[Security Solution][Endpoint] Add serverless Security project users/roles to cypress e2e test setup

packages/kbn-test/src/es/test_es_cluster.ts

@@ -71,7 +71,7 @@ export interface CreateTestEsClusterOptions {
    */
   esArgs?: string[];
   esFrom?: string;
-  esServerlessOptions?: Pick<ServerlessOptions, 'image' | 'tag' | 'host'>;
+  esServerlessOptions?: Pick<ServerlessOptions, 'image' | 'tag' | 'resources' | 'host'>;
   esJavaOpts?: string;
   /**
    * License to run your cluster under. Keep in mind that a `trial` license
@@ -245,6 +245,7 @@ export function createTestEsCluster<
           image: esServerlessOptions?.image,
           tag: esServerlessOptions?.tag,
           host: esServerlessOptions?.host,
+          resources: esServerlessOptions?.resources,
           port,
           clean: true,
           background: true,

packages/kbn-test/src/functional_test_runner/lib/config/schema.ts

@@ -217,6 +217,7 @@ export const schema = Joi.object()
     esServerlessOptions: Joi.object()
       .keys({
         host: Joi.string().ip(),
+        resources: Joi.array().items(Joi.string()).default([]),
       })
       .default(),
 

packages/kbn-test/src/functional_tests/lib/run_elasticsearch.ts

@@ -166,24 +166,30 @@ function getESServerlessOptions(esServerlessImageFromArg: string | undefined, co
     esTestConfig.getESServerlessImage() ||
     (config.has('esTestCluster.esServerlessImage') &&
       config.get('esTestCluster.esServerlessImage'));
+  const serverlessResources: string[] =
+    (config.has('esServerlessOptions.resources') && config.get('esServerlessOptions.resources')) ||
+    [];
   const serverlessHost: string | undefined =
     config.has('esServerlessOptions.host') && config.get('esServerlessOptions.host');
 
   if (esServerlessImageUrlOrTag) {
     if (esServerlessImageUrlOrTag.includes(':')) {
       return {
+        resources: serverlessResources,
         image: esServerlessImageUrlOrTag,
         host: serverlessHost,
       };
     } else {
       return {
+        resources: serverlessResources,
         tag: esServerlessImageUrlOrTag,
         host: serverlessHost,
       };
     }
   }
 
   return {
+    resources: serverlessResources,
     host: serverlessHost,
   };
 }

x-pack/plugins/security_solution/public/management/cypress/e2e/artifacts/artifact_tabs_in_policy_details.cy.ts

@@ -60,7 +60,8 @@ const visitArtifactTab = (tabId: string) => {
 
 describe(
   'Artifact tabs in Policy Details page',
-  { tags: ['@ess', '@serverless', '@brokenInServerless'] }, // broken due to disabled Native Role Management
+  // FIXME: Test needs to be refactored for serverless so that it uses a standard set of users that are also available in serverless
+  { tags: ['@ess', '@serverless', '@brokenInServerless'] },
   () => {
     before(() => {
       login();

x-pack/plugins/security_solution/public/management/cypress/e2e/automated_response_actions/no_license.cy.ts

@@ -34,7 +34,8 @@ describe('No License', { tags: '@ess', env: { ftrConfig: { license: 'basic' } }
     });
   });
 
-  describe('User cannot see results', () => {
+  // FIXME: Flaky. Needs fixing (security team issue #7763)
+  describe.skip('User cannot see results', () => {
     let endpointData: ReturnTypeFromChainable<typeof indexEndpointHosts> | undefined;
     let alertData: ReturnTypeFromChainable<typeof indexEndpointRuleAlerts> | undefined;
     const [endpointAgentId, endpointHostname] = generateRandomStringName(2);

x-pack/plugins/security_solution/public/management/cypress/e2e/endpoint_alerts.cy.ts

@@ -19,7 +19,8 @@ import { login } from '../tasks/login';
 import { EXECUTE_ROUTE } from '../../../../common/endpoint/constants';
 import { waitForActionToComplete } from '../tasks/response_actions';
 
-describe(
+// FIXME: Flaky. Needs fixing (security team issue #7763)
+describe.skip(
   'Endpoint generated alerts',
   { tags: ['@ess', '@serverless', '@brokenInServerless'] },
   () => {

x-pack/plugins/security_solution/public/management/cypress/e2e/endpoint_role_rbac.cy.ts

@@ -6,7 +6,7 @@
  */
 
 import { closeAllToasts } from '../tasks/toasts';
-import { login } from '../tasks/login';
+import { login, ROLE } from '../tasks/login';
 import { loadPage } from '../tasks/common';
 
 describe('When defining a kibana role for Endpoint security access', { tags: '@ess' }, () => {
@@ -18,7 +18,7 @@ describe('When defining a kibana role for Endpoint security access', { tags: '@e
   };
 
   beforeEach(() => {
-    login();
+    login(ROLE.system_indices_superuser);
     loadPage('/app/management/security/roles/edit');
     closeAllToasts();
     cy.getByTestSubj('addSpacePrivilegeButton').click();

x-pack/plugins/security_solution/public/management/cypress/e2e/serverless/endpoint_list_with_security_essentials.cy.ts

