[FTR] add service to test user roles on serverless

[dmlemeshko]

Summary

This PR enables user roles testing in FTR

We use SAML authentication to get session cookie for user with the specific role. The cookie is cached on FTR service side so we only make SAML auth one time per user within FTR config run. For Kibana CI service relies on changes coming in #170852

In order to run FTR tests locally against existing MKI project:

• add .ftr/role_users.json in Kibana root dir

{
  "viewer": {
    "email": "...",
    "password": "..."
  },
  "developer": {
    "email": "...",
    "password": "..."
  }
}

• set Cloud hostname (!not project hostname!) with TEST_CLOUD_HOST_NAME, e.g.
  export TEST_CLOUD_HOST_NAME=console.qa.cld.elstc.co

How to use:

• functional tests:

const svlCommonPage = getPageObject('svlCommonPage');

before(async () => {
  // login with Viewer role  
  await svlCommonPage.loginWithRole('viewer');
  // you are logged in in browser and on project home page, start the test 
});

it('has project header', async () => {
  await svlCommonPage.assertProjectHeaderExists();
});

• API integration tests:

const svlUserManager = getService('svlUserManager');
const supertestWithoutAuth = getService('supertestWithoutAuth');
let credentials: { Cookie: string };

before(async () => {
  // get auth header for Viewer role  
 credentials = await svlUserManager.getApiCredentialsForRole('viewer');
});

it('returns full status payload for authenticated request', async () => {
    const { body } = await supertestWithoutAuth
    .get('/api/status')
    .set(credentials)
    .set('kbn-xsrf', 'kibana');

    expect(body.name).to.be.a('string');
    expect(body.uuid).to.be.a('string');
    expect(body.version.number).to.be.a('string');
});

Flaky-test-runner:

#1 https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/4081
#2 https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/4114

[pheyos]

LGTM
Also tested running against MKI ✔️

[dmlemeshko]

Within @elastic/appex-qa we agreed to merge it on Monday morning.

[dmlemeshko]

Flaky test runner spotted instability with 28/150 failures, all with the same issue: cookie was set, user profile still displaying old test_serverless user instead of viewer.
I found out that previous test suite is not doing the logout, that might be the root cause. Since we can't gurantee all the tests suite to have logout, I added cookies removal in loginWithRole 8cc5da6
Verify a stability fix with flaky test runner build https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/4140#_ 🔄

[dmlemeshko]

Another flaky-test-runner to validate the last commit https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/4159

[pheyos]

Latest changes LGTM, also checked on MKI ✔️

[kibana-ci]

💛 Build succeeded, but was flaky

• Buildkite Build
• Commit: f789475

Failed CI Steps

• Osquery Cypress Tests #3

Metrics [docs]

✅ unchanged

History

• 💚 Build #181420 succeeded 484af20
• 💚 Build #181293 succeeded 8cc5da6
• 💔 Build #180730 failed 923e071
• 💔 Build #180600 failed c478991
• 💚 Build #180519 succeeded 099e0d0
• 💛 Build #180483 was flaky c5235d3

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @dmlemeshko