Cluster mode by default

CHANGELOG.md

@@ -12,11 +12,13 @@ All notable changes to the Wazuh app project will be documented in this file.
 
 ### Changed
 
+- Set cluster mode as default for all Wazuh installations, including single-node deployments. Updated RBAC permissions to `cluster:*` actions [#7688](https://github.com/wazuh/wazuh-dashboard-plugins/issues/7688)
 - Rework SCA modules visualizations, global detail for all agents without pinning, replaced `/sca` endpoint with `wazuh-states-sca-*` index pattern, added sample data section [#7578](https://github.com/wazuh/wazuh-dashboard-plugins/issues/7578)
 - Split the FIM registry inventory into 2 index patterns and change some fields in the FIM files and registries sample data [#7604](https://github.com/wazuh/wazuh-dashboard-plugins/pull/7604)
 
 ### Removed
 
+- Removed logic related to manager in favor to cluster management [#7688](https://github.com/wazuh/wazuh-dashboard-plugins/issues/7688)
 - Removed the monitoring and statistics jobs in the backend side [#7597](https://github.com/wazuh/wazuh-dashboard-plugins/pull/7597)
 - Removed the settings related to monitoring and statistics job from the configuration [#7597](https://github.com/wazuh/wazuh-dashboard-plugins/pull/7597)
 - Removed prompt related to statistic job is disabled in Statistics app [#7597](https://github.com/wazuh/wazuh-dashboard-plugins/pull/7597)

docker/imposter/security/policies/get-policies-after-delete.json

@@ -299,11 +299,10 @@
         "name": "cluster_all_resourceless",
         "policy": {
           "actions": [
-            "cluster:status",
-            "manager:read",
-            "manager:read_api_config",
-            "manager:update_config",
-            "manager:restart"
+            "cluster:read",
+            "cluster:read_api_config",
+            "cluster:update_config",
+            "cluster:restart"
           ],
           "resources": ["*:*:*"],
           "effect": "allow"
@@ -329,11 +328,7 @@
         "id": 31,
         "name": "cluster_read_resourceless",
         "policy": {
-          "actions": [
-            "cluster:status",
-            "manager:read",
-            "manager:read_api_config"
-          ],
+          "actions": ["cluster:read", "cluster:read_api_config"],
           "resources": ["*:*:*"],
           "effect": "allow"
         },
@@ -387,7 +382,7 @@
         "id": 100,
         "name": "manager_deny_read",
         "policy": {
-          "actions": ["manager:read", "cluster:read"],
+          "actions": ["cluster:read"],
           "resources": ["*:*:*", "node:id:*"],
           "effect": "deny"
         },
@@ -397,7 +392,7 @@
         "id": 102,
         "name": "custom_manager_deny_read2",
         "policy": {
-          "actions": ["manager:read", "cluster:read"],
+          "actions": ["cluster:read"],
           "resources": ["*:*:*", "node:id:*"],
           "effect": "deny"
         },

docker/imposter/security/policies/get-policies.json

@@ -299,11 +299,10 @@
         "name": "cluster_all_resourceless",
         "policy": {
           "actions": [
-            "cluster:status",
-            "manager:read",
-            "manager:read_api_config",
-            "manager:update_config",
-            "manager:restart"
+            "cluster:read",
+            "cluster:read_api_config",
+            "cluster:update_config",
+            "cluster:restart"
           ],
           "resources": ["*:*:*"],
           "effect": "allow"
@@ -329,11 +328,7 @@
         "id": 31,
         "name": "cluster_read_resourceless",
         "policy": {
-          "actions": [
-            "cluster:status",
-            "manager:read",
-            "manager:read_api_config"
-          ],
+          "actions": ["cluster:read", "cluster:read_api_config"],
           "resources": ["*:*:*"],
           "effect": "allow"
         },
@@ -387,7 +382,7 @@
         "id": 100,
         "name": "manager_deny_read",
         "policy": {
-          "actions": ["manager:read", "cluster:read"],
+          "actions": ["cluster:read"],
           "resources": ["*:*:*", "node:id:*"],
           "effect": "deny"
         },
@@ -397,7 +392,7 @@
         "id": 101,
         "name": "custom_manager_deny_read",
         "policy": {
-          "actions": ["manager:read", "cluster:read"],
+          "actions": ["cluster:read"],
           "resources": ["*:*:*", "node:id:*"],
           "effect": "deny"
         },
@@ -407,7 +402,7 @@
         "id": 102,
         "name": "custom_manager_deny_read2",
         "policy": {
-          "actions": ["manager:read", "cluster:read"],
+          "actions": ["cluster:read"],
           "resources": ["*:*:*", "node:id:*"],
           "effect": "deny"
         },

