90_service_accounts.yml

---
requires:
  stack: true
  serverless: false
---
teardown:
  - do:
      security.delete_service_token:
        namespace: elastic
        service: fleet-server
        name: api-token-fleet
        ignore: 404
---
'Service accounts':
  - do:
      security.get_service_accounts:
        namespace: elastic
  - is_true: "elastic/auto-ops"
  - is_true: "elastic/enterprise-search-server"
  - is_true: "elastic/fleet-server"
  - is_true: "elastic/fleet-server-remote"
  - is_true: "elastic/kibana"

  - do:
      security.create_service_token:
        namespace: elastic
        service: fleet-server
        name: api-token-fleet
  - is_true: created
  - match: { "token.name": "api-token-fleet" }
  - set: { "token.value": service_token_fleet }

  - do:
      security.get_service_credentials:
        namespace: elastic
        service: fleet-server
  - match: { "service_account": "elastic/fleet-server" }

  - do:
      security.clear_cached_service_tokens:
        namespace: elastic
        service: fleet-server
        name: api-token-fleet
  - match: { _nodes.failed: 0 }