v3.8.0

Features

• techvault: author operator-access proxies + capture sidecar as component builds (7cf97fb)
• techvault: author the indexer internal_users.yml (58e79a9)
• techvault: declare aptl-tempo config and startup command (18d2f10)
• techvault: declare misp-db and shuffle-opensearch runtime environment (a1a1211)
• techvault: declare SOC app configs (otel, grafana, cortex, thehive) (#259) (d448316)
• techvault: declare suricata run config + cortex-index-init placement (#259) (02314a8)
• techvault: declare wazuh cluster env desired-state (#259) (4ef0569)
• techvault: declare wazuh loopback published ports (c318349)
• techvault: declare wazuh sidecar agent environment (6abf245)
• techvault: declare wazuh-dashboard config content (#259) (a2a2ddc)
• techvault: declare wazuh-indexer opensearch.yml security config (#259) (499bd04)
• techvault: fully declare cortex-index-init (image, entrypoint, script) (99973e7)

Bug Fixes

• techvault: align soc-certificate output paths with the issued layout (f4444a9)
• techvault: declare thehive-es ES env (single-node, security off, 512m heap) (#259) (8601f71)
• techvault: mark cortex-index-init as one-shot (autoremove) (#259) (09ff951)
• techvault: realize the misp-sync TLS flag and the db-log forwarding source (74ba39d)
• techvault: suricata direct exec, cortex-init ES wait, ad samba caps (#259) (32857a9)
• techvault: update proxy component-build spec digests (1d842ce)