docker/imposter/security/security-actions.json

@@ -208,16 +208,6 @@
       },
       "related_endpoints": ["PUT /agents/reconnect"]
     },
-    "cluster:status": {
-      "description": "Check Wazuh's cluster general status",
-      "resources": ["*:*"],
-      "example": {
-        "actions": ["cluster:status"],
-        "resources": ["*:*:*"],
-        "effect": "allow"
-      },
-      "related_endpoints": ["GET /cluster/status"]
-    },
     "cluster:read_api_config": {
       "description": "Check Wazuh's cluster nodes API configuration",
       "resources": ["*:*"],
@@ -295,61 +285,6 @@
       },
       "related_endpoints": ["PUT /logtest", "DELETE /logtest/sessions/{token}"]
     },
-    "manager:read": {
-      "description": "Read Wazuh manager configuration",
-      "resources": ["*:*"],
-      "example": {
-        "actions": ["manager:read"],
-        "resources": ["*:*:*"],
-        "effect": "allow"
-      },
-      "related_endpoints": [
-        "GET /manager/status",
-        "GET /manager/info",
-        "GET /manager/configuration",
-        "GET /manager/daemons/stats",
-        "GET /manager/stats",
-        "GET /manager/stats/hourly",
-        "GET /manager/stats/weekly",
-        "GET /manager/stats/analysisd",
-        "GET /manager/stats/remoted",
-        "GET /manager/logs",
-        "GET /manager/logs/summary",
-        "PUT /manager/restart",
-        "GET /manager/configuration/validation",
-        "GET /manager/configuration/{component}/{configuration}"
-      ]
-    },
-    "manager:update_config": {
-      "description": "Update current Wazuh manager configuration",
-      "resources": ["*:*"],
-      "example": {
-        "actions": ["manager:update_config"],
-        "resources": ["*:*:*"],
-        "effect": "allow"
-      },
-      "related_endpoints": ["PUT /manager/configuration"]
-    },
-    "manager:read_api_config": {
-      "description": "Read Wazuh manager API configuration",
-      "resources": ["*:*"],
-      "example": {
-        "actions": ["manager:read_api_config"],
-        "resources": ["*:*:*"],
-        "effect": "allow"
-      },
-      "related_endpoints": ["GET /manager/api/config"]
-    },
-    "manager:restart": {
-      "description": "Restart Wazuh managers",
-      "resources": ["*:*"],
-      "example": {
-        "actions": ["manager:restart"],
-        "resources": ["*:*:*"],
-        "effect": "deny"
-      },
-      "related_endpoints": ["PUT /manager/restart"]
-    },
     "mitre:read": {
       "description": "Access information from MITRE database",
       "resources": ["*:*"],

docker/imposter/security/security-policies.json

@@ -299,11 +299,10 @@
         "name": "cluster_all_resourceless",
         "policy": {
           "actions": [
-            "cluster:status",
-            "manager:read",
-            "manager:read_api_config",
-            "manager:update_config",
-            "manager:restart"
+            "cluster:read",
+            "cluster:read_api_config",
+            "cluster:update_config",
+            "cluster:restart"
           ],
           "resources": ["*:*:*"],
           "effect": "allow"
@@ -329,11 +328,7 @@
         "id": 31,
         "name": "cluster_read_resourceless",
         "policy": {
-          "actions": [
-            "cluster:status",
-            "manager:read",
-            "manager:read_api_config"
-          ],
+          "actions": ["cluster:read", "cluster:read_api_config"],
           "resources": ["*:*:*"],
           "effect": "allow"
         },
@@ -387,7 +382,7 @@
         "id": 100,
         "name": "manager_deny_read",
         "policy": {
-          "actions": ["manager:read", "cluster:read"],
+          "actions": ["cluster:read"],
           "resources": ["*:*:*", "node:id:*"],
           "effect": "deny"
         },
@@ -397,7 +392,7 @@
         "id": 101,
         "name": "custom_manager_deny_read",
         "policy": {
-          "actions": ["manager:read", "cluster:read"],
+          "actions": ["cluster:read"],
           "resources": ["*:*:*", "node:id:*"],
           "effect": "deny"
         },
@@ -407,7 +402,7 @@
         "id": 102,
         "name": "custom_manager_deny_read2",
         "policy": {
-          "actions": ["manager:read", "cluster:read"],
+          "actions": ["cluster:read"],
           "resources": ["*:*:*", "node:id:*"],
           "effect": "deny"
         },

docker/imposter/wazuh-config.yml

@@ -175,14 +175,6 @@ resources:
       statusCode: 200
       scriptFile: cluster/cluster_sync.js
       # staticFile: cluster/cluster_sync_no_sync.json
-
-  # Get cluster status
-  - method: GET
-    path: /cluster/status
-    response:
-      statusCode: 200
-      staticFile: cluster/cluster_status.json
-
   # Get local node config
   - method: GET
     path: /cluster/local/config

