Replace the management of plugins configuration

[Desvelao]

Description

This pull request replaces the management of configuration by the plugins.

Changes:

• Create new services to manage the configuration
  • Configuration (common)
  • ConfigurationStore (frontend and backend side)
  • Adapt the replacement of configuration services:
    • Frontend:
      • Configure through the App Settings application
    • Backend:
      • Refactor the ReportPrinter service to create the PDF reports, now uses the new Configuration service
      • Jobs
      • services to get the top agents with alerts related to some specific condition
• Add a new field store in the plugin setting
• Move some backend services to properties of ManageHosts service:
  • CacheAPIUserAllowRunAs
  • ServerAPIHostEntries
• Create button components that open a flyout
• Enhance the useForm hook to allow dynamic inputs
• Create password input form component
• Add a new setting type arrayOf
• Refactor AddAPI component
  • Remove old one
  • Create form to add or edit an API host from Server APIs application
  • Refactor the management to display the new add API view
  • Remove unused controller methods to adding the new API host view
• Add buttons to edit or delete the API host entry to the table on Server APIs application
• The table in Server APIs application now displays a message when there are not configured APIs
• Remove deprecated services related to previous configuration
  • Common:
    • getCategorySettingByTitle
    • getSettingDefaultValue
    • getSettingsDefault
    • getSettingsByCategories
    • getSettingsDefaultList
    • groupSettingsByCategory
    • getPluginSettingDescription
    • getCustomizationSetting: moved to the Configuration instance of the backend side
  • Backend:
    • getConfiguration
    • services related to the creation of the initial file configuration
• Create new endpoints to manage the configuration
  • POST /utils/configuration/clear: clear the configuration stored in the saved object
  • POST /utils/configuration/import: import the configuration from a configuration file
• Create new endpoints and controllers to manage the API host entries
  • PUT /hosts/apis/{id}: add or update an existing API host entry
  • DELETE /hosts/apis/{id}: remove an existing API host entry
• Refactor the validation of endpoints taking into account the dynamic configuration instead of static
  • PUT /utils/configuration
  • PUT /utils/configuration/files/{key}
  • DELETE /utils/configuration/files/{key}
• Move the API is down view
  - Remove render through AngularJS template
  - Remove properties defined in controller
  - Add a new callout to render in Server APIs
  - Include a button that opens a flyout with a basic troubleshooting
• Create processes to setup or migrate the previous configuration:
  • Server side
  • Script
• Replace the consideration of "administrator" user based on API roles to platform permission to use the rest API based on platform roles:
  • Create a new endpoint to get data about the account:
  • GET /utils/account: gives information about if the user is an user considered as "administrator" for the plugins.
  • Refactor the protection of some views with the "administrator" user.
    • Sample data
    • App Settings
  • Refactor the WzButtonPermissions buttons to use the administrator check instead of based on checking the "administrator" API roles.
  • Create a decorator to protect the API routes and protect them
• Create a frontend service to manage the dashboardSecurity
  • Replace the request to get the current platform by method provided by the service
• Create a button component that opens a flyout
• Create a password form input
• Adapted the unit tests

Issues Resolved

#6201

Evidence

• Generic view
  

• Add API entry
  
  

• Edit and remove buttons
  
  
  

• Warning about API could be down:
  
  

