GitHub Actions for Elastic Observability projects

This repository contains GitHub Actions for Elastic Observability projects.

Actions catalog

The repository is organized by action namespace. Each action directory contains its own action.yml and usage README.

Namespace	Action docs
aws/	auth
azure/	auth
buildkite/	download-artifact, flaky-report, run
check-dependent-jobs/	check-dependent-jobs
download-kibana-dashboard/	download-kibana-dashboard
edot-release/	draft-release-notes, finalize, pr-range, prepare-finish, prepare-start, publish-guard, render-release-notes, start-patch, version
elastic/	active-branches, github-commands, validate-catalog
feature-freeze/	feature-freeze
git/	setup
github/	backport-active, changed-files, comment-reaction, create-token, is-member-of, is-pr-author-member-of, mutex, project-add, project-field-set, user-type, validate-comment
google/	auth
kibana-docker-image/	kibana-docker-image
maven/	await-artifact
mergify/	labels-copier
oblt-cli/	cluster-credentials, cluster-create-ccs, cluster-create-custom, cluster-create-serverless, cluster-destroy, cluster-name-validation, deploy-my-kibana, list, run, setup, undeploy-my-kibana
pre-commit/	pre-commit
slack/	notify-result, send
snapshoty/	run
test-report/	test-report
updatecli/	install, run, run-and-notify
version-framework/	version-framework

Automation workflows

Observability Agentic Workflow Triggers

The repository uses multiple .github/workflows/trigger-oblt-aw-*.yml workflows to forward scoped repository events to reusable workflows in elastic/oblt-aw.

Current trigger workflows include:

• .github/workflows/trigger-oblt-aw-issue-comment.yml
• .github/workflows/trigger-oblt-aw-issues.yml
• .github/workflows/trigger-oblt-aw-pull-request.yml
• .github/workflows/trigger-oblt-aw-schedule.yml
• .github/workflows/trigger-oblt-aw-status.yml

Secret forwarding currently works as follows:

• These trigger workflows do not explicitly forward COPILOT_GITHUB_TOKEN.
• .github/workflows/trigger-oblt-aw-status.yml maps BUILDKITE_LOGS_API_TOKEN to BUILDKITE_API_TOKEN.

Keep this inventory and the secret mappings synchronized when trigger workflows are added or removed.

Kibana deploy/undeploy side effects

The oblt-cli/deploy-my-kibana and oblt-cli/undeploy-my-kibana actions create issues in elastic/observability-test-environments:

• deploy-my-kibana creates an issue labeled deploy-custom-kibana
• undeploy-my-kibana creates an issue labeled destroy-custom-kibana-serverless

When using these actions, provide credentials with issues: write permission on elastic/observability-test-environments.

updatecli automation

The repository includes the .github/workflows/updatecli.yml workflow, which runs Updatecli compose automation against oblt-actions and oblt-cli.

It runs on:

• a weekly schedule (0 6 * * 6)
• manual dispatch (workflow_dispatch)

This workflow requires the repository secrets OBS_AUTOMATION_APP_ID and OBS_AUTOMATION_APP_PEM to generate a GitHub App token with write access to contents and pull requests for the target repositories. It also requires SLACK_BOT_TOKEN so the job can notify #observablt-bots when the updatecli run fails.

GitHub Actions workflow documentation

The repository-local workflow inventory and per-workflow documentation are indexed in .github/workflows/README.md.

Releasing

See RELEASE.md for the release process.

^{Made with ♥️ and ☕️ by Elastic and our community.}