GitHub Actions for Elastic Observability projects

This repository contains GitHub Actions for Elastic Observability projects.

Actions catalog

The repository is organized by action namespace. Each action directory contains its own action.yml and usage README.

Namespace	Action docs
aws/	auth
azure/	auth
buildkite/	download-artifact, flaky-report, run
check-dependent-jobs/	check-dependent-jobs
download-kibana-dashboard/	download-kibana-dashboard
elastic/	active-branches, github-commands, validate-catalog
feature-freeze/	feature-freeze
git/	setup
github/	backport-active, changed-files, comment-reaction, create-token, is-member-of, is-pr-author-member-of, mutex, project-add, project-field-set, user-type, validate-comment
google/	auth
kibana-docker-image/	kibana-docker-image
maven/	await-artifact
mergify/	labels-copier
oblt-cli/	cluster-credentials, cluster-create-ccs, cluster-create-custom, cluster-create-serverless, cluster-destroy, cluster-name-validation, deploy-my-kibana, list, run, setup, undeploy-my-kibana
pre-commit/	pre-commit
slack/	notify-result, send
snapshoty/	run
test-report/	test-report
updatecli/	install, run, run-and-notify
version-framework/	version-framework

Automation workflows

Observability Agentic Workflow Triggers

The repository uses multiple .github/workflows/trigger-oblt-aw-*.yml workflows to forward scoped repository events to reusable workflows in elastic/oblt-aw.

Current trigger workflows include:

• .github/workflows/trigger-oblt-aw-autodoc.yml
• .github/workflows/trigger-oblt-aw-issue-triage.yml
• .github/workflows/trigger-oblt-aw-issue-fixer.yml
• .github/workflows/trigger-oblt-aw-mention-in-issue.yml
• .github/workflows/trigger-oblt-aw-automerge.yml
• .github/workflows/trigger-oblt-aw-dependency-review.yml
• .github/workflows/trigger-oblt-aw-duplicate-issue-detector.yml
• .github/workflows/trigger-oblt-aw-resource-not-accessible-by-integration-detector.yml
• .github/workflows/trigger-oblt-aw-resource-not-accessible-by-integration-triage.yml
• .github/workflows/trigger-oblt-aw-resource-not-accessible-by-integration-fixer.yml
• .github/workflows/trigger-oblt-aw-security-detector.yml
• .github/workflows/trigger-oblt-aw-security-triage.yml
• .github/workflows/trigger-oblt-aw-security-fixer.yml
• .github/workflows/trigger-oblt-aw-agent-suggestions.yml
• .github/workflows/trigger-oblt-aw-estc-pr-buildkite-detective.yml

Secret forwarding currently works as follows:

• Most trigger workflows pass COPILOT_GITHUB_TOKEN through as COPILOT_GITHUB_TOKEN.
• .github/workflows/trigger-oblt-aw-estc-pr-buildkite-detective.yml additionally passes BUILDKITE_LOGS_API_TOKEN as BUILDKITE_API_TOKEN for Buildkite log triage.

Kibana deploy/undeploy side effects

The oblt-cli/deploy-my-kibana and oblt-cli/undeploy-my-kibana actions create issues in elastic/observability-test-environments:

• deploy-my-kibana creates an issue labeled deploy-custom-kibana
• undeploy-my-kibana creates an issue labeled destroy-custom-kibana-serverless

When using these actions, provide credentials with issues: write permission on elastic/observability-test-environments.

updatecli automation

The repository includes the .github/workflows/updatecli.yml workflow, which runs Updatecli compose automation against oblt-actions and observability-test-environments.

It runs on:

• a weekly schedule (0 6 * * 6)
• manual dispatch (workflow_dispatch)

This workflow requires the repository secrets OBS_AUTOMATION_APP_ID and OBS_AUTOMATION_APP_PEM to generate a GitHub App token with write access to contents and pull requests for the target repositories.

Releasing

See RELEASE.md for the release process.

^{Made with ♥️ and ☕️ by Elastic and our community.}