Test

configuration-saved-object

Legend:
⚫: none
🟢: pass
🟡: warning
🔴: fail
⚪: not applicable

UI

Test	Chrome	Firefox	Safari
With no API hosts added, go to Server APIs application and should display an empty table.	⚫	⚫	⚫
With an administrator user, go to Server APIs, click on Add API host and fill the form with a valid API host. The API host should be added and the table should be udpated.	⚫	⚫	⚫
With an administrator user and API hosts added, go to Server APIs, and edit some of them. Try editing some field or multiple fields. The API host entry should be updated and the new values should be displayed in the table.	⚫	⚫	⚫
With an administrator user and API hosts added, go to Server APIs, and remove some of them. The API host entries should be updated.	⚫	⚫	⚫
With API hosts entries added, ensure the host key in the saved object of the configuration is encrypted.	⚫	⚫	⚫
With a stopped API entry, go to Server APIs application and should display a callout about the problem.	⚫	⚫	⚫
Without a stored object of configuration, upload a file through the POST /utils/configuration/import. The configuration should be updated into the saved object.	⚫	⚫	⚫
With a stored object of configuration, upload a file through the POST /utils/configuration/import. The configuration should be updated into the saved object and ensure the previous configuration is not present.	⚫	⚫	⚫
With a non administrator user, go to App Settings, a prompt should display the user has no permissions	⚫	⚫	⚫
With a non administrator user, go to Server APIs, the Add API host, edit and remove button should be disabled displaying a message related to missing permissions.	⚫	⚫	⚫

Details

⚫ With no API hosts added, go to Server APIs application and should display an empty table.

Chrome - ⚫

Firefox - ⚫

Safari - ⚫

⚫ With an administrator user, go to Server APIs, click on Add API host and fill the form with a valid API host. The API host should be added and the table should be udpated.

Chrome - ⚫

Firefox - ⚫

Safari - ⚫

⚫ With an administrator user and API hosts added, go to Server APIs, and edit some of them. Try editing some field or multiple fields. The API host entry should be updated and the new values should be displayed in the table.

Chrome - ⚫

Firefox - ⚫

Safari - ⚫

⚫ With an administrator user and API hosts added, go to Server APIs, and remove some of them. The API host entries should be updated.

Chrome - ⚫

Firefox - ⚫

Safari - ⚫

⚫ With API hosts entries added, ensure the host key in the saved object of the configuration is encrypted.

Chrome - ⚫

Firefox - ⚫

Safari - ⚫

⚫ With a stopped API entry, go to Server APIs application and should display a callout about the problem.

Chrome - ⚫

Firefox - ⚫

Safari - ⚫

⚫ Without a stored object of configuration, upload a file through the POST /utils/configuration/import. The configuration should be updated into the saved object.

Chrome - ⚫

Firefox - ⚫

Safari - ⚫

⚫ With a stored object of configuration, upload a file through the POST /utils/configuration/import. The configuration should be updated into the saved object and ensure the previous configuration is not present.

Chrome - ⚫

Firefox - ⚫

Safari - ⚫

⚫ With a non administrator user, go to App Settings, a prompt should display the user has no permissions

Chrome - ⚫

Firefox - ⚫

Safari - ⚫

⚫ With a non administrator user, go to Server APIs, the Add API host, edit and remove button should be disabled displaying a message related to missing permissions.

Chrome - ⚫

Firefox - ⚫

Safari - ⚫

Other

Test	Result
In configuration, change some settings and update the configuration. Ensure the data is stored in the saved object. Try to upload files too.	⚫
With a stored saved object of configuration, stop the Wazuh dashboard, change the platform setting wazuh_core.instance. Check the current settings are not using the values of the stored saved object configuration.	⚫
With a wazuh.yml configuration file located at data/wazuh/config/wazuh.yml and no stored saved object, should setup the configuration defined in the file into the saved object.	⚫

Details

⚫ In configuration, change some settings and update the configuration. Ensure the data is stored in the saved object. Try to upload files too.

⚫ With a stored saved object of configuration, stop the Wazuh dashboard, change the platform setting wazuh_core.instance. Check the current settings are not using the values of the stored saved object configuration.

⚫ With a wazuh.yml configuration file located at data/wazuh/config/wazuh.yml and no stored saved object, should setup the configuration defined in the file into the saved object.

