status-im/infra-nimbus
2
0
Fork 0
mirror of https://github.com/status-im/infra-nimbus.git synced 2025-02-22 18:38:07 +00:00
Code Issues Projects Releases Wiki Activity

all: adding wazuh-agent

Browse Source 
Signed-off-by: Alexis Pentori <alexis@status.im>
This commit is contained in:
Alexis Pentori 2025-01-23 17:40:40 +01:00
parent f41b4af98a
commit db29b134d9
No known key found for this signature in database
GPG Key ID: 65250D2801E47A10
8 changed files with 25 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ansible/eth1.yml
View File

@ -17,3 +17,4 @@
- { role: infra-role-open-ports, tags: open-ports }
- { role: infra-role-nimbus-eth1, tags: nimbus-eth1 }
- { role: infra-role-rocketpool, tags: rocketpool }
- { role: infra-role-wazuh-agent, tags: wazuh-agent }

1
ansible/fluffy.yml
View File

@ -18,6 +18,7 @@
- { role: update-netplan, tags: update-netplan }
- { role: infra-role-open-ports, tags: open-ports }
- { role: infra-role-smart-metrics, tags: smart-metrics }
- { role: infra-role-wazuh-agent, tags: wazuh-agent }
tasks:
- include_role:
name: infra-role-nimbus-fluffy

8
ansible/geth.yml
View File

@ -14,10 +14,11 @@
hosts:
- nimbus-geth-mainnet
roles:
- { role: infra-role-open-ports, tags: open-ports }
- { role: infra-role-open-ports, tags: open-ports }
- { role: infra-role-smart-metrics, tags: smart-metrics }
- { role: infra-role-geth, tags: geth }
- { role: infra-role-geth, tags: geth }
- { role: infra-role-geth-exporter, tags: geth-exporter }
- { role: infra-role-wazuh-agent, tags: wazuh-agent }
- name: Deploy Geth nodes for Windows
become: true
@ -26,8 +27,9 @@
hosts:
- nimbus-geth-holesky
roles:
- { role: infra-role-open-ports, tags: open-ports }
- { role: infra-role-open-ports, tags: open-ports }
- { role: infra-role-smart-metrics, tags: smart-metrics }
- { role: infra-role-wazuh-agent, tags: wazuh-agent }
tasks:
- include_role:
name: infra-role-geth

4
ansible/group_vars/all.yml
View File

@ -85,3 +85,7 @@ validator_client_consul_failures_before_critical: '{{ beacon_node_consul_failure
bootstrap__vault_ca_cert: '{{ lookup("passwordstore", "services/vault/certs/root-ca/cert returnall=true")}}'
bootstrap__vault_client_cert: '{{ lookup("passwordstore", "services/vault/certs/client-host/cert returnall=true")}}'
bootstrap__vault_client_key: '{{ lookup("passwordstore", "services/vault/certs/client-host/privkey returnall=true")}}'
# Wazuh Agent
wazuh_agent_enrollment_key: '{{ lookup("vault", "wazuh-agent", field="enrollment-key", env="all", stage="all")}}'
wazuh_root_ca: '{{ lookup("vault", "certs/wazuh-ca", field="certificate", env="all", stage="all")}}'

13
ansible/holesky.yml
View File

@ -18,12 +18,13 @@
- nimbus-holesky-neth
vars_files: layout/holesky.yml
roles:
- { role: update-netplan, tags: update-netplan, when: ansible_system == 'Linux' }
- { role: infra-role-swap-file, tags: swap-file }
- { role: infra-role-open-ports, tags: open-ports }
- { role: redirect-ports, tags: redirect-ports }
- { role: nimbus-era-files, tags: nimbus-era-files }
- { role: infra-role-mev-boost, tags: mev-boost, when: mev_boost_enabled == true }
- { role: update-netplan, tags: update-netplan, when: ansible_system == 'Linux' }
- { role: infra-role-swap-file, tags: swap-file }
- { role: infra-role-open-ports, tags: open-ports }
- { role: redirect-ports, tags: redirect-ports }
- { role: nimbus-era-files, tags: nimbus-era-files }
- { role: infra-role-mev-boost, tags: mev-boost, when: mev_boost_enabled == true }
- { role: infra-role-wazuh-agent, tags: wazuh-agent }
tasks:
- include_role:
name: infra-role-beacon-node-linux

2
ansible/mainnet.yml
View File

@ -22,6 +22,7 @@
- { role: infra-role-open-ports, tags: [ open-ports ] }
- { role: redirect-ports, tags: [ redirect-ports ] }
- { role: get-geth-api-urls, tags: [ get-geth-api-urls, beacon-node ] }
- { role: infra-role-wazuh-agent, tags: wazuh-agent }
tasks:
- include_role:
name: infra-role-beacon-node-linux
@ -51,6 +52,7 @@
- { role: redirect-ports, tags: [ redirect-ports ] }
- { role: get-geth-api-urls, tags: [ get-geth-api-urls, beacon-node ] }
- { role: nimbus-era-files, tags: [ nimbus-era-files ] }
- { role: infra-role-wazuh-agent, tags: wazuh-agent }
tasks:
- include_role:
name: infra-role-beacon-node-linux

4
ansible/requirements.yml
View File

@ -119,3 +119,7 @@
- name: infra-role-nimbus-bench-eth1
src: git@github.com:status-im/infra-role-nimbus-bench-eth1.git
version: ed5059de24c54ab928f390640f9a9a7649753e12
- name: infra-role-wazuh-agent
src: git@github.com:status-im/infra-role-wazuh-agent.git
version: 413e806e8238a4d6f361fab8897bddc1411b0b9b

1
ansible/sepolia.yml
View File

@ -21,6 +21,7 @@
- { role: infra-role-smart-metrics, tags: [ smart-metrics ] }
- { role: redirect-ports, tags: [ redirect-ports ] }
- { role: nimbus-era-files, tags: [ nimbus-era-files ] }
- { role: infra-role-wazuh-agent, tags: wazuh-agent }
tasks:
- include_role:
name: infra-role-geth