wazuh/wazuh-ansible v5.0.0-rc2 on GitHub

[v5.0.0]

Added

Issue	Comment
#2355	Verify the signature of the Windows (Authenticode) and macOS (Developer ID Installer) agent packages before installing them
#2308	Support additional manager IPs and agent-san addresses in config.yml (wazuh-indexer role)
#2289	Deploy the agent listener certificate (remoted.pem/remoted-key.pem) in the wazuh-manager role
#2279	Add documentation for the default password change procedure in AIO and Distributed deployments
#2278	Provision the manager CA and TLS verification mode for the agent install, and verify the CA was applied
#2267	Add optional wazuh_manager_endpoint support to wazuh-agent role
#2173	Added bump-issue-link support for Revert Stage Bump.
#2166	Add integration test module docs
#1920	Implement the wazuh-ansible integration testing module
#2095	Add new tags on PR tests
#2088	Add roles and variables documentation
#2019	Support Revert bump functionality in wazuh-ansible
#1991	Add `--set-as-main` flag support to repository bumper — `wazuh-ansible`
#1643	Bring missing workflows to `main`
#1520	Add initial documentation structure to docs directory
#1519	Implement ansible-lint and solve violations

Changed

Issue	Comment
#2375	Align the docs with the 5.0.0 code and packages: upgrades and the 4.x migration, the RPM manager certificate step, password changes in a cluster, the target Python requirement and the README
#2367	Adapt the roles to the 5.0.0 RC 2 per-package credentials: local.env under /etc/ instead of /etc/wazuh, the certificates issued by the packages instead of wazuh-certs-tool, each package's own CA in All-in-One and, in distributed deployments, one CA on the control node with the certificates issued there and staged on each host, as the installation assistant does
#2354	Deploy the Server API certificate (apid.pem/apid-key.pem) issued by wazuh-certs-tool in the wazuh-manager role, and add api_san
#2348	Rename the wazuh-wui Server API user to wazuh-internal-client in the documentation
#2350	Start the Ansible integration tests from PR labels
#2307	Adopt WAZUH_ENROLLMENT_TOKEN in the wazuh-agent role for Linux, Windows and macOS, replacing WAZUH_MANAGER/WAZUH_REGISTRATION_PASSWORD/WAZUH_REGISTRATION_CA
#2306	Adapt the roles to install-time credential generation: passwords generated once on the control node and provided to each host before install, certificates staged before install with the root CA kept on the control node, and the certs tool run as root
#2248	Change Codebuild runners to Github runners.
#2213	Change upload and download methods.
#2203	Update deployment for Wazuh Indexer 5.0.0 RBAC.
#2189	Set Wazuh Indexer JVM heap size to one quarter of the host total memory for AIO deployments.
#2205	Add new WF for changelog check
#2186	Set authd password in agents installation.
#2153	Migrate the GHA runner to CodeBuild
#2142	Change file and workflow names for PR Revamp tasks
#2093	Forbid run test in draft PRs
#2044	Update Wazuh manager certificates handling
#2036	Change the destination path of the artifact_urls file in wazuh-ansible
#1982	Adapt the Ansible deployment according to the config.yml changes
#1992	Ansible - Standarize Artifact URL keys
#1986	Update package artifact URLs and standardize artifact file extension
#1981	Fixed INSTALLATION.md file.
#1980	Updated wazuh-ansible documentation config and tooling versions to meet new standards.
#1948	URL presigned file - Update the Wazuh ansible tests workflows
#1941	Development - Separate Agent/Manager - Ansible - E2E Tests
#1955	Wazuh Manager/agent Separation - Breaking changes summary
#1937	Development - Separate Agent/Manager - Ansible - Roles and playbooks update
#1938	Development - Separate Agent/Manager - Ansible - GitHub playbooks and workflows updates
#1939	Development - Separate Agent/Manager - Ansible - Documentation update
#1922	Update workflows to include installation-assistant in COMMIT_LIST
#1925	Update outdated references to branch v5.0.0
#1912	Adapt main branch to latest changes
#1896	Composite names update
#1860	Implement pending adaptation tasks
#1855	Replace all occurrences of Wazuh server with Wazuh manager
#1852	Documentation backport and adaptation
#1846	GHA workflows backport and adaptation
#1842	Logs gathering playbook backport and adaptation
#1840	Distributed deployment adaptation from backport
#1834	Agent role backport and adaptation
#1831	Dashboard role backport and adaptation
#1825	Server role backport and adaptation
#1823	Indexer role backport and adaptation
#1819	Ansible base configuration files and directories backport
#1735	Remove Wazuh Manager deprecated daemons and CLI tools
#1714	Bucket migrate from packages-dev.wazuh.com to xdrsiem-packages-dev
#1697	DevOps - Ansible - OpenSearch 3.0 deprecated settings
#1709	Bucket migration for packages-dev.wazuh.com

Removed

Issue	Comment
#2239	Remove unnecessary `debhelper` install-time dependency from the `wazuh-dashboard` role.

Fixed

Issue	Comment
#2397	Fixing integration tests
#2380	Restart a service only when its package or configuration changed, also on the next run when a run stopped before the restart, keep the indexer hosts of the manager and the dashboard stable across runs, skip the download of a package already installed at the version in the name of its package URL, and run needrestart only after the dashboard dependencies changed, so a rerun on an unchanged host changes nothing
#2389	Load the indexer security configuration only on a new cluster, so a rerun keeps the users, roles and passwords changed later
#2390	Restart the agent only when its package changed and skip the download of an agent already installed, so a rerun changes nothing on Linux and Windows, and skips the download and the signature check on macOS too
#2351	Verify the signature of every downloaded Wazuh package with the Wazuh GPG key before installing it, with `wazuh_skip_package_signature_check` to install unsigned development packages
#2316	Fix "Wait for Wazuh indexer API" task using the removed default user (wazuh-admin) in the wazuh-indexer role
#2303	Fix node_name undefined in the wazuh-indexer role when generate_certs is false
#2277	Fix wazuh-dashboard role failing to detect SSL certificate/key paths when opensearch_dashboards.yml uses single-quoted values
#2255	Adapt certificate deployment to the unified manager certificate layout (root:wazuh-manager 0640, dir 1770)
#2246	Report skipped bumps in the repository bumper workflow
#2233	Fix changelog check to accept Prior versions entries
#2218	RedHat-based agent install task does not set WAZUH_REGISTRATION_PASSWORD, breaking auto-enrollment.
#2206	Wazuh-manager master and worker nodes keys do not match.
#2185	Fix bumper workflow failure when bump produces no changes
#2159	Bumper script issue when the tag is set to false
#2045	Ansible deployment fails on needrestart task when no services require restart
#2056	No idempotency for the `opensearch.yml` configurations
#1519	Fix indentation issues in distributed deployments