From 4cd83b10d04b78d784a7ab7a6cf5212a69d4f1fa Mon Sep 17 00:00:00 2001
From: Dzmitry Lemechko <dzmitry.lemechko@elastic.co>
Date: Fri, 11 Oct 2024 12:48:17 +0200
Subject: [PATCH] [Ftr] update svl roles and settings from controller (#195563)

## Summary

Updating default roles for Oblt project and ES nodes settings for
Security project to match elasticsearch-controller configuration

Adding obs teams for review to bring attention: we need to copy changes
from controllers manually to make sure our serverless simulation in
Kibana CI is close to real MKI env

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
---
 .../project_roles/oblt/roles.yml                     | 12 ++++++++++++
 .../default_configs/serverless.config.base.ts        |  6 +-----
 2 files changed, 13 insertions(+), 5 deletions(-)

diff --git a/packages/kbn-es/src/serverless_resources/project_roles/oblt/roles.yml b/packages/kbn-es/src/serverless_resources/project_roles/oblt/roles.yml
index e0091f5b7d055..841a4928f6cfe 100644
--- a/packages/kbn-es/src/serverless_resources/project_roles/oblt/roles.yml
+++ b/packages/kbn-es/src/serverless_resources/project_roles/oblt/roles.yml
@@ -25,6 +25,11 @@ viewer:
         - 'read'
         - 'view_index_metadata'
       allow_restricted_indices: false
+    - names:
+        - '.slo-observability.*'
+      privileges:
+        - 'read'
+        - 'view_index_metadata'
   applications:
     - application: 'kibana-.kibana'
       privileges:
@@ -69,6 +74,13 @@ editor:
         - 'write'
         - 'maintenance'
       allow_restricted_indices: false
+    - names:
+        - '.slo-observability.*'
+      privileges:
+        - 'write'
+        - 'read'
+        - 'view_index_metadata'
+        - 'manage'
   applications:
     - application: 'kibana-.kibana'
       privileges:
diff --git a/x-pack/test/api_integration/deployment_agnostic/default_configs/serverless.config.base.ts b/x-pack/test/api_integration/deployment_agnostic/default_configs/serverless.config.base.ts
index 73506a5d5b684..1c49433d742af 100644
--- a/x-pack/test/api_integration/deployment_agnostic/default_configs/serverless.config.base.ts
+++ b/x-pack/test/api_integration/deployment_agnostic/default_configs/serverless.config.base.ts
@@ -30,11 +30,7 @@ const esServerArgsFromController = {
     // for ML, data frame analytics are not part of this project type
     'xpack.ml.dfa.enabled=false',
   ],
-  security: [
-    'xpack.security.authc.api_key.cache.max_keys=70000',
-    'data_streams.lifecycle.retention.factory_default=365d',
-    'data_streams.lifecycle.retention.factory_max=365d',
-  ],
+  security: ['xpack.security.authc.api_key.cache.max_keys=70000'],
 };
 
 // include settings from kibana controller