From 5cd8b965459628b5a7b455a896399a27efab6120 Mon Sep 17 00:00:00 2001 From: Jeff Rybczynski <32111934+jryb@users.noreply.github.com> Date: Thu, 7 Apr 2022 11:32:52 -0700 Subject: [PATCH 1/5] CSPL-1685 Removing paging for splunk_monitor tasks (#678) Add count=0 parameter to all rest calls so we do not using paging and get all results at once --- roles/splunk_monitor/tasks/main.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/roles/splunk_monitor/tasks/main.yml b/roles/splunk_monitor/tasks/main.yml index 8d874e91..ace0056e 100644 --- a/roles/splunk_monitor/tasks/main.yml +++ b/roles/splunk_monitor/tasks/main.yml @@ -25,7 +25,7 @@ - name: Fetch clusterMaster peers uri: - url: "{{ cert_prefix }}://{{ splunk.cluster_master_url }}:{{ splunk.svc_port }}/services/cluster/master/peers?output_mode=json" + url: "{{ cert_prefix }}://{{ splunk.cluster_master_url }}:{{ splunk.svc_port }}/services/cluster/master/peers?output_mode=json&count=0" method: GET user: "{{ splunk.admin_user }}" password: "{{ splunk.password }}" @@ -49,7 +49,7 @@ - name: Fetch distributed peers when cm is defined uri: - url: "{{ cert_prefix }}://127.0.0.1:{{ splunk.svc_port }}/services/search/distributed/peers?output_mode=json" + url: "{{ cert_prefix }}://127.0.0.1:{{ splunk.svc_port }}/services/search/distributed/peers?output_mode=json&count=0" method: GET user: "{{ splunk.admin_user }}" password: "{{ splunk.password }}" @@ -70,7 +70,7 @@ - name: Fetch distributed peers uri: - url: "{{ cert_prefix }}://127.0.0.1:{{ splunk.svc_port }}/services/search/distributed/peers?output_mode=json" + url: "{{ cert_prefix }}://127.0.0.1:{{ splunk.svc_port }}/services/search/distributed/peers?output_mode=json&count=0" method: GET user: "{{ splunk.admin_user }}" password: "{{ splunk.password }}" From c3745f2212a2c5457e184236b0d92569581392d6 Mon Sep 17 00:00:00 2001 From: adityapinglesf <79232267+adityapinglesf@users.noreply.github.com> Date: Mon, 16 May 2022 13:17:47 -0400 Subject: [PATCH 2/5] updated changelog for release/8110; (#683) --- docs/CHANGELOG.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index ac90d8bd..e2643bff 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -9,6 +9,7 @@ * [8.2.2](#822) * [8.2.1](#821) * [8.2.0](#820) +* [8.1.10](#8110) * [8.1.9](#819) * [8.1.8](#818) * [8.1.7.1](#8171) @@ -124,6 +125,13 @@ --- +## 8.1.10 + +#### Changes +* Bugfixes + +--- + ## 8.1.9 #### What's New? From 59042e1e46e22923cc77bdba07be590d9325d82b Mon Sep 17 00:00:00 2001 From: Aditya Pingle Date: Thu, 19 May 2022 11:59:00 -0400 Subject: [PATCH 3/5] remove etc passwd file if exists, for Windows; --- roles/splunk_common/tasks/enable_admin_auth.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/roles/splunk_common/tasks/enable_admin_auth.yml b/roles/splunk_common/tasks/enable_admin_auth.yml index 702661a7..f5d6ca16 100644 --- a/roles/splunk_common/tasks/enable_admin_auth.yml +++ b/roles/splunk_common/tasks/enable_admin_auth.yml @@ -28,6 +28,12 @@ become_user: "{{ splunk.user }}" no_log: "{{ hide_password }}" + - name: "Delete etc/passwd if exists (Windows)" + file: + path: "{{ splunk.home }}/etc/passwd" + state: absent + when: ansible_system is match("CYGWIN*|Win32NT") + - name: "Generate user-seed.conf (Windows)" ini_file: dest: "{{ splunk.home }}/etc/system/local/user-seed.conf" From cb19d03f4f18289a5c20ad76b0b79f636bdd0543 Mon Sep 17 00:00:00 2001 From: Jeff Rybczynski <32111934+jryb@users.noreply.github.com> Date: Wed, 1 Jun 2022 09:01:12 -0700 Subject: [PATCH 4/5] CSPL-1132: Allow disabling splunk web with http_port=0 (#688) * Allow disabling splunk web with http_port=0 * Add doc changes to disable SplunkWeb --- docs/ADVANCED.md | 2 +- roles/splunk_common/tasks/set_http_port.yml | 11 +++++++++++ 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/docs/ADVANCED.md b/docs/ADVANCED.md index 255a5f50..088d0e7a 100644 --- a/docs/ADVANCED.md +++ b/docs/ADVANCED.md @@ -75,7 +75,7 @@ Splunk-Ansible ships with an inventory script in `inventory/environ.py`. The scr | SPLUNK_APPS_URL | Pass in a comma-separated list of local paths or remote URLs to Splunk apps that will get installed | no | no | no | | SPLUNKBASE_USERNAME | Splunkbase username used for authentication when installing an app from [Splunkbase](https://splunkbase.splunk.com/) | no | no | no | | SPLUNKBASE_PASSWORD | Splunkbase password used for authentication when installing an app from [Splunkbase](https://splunkbase.splunk.com/) | no | no | no | -| SPLUNK_HTTP_PORT | Port to run SplunkWeb on. Default: `8000` | no | no | no | +| SPLUNK_HTTP_PORT | Port to run SplunkWeb on. To disable SplunkWeb, set to `0`. Default: `8000` | no | no | no | | SPLUNK_HTTP_ENABLESSL | Enable HTTPS on SplunkWeb | no | no | no | | SPLUNK_HTTP_ENABLESSL_CERT | Path to SSL certificate used for SplunkWeb, if HTTPS is enabled | no | no | no | | SPLUNK_HTTP_ENABLESSL_PRIVKEY | Path to SSL private key used for SplunkWeb, if HTTPS is enabled | no | no | no | diff --git a/roles/splunk_common/tasks/set_http_port.yml b/roles/splunk_common/tasks/set_http_port.yml index 725ec0ef..84c93ded 100644 --- a/roles/splunk_common/tasks/set_http_port.yml +++ b/roles/splunk_common/tasks/set_http_port.yml @@ -1,4 +1,14 @@ --- +- name: Disable Web UI + ini_file: + dest: "{{ splunk.home }}/etc/system/local/web.conf" + section: settings + option: "startwebserver" + value: "{{ splunk.http_port }}" + owner: "{{ splunk.user }}" + group: "{{ splunk.group }}" + when: splunk.http_port == 0 + - name: Set HTTP Port ini_file: dest: "{{ splunk.home }}/etc/system/local/web.conf" @@ -7,3 +17,4 @@ value: "{{ splunk.http_port }}" owner: "{{ splunk.user }}" group: "{{ splunk.group }}" + when: splunk.http_port != 0 From 2b6e92b7409d7791fe4717fff8cf25690b56f01f Mon Sep 17 00:00:00 2001 From: Alisha Mayor Date: Wed, 15 Jun 2022 14:22:38 -0700 Subject: [PATCH 5/5] Updating changelog for 9.0.0 release (#691) * Updating changelog for 9.0.0 release * Updating CI image * updating default apps * Updated Python version * testing python version install --- .circleci/config.yml | 5 +++-- Makefile | 2 +- docs/CHANGELOG.md | 17 +++++++++++++++++ roles/splunk_common/vars/main.yml | 4 ++-- 4 files changed, 23 insertions(+), 5 deletions(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index 1d07ece1..1577aa42 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -3,7 +3,7 @@ version: 2.1 executors: circleci_xlarge: machine: - image: ubuntu-1604:202007-01 + image: ubuntu-2004:202201-02 resource_class: xlarge jobs: @@ -14,7 +14,8 @@ jobs: - run: name: Setup Python3 command: | - pyenv global 2.7.18 3.7.8 + pyenv versions + pyenv global 2.7.18 3.10.2 python --version pip --version python3 --version diff --git a/Makefile b/Makefile index 90e4d43e..95871115 100644 --- a/Makefile +++ b/Makefile @@ -4,7 +4,7 @@ SHELL := /bin/bash test-setup: @echo 'Install test requirements' - pip install pip==20.3.4 + pip install --upgrade pip pip install -r $(shell pwd)/tests/requirements.txt --upgrade py3k-test-setup: diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index e2643bff..1bd91404 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -2,6 +2,8 @@ ## Navigation +* [9.0.0](#900) +* [8.2.6](#826) * [8.2.5](#825) * [8.2.4](#824) * [8.2.3.2](#8232) @@ -64,6 +66,21 @@ --- +## 9.0.0 + +#### Changes +* Support for latest major Splunk release +* Documentation updates + bugfixes + +--- + +## 8.2.6 + +#### Changes +* Bugfixes + +--- + ## 8.2.5 #### Changes diff --git a/roles/splunk_common/vars/main.yml b/roles/splunk_common/vars/main.yml index 8966e65e..fa45fc89 100644 --- a/roles/splunk_common/vars/main.yml +++ b/roles/splunk_common/vars/main.yml @@ -1,10 +1,10 @@ --- default_apps: [ "legacy", "splunk_gdi", "SplunkForwarder", "SplunkLightForwarder", "gettingstarted", "splunk-dashboard-studio", - "alert_webhook", "splunk_httpinput", "introspection_generator_addon", "user-prefs", "splunk_essentials_8_2", + "alert_webhook", "splunk_httpinput", "introspection_generator_addon", "user-prefs", "splunk_essentials_9_0", "appsbrowser", "framework", "learned", "launcher", "alert_logevent", "sample_app", "python_upgrade_readiness_app", "splunk_instrumentation", "search", "splunk_archiver", "splunk_monitoring_console", "splunk_rapid_diag", "_splunk_config", "splunk_enterprise_on_docker", "splunk_forwarder_on_docker", "journald_input", - "splunk_metrics_workspace", "splunk_internal_metrics", "splunk_telemetry", "splunk_secure_gateway" ] + "splunk_metrics_workspace", "splunk_internal_metrics", "splunk_telemetry", "splunk_secure_gateway", "splunk_assist" ] itsi_apps: [ "DA-ITSI-APPSERVER", "DA-ITSI-DATABASE", "DA-ITSI-EUEM", "DA-ITSI-LB", "DA-ITSI-OS", "DA-ITSI-STORAGE", "DA-ITSI-VIRTUALIZATION", "DA-ITSI-WEBSERVER", "SA-ITOA", "SA-ITSI-ATAD", "SA-UserAccess", "SA-ITSI-CustomModuleViz", "SA-ITSI-MetricAD", "SA-ITSI-Licensechecker", "itsi", "splunk_app_infrastructure" ]