forked from wazuh/wazuh-docker
Modify service ip
This commit is contained in:
+28
-28
@@ -161,7 +161,7 @@ jobs:
|
|||||||
INDEXER_CONTAINERS=$(docker ps --format '{{.Names}}' | grep "indexer")
|
INDEXER_CONTAINERS=$(docker ps --format '{{.Names}}' | grep "indexer")
|
||||||
for i in {1..20}; do
|
for i in {1..20}; do
|
||||||
echo "Checking Wazuh indexer health (Attempt $i/20)"
|
echo "Checking Wazuh indexer health (Attempt $i/20)"
|
||||||
RESPONSE=$(curl -XGET "https://0.0.0.0:9200/_cluster/health?pretty" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s --retry 2 || true)
|
RESPONSE=$(curl -XGET "https://127.0.0.1:9200/_cluster/health?pretty" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s --retry 2 || true)
|
||||||
INDEXER_CONTAINERS=$(docker ps --format '{{.Names}}' | grep "indexer")
|
INDEXER_CONTAINERS=$(docker ps --format '{{.Names}}' | grep "indexer")
|
||||||
if echo "$RESPONSE" | grep -qE "green|yellow"; then
|
if echo "$RESPONSE" | grep -qE "green|yellow"; then
|
||||||
echo "Cluster Online"
|
echo "Cluster Online"
|
||||||
@@ -179,19 +179,19 @@ jobs:
|
|||||||
done
|
done
|
||||||
[ $i -lt 20 ] && sleep 60
|
[ $i -lt 20 ] && sleep 60
|
||||||
done
|
done
|
||||||
status_index="`curl -XGET "https://0.0.0.0:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | wc -l`"
|
status_index="`curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | wc -l`"
|
||||||
status_index_green="`curl -XGET "https://0.0.0.0:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "green|yellow" | wc -l`"
|
status_index_green="`curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "green|yellow" | wc -l`"
|
||||||
if [[ $status_index_green -eq $status_index ]]; then
|
if [[ $status_index_green -eq $status_index ]]; then
|
||||||
curl -XGET "https://0.0.0.0:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
|
curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
|
||||||
else
|
else
|
||||||
curl -XGET "https://0.0.0.0:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
|
curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
|
||||||
- name: Check Wazuh indexer nodes
|
- name: Check Wazuh indexer nodes
|
||||||
run: |
|
run: |
|
||||||
nodes="`curl -XGET "https://0.0.0.0:9200/_cat/nodes" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "indexer" | wc -l`"
|
nodes="`curl -XGET "https://127.0.0.1:9200/_cat/nodes" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "indexer" | wc -l`"
|
||||||
if [[ $nodes -eq 1 ]]; then
|
if [[ $nodes -eq 1 ]]; then
|
||||||
echo "Wazuh indexer nodes: ${nodes}"
|
echo "Wazuh indexer nodes: ${nodes}"
|
||||||
else
|
else
|
||||||
@@ -213,7 +213,7 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
for i in {1..20}; do
|
for i in {1..20}; do
|
||||||
echo "Checking documents in wazuh-states (Attempt $i/20)..."
|
echo "Checking documents in wazuh-states (Attempt $i/20)..."
