diff --git a/.github/ISSUE_TEMPLATE/compatibility_request.md b/.github/ISSUE_TEMPLATE/compatibility_request.md
new file mode 100644
index 000000000000..b294b6fc8704
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/compatibility_request.md
@@ -0,0 +1,23 @@
+---
+name: Compatibility request
+about: Suggest supporting a new version of OpenSearch
+title: 'Compatibility with OpenSearch (version)'
+labels: compatibility, level/task, type/research
+assignees: ''
+
+---
+
+## Description
+We need to ensure the UI compatibility with the next version of OpenSearch vX.X.
+This update is still being discussed, but we need to be aware of potential issues.
+
+For that, we need to:
+
+- [ ] Review opensearch and opensearch-dashboard latest stable changelog.
+- [ ] Identify improvements and potential impact on the UI.
+- [ ] Create new tracking and development branches.
+- [ ] Develop a testing environment to verify our components would work under this new build.
+
+
+## Issues
+- _List here the detected issues_
diff --git a/.github/ISSUE_TEMPLATE/new_release.md b/.github/ISSUE_TEMPLATE/new_release.md
new file mode 100644
index 000000000000..2a8fb24f0e4d
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/new_release.md
@@ -0,0 +1,33 @@
+---
+name: New release
+about: "[wazuh-team] Track the effort of the team to release a new version of Wazuh"
+title: Support for Wazuh 4.x.x
+labels: level/task, type/enhancement
+assignees: ''
+
+---
+
+## Description
+
+Example:
+> Wazuh 4.3.8 will be released shortly. Our Wazuh Dashboard app need to support this new version. From our side, no changes will be included, so we only need to bump the version.
+
+
+## Tasks
+
+### Pre-release
+- [ ] Add support for Wazuh 4.x.x (bump).
+- [ ] Generate the required tags.
+- [ ] Generate the packages.
+- [ ] Test the packages, to verify they install, and the app works as expected.
+- [ ] [Optional] Run Regression Testing (#issue)
+- [ ] Generate draft releases.
+- [ ] Notify the @wazuh/cicd and @wazuh/content teams that the release is good to go, from our side.
+
+### Post-release
+- [ ] Make draft releases final and public.
+- [ ] Sync branches.
+
+### Supported versions
+
+Same as on [previous releases](https://github.com/wazuh/wazuh-dashboard/wiki/Compatibility)
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 000000000000..8baaf0415e3c
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,92 @@
+# This is a basic workflow that is manually triggered
+
+name: Build
+
+on:
+ workflow_call:
+ inputs:
+ CHECKOUT_TO: # This is the branch to checkout to. Defaults to 'master'
+ description: 'The branch/tag/commit to checkout to'
+ required: true
+ default: ''
+ type: string
+ workflow_dispatch:
+ inputs:
+ CHECKOUT_TO: # This is the branch to checkout to. Defaults to 'master'
+ description: 'The branch/tag/commit to checkout to'
+ required: true
+ default: ''
+
+jobs:
+ build:
+ runs-on: ubuntu-latest
+ name: Build
+ defaults:
+ run:
+ working-directory: ./artifacts
+ strategy:
+ matrix:
+ DISTRIBUTION: [ tar.gz ]
+ ARCHITECTURE: [ x64 ]
+
+ steps:
+ - name: Checkout code
+ uses: actions/checkout@v4
+ with:
+ repository: wazuh/wazuh-dashboard
+ path: ./artifacts
+ ref: ${{ inputs.CHECKOUT_TO }}
+
+ - name: Setup Node
+ uses: actions/setup-node@v3
+ with:
+ node-version-file: './artifacts/.nvmrc'
+ registry-url: 'https://registry.npmjs.org'