@@ -18,7 +18,7 @@ import {
 describe(
   'When on the Endpoint List in Security Essentials PLI',
   {
-    tags: ['@serverless', '@brokenInServerless'],
+    tags: ['@serverless'],
     env: {
       ftrConfig: {
         productTypes: [{ product_line: 'security', product_tier: 'essentials' }],

x-pack/plugins/security_solution/public/management/cypress/e2e/serverless/feature_access/complete.cy.ts

@@ -14,7 +14,7 @@ import { getEndpointManagementPageList } from '../../../screens';
 describe(
   'App Features for Security Complete PLI',
   {
-    tags: ['@serverless', '@brokenInServerless'],
+    tags: ['@serverless'],
     env: {
       ftrConfig: { productTypes: [{ product_line: 'security', product_tier: 'complete' }] },
     },

x-pack/plugins/security_solution/public/management/cypress/e2e/serverless/feature_access/complete_with_endpoint.cy.ts

@@ -17,7 +17,7 @@ import {
 describe(
   'App Features for Security Complete PLI with Endpoint Complete Addon',
   {
-    tags: ['@serverless', '@brokenInServerless'],
+    tags: ['@serverless'],
     env: {
       ftrConfig: {
         productTypes: [

x-pack/plugins/security_solution/public/management/cypress/e2e/serverless/feature_access/essentials.cy.ts

@@ -14,7 +14,7 @@ import { getEndpointManagementPageList } from '../../../screens';
 describe(
   'App Features for Security Essential PLI',
   {
-    tags: ['@serverless', '@brokenInServerless'],
+    tags: ['@serverless'],
     env: {
       ftrConfig: {
         productTypes: [{ product_line: 'security', product_tier: 'essentials' }],

x-pack/plugins/security_solution/public/management/cypress/e2e/serverless/feature_access/essentials_with_endpoint.cy.ts

@@ -17,7 +17,7 @@ import {
 describe(
   'App Features for Security Essentials PLI with Endpoint Essentials Addon',
   {
-    tags: ['@serverless', '@brokenInServerless'],
+    tags: ['@serverless'],
     env: {
       ftrConfig: {
         productTypes: [

x-pack/plugins/security_solution/public/management/cypress/e2e/serverless/policy_details_with_security_essentials.cy.ts

@@ -12,7 +12,7 @@ import type { IndexedFleetEndpointPolicyResponse } from '../../../../../common/e
 describe(
   'When displaying the Policy Details in Security Essentials PLI',
   {
-    tags: ['@serverless', '@brokenInServerless'],
+    tags: ['@serverless'],
     env: {
       ftrConfig: {
         productTypes: [{ product_line: 'security', product_tier: 'essentials' }],

x-pack/plugins/security_solution/public/management/cypress/e2e/serverless/roles/complete_with_endpoint_roles.cy.ts

@@ -33,7 +33,7 @@ import {
 describe(
   'User Roles for Security Complete PLI with Endpoint Complete addon',
   {
-    tags: ['@serverless', '@brokenInServerless'],
+    tags: ['@serverless'],
     env: {
       ftrConfig: {
         productTypes: [

x-pack/plugins/security_solution/public/management/cypress/e2e/serverless/roles/essentials_with_endpoint.roles.cy.ts

@@ -26,7 +26,7 @@ import {
 describe(
   'Roles for Security Essential PLI with Endpoint Essentials addon',
   {
-    tags: ['@serverless', '@brokenInServerless'],
+    tags: ['@serverless'],
     env: {
       ftrConfig: {
         productTypes: [

x-pack/plugins/security_solution/public/management/cypress/tasks/login.ts

@@ -44,8 +44,7 @@ interface CyLoginTask {
  * @param user
  */
 export const login: CyLoginTask = (
-  // FIXME:PT default user to `soc_manager`
-  user?: SecurityTestUser
+  user: SecurityTestUser = ROLE.endpoint_operations_analyst
 ): ReturnType<typeof sendApiLoginRequest> => {
   let username = Cypress.env('KIBANA_USERNAME');
   let password = Cypress.env('KIBANA_PASSWORD');

x-pack/plugins/security_solution/public/management/cypress/tasks/response_actions.ts

@@ -172,7 +172,6 @@ export const ensureResponseActionAuthzAccess = (
       {
         const file = new File(['foo'], 'foo.txt');
         const formData = new FormData();
-
         formData.append('file', file, file.name);
 
         for (const [key, value] of Object.entries(apiPayload as object)) {
@@ -199,6 +198,8 @@ export const ensureResponseActionAuthzAccess = (
     },
     failOnStatusCode: false,
     body: apiPayload as Cypress.RequestBody,
+    // Increased timeout due to `upload` action. It seems to take much longer to complete due to file upload
+    timeout: 120000,
   };
 
   if (accessLevel === 'none') {