|
||||||
RESPONSE=$(curl -XGET "https://0.0.0.0:9200/wazuh-states*/_count" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s || echo "{}")
|
RESPONSE=$(curl -XGET "https://127.0.0.1:9200/wazuh-states*/_count" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s || echo "{}")
|
||||||
DOCS=$(echo "$RESPONSE" | jq -r '.count // 0')
|
DOCS=$(echo "$RESPONSE" | jq -r '.count // 0')
|
||||||
if [[ "$DOCS" -gt 0 ]]; then
|
if [[ "$DOCS" -gt 0 ]]; then
|
||||||
echo "wazuh-states index has documents: ${DOCS}"
|
echo "wazuh-states index has documents: ${DOCS}"
|
||||||
@@ -229,8 +229,8 @@ jobs:
|
|||||||
|
|
||||||
- name: Check Wazuh templates
|
- name: Check Wazuh templates
|
||||||
run: |
|
run: |
|
||||||
qty_templates="`curl -XGET "https://0.0.0.0:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -P "wazuh|wazuh-agent|wazuh-statistics" | wc -l`"
|
qty_templates="`curl -XGET "https://127.0.0.1:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -P "wazuh|wazuh-agent|wazuh-statistics" | wc -l`"
|
||||||
templates="`curl -XGET "https://0.0.0.0:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -P "wazuh|wazuh-agent|wazuh-statistics"`"
|
templates="`curl -XGET "https://127.0.0.1:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -P "wazuh|wazuh-agent|wazuh-statistics"`"
|
||||||
if [[ $qty_templates -gt 3 ]]; then
|
if [[ $qty_templates -gt 3 ]]; then
|
||||||
echo "wazuh templates:"
|
echo "wazuh templates:"
|
||||||
echo "${templates}"
|
echo "${templates}"
|
||||||
@@ -244,13 +244,13 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
for NODE in "${{ env.MANAGER_NODES }}"; do
|
for NODE in "${{ env.MANAGER_NODES }}"; do
|
||||||
for i in {1..20}; do
|
for i in {1..20}; do
|
||||||
TOKEN=$(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://0.0.0.0:55000/security/user/authenticate?raw=true")
|
TOKEN=$(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://127.0.0.1:55000/security/user/authenticate?raw=true")
|
||||||
services="`curl -k -s -X GET "https://0.0.0.0:55000/cluster/$NODE/status?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}" | jq -r .data.affected_items | grep running | wc -l`"
|
services="`curl -k -s -X GET "https://127.0.0.1:55000/cluster/$NODE/status?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}" | jq -r .data.affected_items | grep running | wc -l`"
|
||||||
if [[ $services -gt 9 ]]; then
|
if [[ $services -gt 9 ]]; then
|
||||||
echo "Wazuh Manager $NODE Services: ${services}"
|
echo "Wazuh Manager $NODE Services: ${services}"
|
||||||
echo "OK"
|
echo "OK"
|
||||||
else
|
else
|
||||||
curl -k -X GET "https://0.0.0.0:55000/cluster/$NODE/status?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}" | jq -r .data.affected_items
|
curl -k -X GET "https://127.0.0.1:55000/cluster/$NODE/status?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}" | jq -r .data.affected_items
|
||||||
echo "Wazuh Manager $NODE Services: ${services}. Retrying in 30s"
|
echo "Wazuh Manager $NODE Services: ${services}. Retrying in 30s"
|
||||||
[ $i -lt 20 ] && sleep 30
|
[ $i -lt 20 ] && sleep 30
|
||||||
fi
|
fi
|
||||||
@@ -261,7 +261,7 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
for i in {1..20}; do
|
for i in {1..20}; do
|
||||||
echo "Checking Wazuh dashboard (Attempt $i/20)"
|
echo "Checking Wazuh dashboard (Attempt $i/20)"
|
||||||
STATUS=$(curl -k -s -o /dev/null -w "%{http_code}" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} "https://0.0.0.0:443/app/status")
|
STATUS=$(curl -k -s -o /dev/null -w "%{http_code}" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} "https://127.0.0.1:443/app/status")
|
||||||
echo "Current status: $STATUS"
|
echo "Current status: $STATUS"
