Changed rollup tests to use test user rather than elastic super user. (…

…elastic#79567) * removed .only for testing * Added config with minimum permissions. * Removed kibana user role. I removed the kibana user role to remove redundancy. Co-authored-by: Kibana Machine <[email protected]>
cuff-links · Dec 3, 2020 · 9b4472f · 9b4472f
1 parent 1ab0cbe
commit 9b4472f
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 2 deletions.
diff --git a/x-pack/test/functional/apps/rollup_job/rollup_jobs.js b/x-pack/test/functional/apps/rollup_job/rollup_jobs.js
@@ -11,7 +11,8 @@ import { mockIndices } from './hybrid_index_helper';
 export default function ({ getService, getPageObjects }) {
   const es = getService('legacyEs');
   const esArchiver = getService('esArchiver');
-  const PageObjects = getPageObjects(['rollup', 'common']);
+  const PageObjects = getPageObjects(['rollup', 'common', 'security']);
+  const security = getService('security');
 
   describe('rollup job', function () {
     //Since rollups can only be created once with the same name (even if you delete it),
@@ -20,13 +21,18 @@ export default function ({ getService, getPageObjects }) {
     const targetIndexName = 'rollup-to-be';
     const rollupSourceIndexPattern = 'to-be*';
     const rollupSourceDataPrepend = 'to-be';
+
     //make sure all dates have the same concept of "now"
     const now = new Date();
     const pastDates = [
       datemath.parse('now-1d', { forceNow: now }),
       datemath.parse('now-2d', { forceNow: now }),
       datemath.parse('now-3d', { forceNow: now }),
     ];
+    before(async () => {
+      await security.testUser.setRoles(['manage_rollups_role']);
+      await PageObjects.common.navigateToApp('rollupJob');
+    });
 
     it('create new rollup job', async () => {
       const interval = '1000ms';
@@ -35,7 +41,6 @@ export default function ({ getService, getPageObjects }) {
         await es.index(mockIndices(day, rollupSourceDataPrepend));
       }
 
-      await PageObjects.common.navigateToApp('rollupJob');
       await PageObjects.rollup.createNewRollUpJob(
         rollupJobName,
         rollupSourceIndexPattern,
@@ -66,6 +71,7 @@ export default function ({ getService, getPageObjects }) {
       await es.indices.delete({ index: targetIndexName });
       await es.indices.delete({ index: rollupSourceIndexPattern });
       await esArchiver.load('empty_kibana');
+      await security.testUser.restoreDefaults();
     });
   });
 }
diff --git a/x-pack/test/functional/config.js b/x-pack/test/functional/config.js
@@ -413,6 +413,25 @@ export default async function ({ readConfigFile }) {
             },
           ],
         },
+        manage_rollups_role: {
+          elasticsearch: {
+            cluster: ['manage', 'manage_rollup'],
+            indices: [
+              {
+                names: ['*'],
+                privileges: ['read', 'delete', 'create_index', 'view_index_metadata'],
+              },
+            ],
+          },
+          kibana: [
+            {
+              feature: {
+                discover: ['read'],
+              },
+              spaces: ['*'],
+            },
+          ],
+        },
 
         //Kibana feature privilege isn't specific to advancedSetting. It can be anything. https://github.com/elastic/kibana/issues/35965
         test_api_keys: {