[Security Solution] Supports custom roles in serverless for Cypress tests

[MadameSheema]

Summary

Solves: https://github.com/elastic/security-team/issues/11464

In this PR we are adding the capability to use custom roles for serverless Cypress tests. To do so, we are leveraging the solution proposed in: #194677, meaning that currently we have the same restrictions, therefore, custom roles cannot be used yet in MKI environments.

Creating a Custom Role

To create a custom role, use the Cypress task createServerlessCustomRole. This task requires two parameters:

• roleDescriptor: Defines the permissions and access for the role.
• roleName: A unique name for the custom role.

Example:

const roleDescriptor = {
  elasticsearch: {
    cluster: ['monitor'],
    indices: [{ names: ['*'], privileges: ['read'] }],
  },
  kibana: [
    {
      base: ['all'],
      feature: {},
      spaces: ['*'],
    },
  ],
};

cy.task('createServerlessCustomRole', { roleDescriptor, roleName: 'customRole' });

Using a Custom Role

Once the custom role is created, you can log in to the application using your regular `login`` method and passing the name of the role.

login('customRole');

Deleting a Custom Role

After your tests, always delete the custom role to ensure a clean environment. Use the deleteServerlessCustomRole task and provide the name of the role as the parameter.

cy.task('deleteServerlessCustomRole', 'customRole');

Full workflow

Here’s the complete workflow for creating, using, and deleting a custom role:

const roleDescriptor = {
  elasticsearch: {
    cluster: ['monitor'],
    indices: [{ names: ['*'], privileges: ['read'] }],
  },
  kibana: [
    {
      base: ['all'],
      feature: {},
      spaces: ['*'],
    },
  ],
};

before(() => {
  cy.task('createServerlessCustomRole', { roleDescriptor, roleName: 'customRole' });
});

beforeEach(() => {
  login('customRole');
});

after(() => {
  cy.task('deleteServerlessCustomRole', 'customRole');
});

[MadameSheema]

/ci

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[janmonschke]

thanks for adding this functionality!

[cavokz]

It makes sense and looks good.

I've a comment on a name though, feel free to ignore it :)

[elasticmachine]

💛 Build succeeded, but was flaky

• Buildkite Build
• Commit: 29109f2

Failed CI Steps

• FTR Configs #44

Test Failures

• [job] [logs] FTR Configs #44 / InfraOps App Metrics UI Hosts View #With data #Permissions: Read Only User - Single Host Flyout Dashboards Tab should render dashboards tab splash screen with disabled option to add dashboard

Metrics [docs]

✅ unchanged

History

• 💔 Build #266390 failed 5d3b14e
• 💚 Build #266140 succeeded 33f333f
• 💔 Build #265951 failed 02e6176

[kibanamachine]

Starting backport for target branches: 8.x

https://github.com/elastic/kibana/actions/runs/12749350914

[kibanamachine]

💚 All backports created successfully

Status	Branch	Result
✅	8.x

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation