diff --git a/CHANGELOG.md b/CHANGELOG.md index 1ae0e5b3..165e17a1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,17 @@ # Change Log All notable changes to this project will be documented in this file. +## Wazuh Chef v4.2.4 + +### Added + +- Update to Wazuh [v4.2.4](https://github.com/wazuh/wazuh/blob/v4.2.4/CHANGELOG.md#v424) + +### Fixed + +- References to ossec- files were modified by the new wazuh- nomenclature. +- Checks on the ossec-init.conf file, which does not exist since version 4.1.0, have been removed. + ## Wazuh Chef v4.0.4_1.11.0 ### Added diff --git a/README.md b/README.md index fc00cf56..1c52fdf1 100644 --- a/README.md +++ b/README.md @@ -11,6 +11,7 @@ Deploy the Wazuh platform using Chef cookbooks. Chef recipes are prepared for in | Wazuh version | Elastic | ODFE | |---------------|---------|--------| +| v4.2.4 | v7.10.2 | v1.13.2| | v4.0.4 | v7.9.3 | v1.11.0| ## Dependencies diff --git a/cookbooks/elastic-stack/attributes/versions.rb b/cookbooks/elastic-stack/attributes/versions.rb index 3061f951..983bb8bc 100644 --- a/cookbooks/elastic-stack/attributes/versions.rb +++ b/cookbooks/elastic-stack/attributes/versions.rb @@ -6,12 +6,12 @@ # ELK default['elk']['major_version'] = '7.x' -default['elk']['patch_version'] = '7.9.3' +default['elk']['patch_version'] = '7.11.2' # Wazuh default['wazuh']['major_version'] = '4.x' -default['wazuh']['minor_version'] = '4.0' -default['wazuh']['patch_version'] = '4.0.4' +default['wazuh']['minor_version'] = '4.2' +default['wazuh']['patch_version'] = '4.2.4' # Kibana -default['wazuh']['kibana_plugin_version'] = '4.0.4_7.9.3' +default['wazuh']['kibana_plugin_version'] = '4.2.4_7.10.2' diff --git a/cookbooks/elastic-stack/recipes/kibana.rb b/cookbooks/elastic-stack/recipes/kibana.rb index 8508c084..28725528 100644 --- a/cookbooks/elastic-stack/recipes/kibana.rb +++ b/cookbooks/elastic-stack/recipes/kibana.rb @@ -35,7 +35,7 @@ source 'kibana.yml.erb' owner 'kibana' group 'kibana' - mode 0o755 + mode 0755 variables({ server_port: node['kibana']['yml']['server']['port'], server_host: node['kibana']['yml']['server']['host'], diff --git a/cookbooks/filebeat-oss/attributes/versions.rb b/cookbooks/filebeat-oss/attributes/versions.rb index 37276da8..65c069b1 100644 --- a/cookbooks/filebeat-oss/attributes/versions.rb +++ b/cookbooks/filebeat-oss/attributes/versions.rb @@ -4,9 +4,9 @@ # ELK default['elk']['major_version'] = "7.x" -default['elk']['patch_version'] = "7.9.1" +default['elk']['patch_version'] = "7.10.2" # Wazuh default['wazuh']['major_version'] = "4.x" -default['wazuh']['minor_version'] = "4.0" -default['wazuh']['patch_version'] = "4.0.4" \ No newline at end of file +default['wazuh']['minor_version'] = "4.2" +default['wazuh']['patch_version'] = "4.2.4" \ No newline at end of file diff --git a/cookbooks/filebeat/attributes/versions.rb b/cookbooks/filebeat/attributes/versions.rb index 77435495..c0fd4fd1 100644 --- a/cookbooks/filebeat/attributes/versions.rb +++ b/cookbooks/filebeat/attributes/versions.rb @@ -4,9 +4,9 @@ # ELK default['elk']['major_version'] = "7.x" -default['elk']['patch_version'] = "7.9.3" +default['elk']['patch_version'] = "7.10.2" # Wazuh default['wazuh']['major_version'] = "4.x" -default['wazuh']['minor_version'] = "4.0" -default['wazuh']['patch_version'] = "4.0.4" \ No newline at end of file +default['wazuh']['minor_version'] = "4.2" +default['wazuh']['patch_version'] = "4.2.4" \ No newline at end of file diff --git a/cookbooks/opendistro/attributes/versions.rb