Skip to content

Commit ded19fd

Browse files
drazenCEdrazenCE
authored
Updating wazuh path2x pr 2.x (#1482)
* Updating-wazuh-path2x * Updating-all-roles-path
1 parent 64c1317 commit ded19fd

File tree

3 files changed

+109
-133
lines changed

3 files changed

+109
-133
lines changed

‎roles/debian/wazuh/defaults/main.yml

+1-2
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,6 @@
11
---
2-
_wazuh_path: ""
3-
42
wazuh:
3+
path: wazuh
54
#roles_directory: "/path/to/roles" # defaults to /home/controller/.ansible/roles/wazuh-ansible
65
branch: "v4.7.2" # wazuh-ansible git branch to checkout - not to be confused with wazuh_version!
76
# Agent variables, installed locally by default

‎roles/debian/wazuh/tasks/install.yml

-112
This file was deleted.

‎roles/debian/wazuh/tasks/main.yml

+108-19
Original file line numberDiff line numberDiff line change
@@ -1,23 +1,112 @@
1-
---
2-
# Assumes you have run the ce_provision role on your controller and it has already installed the Wazuh roles
3-
- name: Select items with URL https://github.com/wazuh/wazuh-ansible.git
4-
ansible.builtin.set_fact:
5-
_wazuh_items: "{{ ce_provision.contrib_roles | selectattr('repo', 'equalto', 'https://github.com/wazuh/wazuh-ansible.git') | list }}"
1+
- name: Import elastic-stack.
2+
ansible.builtin.import_role:
3+
name: "contrib/{{ wazuh.path }}/roles/elastic-stack/ansible-kibana"
64

7-
- name: Debug print _wazuh_items
8-
ansible.builtin.debug:
9-
msg: "{{ _wazuh_items }}"
5+
- name: Import opendistro.
6+
ansible.builtin.import_role:
7+
name: "contrib/{{ wazuh.path }}/roles/opendistro/opendistro-kibana"
108

11-
- name: Set wazuh path based on matching repo
12-
ansible.builtin.set_fact:
13-
_wazuh_path: "{{ _wazuh_items | map(attribute='directory') | first }}"
14-
when: _wazuh_items | length > 0
9+
- name: Generate certificates.
10+
ansible.builtin.import_role:
11+
name: "contrib/{{ wazuh.path }}/roles/wazuh/wazuh-indexer"
12+
delegate_to: localhost
13+
vars:
14+
indexer_node_master: "{{ wazuh.indexer.indexer_node_master }}"
15+
instances: "{{ wazuh.indexer.indexer_primary }}"
16+
perform_installation: false
17+
tags:
18+
- generate-certs
1519

16-
- name: Debug _wazuh_path before including install.yml
17-
ansible.builtin.debug:
18-
msg: "The value of _wazuh_path is: '{{ _wazuh_path | default('Not set') }}'"
20+
- name: Install Wazuh indexer.
21+
ansible.builtin.import_role:
22+
name: "contrib/{{ wazuh.path }}/roles/wazuh/wazuh-indexer"
23+
vars:
24+
single_node: "{{ wazuh.indexer.single_node }}"
25+
domain_name: "{{ wazuh.indexer.domain_name }}"
26+
indexer_cluster_name: "{{ wazuh.indexer.indexer_cluster_name }}"
27+
indexer_node_name: "{{ wazuh.indexer.indexer_node_name }}"
28+
minimum_master_nodes: "{{ wazuh.indexer.minimum_master_nodes }}"
29+
indexer_node_master: "{{ wazuh.indexer.indexer_node_master }}"
30+
indexer_node_data: "{{ wazuh.indexer.indexer_node_data }}"
31+
indexer_node_ingest: "{{ wazuh.indexer.indexer_node_ingest }}"
32+
indexer_start_timeout: "{{ wazuh.indexer.indexer_start_timeout }}"
33+
indexer_network_host: "{{ wazuh.indexer.indexer_network_host }}"
34+
indexer_cluster_nodes: "{{ wazuh.indexer.indexer_cluster_nodes }}"
35+
indexer_discovery_nodes: "{{ wazuh.indexer.indexer_discovery_nodes }}"
36+
indexer_http_port: "{{ wazuh.indexer.indexer_http_port }}"
37+
indexer_api_protocol: "{{ wazuh.indexer.indexer_api_protocol }}"
38+
indexer_custom_user: "{{ wazuh.indexer.indexer_custom_user }}"
39+
indexer_custom_user_role: "{{ wazuh.indexer.indexer_custom_user_role }}"
40+
indexer_admin_password: "{{ wazuh.indexer.indexer_admin_password }}"
41+
dashboard_password: "{{ wazuh.dashboard.dashboard_password }}"
42+
instances: "{{ wazuh.indexer.indexer_instances }}"
43+
perform_installation: true
44+
tags:
45+
- install
46+
when: wazuh.indexer.install
1947