+
+ - name: Setup Yarn
+ run: |
+ npm uninstall -g yarn
+ npm i -g yarn@1.22.10
+ yarn config set network-timeout 1000000 -g
+
+ - name: Configure Yarn Cache
+ run: echo "YARN_CACHE_LOCATION=$(yarn cache dir)" >> $GITHUB_ENV
+
+ - name: Initialize Yarn Cache
+ uses: actions/cache@v3
+ with:
+ path: ${{ env.YARN_CACHE_LOCATION }}
+ key: yarn-${{ hashFiles('**/yarn.lock') }}
+ restore-keys: |
+ yarn-
+
+ - name: Get package version
+ run: |
+ echo "VERSION=$(yarn --silent pkg-version)" >> $GITHUB_ENV
+ echo "WZD_VERSION=$(yarn --silent wzd-version)" >> $GITHUB_ENV
+ echo "WZD_REVISION=$(yarn --silent wzd-revision)" >> $GITHUB_ENV
+
+ - name: Get artifact build name
+ run: |
+ echo "ARTIFACT_BUILD_NAME=wazuh-dashboard_${{ env.WZD_VERSION }}-${{ env.WZD_REVISION }}_${{ matrix.ARCHITECTURE }}_${{ inputs.CHECKOUT_TO }}.${{ matrix.DISTRIBUTION }}" >> $GITHUB_ENV
+
+ - name: Run bootstrap
+ run: yarn osd bootstrap
+
+ - name: Build linux-x64
+ if: matrix.ARCHITECTURE == 'x64'
+ run: yarn build-platform --linux --skip-os-packages --release
+
+ - name: Build linux-arm64
+ if: matrix.ARCHITECTURE == 'arm64'
+ run: yarn build-platform --linux-arm --skip-os-packages --release
+
+ - name: Rename artifact
+ run: mv /home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/opensearch-dashboards-${{ env.VERSION }}-linux-${{ matrix.ARCHITECTURE }}.${{ matrix.DISTRIBUTION }} /home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/${{ env.ARTIFACT_BUILD_NAME }}
+
+ - uses: actions/upload-artifact@v3
+ if: success()
+ with:
+ name: ${{ env.ARTIFACT_BUILD_NAME }}
+ path: ./artifacts/target/${{ env.ARTIFACT_BUILD_NAME }}
+ retention-days: 30
diff --git a/.github/workflows/build_wazuh_dashboard_with_plugins.yml b/.github/workflows/build_wazuh_dashboard_with_plugins.yml
new file mode 100644
index 000000000000..8ab9a563409e
--- /dev/null
+++ b/.github/workflows/build_wazuh_dashboard_with_plugins.yml
@@ -0,0 +1,212 @@
+name: Build final packages
+
+on:
+ workflow_dispatch:
+ inputs:
+ REFERENCE_SECURITY_PLUGIN:
+ description: 'Reference Wazuh security packages (branch/tag/commit)'
+ required: true
+ default: ''
+ REFERENCE_WAZUH_PLUGINS:
+ description: 'Reference Wazuh plugins (branch/tag/commit)'
+ required: true
+ default: ''
+ REFERENCE_WAZUH_DASHBOARD:
+ description: 'Reference Wazuh dashboard (branch/tag/commit)'
+ required: true
+ default: ''
+ DISTRIBUTION:
+ description: 'Distribution to build (deb | rpm | tar | all-platforms)'
+ required: true
+ default: ''
+
+jobs:
+ build-plugins:
+ name: Build plugins
+ uses: wazuh/wazuh-dashboard-plugins/.github/workflows/manual-build.yml@master
+ with:
+ reference: ${{ inputs.REFERENCE_WAZUH_PLUGINS }}
+
+ build-dashboard:
+ name: Build dashboard
+ uses: wazuh/wazuh-dashboard/.github/workflows/build.yml@4.9.0
+ with:
+ CHECKOUT_TO: ${{ inputs.REFERENCE_WAZUH_DASHBOARD }}
+
+ build-security-plugin:
+ name: Build security plugin
+ uses: wazuh/wazuh-security-dashboards-plugin/.github/workflows/manual-build.yml@4.9.0
+ with:
+ reference: ${{ inputs.REFERENCE_SECURITY_PLUGIN }}
+
+
+ Build-base-package:
+ needs: [build-plugins, build-dashboard, build-security-plugin]
+ runs-on: ubuntu-latest
+ name: Generate final packages
+ strategy:
+ fail-fast: false
+ matrix:
+ # TODO: Add arm64 support
+ ARCHITECTURE: [ x64 ]
+ steps:
+ - name: Checkout code