|
||||||
if [[ "$STATUS" == "200" ]]; then
|
if [[ "$STATUS" == "200" ]]; then
|
||||||
echo "Wazuh dashboard is UP"
|
echo "Wazuh dashboard is UP"
|
||||||
@@ -302,7 +302,7 @@ jobs:
|
|||||||
sleep 20
|
sleep 20
|
||||||
curl -k -s -X GET "https://localhost:55000/agents?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}"
|
curl -k -s -X GET "https://localhost:55000/agents?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}"
|
||||||
env:
|
env:
|
||||||
TOKEN: $(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://0.0.0.0:55000/security/user/authenticate?raw=true")
|
TOKEN: $(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://127.0.0.1:55000/security/user/authenticate?raw=true")
|
||||||
|
|
||||||
- name: Check errors in ossec.log for Wazuh manager
|
- name: Check errors in ossec.log for Wazuh manager
|
||||||
run: ./.github/single-node-log-check.sh
|
run: ./.github/single-node-log-check.sh
|
||||||
@@ -396,7 +396,7 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
for i in {1..20}; do
|
for i in {1..20}; do
|
||||||
echo "Checking Wazuh indexer health (Attempt $i/20)"
|
echo "Checking Wazuh indexer health (Attempt $i/20)"
|
||||||
RESPONSE=$(curl -XGET "https://0.0.0.0:9200/_cluster/health?pretty" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s --retry 2 || true)
|
RESPONSE=$(curl -XGET "https://127.0.0.1:9200/_cluster/health?pretty" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s --retry 2 || true)
|
||||||
INDEXER_CONTAINERS=$(docker ps --format '{{.Names}}' | grep "indexer")
|
INDEXER_CONTAINERS=$(docker ps --format '{{.Names}}' | grep "indexer")
|
||||||
if echo "$RESPONSE" | grep -qE "green|yellow"; then
|
if echo "$RESPONSE" | grep -qE "green|yellow"; then
|
||||||
echo "Cluster Online"
|
echo "Cluster Online"
|
||||||
@@ -414,12 +414,12 @@ jobs:
|
|||||||
done
|
done
|
||||||
[ $i -lt 20 ] && sleep 60
|
[ $i -lt 20 ] && sleep 60
|
||||||
done
|
done
|
||||||
status_index="`curl -XGET "https://0.0.0.0:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | wc -l`"
|
status_index="`curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | wc -l`"
|
||||||
status_index_green="`curl -XGET "https://0.0.0.0:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "green" | wc -l`"
|
status_index_green="`curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "green" | wc -l`"
|
||||||
if [[ $status_index_green -eq $status_index ]]; then
|
if [[ $status_index_green -eq $status_index ]]; then
|
||||||
curl -XGET "https://0.0.0.0:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
|
curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
|
||||||
else
|
else
|
||||||
curl -XGET "https://0.0.0.0:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
|
curl -XGET "https://127.0.0.1:9200/_cat/indices" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
@@ -438,7 +438,7 @@ jobs:
|
|||||||
|
|
||||||
- name: Check Wazuh indexer nodes
|
- name: Check Wazuh indexer nodes
|
||||||
run: |
|
run: |
|
||||||
nodes="`curl -XGET "https://0.0.0.0:9200/_cat/nodes" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "indexer" | wc -l`"
|
nodes="`curl -XGET "https://127.0.0.1:9200/_cat/nodes" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep -E "indexer" | wc -l`"
|
||||||
if [[ $nodes -eq 3 ]]; then
|
if [[ $nodes -eq 3 ]]; then
|
||||||
echo "Wazuh indexer nodes: ${nodes}"
|
echo "Wazuh indexer nodes: ${nodes}"
|
||||||
else
|
else
|
||||||
@@ -449,7 +449,7 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
for i in {1..20}; do
|
for i in {1..20}; do
|
||||||
echo "Checking documents in wazuh-states (Attempt $i/20)..."
|
echo "Checking documents in wazuh-states (Attempt $i/20)..."
