[8.6] Quick-fix Users can’t upgrade their clusters when riskScore e…

…xperimental feature is enabled (#146780) (#146813)

# Backport

This will backport the following commits from `main` to `8.6`:
- [Quick-fix Users can’t upgrade their clusters when `riskScore`
experimental feature is enabled
(#146780)](#146780)

<!--- Backport version: 8.9.7 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Pablo
Machado","email":"pablo.nevesmachado@elastic.co"},"sourceCommit":{"committedDate":"2022-12-01T17:25:46Z","message":"Quick-fix
Users can’t upgrade their clusters when `riskScore` experimental feature
is enabled (#146780)\n\nUsers can't upgrade their clusters when an old
experimental feature is\r\nenabled.\r\n\r\nWhile we don't have a final
solution for this issue, I am adding the\r\nexperimental flag
configuration back to prevent users from having this\r\nfrustrating
experience.\r\n\r\nQuick-fix for:
https://github.com/elastic/kibana/issues/146777\r\nOriginal
report:\r\nhttps://elastic.slack.com/archives/C6E3MTCD7/p1669236299374339\r\n\r\nFix\r\n```\r\nFATAL
Error: [config validation of
[xpack.securitySolution].enableExperimental]: [riskyUsersEnabled] is not
allowed. Allowed values are: tGridEnabled,
tGridEventRenderedViewEnabled, excludePoliciesInFilterEnabled,
kubernetesEnabled, disableIsolationUIPendingStatuses,
pendingActionResponsesWithAck, policyListEnabled,
policyResponseInFleetEnabled, previewTelemetryUrlEnabled,
responseActionsConsoleEnabled, insightsRelatedAlertsByProcessAncestry,
extendedRuleExecutionLoggingEnabled, socTrendsEnabled,
responseActionsEnabled\r\n```\r\n\r\nCo-authored-by: Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"c3d1d9ec284f81f3c5d713010e52cd9d4f09c39e","branchLabelMapping":{"^v8.7.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:fix","Team:Threat
Hunting","Team: SecuritySolution","Team:Threat
Hunting:Explore","v8.6.0","v8.7.0","v8.6.1"],"number":146780,"url":"https://github.com/elastic/kibana/pull/146780","mergeCommit":{"message":"Quick-fix
Users can’t upgrade their clusters when `riskScore` experimental feature
is enabled (#146780)\n\nUsers can't upgrade their clusters when an old
experimental feature is\r\nenabled.\r\n\r\nWhile we don't have a final
solution for this issue, I am adding the\r\nexperimental flag
configuration back to prevent users from having this\r\nfrustrating
experience.\r\n\r\nQuick-fix for:
https://github.com/elastic/kibana/issues/146777\r\nOriginal
report:\r\nhttps://elastic.slack.com/archives/C6E3MTCD7/p1669236299374339\r\n\r\nFix\r\n```\r\nFATAL
Error: [config validation of
[xpack.securitySolution].enableExperimental]: [riskyUsersEnabled] is not
allowed. Allowed values are: tGridEnabled,
tGridEventRenderedViewEnabled, excludePoliciesInFilterEnabled,
kubernetesEnabled, disableIsolationUIPendingStatuses,
pendingActionResponsesWithAck, policyListEnabled,
policyResponseInFleetEnabled, previewTelemetryUrlEnabled,
responseActionsConsoleEnabled, insightsRelatedAlertsByProcessAncestry,
extendedRuleExecutionLoggingEnabled, socTrendsEnabled,
responseActionsEnabled\r\n```\r\n\r\nCo-authored-by: Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"c3d1d9ec284f81f3c5d713010e52cd9d4f09c39e"}},"sourceBranch":"main","suggestedTargetBranches":["8.6"],"targetPullRequestStates":[{"branch":"8.6","label":"v8.6.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.7.0","labelRegex":"^v8.7.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/146780","number":146780,"mergeCommit":{"message":"Quick-fix
Users can’t upgrade their clusters when `riskScore` experimental feature
is enabled (#146780)\n\nUsers can't upgrade their clusters when an old
experimental feature is\r\nenabled.\r\n\r\nWhile we don't have a final
solution for this issue, I am adding the\r\nexperimental flag
configuration back to prevent users from having this\r\nfrustrating
experience.\r\n\r\nQuick-fix for:
https://github.com/elastic/kibana/issues/146777\r\nOriginal
report:\r\nhttps://elastic.slack.com/archives/C6E3MTCD7/p1669236299374339\r\n\r\nFix\r\n```\r\nFATAL
Error: [config validation of
[xpack.securitySolution].enableExperimental]: [riskyUsersEnabled] is not
allowed. Allowed values are: tGridEnabled,
tGridEventRenderedViewEnabled, excludePoliciesInFilterEnabled,
kubernetesEnabled, disableIsolationUIPendingStatuses,
pendingActionResponsesWithAck, policyListEnabled,
policyResponseInFleetEnabled, previewTelemetryUrlEnabled,
responseActionsConsoleEnabled, insightsRelatedAlertsByProcessAncestry,
extendedRuleExecutionLoggingEnabled, socTrendsEnabled,
responseActionsEnabled\r\n```\r\n\r\nCo-authored-by: Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"c3d1d9ec284f81f3c5d713010e52cd9d4f09c39e"}}]}]
BACKPORT-->

Co-authored-by: Pablo Machado <pablo.nevesmachado@elastic.co>

x-pack/plugins/security_solution/common/experimental_features.ts

@@ -80,6 +80,16 @@ export const allowedExperimentalValues = Object.freeze({
    * Enables the `get-file` endpoint response action
    */
   responseActionGetFileEnabled: false,
+
+  /**
+   * Keep DEPRECATED experimental flags that are documented to prevent failed upgrades.
+   * https://www.elastic.co/guide/en/security/current/user-risk-score.html
+   * https://www.elastic.co/guide/en/security/current/host-risk-score.html
+   *
+   * Issue: https://github.com/elastic/kibana/issues/146777
+   */
+  riskyHostsEnabled: false, // DEPRECATED
+  riskyUsersEnabled: false, // DEPRECATED
 });
 
 type ExperimentalConfigKeys = Array<keyof ExperimentalFeatures>;