+ uses: actions/checkout@v4
+
+ - name: Setup Node
+ uses: actions/setup-node@v3
+ with:
+ node-version-file: '.nvmrc'
+ registry-url: 'https://registry.npmjs.org'
+
+ - name: Setup variables
+ run: |
+ echo "CURRENT_DIR=$(pwd -P)" >> $GITHUB_ENV
+ echo "VERSION=$(yarn --silent wzd-version)" >> $GITHUB_ENV
+ echo "REVISION=$(yarn --silent wzd-revision)" >> $GITHUB_ENV
+
+ - name: Setup packages names
+ run: |
+ echo "WAZUH_DASHBOARD_SLIM=wazuh-dashboard_${{ env.VERSION }}-${{ env.REVISION }}_${{ matrix.ARCHITECTURE }}_${{ inputs.REFERENCE_WAZUH_DASHBOARD }}.tar.gz" >> $GITHUB_ENV
+ echo "WAZUH_SECURITY_PLUGIN=wazuh-security-dashboards-plugin_${{ env.VERSION }}-${{ env.REVISION }}_${{ inputs.REFERENCE_SECURITY_PLUGIN }}.zip" >> $GITHUB_ENV
+ echo "WAZUH_PLUGINS=wazuh-dashboard-plugins_${{ env.VERSION }}-${{ env.REVISION }}_${{ inputs.REFERENCE_WAZUH_PLUGINS }}.zip" >> $GITHUB_ENV
+
+ - name: Download dashboard artifact
+ uses: actions/download-artifact@v3
+ with:
+ name: ${{ env.WAZUH_DASHBOARD_SLIM }}
+ path: ${{ env.CURRENT_DIR }}/artifacts/dashboard
+
+ - name: Download security plugin artifact
+ uses: actions/download-artifact@v3
+ with:
+ name: ${{ env.WAZUH_SECURITY_PLUGIN }}
+ path: ${{ env.CURRENT_DIR }}/artifacts/security-plugin
+
+ - name: Download plugins artifacts
+ uses: actions/download-artifact@v3
+ with:
+ name: ${{ env.WAZUH_PLUGINS }}
+ path: ${{ env.CURRENT_DIR }}/artifacts/plugins
+
+ - name: Zip plugins
+ run: |
+ zip -r -j ${{ env.CURRENT_DIR }}/artifacts/wazuh-package.zip ${{ env.CURRENT_DIR }}/artifacts/plugins
+ zip -r -j ${{ env.CURRENT_DIR }}/artifacts/security-package.zip ${{ env.CURRENT_DIR }}/artifacts/security-plugin
+ zip -r -j ${{ env.CURRENT_DIR }}/artifacts/dashboard-package.zip ${{ env.CURRENT_DIR }}/artifacts/dashboard/${{ env.WAZUH_DASHBOARD_SLIM }}
+
+
+ - name: Build packages
+ run: |
+ cd ${{ env.CURRENT_DIR }}/dev-tools/build-packages
+ bash ./build-packages.sh \
+ -v ${{ env.VERSION }} \
+ -r ${{ env.REVISION }} \
+ -a file://${{env.CURRENT_DIR}}/artifacts/wazuh-package.zip \
+ -s file://${{env.CURRENT_DIR}}/artifacts/security-package.zip \
+ -b file://${{env.CURRENT_DIR}}/artifacts/dashboard-package.zip \
+ --tar
+
+
+ - name: Upload tar packages
+ uses: actions/upload-artifact@v3
+ with:
+ name: wazuh-dashboard-${{ env.VERSION }}-${{ env.REVISION }}-linux-${{ matrix.ARCHITECTURE }}.tar.gz
+ path: ${{ env.CURRENT_DIR }}/dev-tools/build-packages/output/wazuh-dashboard-${{ env.VERSION }}-${{ env.REVISION }}-linux-${{ matrix.ARCHITECTURE }}.tar.gz
+ retention-days: 30
+
+ build-deb-package:
+ needs: [Build-base-package]
+ if: ( contains(inputs.DISTRIBUTION, 'deb') || contains(inputs.DISTRIBUTION, 'all-platforms') )
+ runs-on: ubuntu-latest
+ name: Build deb package
+ strategy:
+ fail-fast: false
+ matrix:
+ # TODO: Add arm64 support
+ ARCHITECTURE: [ x64 ]
+ steps:
+ - name: Checkout code
+ uses: actions/checkout@v4
+
+ - name: Setup Node
+ uses: actions/setup-node@v3
+ with:
+ node-version-file: '.nvmrc'
+ registry-url: 'https://registry.npmjs.org'
+
+ - name: Setup variables
+ run: |
+ echo "CURRENT_DIR=$(pwd -P)" >> $GITHUB_ENV
+ echo "VERSION=$(yarn --silent wzd-version)" >> $GITHUB_ENV
+ echo "REVISION=$(yarn --silent wzd-revision)" >> $GITHUB_ENV
+
+ - name: Download dashboard artifact
+ uses: actions/download-artifact@v3
+ with:
