/null @@ -1,29 +0,0 @@ ---- -dependencies: [] - -galaxy_info: - author: Wazuh - description: Installing and maintaining Filebeat-oss. - company: wazuh.com - license: license (GPLv3) - min_ansible_version: 2.0 - platforms: - - name: EL - versions: - - 6 - - 7 - - name: Fedora - versions: - - all - - name: Debian - versions: - - jessie - - name: Ubuntu - versions: - - precise - - trusty - - xenial - galaxy_tags: - - web - - system - - monitoring diff --git a/roles/wazuh/ansible-wazuh-agent/meta/main.yml b/roles/wazuh/ansible-wazuh-agent/meta/main.yml deleted file mode 100644 index 7cd460c4..00000000 --- a/roles/wazuh/ansible-wazuh-agent/meta/main.yml +++ /dev/null @@ -1,23 +0,0 @@ ---- -galaxy_info: - author: Wazuh - description: Installing, deploying and configuring Wazuh Agent. - company: wazuh.com - license: license (GPLv3) - min_ansible_version: 2.0 - platforms: - - name: EL - versions: - - all - - name: Ubuntu - versions: - - all - - name: Debian - versions: - - all - - name: Fedora - versions: - - all - galaxy_tags: - - monitoring -dependencies: [] diff --git a/roles/wazuh/ansible-wazuh-manager/meta/main.yml b/roles/wazuh/ansible-wazuh-manager/meta/main.yml deleted file mode 100644 index 1275d232..00000000 --- a/roles/wazuh/ansible-wazuh-manager/meta/main.yml +++ /dev/null @@ -1,23 +0,0 @@ ---- -galaxy_info: - author: Wazuh - description: Installing, deploying and configuring Wazuh Manager. - company: wazuh.com - license: license (GPLv3) - min_ansible_version: 2.0 - platforms: - - name: EL - versions: - - all - - name: Ubuntu - versions: - - all - - name: Debian - versions: - - all - - name: Fedora - versions: - - all - galaxy_tags: - - monitoring -dependencies: [] diff --git a/roles/wazuh/wazuh-indexer/meta/main.yml b/roles/wazuh/wazuh-indexer/meta/main.yml deleted file mode 100644 index 1b9648a6..00000000 --- a/roles/wazuh/wazuh-indexer/meta/main.yml +++ /dev/null @@ -1,24 +0,0 @@ ---- -galaxy_info: - author: Wazuh - description: Installing and maintaining Wazuh indexer. - company: wazuh.com - license: license (GPLv3) - min_ansible_version: 2.0 - platforms: - - name: EL - versions: - - all - - name: Ubuntu - versions: - - all - - name: Debian - versions: - - all - - name: Fedora - versions: - - all - galaxy_tags: - - web - - system - - monitoring From 4c9a77492c7a5fe985adf6323df215546b44a933 Mon Sep 17 00:00:00 2001 From: Kris Latter Date: Tue, 14 Oct 2025 13:02:51 -0400 Subject: [PATCH 09/11] fix: move galaxy meta to parent folder --- meta/main.yml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 meta/main.yml diff --git a/meta/main.yml b/meta/main.yml new file mode 100644 index 00000000..1275d232 --- /dev/null +++ b/meta/main.yml @@ -0,0 +1,23 @@ +--- +galaxy_info: + author: Wazuh + description: Installing, deploying and configuring Wazuh Manager. + company: wazuh.com + license: license (GPLv3) + min_ansible_version: 2.0 + platforms: + - name: EL + versions: + - all + - name: Ubuntu + versions: + - all + - name: Debian + versions: + - all + - name: Fedora + versions: + - all + galaxy_tags: + - monitoring +dependencies: [] From 487f5b40cc4d5528acc573b7fcfdf2adcde7c192 Mon Sep 17 00:00:00 2001 From: Jesus Garcia Date: Wed, 28 Jan 2026 16:56:02 -0500 Subject: [PATCH 10/11] Enhance description for meta/main.yml:galaxy_info.description --- meta/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/main.yml b/meta/main.yml index 1275d232..4b059bf0 100644 --- a/meta/main.yml +++ b/meta/main.yml @@ -1,7 +1,7 @@ --- galaxy_info: author: Wazuh - description: Installing, deploying and configuring Wazuh Manager. + description: Installing, deploying and configuring Wazuh using Ansible. company: wazuh.com license: license (GPLv3) min_ansible_version: 2.0 From 1c50a151f9f5aa769b39db553e25d218c7435fbf Mon Sep 17 00:00:00 2001 From: Jesus Garcia Date: Fri, 30 Jan 2026 09:15:17 -0500 Subject: [PATCH 11/11] Update changelog --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index defecdee..1c7547af 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,7 @@ All notable changes to this project will be documented in this file. ### Changed +- Remove meta yamls that prevent indexer and agent role installation from PR #1806 ([#1921](https://github.com/wazuh/wazuh-ansible/pull/1921)) - Ensure boolean condition evaluations - from community PR #1897 ([#1916](https://github.com/wazuh/wazuh-ansible/pull/1916)) ### Fixed