Add wazuh

[GregWhiteyBialas]

No description provided.

[markgoddard]

I haven't reviewed this yet, but probably it needs to support Ubuntu as well as CentOS, to avoid breaking deployments using Ubuntu. I ended up with a slightly different pattern for Ubuntu (most recently used at RUG), and Jack had problems using the more recent ansible-wazuh roles.

[mnasiadka]

I think we need to start somewhere, should we have a disclaimer for now, that it shouldn't be used on Ubuntu and have a task to test it out?

[markgoddard]

I think we need to start somewhere, should we have a disclaimer for now, that it shouldn't be used on Ubuntu and have a task to test it out?

I would agree if the playbooks & config didn't conflict with those used on Ubuntu. We have started somewhere - kayobe-ops. To do it in s-k-c it needs to support Ubuntu IMO

[mnasiadka]

Is this ready for reviews?

[GregWhiteyBialas]

@mnasiadka It is.

[g0rgamesh]

LGTM

[markgoddard]

Also need a release note.

[GregWhiteyBialas]

For the record. Three candidates for followup tasks:

• copy certs only on the first/initial deployment
• support for RL9
• update to wazuh-ansible version 4.4 and use upstream roles

[markgoddard]

Ok, let's get this one in. Thanks for persevering.

[markgoddard]

Thinking about these two again, won't this make it likely we forget to add the certs to git? Are there any autogenerated cert files we need to ignore? I expect we'd want to add all custom certs though?