Failing ES Promotion: detection engine api security and spaces enabled create_index t1_analyst should NOT be able to create a signal index when it has not been created yet. Should return a 403 and error that the user is unauthorized

[spalger]

Failure: https://kibana-ci.elastic.co/job/elasticsearch+snapshots+verify/2427/execution/node/497/log/

Test output:

1 failing

1)    detection engine api security and spaces enabled
       
         create_index
           t1_analyst
             should NOT be able to create a signal index when it has not been created yet. Should return a 403 and error that the user is unauthorized:


       Error: expected { message: 'security_exception: action [cluster:admin/ilm/get] is unauthorized for user [t1_analyst] with roles [t1_analyst], this action is granted by the cluster privileges [read_ilm,manage_ilm,manage,all]',
   status_code: 403 } to sort of equal { message: 'security_exception: action [cluster:admin/ilm/get] is unauthorized for user [t1_analyst], this action is granted by the cluster privileges [read_ilm,manage_ilm,manage,all]',
   status_code: 403 }
       + expected - actual
 
        {
       -  "message": "security_exception: action [cluster:admin/ilm/get] is unauthorized for user [t1_analyst] with roles [t1_analyst], this action is granted by the cluster privileges [read_ilm,manage_ilm,manage,all]"
       +  "message": "security_exception: action [cluster:admin/ilm/get] is unauthorized for user [t1_analyst], this action is granted by the cluster privileges [read_ilm,manage_ilm,manage,all]"
          "status_code": 403
        }
       
       at Assertion.assert (/dev/shm/workspace/parallel/24/kibana/packages/kbn-expect/expect.js:100:11)
       at Assertion.eql (/dev/shm/workspace/parallel/24/kibana/packages/kbn-expect/expect.js:244:8)
       at Context.<anonymous> (test/detection_engine_api_integration/security_and_spaces/tests/create_index.ts:92:25)
       at Object.apply (/dev/shm/workspace/parallel/24/kibana/packages/kbn-test/src/functional_test_runner/lib/mocha/wrap_function.js:73:16)

Looks like the error message has changed again, seems like something we should probably stop asserting on.

I'm going to skip this test so that we can get the promotion in and then fix this issue.

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[spalger]

Skipped

master/8.0: 68adc48 + 9aeb9f4 + ad0517a
7.x/7.13: 05ffe7c + a208aff + cd88f32