Wazuh on EKS trying to install plugin

[Fernando André]

Hello,

Has the title mentions I am trying to install wazuh s3 repository, the plugin, in a docker container on EKS, I do not have permissions has a root user.

What are the best options for this?

Best regards,

[Nicolas Stefani]

Hello Fernando,

Could you clarify the S3 repository, please? Are you referring to https://www.elastic.co/docs/deploy-manage/tools/snapshot-and-restore/s3-repository?

In this case, you could build your own image once, install the plugin during the build (when you do have root privileges), and deploy that image in EKS.

FROM wazuh/wazuh-indexer:4.13.1

USER root
RUN /usr/share/wazuh-indexer/bin/opensearch-plugin install --batch repository-s3
USER 1000

Then build and push it to your private registry (ECR, for example):

docker build -t <your-ecr-repo>:wazuh-indexer-s3 .
docker push <your-ecr-repo>:wazuh-indexer-s3

Then modify your Wazuh Helm values or Deployment manifest to use this image:

image:
  repository: <your-ecr-repo>
  tag: wazuh-indexer-s3

Let me know if this works for you.

--
You received this message because you are subscribed to the Google Groups "Wazuh | Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/wazuh/455b2226-2de8-41e5-959c-95ad736f7db4n%40googlegroups.com.

--

Nicolás Stefani Software Engineer