+ name: wazuh-dashboard-${{ env.VERSION }}-${{ env.REVISION }}-linux-${{ matrix.ARCHITECTURE }}.tar.gz
+ path: ${{ env.CURRENT_DIR }}/artifacts/dashboard-tar
+
+ - name: Build packages
+ run: |
+ cd ${{ env.CURRENT_DIR }}/dev-tools/build-packages/deb/
+ bash ./launcher.sh \
+ -v ${{ env.VERSION }} \
+ -r ${{ env.REVISION }} \
+ -p file://${{env.CURRENT_DIR}}/artifacts/dashboard-tar/wazuh-dashboard-${{ env.VERSION }}-${{ env.REVISION }}-linux-${{ matrix.ARCHITECTURE }}.tar.gz
+
+ - name: Upload deb packages
+ uses: actions/upload-artifact@v3
+ if: success()
+ with:
+ name: wazuh-dashboard_${{ env.VERSION }}-${{ env.REVISION }}_amd64.deb
+ path: ${{ env.CURRENT_DIR }}/dev-tools/build-packages/deb/output/wazuh-dashboard_${{ env.VERSION }}-${{ env.REVISION }}_amd64.deb
+ retention-days: 30
+
+
+ build-rpm-package:
+ needs: [Build-base-package]
+ if: ( contains(inputs.DISTRIBUTION, 'rpm') || contains(inputs.DISTRIBUTION, 'all-platforms') )
+ runs-on: ubuntu-latest
+ name: Build rpm package
+ strategy:
+ fail-fast: false
+ matrix:
+ ARCHITECTURE: [ x64 ]
+ steps:
+ - name: Checkout code
+ uses: actions/checkout@v4
+
+ - name: Setup Node
+ uses: actions/setup-node@v3
+ with:
+ node-version-file: '.nvmrc'
+ registry-url: 'https://registry.npmjs.org'
+
+ - name: Setup variables
+ run: |
+ echo "CURRENT_DIR=$(pwd -P)" >> $GITHUB_ENV
+ echo "VERSION=$(yarn --silent wzd-version)" >> $GITHUB_ENV
+ echo "REVISION=$(yarn --silent wzd-revision)" >> $GITHUB_ENV
+
+ - name: Download dashboard artifact
+ uses: actions/download-artifact@v3
+ with:
+ name: wazuh-dashboard-${{ env.VERSION }}-${{ env.REVISION }}-linux-${{ matrix.ARCHITECTURE }}.tar.gz
+ path: ${{ env.CURRENT_DIR }}/artifacts/dashboard-tar
+
+ - name: Build packages
+ run: |
+ cd ${{ env.CURRENT_DIR }}/dev-tools/build-packages/rpm/
+ bash ./launcher.sh \
+ -v ${{ env.VERSION }} \
+ -r ${{ env.REVISION }} \
+ -p file://${{env.CURRENT_DIR}}/artifacts/dashboard-tar/wazuh-dashboard-${{ env.VERSION }}-${{ env.REVISION }}-linux-${{ matrix.ARCHITECTURE }}.tar.gz
+
+ - name: Upload rpm packages
+ uses: actions/upload-artifact@v3
+ if: success()
+ with:
+ name: wazuh-dashboard-${{ env.VERSION }}-${{ env.REVISION }}.x86_64.rpm
+ path: ${{ env.CURRENT_DIR }}/dev-tools/build-packages/rpm/output/wazuh-dashboard-${{ env.VERSION }}-${{ env.REVISION }}.x86_64.rpm
+ retention-days: 30
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 000000000000..092c298a32e4
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,77 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL"
+
+on:
+ push:
+ branches: [ "main", "[0-9].[0-9]", "[0-9].x" ]
+ pull_request:
+ # The branches below must be a subset of the branches above
+ branches: [ "main" ]
+ schedule:
+ - cron: '00 8 * * 5'
+ workflow_dispatch:
+
+jobs:
+ analyze:
+ name: Analyze
+ runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
+ permissions:
+ actions: read
+ contents: read
+ security-events: write
+
+ strategy:
+ fail-fast: false
+ matrix:
+ language: [ 'javascript' ]
+ # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
+ # Use only 'java' to analyze code written in Java, Kotlin or both
+ # Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
+ # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
+
+ steps:
+ - name: Checkout repository
+ uses: actions/checkout@v3
+
+ # Initializes the CodeQL tools for scanning.
