PoC of managing certificates with cert-manager

[gecube]

This PR closes #576

[nicolasjulian]

Hello, I tried these changes, and I spotted this typo for the secret name here.

  Normal   Scheduled    31s                default-scheduler  Successfully assigned wazuh/wazuh-manager-worker-0 to node1
  Warning  FailedMount  15s (x6 over 30s)  kubelet            MountVolume.SetUp failed for volume "filebeat-certs" : secret "fliebeat-tls" not found

Should be filebeat-tls

Thank you

[gecube]

@nicolasjulian Thank you very much for the comments. I will check and fix.

[gecube]

thanks. Could you make another try please?

[nicolasjulian]

Hello,

Everything looks good on my end. I've but I corrected a typo locally. However, I noticed that for the current stable image version 4.7.3, the configuration mismatch is (( this is before your latest commit )):

uiSettings.overrides.defaultRoute: /app/wazuh

Is there has been a change to the default route in newer versions? in 4.9.0?

[gecube]

@nicolasjulian could you test once more please? If the path should be changed, I can do it.

[gecube]

@CarlosALgit Hi! Could you kindly review the PR and give your feedback?

[zznyjidi]

Also, to make vulnerability detection work, the config file for the master and worker pod also needs to be changed
In file wazuh/wazuh_managers/wazuh_conf/master.conf
and wazuh/wazuh_managers/wazuh_conf/worker.conf

<ssl>
  <certificate_authorities>
    <ca>/etc/ssl/root-ca.pem</ca>
  </certificate_authorities>
  <certificate>/etc/ssl/filebeat.pem</certificate>
  <key>/etc/ssl/filebeat.key</key>
</ssl>

this part is using the original certificate path and should be changed to

<ssl>
  <certificate_authorities>
    <ca>/etc/ssl/ca.crt</ca>
  </certificate_authorities>
  <certificate>/etc/ssl/tls.crt</certificate>
  <key>/etc/ssl/tls.key</key>
</ssl>

[gecube]

@zznyjidi thanks, I will fix.