Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

I cannot join wazuh agent with ingress port 443 #586

Open
soknang-khna opened this issue Feb 8, 2024 · 1 comment
Open

I cannot join wazuh agent with ingress port 443 #586

soknang-khna opened this issue Feb 8, 2024 · 1 comment

Comments

@soknang-khna
Copy link

Dear wazuh support team,
I face issue with wazuh relate wazuh agent cannot join to wazuh server via kubernetes ingress that using dns port 443.
this sample me create ingress point to wazuh backend service as below:
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations:
nginx.ingress.kubernetes.io/backend-protocol: HTTPS
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
nginx.ingress.kubernetes.io/proxy-body-size: "500m"
name: wazuh-master
namespace: wazuh
spec:
ingressClassName: nginx
rules:

  • host: wazuh-master.domain
    http:
    paths:
    • backend:
      service:
      name: wazuh
      port:
      number: 1515
      path: /
      pathType: Prefix

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations:
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
nginx.ingress.kubernetes.io/proxy-body-size: "500m"
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
name: wazuh-workers
namespace: wazuh
spec:
ingressClassName: nginx
rules:

  • host: wazuh-manager.domain
    http:
    paths:
    • backend:
      service:
      name: wazuh-workers
      port:
      number: 1514
      path: /
      pathType: Prefix
@Thorgrym
Copy link

Thorgrym commented Apr 2, 2024

I'm not an expert but wazhu agent are using 1514 and 1515 ports by default so they won't use the 443 of the ingress.
What is your agent config ?
Also If you want to expose wazuh to the outside there is no need for an Ingress because the nodes are configured in LoadBalancer (you could use an Ingress If you want but it's not necessary that's just what I mean)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants