mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-04-25 05:57:49 +02:00
reyesj2
47 lines
2.1 KiB
Bash
47 lines
2.1 KiB
Bash
#!/bin/bash
|
|
|
|
# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
|
|
# or more contributor license agreements. Licensed under the Elastic License 2.0; you may not use
|
|
# this file except in compliance with the Elastic License 2.0.
|
|
|
|
. /usr/sbin/so-common
|
|
. /usr/sbin/so-elastic-fleet-common
|
|
{%- import_yaml 'elasticsearch/defaults.yaml' as ELASTICSEARCHDEFAULTS %}
|
|
{%- import_yaml 'elasticfleet/defaults.yaml' as ELASTICFLEETDEFAULTS %}
|
|
{# Optionally override Elasticsearch version for Elastic Agent patch releases #}
|
|
{%- if ELASTICFLEETDEFAULTS.elasticfleet.patch_version is defined %}
|
|
{%- do ELASTICSEARCHDEFAULTS.elasticsearch.update({'version': ELASTICFLEETDEFAULTS.elasticfleet.patch_version}) %}
|
|
{%- endif %}
|
|
|
|
# Only run on Managers
|
|
if ! is_manager_node; then
|
|
printf "Not a Manager Node... Exiting"
|
|
exit 0
|
|
fi
|
|
|
|
# Get current list of Grid Node Agents that need to be upgraded
|
|
if ! RAW_JSON=$(fleet_api "agents?perPage=20&page=1&kuery=NOT%20agent.version%3A%20{{ELASTICSEARCHDEFAULTS.elasticsearch.version | urlencode }}%20AND%20policy_id%3A%20so-grid-nodes_%2A&showInactive=false&getStatusSummary=true" -H 'kbn-xsrf: true' -H 'Content-Type: application/json'); then
|
|
|
|
printf "Failed to query for current Grid Agents...\n"
|
|
exit 1
|
|
fi
|
|
|
|
# Generate list of Node Agents that need updates
|
|
OUTDATED_LIST=$(jq -r '.items | map(.id) | (tojson)' <<< "$RAW_JSON")
|
|
|
|
if [ "$OUTDATED_LIST" != '[]' ]; then
|
|
AGENTNUMBERS=$(jq -r '.total' <<< "$RAW_JSON")
|
|
printf "Initiating upgrades for $AGENTNUMBERS Agents to Elastic {{ELASTICSEARCHDEFAULTS.elasticsearch.version}}...\n\n"
|
|
|
|
# Generate updated JSON payload
|
|
JSON_STRING=$(jq -n --arg ELASTICVERSION "{{ELASTICSEARCHDEFAULTS.elasticsearch.version}}" --argjson UPDATELIST "$OUTDATED_LIST" '{"version": $ELASTICVERSION,"agents": $UPDATELIST }')
|
|
|
|
# Update Node Agents
|
|
if ! fleet_api "agents/bulk_upgrade" -XPOST -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d "$JSON_STRING"; then
|
|
printf "Failed to initiate Agent upgrades...\n"
|
|
fi
|
|
else
|
|
printf "No Agents need updates... Exiting\n\n"
|
|
exit 0
|
|
fi
|