wip

x-pack/qa/rolling-upgrade/build.gradle

@@ -66,6 +66,11 @@ BuildParams.bwcVersions.withWireCompatiple { bwcVersion, baseName ->
     if (bwcVersion.onOrAfter('6.6.0')) {
       setting 'ccr.auto_follow.wait_for_metadata_timeout', '1s'
     }
+    if (bwcVersion.onOrAfter('7.11.0')) {
+      extraConfigFile 'operator_users.yml', file("${project.projectDir}/src/test/resources/operator_users.yml")
+//      setting 'xpack.security.operator_privileges.enabled', "true"
+      user username: "non_operator", password: 'x-pack-test-password', role: "superuser"
+    }
 
     user username: "test_user", password: "x-pack-test-password"
 

x-pack/qa/rolling-upgrade/src/test/resources/operator_users.yml

@@ -0,0 +1,2 @@
+operator:
+  - usernames: ["test_user"]

x-pack/qa/rolling-upgrade/src/test/resources/rest-api-spec/test/mixed_cluster/130_operator_privileges.yml

@@ -0,0 +1,16 @@
+---
+"Test operator pivileges will work in the mixed cluster":
+
+  - skip:
+      features: headers
+      version: " - 7.10.99"
+      reason: "operator privileges are available since 7.11"
+
+  - do:
+      cluster.delete_voting_config_exclusions: { }
+
+#  - do:
+#      catch: forbidden
+#      headers: # the non_operator user
+#        Authorization: Basic bm9uX29wZXJhdG9yOngtcGFjay10ZXN0LXBhc3N3b3Jk
+#      cluster.delete_voting_config_exclusions: { }

x-pack/qa/rolling-upgrade/src/test/resources/rest-api-spec/test/old_cluster/130_operator_privileges.yml

@@ -0,0 +1,17 @@
+---
+"Test operator pivileges will work in the old cluster":
+
+  - skip:
+      features: headers
+      version: " - 7.10.99"
+      reason: "operator privileges are available since 7.11"
+
+  - do:
+      cluster.delete_voting_config_exclusions: { }
+#
+#  - do:
+#      catch: forbidden
+#      headers:  # the non_operator user
+#        Authorization: Basic bm9uX29wZXJhdG9yOngtcGFjay10ZXN0LXBhc3N3b3Jk
+#      cluster.delete_voting_config_exclusions: {}
+