b/cookbooks/opendistro/attributes/versions.rb index 94c9dfd4..2175d2a7 100644 --- a/cookbooks/opendistro/attributes/versions.rb +++ b/cookbooks/opendistro/attributes/versions.rb @@ -5,18 +5,18 @@ # Author:: Wazuh # Elastic Stack -default['elk']['patch_version'] = '7.9.1' +default['elk']['patch_version'] = '7.10.2' # Opendistro -default['odfe']['patch_version'] = '1.11.0' +default['odfe']['patch_version'] = '1.13.2' # Wazuh default['wazuh']['major_version'] = '4.x' -default['wazuh']['minor_version'] = '4.0' -default['wazuh']['patch_version'] = '4.0.4' +default['wazuh']['minor_version'] = '4.2' +default['wazuh']['patch_version'] = '4.2.4' # Kibana -default['wazuh']['kibana_plugin_version'] = '4.0.4_7.9.1' +default['wazuh']['kibana_plugin_version'] = '4.2.4_7.10.2' # Search guard default['searchguard']['version'] = '1.8' diff --git a/cookbooks/opendistro/recipes/kibana.rb b/cookbooks/opendistro/recipes/kibana.rb index f37e1661..72e2bc43 100644 --- a/cookbooks/opendistro/recipes/kibana.rb +++ b/cookbooks/opendistro/recipes/kibana.rb @@ -40,7 +40,7 @@ server_host: (node['kibana']['yml']['server']['host']).to_s, elasticsearch_hosts: node['kibana']['yml']['elasticsearch']['hosts'] }) - mode 0o755 + mode 0755 end # Update the optimize and plugins directories permissions diff --git a/cookbooks/opendistro/recipes/prerequisites.rb b/cookbooks/opendistro/recipes/prerequisites.rb index d874f1f7..97c01282 100644 --- a/cookbooks/opendistro/recipes/prerequisites.rb +++ b/cookbooks/opendistro/recipes/prerequisites.rb @@ -52,19 +52,19 @@ if node['platform_version'] >= '8' dnf_package 'Install prerequisites packages' do - package_name %w[java-11-openjdk-devel libcap] + package_name %w[java-11-openjdk libcap] action :install end else yum_package 'Install prerequisites packages' do - package_name %w[java-11-openjdk-devel libcap] + package_name %w[java-11-openjdk libcap] action :install end end when 'opensuseleap', 'suse' # Install zypper prerequisites zypper_package 'Install prerequisites packages' do - package_name %w[libcap2 java-11-openjdk-devel] + package_name %w[libcap2 java-11-openjdk] end else raise 'Currently platforn not supported yet. Feel free to open an issue on https://www.github.com/wazuh/wazuh-chef if you consider that support for a specific OS should be added' diff --git a/cookbooks/opendistro/test/integration/opendistro/prerequisites_test.rb b/cookbooks/opendistro/test/integration/opendistro/prerequisites_test.rb index 9fce6529..ab839f7b 100644 --- a/cookbooks/opendistro/test/integration/opendistro/prerequisites_test.rb +++ b/cookbooks/opendistro/test/integration/opendistro/prerequisites_test.rb @@ -36,7 +36,7 @@ it { should be_installed } end - describe package('java-11-openjdk-devel') do + describe package('java-11-openjdk') do it { should be_installed } end when 'suse' @@ -44,7 +44,7 @@ it { should be_installed } end - describe package('java-11-openjdk-devel') do + describe package('java-11-openjdk') do it { should be_installed } end end diff --git a/cookbooks/wazuh_agent/attributes/version.rb b/cookbooks/wazuh_agent/attributes/version.rb index b860d415..dc945c09 100644 --- a/cookbooks/wazuh_agent/attributes/version.rb +++ b/cookbooks/wazuh_agent/attributes/version.rb @@ -3,5 +3,5 @@ # Author:: Wazuh port: <%= @port %> -# Set this option to "yes" in case the API is running behind a proxy server. Values: yes, no -behind_proxy_server: no - -# Advanced configuration - -https: - enabled: yes - key: "api/configuration/ssl/server.key" - cert: "api/configuration/ssl/server.crt" - use_ca: False - ca: "api/configuration/ssl/ca.crt" - ssl_cipher: "TLSv1.2" - # Logging configuration # Values for API log level: disabled, info, warning, error, debug, debug2 (each level includes the previous level). logs: diff --git a/cookbooks/wazuh_manager/test/integration/wazuh_manager/common_test.rb b/cookbooks/wazuh_manager/test/integration/wazuh_manager/common_test.rb index de9526f0..aaa96b29 100644 --- a/cookbooks/wazuh_manager/test/integration/wazuh_manager/common_test.rb +++ b/cookbooks/wazuh_manager/test/integration/wazuh_manager/common_test.rb @@ -17,27 +17,27 @@ its('exit_status') { should eq 0 } end -describe command('ps -ef | grep ossec-monitord') do +describe command('ps -ef | grep wazuh-monitord') do its('exit_status') { should eq 0 } end -describe command('ps -ef | grep ossec-logcollector') do +describe command('ps -ef | grep wazuh-logcollector') do its('exit_status') { should eq 0 } end -describe command('ps -ef | grep ossec-remoted') do +describe command('ps -ef | grep wazuh-remoted') do its('exit_status') { should eq 0 } end -describe command('ps -ef | grep ossec-syscheckd') do +describe command('ps -ef | grep wazuh-syscheckd') do its('exit_status') { should eq 0 } end -describe command('ps -ef | grep ossec-analysisd') do +describe command('ps -ef | grep wazuh-analysisd') do its('exit_status') { should eq 0 } end -describe command('ps -ef | grep ossec-execd') do +describe command('ps -ef | grep wazuh-execd') do its('exit_status') { should eq 0 } end @@ -45,20 +45,16 @@ its('exit_status') { should eq 0 } end -describe command('ps -ef | grep ossec-authd') do +describe command('ps -ef | grep wazuh-authd') do its('exit_status') { should eq 0 } end -describe command('ps -ef | grep ossec-apid') do +describe command('ps -ef | grep wazuh-apid') do its('exit_status') { should eq 0 } end # Check OSSEC dir -describe file('/var/ossec/etc/ossec-init.conf') do - it { should be_symlink } -end - describe file('/var/ossec') do it { should be_directory } its('mode') { should cmp '0750' } @@ -73,13 +69,6 @@ its('group') { should cmp 'ossec' } end -describe file('/etc/ossec-init.conf') do - it { should exist } - its('owner') { should cmp 'root' } - its('group') { should cmp 'ossec' } - its('mode') { should cmp '0640' } -end - describe file('/var/ossec/etc/shared/default/agent.conf') do it { should exist } its('owner') { should cmp 'ossec' } diff --git a/cookbooks/wazuh_manager/test/integration/wazuh_manager/manager_test.rb b/cookbooks/wazuh_manager/test/integration/wazuh_manager/manager_test.rb index 32a7f5ca..22761ded 100644 --- a/cookbooks/wazuh_manager/test/integration/wazuh_manager/manager_test.rb +++ b/cookbooks/wazuh_manager/test/integration/wazuh_manager/manager_test.rb @@ -15,10 +15,10 @@ describe port(1515) do it { should be_listening } - its('processes') {should include 'ossec-authd'} + its('processes') {should include 'wazuh-authd'} end describe port(1514) do it { should be_listening } - its('processes') {should include 'ossec-remoted'} + its('processes') {should include 'wazuh-remoted'} end diff --git a/metadata.rb b/metadata.rb index 20fccb4a..805c01be 100644 --- a/metadata.rb +++ b/metadata.rb @@ -4,7 +4,7 @@ license 'Apache 2.0' description 'Installs/Configures Wazuh with chef cookbooks' long_description IO.read(File.join(File.dirname(__FILE__), 'README.md')) -version '4.0.4' +version '4.2.4' chef_version '>= 15.0' %w(redhat centos oracle).each do |el|