+ - name: Initialize CodeQL
+ uses: github/codeql-action/init@v2
+ with:
+ languages: ${{ matrix.language }}
+ # If you wish to specify custom queries, you can do so here or in a config file.
+ # By default, queries listed here will override any specified in a config file.
+ # Prefix the list here with "+" to use these queries and those in the config file.
+
+ # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+ # queries: security-extended,security-and-quality
+
+
+ # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
+ # If this step fails, then you should remove it and run the build manually (see below)
+ - name: Autobuild
+ uses: github/codeql-action/autobuild@v2
+
+ # âšī¸ Command-line programs to run using the OS shell.
+ # đ See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+
+ # If the Autobuild fails above, remove it and uncomment the following three lines.
+ # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
+
+ # - run: |
+ # echo "Run, Build Application using script"
+ # ./location_of_script_within_repo/buildscript.sh
+
+ - name: Perform CodeQL Analysis
+ uses: github/codeql-action/analyze@v2
+ with:
+ category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/cypress_workflow.yml b/.github/workflows/cypress_workflow.yml
index b404f9c46240..0d7a7101c609 100644
--- a/.github/workflows/cypress_workflow.yml
+++ b/.github/workflows/cypress_workflow.yml
@@ -42,6 +42,7 @@ env:
COMMENT_TAG: '[MANUAL CYPRESS TEST RUN RESULTS]'
COMMENT_SUCCESS_MSG: ':white_check_mark: Cypress test run succeeded!'
COMMENT_FAILURE_MSG: ':x: Cypress test run failed!'
+ OPENSEARCH_VERSION: ${{ vars.OPENSEARCH_VERSION }}
jobs:
cypress-tests:
@@ -108,7 +109,7 @@ jobs:
with:
path: ${{ env.FTR_PATH }}
repository: ${{ env.TEST_REPO }}
- ref: '${{ env.TEST_BRANCH }}'
+ ref: '${{ env.OPENSEARCH_VERSION }}'
- name: Setup spec files by input
if: ${{ inputs.specs != '' }}
@@ -149,7 +150,7 @@ jobs:
working-directory: ${{ env.FTR_PATH }}
start: ${{ env.OPENSEARCH_SNAPSHOT_CMD }}, ${{ env.START_CMD }}
wait-on: 'http://localhost:9200, http://localhost:5601'
- command: yarn cypress:run-without-security --browser ${{ env.CYPRESS_BROWSER }} --spec ${{ env.SPEC }}
+ command: yarn cypress:run-without-security --browser ${{ env.CYPRESS_BROWSER }} --config ignoreTestFiles="dashboard_sanity_test_spec.js" --spec ${{ env.SPEC }}
# Screenshots are only captured on failure, will change this once we do visual regression tests
- uses: actions/upload-artifact@v3
@@ -158,7 +159,7 @@ jobs:
name: ftr-cypress-screenshots
path: ${{ env.FTR_PATH }}/cypress/screenshots
retention-days: 1
-
+
- uses: actions/upload-artifact@v3
if: always()
with:
@@ -172,7 +173,6 @@ jobs:
name: ftr-cypress-results
path: ${{ env.FTR_PATH }}/cypress/results
retention-days: 1
-
add-comment:
needs: [cypress-tests]
if: ${{ always() && github.event_name == 'workflow_dispatch' && inputs.pr_number != '' }}
@@ -207,6 +207,6 @@ jobs:
'${{ env.SPEC }}'
```
- #### Link to results:
+ #### Link to results:
${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
edit-mode: replace
diff --git a/.gitignore b/.gitignore
index f62e798ad6a5..295516907c5d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,7 @@
.aws-config.json
.signing-config.json
.ackrc
+/dev-tools/build-packages/*/output
/.opensearch
/.chromium
/package.json.bak
diff --git a/README.md b/README.md
index 0bd86bec6560..c4c1bf3909c2 100644
--- a/README.md
+++ b/README.md
@@ -1,44 +1,41 @@
-
+
+
+