|
||||||
RESPONSE=$(curl -XGET "https://0.0.0.0:9200/wazuh-states*/_count" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s || echo "{}")
|
RESPONSE=$(curl -XGET "https://127.0.0.1:9200/wazuh-states*/_count" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s || echo "{}")
|
||||||
DOCS=$(echo "$RESPONSE" | jq -r '.count // 0')
|
DOCS=$(echo "$RESPONSE" | jq -r '.count // 0')
|
||||||
if [[ "$DOCS" -gt 0 ]]; then
|
if [[ "$DOCS" -gt 0 ]]; then
|
||||||
echo "wazuh-states index has documents: ${DOCS}"
|
echo "wazuh-states index has documents: ${DOCS}"
|
||||||
@@ -465,8 +465,8 @@ jobs:
|
|||||||
|
|
||||||
- name: Check Wazuh templates
|
- name: Check Wazuh templates
|
||||||
run: |
|
run: |
|
||||||
qty_templates="`curl -XGET "https://0.0.0.0:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep "wazuh" | wc -l`"
|
qty_templates="`curl -XGET "https://127.0.0.1:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep "wazuh" | wc -l`"
|
||||||
templates="`curl -XGET "https://0.0.0.0:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep "wazuh"`"
|
templates="`curl -XGET "https://127.0.0.1:9200/_cat/templates" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} -k -s | grep "wazuh"`"
|
||||||
if [[ $qty_templates -gt 3 ]]; then
|
if [[ $qty_templates -gt 3 ]]; then
|
||||||
echo "wazuh templates:"
|
echo "wazuh templates:"
|
||||||
echo "${templates}"
|
echo "${templates}"
|
||||||
@@ -481,13 +481,13 @@ jobs:
|
|||||||
IFS=','
|
IFS=','
|
||||||
for NODE in "${{ env.MANAGER_NODES }}"; do
|
for NODE in "${{ env.MANAGER_NODES }}"; do
|
||||||
for i in {1..20}; do
|
for i in {1..20}; do
|
||||||
TOKEN=$(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://0.0.0.0:55000/security/user/authenticate?raw=true")
|
TOKEN=$(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://127.0.0.1:55000/security/user/authenticate?raw=true")
|
||||||
services="`curl -k -s -X GET "https://0.0.0.0:55000/cluster/$NODE/status?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}" | jq -r .data.affected_items | grep running | wc -l`"
|
services="`curl -k -s -X GET "https://127.0.0.1:55000/cluster/$NODE/status?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}" | jq -r .data.affected_items | grep running | wc -l`"
|
||||||
if [[ $services -gt 9 ]]; then
|
if [[ $services -gt 9 ]]; then
|
||||||
echo "Wazuh Manager $NODE Services: ${services}"
|
echo "Wazuh Manager $NODE Services: ${services}"
|
||||||
echo "OK"
|
echo "OK"
|
||||||
else
|
else
|
||||||
curl -k -X GET "https://0.0.0.0:55000/cluster/$NODE/status?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}" | jq -r .data.affected_items
|
curl -k -X GET "https://127.0.0.1:55000/cluster/$NODE/status?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}" | jq -r .data.affected_items
|
||||||
echo "Wazuh Manager $NODE Services: ${services}. Retrying in 30s"
|
echo "Wazuh Manager $NODE Services: ${services}. Retrying in 30s"
|
||||||
[ $i -lt 20 ] && sleep 30
|
[ $i -lt 20 ] && sleep 30
|
||||||
fi
|
fi
|
||||||
@@ -498,7 +498,7 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
for i in {1..20}; do
|
for i in {1..20}; do
|
||||||
echo "Checking Wazuh dashboard (Attempt $i/20)"
|
echo "Checking Wazuh dashboard (Attempt $i/20)"
|
||||||
STATUS=$(curl -k -s -o /dev/null -w "%{http_code}" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} "https://0.0.0.0:443/app/status")
|
STATUS=$(curl -k -s -o /dev/null -w "%{http_code}" -u ${{ env.INDEXER_USERNAME }}:${{ env.INDEXER_PASSWORD }} "https://127.0.0.1:443/app/status")
|
||||||
echo "Current status: $STATUS"
|
echo "Current status: $STATUS"
|
||||||
if [[ "$STATUS" == "200" ]]; then
|
if [[ "$STATUS" == "200" ]]; then
|
||||||
echo "Wazuh dashboard is UP"
|
echo "Wazuh dashboard is UP"
|
||||||
@@ -538,7 +538,7 @@ jobs:
|
|||||||
sleep 20
|
sleep 20
|
||||||
curl -k -s -X GET "https://localhost:55000/agents?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}"
|
curl -k -s -X GET "https://localhost:55000/agents?pretty=true" -H "Authorization: Bearer ${{env.TOKEN}}"
|
||||||
env:
|
env:
|
||||||
TOKEN: $(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://0.0.0.0:55000/security/user/authenticate?raw=true")
|
TOKEN: $(curl -s -u ${{ env.API_USERNAME }}:${{ env.API_PASSWORD }} -k -X GET "https://127.0.0.1:55000/security/user/authenticate?raw=true")
|
||||||
|
|
||||||
- name: Check errors in ossec.log for Wazuh manager
|
- name: Check errors in ossec.log for Wazuh manager
|
||||||
run: ./.github/multi-node-log-check.sh
|
run: ./.github/multi-node-log-check.sh
|
||||||
Reference in New Issue
Block a user