[Security Solution] Support Serverless Cypress tests with different roles

packages/kbn-es/src/serverless_resources/README.md

@@ -2,6 +2,15 @@
 
 The resources in this directory are used for seeding Elasticsearch Serverless images with users, roles and tokens for SSL and authentication. Serverless requires file realm authentication, so we will bind mount them into the containers at `/usr/share/elasticsearch/config/`.
 
+## Roles
+
+Roles defined in `roles.yml` intended to mock a Serverless deployment. It must be in sync with `project-controller` defined roles and used in real (MKI) environments. In case of some differences tests may pass against Serverless snapshot environment but fail against MKI environments creating confusion.
+
+### Why `security_roles.json` is here?
+
+`security_roles.json` is a subset of defined in `roles.yml` roles in a JSON format and extended with necessary fields
+to be compatible with `/api/security/role/{roleName}` endpoint. It's consumed by test environments like Cypress to be able to run different scenarios.
+
 ## Users
 
 ### Default user

packages/kbn-es/src/serverless_resources/security_roles.json

@@ -0,0 +1,353 @@
+{
+  "t1_analyst": {
+    "name": "t1_analyst",
+    "elasticsearch": {
+      "cluster": [],
+      "indices": [
+        {
+          "names": [".alerts-security*", ".siem-signals-*"],
+          "privileges": ["read", "write", "maintenance"]
+        },
+        {
+          "names": [
+            "apm-*-transaction*",
+            "traces-apm*",
+            "auditbeat-*",
+            "endgame-*",
+            "filebeat-*",
+            "logs-*",
+            "packetbeat-*",
+            "winlogbeat-*",
+            "metrics-endpoint.metadata_current_*",
+            ".fleet-agents*",
+            ".fleet-actions*"
+          ],
+          "privileges": ["read"]
+        }
+      ],
+      "run_as": []
+    },
+    "kibana": [
+      {
+        "feature": {
+          "ml": ["read"],
+          "siem": ["read", "read_alerts"],
+          "securitySolutionAssistant": ["all"],
+          "securitySolutionCases": ["read"],
+          "actions": ["read"],
+          "builtInAlerts": ["read"]
+        },
+        "spaces": ["*"],
+        "base": []
+      }
+    ]
+  },
+  "t2_analyst": {
+    "name": "t2_analyst",
+    "elasticsearch": {
+      "cluster": [],
+      "indices": [
+        {
+          "names": [".alerts-security*", ".siem-signals-*"],
+          "privileges": ["read", "write", "maintenance"]
+        },
+        {
+          "names": [
+            ".lists*",
+            ".items*",
+            "apm-*-transaction*",
+            "traces-apm*",
+            "auditbeat-*",
+            "endgame-*",
+            "filebeat-*",
+            "logs-*",
+            "packetbeat-*",
+            "winlogbeat-*",
+            "metrics-endpoint.metadata_current_*",
+            ".fleet-agents*",
+            ".fleet-actions*"
+          ],
+          "privileges": ["read"]
+        }
+      ],
+      "run_as": []
+    },
+    "kibana": [
+      {
+        "feature": {
+          "ml": ["read"],
+          "siem": ["read", "read_alerts"],
+          "securitySolutionAssistant": ["all"],
+          "securitySolutionCases": ["read"],
+          "actions": ["read"],
+          "builtInAlerts": ["read"]
+        },
+        "spaces": ["*"],
+        "base": []
+      }
+    ]
+  },
+  "t3_analyst": {
+    "name": "t3_analyst",
+    "elasticsearch": {
+      "cluster": [],
+      "indices": [
+        {
+          "names": [
+            "apm-*-transaction*",
+            "traces-apm*",
+            "auditbeat-*",
+            "endgame-*",
+            "filebeat-*",
+            "logs-*",
+            "packetbeat-*",
+            "winlogbeat-*"
+          ],
+          "privileges": ["read", "write"]
+        },
+        {
+          "names": [".alerts-security*", ".siem-signals-*"],
+          "privileges": ["read", "write"]
+        },
+        {
+          "names": [".lists*", ".items*"],
+          "privileges": ["read", "write"]
+        },
+        {
+          "names": ["metrics-endpoint.metadata_current_*", ".fleet-agents*", ".fleet-actions*"],
+          "privileges": ["read"]
+        }
+      ],
+      "run_as": []
+    },
+    "kibana": [
+      {
+        "feature": {
+          "ml": ["read"],
+          "siem": [
+            "all",
+            "read_alerts",
+            "crud_alerts",
+            "endpoint_list_all",
+            "trusted_applications_all",
+            "event_filters_all",
+            "host_isolation_exceptions_all",
+            "blocklist_all",
+            "policy_management_read",
+            "host_isolation_all",
+            "process_operations_all",
+            "actions_log_management_all",
+            "file_operations_all"
+          ],
+          "securitySolutionCases": ["all"],
+          "actions": ["read"],
+          "builtInAlerts": ["all"],
+          "osquery": ["all"]
+        },
+        "spaces": ["*"],
+        "base": []
+      }
+    ]
+  },
+  "rule_author": {
+    "name": "rule_author",
+    "elasticsearch": {
+      "cluster": [],
+      "indices": [
+        {
+          "names": [
+            "apm-*-transaction*",
+            "traces-apm*",
+            "auditbeat-*",
+            "endgame-*",
+            "filebeat-*",
+            "logs-*",
+            "packetbeat-*",
+            "winlogbeat-*",
+            ".lists*",
+            ".items*"
+          ],
+          "privileges": ["read", "write"]
+        },
+        {
+          "names": [
+            ".alerts-security*",
+            ".preview.alerts-security*",
+            ".internal.preview.alerts-security*",
+            ".siem-signals-*"
+          ],
+          "privileges": ["read", "write", "maintenance", "view_index_metadata"]
+        },
+        {
+          "names": ["metrics-endpoint.metadata_current_*", ".fleet-agents*", ".fleet-actions*"],
+          "privileges": ["read"]
+        }
+      ],
+      "run_as": []
+    },
+    "kibana": [
+      {
+        "feature": {
+          "ml": ["read"],
+          "siem": ["all", "read_alerts", "crud_alerts"],
+          "securitySolutionAssistant": ["all"],
+          "securitySolutionCases": ["all"],
+          "actions": ["read"],
+          "builtInAlerts": ["all"]
+        },
+        "spaces": ["*"],
+        "base": []
+      }
+    ]
+  },
+  "soc_manager": {
+    "name": "soc_manager",
+    "elasticsearch": {
+      "cluster": [],
+      "indices": [
+        {
+          "names": [
+            "apm-*-transaction*",
+            "traces-apm*",
+            "auditbeat-*",
+            "endgame-*",
+            "filebeat-*",
+            "logs-*",
+            "packetbeat-*",
+            "winlogbeat-*",
+            ".lists*",
+            ".items*"
+          ],
+          "privileges": ["read", "write"]
+        },
+        {
+          "names": [
+            ".alerts-security*",
+            ".preview.alerts-security*",
+            ".internal.preview.alerts-security*",
+            ".siem-signals-*"
+          ],
+          "privileges": ["read", "write", "manage"]
+        },
+        {
+          "names": ["metrics-endpoint.metadata_current_*", ".fleet-agents*", ".fleet-actions*"],
+          "privileges": ["read"]
+        }
+      ],
+      "run_as": []
+    },
+    "kibana": [
+      {
+        "feature": {
+          "ml": ["read"],
+          "siem": ["all", "read_alerts", "crud_alerts"],
+          "securitySolutionAssistant": ["all"],
+          "securitySolutionCases": ["all"],
+          "actions": ["all"],
+          "builtInAlerts": ["all"]
+        },
+        "spaces": ["*"],
+        "base": []
+      }
+    ]
+  },
+  "detections_admin": {
+    "name": "detections_admin",
+    "elasticsearch": {
+      "cluster": ["manage"],
+      "indices": [
+        {
+          "names": [
+            ".siem-signals-*",
+            ".alerts-security*",
+            ".preview.alerts-security*",
+            ".internal.preview.alerts-security*",
+            ".lists*",
+            ".items*",
+            "apm-*-transaction*",
+            "traces-apm*",
+            "auditbeat-*",
+            "endgame-*",
+            "filebeat-*",
+            "logs-*",
+            "packetbeat-*",
+            "winlogbeat-*"
+          ],
+          "privileges": ["manage", "write", "read"]
+        },
+        {
+          "names": ["metrics-endpoint.metadata_current_*", ".fleet-agents*", ".fleet-actions*"],
+          "privileges": ["read"]
+        }
+      ],
+      "run_as": []
+    },
+    "kibana": [
+      {
+        "feature": {
+          "ml": ["all"],
+          "siem": ["all", "read_alerts", "crud_alerts"],
+          "securitySolutionAssistant": ["all"],
+          "securitySolutionCases": ["all"],
+          "actions": ["read"],
+          "builtInAlerts": ["all"],
+          "dev_tools": ["all"]
+        },
+        "spaces": ["*"],
+        "base": []
+      }
+    ]
+  },
+  "platform_engineer": {
+    "name": "platform_engineer",
+    "elasticsearch": {
+      "cluster": ["manage"],
+      "indices": [
+        {
+          "names": [".lists*", ".items*"],
+          "privileges": ["all"]
+        },
+        {
+          "names": [
+            "apm-*-transaction*",
+            "traces-apm*",
+            "auditbeat-*",
+            "endgame-*",
+            "filebeat-*",
+            "logs-*",
+            "packetbeat-*",
+            "winlogbeat-*",
+            "metrics-endpoint.metadata_current_*",
+            ".fleet-agents*",
+            ".fleet-actions*"
+          ],
+          "privileges": ["all"]
+        },
+        {
+          "names": [
+            ".alerts-security*",
+            ".preview.alerts-security*",
+            ".internal.preview.alerts-security*",
+            ".siem-signals-*"
+          ],
+          "privileges": ["all"]
+        }
+      ],
+      "run_as": []
+    },
+    "kibana": [
+      {
+        "feature": {
+          "ml": ["all"],
+          "siem": ["all", "read_alerts", "crud_alerts"],
+          "securitySolutionAssistant": ["all"],
+          "securitySolutionCases": ["all"],
+          "actions": ["all"],
+          "builtInAlerts": ["all"]
+        },
+        "spaces": ["*"],
+        "base": []
+      }
+    ]
+  }
+}

packages/kbn-es/tsconfig.json

@@ -3,19 +3,14 @@
   "compilerOptions": {
     "outDir": "target/types"
   },
-  "include": [
-    "**/*.ts",
-    "**/*.js"
-  ],
-  "exclude": [
-    "target/**/*",
-  ],
+  "include": ["**/*.ts", "**/*.js", "**/*.json"],
+  "exclude": ["target/**/*"],
   "kbn_references": [
     "@kbn/tooling-log",
     "@kbn/dev-utils",
     "@kbn/dev-proc-runner",
     "@kbn/ci-stats-reporter",
     "@kbn/jest-serializers",
-    "@kbn/repo-info",
+    "@kbn/repo-info"
   ]
 }