Enable custom roles and spaces in serverless projects

config/serverless.oblt.yml

@@ -207,3 +207,6 @@ xpack.ml.compatibleModuleType: 'observability'
 
 # Disable the embedded Dev Console
 console.ui.embeddedEnabled: false
+
+# Disable role management (custom roles)
+xpack.security.roleManagementEnabled: false

config/serverless.yml

@@ -152,7 +152,7 @@ server.versioned.versionResolution: newest
 server.versioned.strictClientVersionCheck: false
 
 # Enforce single "default" space and disable feature visibility controls
-xpack.spaces.maxSpaces: 1
+xpack.spaces.maxSpaces: 100
 xpack.spaces.allowFeatureVisibility: false
 xpack.spaces.allowSolutionVisibility: false
 
@@ -225,3 +225,6 @@ monitoring.ui.enabled: false
 xpack.securitySolution.enableUiSettingsValidations: true
 data.enableUiSettingsValidations: true
 discover.enableUiSettingsValidations: true
+
+# Enable role management (custom roles) by default
+xpack.security.roleManagementEnabled: true

x-pack/plugins/serverless/public/plugin.tsx

@@ -125,7 +125,7 @@ export class ServerlessPlugin
       getNavigationCards: (roleManagementEnabled, extendCardNavDefinitions) => {
         if (!roleManagementEnabled) return extendCardNavDefinitions;
 
-        const manageOrgMembersNavCard = generateManageOrgMembersNavCard(cloud.organizationUrl);
+        const manageOrgMembersNavCard = generateManageOrgMembersNavCard(cloud.usersAndRolesUrl);
         if (extendCardNavDefinitions) {
           extendCardNavDefinitions[manageOrgMembersNavCardName] = manageOrgMembersNavCard;
           return extendCardNavDefinitions;

x-pack/test/api_integration/deployment_agnostic/default_configs/serverless.config.base.ts

@@ -113,10 +113,6 @@ export function createServerlessTestConfig<T extends DeploymentAgnosticCommonSer
           ...svlSharedConfig.get('kbnTestServer.serverArgs'),
           ...kbnServerArgsFromController[options.serverlessProject],
           `--serverless=${options.serverlessProject}`,
-          // custom native roles are enabled only for search and security projects
-          ...(options.serverlessProject !== 'oblt'
-            ? ['--xpack.security.roleManagementEnabled=true']
-            : []),
         ],
       },
       testFiles: options.testFiles,

x-pack/test_serverless/api_integration/config.base.ts

@@ -36,10 +36,6 @@ export function createTestConfig(options: CreateTestConfigOptions) {
         serverArgs: [
           ...svlSharedConfig.get('kbnTestServer.serverArgs'),
           `--serverless=${options.serverlessProject}`,
-          // custom native roles are enabled only for search and security projects
-          ...(options.serverlessProject !== 'oblt'
-            ? ['--xpack.security.roleManagementEnabled=true']
-            : []),
           ...(options.kbnServerArgs || []),
         ],
       },