Wazuh Kubernetes
Deploy a Wazuh cluster with a basic indexer and dashboard stack on Kubernetes.
Branches
master
branch contains the latest code, be aware of possible bugs on this branch.stable
branch on correspond to the last Wazuh stable version.
Documentation
Amazon EKS development
To deploy a cluster on Amazon EKS cluster read the instructions on instructions.md. Note: For Kubernetes version 1.23 or higher, the assignment of an IAM Role is necessary for the CSI driver to function correctly. Within the AWS documentation you can find the instructions for the assignment: https://docs.aws.amazon.com/eks/latest/userguide/ebs-csi.html The installation of the CSI driver is mandatory for new and old deployments if you are going to use Kubernetes 1.23 for the first time or you need to upgrade the cluster.
Local development
To deploy a cluster on your local environment (like Minikube, Kind or Microk8s) read the instructions on local-environment.md.
Directory structure
βββ CHANGELOG.md
βββ cleanup.md
βββ envs
βΒ Β βββ eks
βΒ Β βΒ Β βββ dashboard-resources.yaml
βΒ Β βΒ Β βββ indexer-resources.yaml
βΒ Β βΒ Β βββ kustomization.yml
βΒ Β βΒ Β βββ storage-class.yaml
βΒ Β βΒ Β βββ wazuh-master-resources.yaml
βΒ Β βΒ Β βββ wazuh-worker-resources.yaml
βΒ Β βββ local-env
βΒ Β βββ indexer-resources.yaml
βΒ Β βββ kustomization.yml
βΒ Β βββ storage-class.yaml
βΒ Β βββ wazuh-resources.yaml
βββ instructions.md
βββ LICENSE
βββ local-environment.md
βββ README.md
βββ upgrade.md
βββ VERSION
βββ wazuh
βββ base
βΒ Β βββ storage-class.yaml
βΒ Β βββ wazuh-ns.yaml
βββ certs
βΒ Β βββ dashboard_http
βΒ Β βΒ Β βββ generate_certs.sh
βΒ Β βββ indexer_cluster
βΒ Β βββ generate_certs.sh
βββ indexer_stack
βΒ Β βββ wazuh-dashboard
βΒ Β βΒ Β βββ dashboard_conf
βΒ Β βΒ Β βΒ Β βββ opensearch_dashboards.yml
βΒ Β βΒ Β βββ dashboard-deploy.yaml
βΒ Β βΒ Β βββ dashboard-svc.yaml
βΒ Β βββ wazuh-indexer
βΒ Β βββ cluster
βΒ Β βΒ Β βββ indexer-api-svc.yaml
βΒ Β βΒ Β βββ indexer-sts.yaml
βΒ Β βββ indexer_conf
βΒ Β βΒ Β βββ internal_users.yml
βΒ Β βΒ Β βββ opensearch.yml
βΒ Β βββ indexer-svc.yaml
βββ kustomization.yml
βββ secrets
βΒ Β βββ dashboard-cred-secret.yaml
βΒ Β βββ indexer-cred-secret.yaml
βΒ Β βββ wazuh-api-cred-secret.yaml
βΒ Β βββ wazuh-authd-pass-secret.yaml
βΒ Β βββ wazuh-cluster-key-secret.yaml
βββ wazuh_managers
βββ wazuh-cluster-svc.yaml
βββ wazuh_conf
βΒ Β βββ master.conf
βΒ Β βββ worker.conf
βββ wazuh-master-sts.yaml
βββ wazuh-master-svc.yaml
βββ wazuh-workers-svc.yaml
βββ wazuh-worker-sts.yaml
Contribute
If you want to contribute to our project please don't hesitate to send a pull request. You can also join our users mailing list or the Wazuh Slack community channel to ask questions and participate in discussions.
Credits and Thank you
Based on the previous work from JPLachance coveo/wazuh-kubernetes (2018/11/22).
License and copyright
WAZUH Copyright (C) 2016, Wazuh Inc. (License GPLv2)