20-
- name: Include task to install based on selected items
21-
ansible.builtin.import_tasks:
22-
file: install.yml
23-
when: _wazuh_items | length > 0
48+
- name: Install Wazuh Manager.
49+
ansible.builtin.import_role:
50+
name: "contrib/{{ wazuh.path }}/roles/wazuh/ansible-wazuh-manager"
51+
vars:
52+
wazuh_manager_mailto: "{{ wazuh.manager.wazuh_manager_mailto }}"
53+
wazuh_manager_email_smtp_server: "{{ wazuh.manager.wazuh_manager_email_smtp_server }}"
54+
wazuh_manager_email_from: "{{ wazuh.manager.wazuh_manager_email_from }}"
55+
wazuh_manager_email_maxperhour: "{{ wazuh.manager.wazuh_manager_email_maxperhour }}"
56+
wazuh_manager_email_queue_size: "{{ wazuh.manager.wazuh_manager_email_queue_size }}"
57+
wazuh_manager_email_log_source: "{{ wazuh.manager.wazuh_manager_email_log_source }}"
58+
wazuh_manager_log_level: "{{ wazuh.manager.wazuh_manager_log_level }}"
59+
wazuh_manager_email_level: "{{ wazuh.manager.wazuh_manager_email_level }}"
60+
wazuh_manager_extra_emails: "{{ wazuh.manager.wazuh_manager_extra_emails }}"
61+
wazuh_manager_reports: "{{ wazuh.manager.wazuh_manager_reports }}"
62+
wazuh_manager_api: "{{ wazuh.manager.wazuh_manager_api }}"
63+
agent_groups: "{{ wazuh.manager.agent_groups }}"
64+
when: wazuh.manager.install
65+
66+
- name: Install Filebeat.
67+
ansible.builtin.import_role:
68+
name: "contrib/{{ wazuh.path }}/roles/wazuh/ansible-filebeat-oss"
69+
vars:
70+
filebeat_version: "{{ wazuh.filebeat.filebeat_version }}"
71+
filebeat_node_name: "{{ wazuh.filebeat.filebeat_node_name }}"
72+
filebeat_output_indexer_hosts: "{{ wazuh.filebeat.filebeat_output_indexer_hosts }}"
73+
filebeat_module_package_url: "{{ wazuh.filebeat.filebeat_module_package_url }}"
74+
filebeat_module_package_name: "{{ wazuh.filebeat.filebeat_module_package_name }}"
75+
indexer_security_user: "{{ wazuh.filebeat.indexer_security_user | default('admin') }}"
76+
indexer_security_password: "{{ wazuh.indexer.indexer_admin_password }}"
77+
when: wazuh.filebeat.install
78+
79+
- name: Install Wazuh dashboard.
80+
ansible.builtin.import_role:
81+
name: "contrib/{{ wazuh.path }}/roles/wazuh/wazuh-dashboard"
82+
vars:
83+
dashboard_node_name: "{{ wazuh.dashboard.dashboard_node_name }}"
84+
dashboard_server_host: "{{ wazuh.dashboard.dashboard_server_host }}"
85+
dashboard_server_port: "{{ wazuh.dashboard.dashboard_server_port }}"
86+
dashboard_server_name: "{{ wazuh.dashboard.dashboard_server_name }}"
87+
wazuh_api_credentials: "{{ wazuh.dashboard.wazuh_api_credentials }}"
88+
dashboard_security: "{{ wazuh.dashboard.dashboard_security }}"
89+
dashboard_user: "{{ wazuh.dashboard.dashboard_user }}"
90+
dashboard_password: "{{ wazuh.dashboard.dashboard_password }}"
91+
indexer_admin_password: "{{ wazuh.indexer.indexer_admin_password }}"
92+
indexer_http_port: "{{ wazuh.indexer.indexer_http_port }}"
93+
indexer_api_protocol: "{{ wazuh.indexer.indexer_api_protocol }}"
94+
ansible_shell_allow_world_readable_temp: true
95+
when: wazuh.dashboard.install
96+
97+
- name: Install Wazuh agent.
98+
ansible.builtin.import_role:
99+
name: "contrib/{{ wazuh.path }}/roles/wazuh/ansible-wazuh-agent"
100+
vars:
101+
wazuh_managers: "{{ wazuh.agent.managers }}"
102+
wazuh_agent_enrollment:
103+
enabled: "{{ wazuh.agent.wazuh_agent_enrollment.enabled }}"
104+
agent_name: "{{ wazuh.agent.wazuh_agent_enrollment.agent_name }}"
105+
groups: "{{ wazuh.agent.wazuh_agent_enrollment.groups }}"
106+
agent_address: "{{ wazuh.agent.wazuh_agent_enrollment.agent_address }}"
107+
ssl_ciphers: "{{ wazuh.agent.wazuh_agent_enrollment.ssl_ciphers }}"
108+
wazuh_custom_packages_installation_agent_enabled: false
109+
ansible_shell_allow_world_readable_temp: true
110+
wazuh_agent_sources_installation:
111+
enabled: true
112+
when: wazuh.agent.install and not wazuh_agent_sources_installation.enabled

0 commit comments

Comments
 (0)