Check List

• All tests pass
  • yarn test:jest
• New functionality includes testing.
• New functionality has been documented.
• Update CHANGELOG.md
• Commits are signed per the DCO using --signoff

[github-actions]

Wazuh Core plugin code coverage (Jest) test	%	values
Statements	28.94%	( 286 / 988 )
Branches	26.22%	( 107 / 408 )
Functions	26.87%	( 86 / 320 )
Lines	28.68%	( 278 / 969 )

[github-actions]

Wazuh Check Updates plugin code coverage (Jest) test	%	values
Statements	76.44%	( 172 / 225 )
Branches	58.65%	( 61 / 104 )
Functions	61.7%	( 29 / 47 )
Lines	76.44%	( 172 / 225 )

[github-actions]

Main plugin code coverage (Jest) test	%	values
Statements	11.55%	( 3979 / 34427 )
Branches	7.32%	( 1651 / 22548 )
Functions	10.31%	( 843 / 8169 )
Lines	11.73%	( 3873 / 32995 )

[yenienserrano]

CR: ✅
Test: ✅ fixed the problems I had found when adding and editing apis

[asteriscos]

Test	Chrome	Firefox	Safari
With no API hosts added, go to Server APIs application and should display an empty table.	🟢	⚫	⚫
With an administrator user, go to Server APIs, click on Add API host and fill the form with a valid API host. The API host should be added and the table should be udpated.	🟢	⚫	⚫
With an administrator user and API hosts added, go to Server APIs, and edit some of them. Try editing some field or multiple fields. The API host entry should be updated and the new values should be displayed in the table.	🟢	⚫	⚫
With an administrator user and API hosts added, go to Server APIs, and remove some of them. The API host entries should be updated.	🟢	⚫	⚫
With API hosts entries added, ensure the host key in the saved object of the configuration is encrypted.	🟢	⚫	⚫
With a stopped API entry, go to Server APIs application and should display a callout about the problem.	🟢	⚫	⚫
Without a stored object of configuration, upload a file through the POST /utils/configuration/import. The configuration should be updated into the saved object.	🟢	⚫	⚫
With a stored object of configuration, upload a file through the POST /utils/configuration/import. The configuration should be updated into the saved object and ensure the previous configuration is not present.	🟢	⚫	⚫
With a non administrator user, go to App Settings, a prompt should display the user has no permissions	🟢	⚫	⚫
With a non administrator user, go to Server APIs, the Add API host, edit and remove button should be disabled displaying a message related to missing permissions.	🟢	⚫	⚫

Details

🟢 With no API hosts added, go to Server APIs application and should display an empty table.

Chrome - 🟢

Firefox - ⚫

Safari - ⚫

🟢 With an administrator user, go to Server APIs, click on Add API host and fill the form with a valid API host. The API host should be added and the table should be udpated.

Chrome - 🟢

Firefox - ⚫

Safari - ⚫

🟢 With an administrator user and API hosts added, go to Server APIs, and edit some of them. Try editing some field or multiple fields. The API host entry should be updated and the new values should be displayed in the table.

Chrome - 🟢

Firefox - ⚫

Safari - ⚫

🟢 With an administrator user and API hosts added, go to Server APIs, and remove some of them. The API host entries should be updated.

Chrome - 🟢

Firefox - ⚫

Safari - ⚫

🟢 With API hosts entries added, ensure the host key in the saved object of the configuration is encrypted.

Chrome - 🟢

Firefox - ⚫

Safari - ⚫

🟢 With a stopped API entry, go to Server APIs application and should display a callout about the problem.

Chrome - 🟢

Firefox - ⚫

Safari - ⚫

🟢 Without a stored object of configuration, upload a file through the POST /utils/configuration/import. The configuration should be updated into the saved object.

Chrome - 🟢

Firefox - ⚫

Safari - ⚫

🟢 With a stored object of configuration, upload a file through the POST /utils/configuration/import. The configuration should be updated into the saved object and ensure the previous configuration is not present.

Chrome - 🟢

Firefox - ⚫

Safari - ⚫

🟢 With a non administrator user, go to App Settings, a prompt should display the user has no permissions

Chrome - 🟢

Firefox - ⚫

Safari - ⚫

🟢 With a non administrator user, go to Server APIs, the Add API host, edit and remove button should be disabled displaying a message related to missing permissions.

Chrome - 🟢

Firefox - ⚫

Safari - ⚫