github wazuh/wazuh-ansible v5.0.0-rc1

pre-release3 hours ago

[v5.0.0]

Added

Issue Comment
#2308 Support additional manager IPs and agent-san addresses in config.yml (wazuh-indexer role)
#2289 Deploy the agent listener certificate (remoted.pem/remoted-key.pem) in the wazuh-manager role
#2279 Add documentation for the default password change procedure in AIO and Distributed deployments
#2278 Provision the manager CA and TLS verification mode for the agent install, and verify the CA was applied
#2267 Add optional wazuh_manager_endpoint support to wazuh-agent role
#2173 Added bump-issue-link support for Revert Stage Bump.
#2166 Add integration test module docs
#1920 Implement the wazuh-ansible integration testing module
#2095 Add new tags on PR tests
#2088 Add roles and variables documentation
#2019 Support Revert bump functionality in wazuh-ansible
#1991 Add --set-as-main flag support to repository bumper — wazuh-ansible
#1643 Bring missing workflows to main

Changed

Issue Comment
#2307 Adopt WAZUH_ENROLLMENT_TOKEN in the wazuh-agent role for Linux, Windows and macOS, replacing WAZUH_MANAGER/WAZUH_REGISTRATION_PASSWORD/WAZUH_REGISTRATION_CA
#2306 Adapt the roles to install-time credential generation: passwords generated once on the control node and provided to each host before install, certificates staged before install with the root CA kept on the control node, and the certs tool run as root
#2248 Change Codebuild runners to Github runners.
#2213 Change upload and download methods.
#2203 Update deployment for Wazuh Indexer 5.0.0 RBAC.
#2189 Set Wazuh Indexer JVM heap size to one quarter of the host total memory for AIO deployments.
#2205 Add new WF for changelog check
#2186 Set authd password in agents installation.
#2153 Migrate the GHA runner to CodeBuild
#2142 Change file and workflow names for PR Revamp tasks
#2093 Forbid run test in draft PRs
#2044 Update Wazuh manager certificates handling
#2036 Change the destination path of the artifact_urls file in wazuh-ansible
#1982 Adapt the Ansible deployment according to the config.yml changes
#1992 Ansible - Standarize Artifact URL keys
#1986 Update package artifact URLs and standardize artifact file extension
#1981 Fixed INSTALLATION.md file.
#1980 Updated wazuh-ansible documentation config and tooling versions to meet new standards.
#1948 URL presigned file - Update the Wazuh ansible tests workflows
#1941 Development - Separate Agent/Manager - Ansible - E2E Tests
#1955 Wazuh Manager/agent Separation - Breaking changes summary
#1937 Development - Separate Agent/Manager - Ansible - Roles and playbooks update
#1938 Development - Separate Agent/Manager - Ansible - GitHub playbooks and workflows updates
#1939 Development - Separate Agent/Manager - Ansible - Documentation update
#1922 Update workflows to include installation-assistant in COMMIT_LIST
#1925 Update outdated references to branch v5.0.0
#1912 Adapt main branch to latest changes
#1896 Composite names update
#1860 Implement pending adaptation tasks
#1855 Replace all occurrences of Wazuh server with Wazuh manager
#1852 Documentation backport and adaptation
#1846 GHA workflows backport and adaptation
#1842 Logs gathering playbook backport and adaptation
#1840 Distributed deployment adaptation from backport
#1834 Agent role backport and adaptation
#1831 Dashboard role backport and adaptation
#1825 Server role backport and adaptation
#1823 Indexer role backport and adaptation
#1819 Ansible base configuration files and directories backport
#1735 Remove Wazuh Manager deprecated daemons and CLI tools
#1714 Bucket migrate from packages-dev.wazuh.com to xdrsiem-packages-dev
#1697 DevOps - Ansible - OpenSearch 3.0 deprecated settings
#1709 Bucket migration for packages-dev.wazuh.com

Removed

Issue Comment
#2239 Remove unnecessary debhelper install-time dependency from the wazuh-dashboard role.

Fixed

Issue Comment
#2316 Fix "Wait for Wazuh indexer API" task using the removed default user (wazuh-admin) in the wazuh-indexer role
#2303 Fix node_name undefined in the wazuh-indexer role when generate_certs is false
#2277 Fix wazuh-dashboard role failing to detect SSL certificate/key paths when opensearch_dashboards.yml uses single-quoted values
#2255 Adapt certificate deployment to the unified manager certificate layout (root:wazuh-manager 0640, dir 1770)
#2246 Report skipped bumps in the repository bumper workflow
#2233 Fix changelog check to accept Prior versions entries
#2218 RedHat-based agent install task does not set WAZUH_REGISTRATION_PASSWORD, breaking auto-enrollment.
#2206 Wazuh-manager master and worker nodes keys do not match.
#2195 Fix bumper workflow failure when bump produces no changes
#2159 Bumper script issue when the tag is set to false
#2045 Ansible deployment fails on needrestart task when no services require restart
#2056 No idempotency for the opensearch.yml configurations

Don't miss a new wazuh-ansible release

NewReleases is sending notifications on new releases.