Skip to content

Releases: morgoved/wazuh-helm

wazuh-2.0.4

Choose a tag to compare

@github-actions github-actions released this 04 Aug 16:48
247062d

Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads.

feat(dashboard): add k8s gateway resources and fix file templating- #172
#172

wazuh-2.0.3

Choose a tag to compare

@github-actions github-actions released this 24 Jul 14:26
da6abb1

Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads.
fix(indexer): remove duplicate pod securityContext in indexer Job template#170

wazuh-2.0.2

Choose a tag to compare

@github-actions github-actions released this 21 Jul 09:53
f1db03e

Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads.

fix(manager): name master API Service after the chart fullname
#169

wazuh-2.0.1

Choose a tag to compare

@github-actions github-actions released this 17 Jul 13:44
25b9945

feat(loadbalancer): tune loadBalancer knobs via values #167

Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads.

wazuh-2.0.0

Choose a tag to compare

@github-actions github-actions released this 26 Jun 16:47
2aff469

Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads.

[2.0.0] Refactoring & Security fixes #151

This major update brings the chart to Wazuh 4.14.3, significantly improves security posture, fixes several template bugs, and refactors configuration management.

Features & Enhancements:

Bumped appVersion to 4.14.3 and chart version to 2.0.0.
Bumped cert-manager dependency to 1.19.3.
Added full LDAP / Active Directory authentication and authorization support for the Indexer via values.yaml.
Added nodePort support for Agent, Dashboard, and Manager cluster services.
Added extensive dnsNames (SANs) to filebeat and node certificates for robust TLS validation and changed the filebeat commonName to the manager's fullname.
Added support for ClusterIssuer in all certificate templates.
Improved Dashboard config: dynamically resolving WAZUH_API_URL and injecting WAZUH_API_PORT.
Security Improvements:

Changed automountServiceAccountToken default to false across all ServiceAccounts.
Moved OpenSearch security configurations (internal_users, roles, etc.) from plain ConfigMaps to a secured Secret (indexer-security).
Tightened volume mount permissions for manager configs from 0777 to 0755.
Added explicit fsGroup context (1000/101) to Indexer setup job and Manager StatefulSet.
Refactoring:

Removed massive hardcoded configuration blocks from _helpers.tpl. Manager configuration files are now elegantly loaded using .Files.Get (e.g., script.sh, local_decoder.xml, local_rules.xml).
Bug Fixes:

Fixed Agent DaemonSet names/labels (used wazuh.indexer.fullname instead of wazuh.fullname).
Fixed Indexer NetworkPolicy label selectors (wrongly targeted indexer.fullname for dashboard/manager instead of wazuh.fullname).
Fixed Dashboard Deployment applying .Values.indexer.annotations instead of .Values.dashboard.annotations.
Fixed Dashboard NetworkPolicy to dynamically look up the API port instead of relying on a hardcoded loop.
BREAKING CHANGE: This release introduces several breaking changes that require manual intervention during upgrades:

Config Management: Configurations like master.conf, worker.conf, and opensearch.yml are now loaded via .Files.Get from external files. Inline overrides via values.yaml for these specific config blocks are no longer supported and will be ignored.
Agent DaemonSet Labels: The label selectors for the Agent DaemonSet have been corrected. Since spec.selector.matchLabels is immutable in Kubernetes, existing agent DaemonSets must be manually deleted (kubectl delete ds -wazuh-agent) prior to upgrading.
ServiceAccount Security: automountServiceAccountToken is now set to false by default. If you rely on custom scripts or sidecars that communicate with the Kubernetes API, you must explicitly set this back to true in your values.yaml.

wazuh-1.0.23

Choose a tag to compare

@github-actions github-actions released this 06 May 20:42
8de3284

Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads.

wazuh-1.0.22

Choose a tag to compare

@github-actions github-actions released this 24 Mar 12:20
a6d6350

Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads.

nfs storage for backups #159

wazuh-1.0.21

Choose a tag to compare

@github-actions github-actions released this 05 Mar 10:26
b5b0820

Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads.

Adjusting job template and helm values for resources #156

wazuh-1.0.20

Choose a tag to compare

@github-actions github-actions released this 28 Feb 14:18
5d99109

Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads.

fix: add apiVersion,kind to volumeClaimTemplates #153

wazuh-1.0.19

Choose a tag to compare

@github-actions github-actions released this 23 Feb 11:00
5a46728

Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads.

Fix external indexer hostname #150
fix: dualStack enabled flag #152