70 lines
3.0 KiB
YAML+Jinja
70 lines
3.0 KiB
YAML+Jinja
{% set wazuh_enabled = salt['pillar.get']('pmg:wazuh:enabled', True) %}
|
|
{% set wazuh_version = salt['pillar.get']('pmg:wazuh:version', '4.14.0-1') %}
|
|
{% set wazuh_manager = salt['pillar.get']('pmg:wazuh:manager', '10.80.120.205') %}
|
|
{% set wazuh_group = salt['pillar.get']('pmg:wazuh:group', 'test_auditd_unix') %}
|
|
{% set wazuh_pkg_name = 'wazuh-agent_' ~ wazuh_version ~ '_amd64.deb' %}
|
|
{% set wazuh_pkg_url = 'https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-agent/' ~ wazuh_pkg_name %}
|
|
{% set wazuh_pkg_path = '/var/tmp/' ~ wazuh_pkg_name %}
|
|
|
|
{% set qualys_enabled = salt['pillar.get']('pmg:qualys:enabled', True) %}
|
|
{% set qualys_package_url = salt['pillar.get']('pmg:qualys:package_url', 'https://storage.yandexcloud.net/qualys-agent/QualysCloudAgent.deb') %}
|
|
{% set qualys_package_path = salt['pillar.get']('pmg:qualys:package_path', '/opt/QualysCloudAgent.deb') %}
|
|
{% set qualys_activation_id = salt['pillar.get']('pmg:qualys:activation_id', '') %}
|
|
{% set qualys_customer_id = salt['pillar.get']('pmg:qualys:customer_id', '') %}
|
|
{% set qualys_server_uri = salt['pillar.get']('pmg:qualys:server_uri', 'https://qagpublic.qg1.apps.qualys.eu/CloudAgent/') %}
|
|
|
|
{% if wazuh_enabled %}
|
|
pmg-wazuh-download:
|
|
cmd.run:
|
|
- name: wget -qO {{ wazuh_pkg_path }} {{ wazuh_pkg_url }}
|
|
- unless: test -f {{ wazuh_pkg_path }}
|
|
|
|
pmg-wazuh-install:
|
|
cmd.run:
|
|
- name: WAZUH_MANAGER='{{ wazuh_manager }}' WAZUH_AGENT_GROUP='{{ wazuh_group }}' WAZUH_AGENT_NAME="$(hostname -f)" dpkg -i {{ wazuh_pkg_path }}
|
|
- unless: dpkg-query -W -f='${Status}' wazuh-agent 2>/dev/null | grep -q 'install ok installed'
|
|
- require:
|
|
- cmd: pmg-wazuh-download
|
|
|
|
pmg-wazuh-service:
|
|
service.running:
|
|
- name: wazuh-agent
|
|
- enable: true
|
|
- require:
|
|
- cmd: pmg-wazuh-install
|
|
{% endif %}
|
|
|
|
{% if qualys_enabled and qualys_package_path and qualys_activation_id and qualys_customer_id %}
|
|
pmg-qualys-download:
|
|
cmd.run:
|
|
- name: wget -qO {{ qualys_package_path }} {{ qualys_package_url }}
|
|
- unless: test -f {{ qualys_package_path }}
|
|
|
|
pmg-qualys-install:
|
|
cmd.run:
|
|
- name: dpkg --install {{ qualys_package_path }}
|
|
- onlyif: test -f {{ qualys_package_path }}
|
|
- unless: dpkg-query -W -f='${Status}' qualys-cloud-agent 2>/dev/null | grep -q 'install ok installed'
|
|
- require:
|
|
- cmd: pmg-qualys-download
|
|
|
|
pmg-qualys-activate:
|
|
cmd.run:
|
|
- name: /usr/local/qualys/cloud-agent/bin/qualys-cloud-agent.sh ActivationId={{ qualys_activation_id }} CustomerId={{ qualys_customer_id }} ServerUri={{ qualys_server_uri }}
|
|
- onchanges:
|
|
- cmd: pmg-qualys-install
|
|
- onlyif: test -x /usr/local/qualys/cloud-agent/bin/qualys-cloud-agent.sh
|
|
|
|
pmg-qualys-service:
|
|
service.running:
|
|
- name: qualys-cloud-agent
|
|
- enable: true
|
|
- onlyif: test -f {{ qualys_package_path }}
|
|
- require:
|
|
- cmd: pmg-qualys-install
|
|
{% elif qualys_enabled %}
|
|
pmg-qualys-skipped:
|
|
test.show_notification:
|
|
- text: "Qualys agent skipped: set package_url + package_path + activation_id + customer_id in pillar."
|
|
{% endif %}
|