plugins/main/common/api-info/security-actions.json

@@ -230,16 +230,6 @@
       "GET /experimental/ciscat/results"
     ]
   },
-  "cluster:status": {
-    "description": "Check Wazuh's cluster general status",
-    "resources": ["*:*"],
-    "example": {
-      "actions": ["cluster:status"],
-      "resources": ["*:*:*"],
-      "effect": "allow"
-    },
-    "related_endpoints": ["GET /cluster/status"]
-  },
   "cluster:read_api_config": {
     "description": "Check Wazuh's cluster nodes API configuration",
     "resources": ["*:*"],
@@ -317,61 +307,6 @@
     },
     "related_endpoints": ["PUT /logtest", "DELETE /logtest/sessions/{token}"]
   },
-  "manager:read": {
-    "description": "Read Wazuh manager configuration",
-    "resources": ["*:*"],
-    "example": {
-      "actions": ["manager:read"],
-      "resources": ["*:*:*"],
-      "effect": "allow"
-    },
-    "related_endpoints": [
-      "GET /manager/status",
-      "GET /manager/info",
-      "GET /manager/configuration",
-      "GET /manager/daemons/stats",
-      "GET /manager/stats",
-      "GET /manager/stats/hourly",
-      "GET /manager/stats/weekly",
-      "GET /manager/stats/analysisd",
-      "GET /manager/stats/remoted",
-      "GET /manager/logs",
-      "GET /manager/logs/summary",
-      "PUT /manager/restart",
-      "GET /manager/configuration/validation",
-      "GET /manager/configuration/{component}/{configuration}"
-    ]
-  },
-  "manager:update_config": {
-    "description": "Update current Wazuh manager configuration",
-    "resources": ["*:*"],
-    "example": {
-      "actions": ["manager:update_config"],
-      "resources": ["*:*:*"],
-      "effect": "allow"
-    },
-    "related_endpoints": ["PUT /manager/configuration"]
-  },
-  "manager:read_api_config": {
-    "description": "Read Wazuh manager API configuration",
-    "resources": ["*:*"],
-    "example": {
-      "actions": ["manager:read_api_config"],
-      "resources": ["*:*:*"],
-      "effect": "allow"
-    },
-    "related_endpoints": ["GET /manager/api/config"]
-  },
-  "manager:restart": {
-    "description": "Restart Wazuh managers",
-    "resources": ["*:*"],
-    "example": {
-      "actions": ["manager:restart"],
-      "resources": ["*:*:*"],
-      "effect": "deny"
-    },
-    "related_endpoints": ["PUT /manager/restart"]
-  },
   "mitre:read": {
     "description": "Access information from MITRE database",
     "resources": ["*:*"],

plugins/main/public/components/add-modules-data/sample-data.tsx

@@ -169,23 +169,17 @@ export default class WzSampleData extends Component {
         ),
       );
 
-      // Get information about cluster/manager
+      // Get information about cluster
       const clusterName = AppState.getClusterInfo().cluster;
-      const managerName = AppState.getClusterInfo().manager;
 
       // eslint-disable-next-line camelcase
       this.generateAlertsParams.api_id = JSON.parse(
         AppState.getCurrentAPI() || '{}',
       )?.id;
-      this.generateAlertsParams.manager = {
-        name: managerName,
+      this.generateAlertsParams.cluster = {
+        name: clusterName,
+        node: clusterName,
       };
-      if (clusterName && clusterName !== 'Disabled') {
-        this.generateAlertsParams.cluster = {
-          name: clusterName,
-          node: clusterName,
-        };
-      }
     } catch (error) {
       const options = {
         context: `${WzSampleData.name}.componentDidMount`,

plugins/main/public/components/common/data-source/pattern/pattern-data-source-filter-manager.ts

@@ -256,20 +256,16 @@ export class PatternDataSourceFilterManager
   }
 
   /**
-   * Return the filter when the cluster or manager are enabled
+   * Return the cluster filter
    */
   static getClusterManagerFilters(
     indexPatternId: string,
     controlledByValue: string,
     key?: string,
   ): tFilter[] {
     const filterHandler = new FilterHandler();
-    const isCluster = AppState.getClusterInfo().status == 'enabled';
     const managerFilter = filterHandler.managerQuery(
-      isCluster
-        ? AppState.getClusterInfo().cluster
-        : AppState.getClusterInfo().manager,
-      isCluster,
+      AppState.getClusterInfo().cluster,
       key,
     );
     managerFilter.meta = {