elastic · Ikuni17 · Aug 8, 2025 · Aug 6, 2025
@@ -0,0 +1,42 @@
+agents:
+  provider: gcp
+  image: family/kibana-ubuntu-2004
+  imageProject: elastic-images-prod
+  machineType: n2-standard-2
+steps:
+  - group: 'Renovate PR opened or comment'
+    if: build.env('GITHUB_PR_USER') == 'elastic-renovate-prod[bot]' && ((build.env('GITHUB_PR_EVENT_TYPE') == 'pull_request' && build.env('GITHUB_PR_EVENT_ACTION') == 'opened') || (build.env('GITHUB_PR_EVENT_TYPE') == 'issue_comment' && build.env('GITHUB_PR_EVENT_ACTION') == 'created'))
+
+    steps:
+      - command: .buildkite/scripts/steps/renovate/renovate_helper.sh
+        label: 'Run Renovate helper'
+        key: renovate_helper
+        timeout_in_minutes: 20
+        retry:
+          automatic:
+            - exit_status: '*'
+              limit: 1
+
+      - wait: ~
+
+      - command: .buildkite/scripts/steps/renovate/trigger_pr.sh
+        label: 'Trigger Kibana PR pipeline'
+        key: trigger_pr_opened
+        timeout_in_minutes: 10
+        retry:
+          automatic:
+            - exit_status: '*'
+              limit: 1
+
+  - group: 'Renovate PR updated'
+    # GITHUB_PR_USER is the PR author and GITHUB_PR_TRIGGER_USER is the commit author
+    if: build.env('GITHUB_PR_USER') == 'elastic-renovate-prod[bot]' && build.env('GITHUB_PR_TRIGGER_USER') != 'elastic-renovate-prod[bot]' && build.env('GITHUB_PR_EVENT_TYPE') == 'pull_request' && build.env('GITHUB_PR_EVENT_ACTION') == 'synchronize'
+    steps:
+      - command: .buildkite/scripts/steps/renovate/trigger_pr.sh
+        label: 'Trigger Kibana PR pipeline'
+        key: trigger_pr_updated
+        timeout_in_minutes: 10
+        retry:
+          automatic:
+            - exit_status: '*'
+              limit: 1
@@ -4,11 +4,15 @@
       "repoOwner": "elastic",
       "repoName": "kibana",
       "pipelineSlug": "kibana-pull-request",
-
       "enabled": true,
       "allow_org_users": true,
-      "allowed_repo_permissions": ["admin", "write"],
-      "allowed_list": ["elastic-vault-github-plugin-prod[bot]"],
+      "allowed_repo_permissions": [
+        "admin",
+        "write"
+      ],
+      "allowed_list": [
+        "elastic-vault-github-plugin-prod[bot]"
+      ],
       "set_commit_status": true,
       "commit_status_context": "kibana-ci",
       "build_on_commit": true,
@@ -17,8 +21,14 @@
       "build_on_ready": true,
       "trigger_comment_regex": "^(?:(?:buildkite\\W+)?(?:build|test)\\W+(?:this|it))|^\\/ci$",
       "always_trigger_comment_regex": "^(?:(?:buildkite\\W+)?(?:build|test)\\W+(?:this|it))|^\\/ci$",
-      "skip_ci_labels": ["skip-ci"],
-      "skip_target_branches": ["6.8", "7.11", "7.12"],
+      "skip_ci_labels": [
+        "skip-ci"
+      ],
+      "skip_target_branches": [
+        "6.8",
+        "7.11",
+        "7.12"
+      ],
       "enable_skippable_commits": true,
       "skip_ci_on_only_changed": [
         "^docs/",
@@ -38,7 +48,10 @@
       ],
       "kibana_versions_check": true,
       "kibana_build_reuse": true,
-      "kibana_build_reuse_pipeline_slugs": ["kibana-pull-request", "kibana-on-merge"],
+      "kibana_build_reuse_pipeline_slugs": [
+        "kibana-pull-request",
+        "kibana-on-merge"
+      ],
       "kibana_build_reuse_regexes": [
         "^test/",
         "^x-pack/platform/test/",
@@ -56,8 +69,13 @@
       "skip_ci_labels": [],
       "enabled": true,
       "allow_org_users": true,
-      "allowed_repo_permissions": ["admin", "write"],
-      "allowed_list": ["elastic-vault-github-plugin-prod[bot]"],
+      "allowed_repo_permissions": [
+        "admin",
+        "write"
+      ],
+      "allowed_list": [
+        "elastic-vault-github-plugin-prod[bot]"
+      ],
       "set_commit_status": true,
       "commit_status_context": "kibana-deploy-project-from-pr",
       "build_on_commit": false,
@@ -66,7 +84,11 @@
       "trigger_comment_regex": "^(?:(?:buildkite\\W+)?(?:deploy)\\W+(?:project))$",
       "kibana_versions_check": true,
       "kibana_build_reuse": true,
-      "kibana_build_reuse_pipeline_slugs": ["kibana-pull-request", "kibana-on-merge", "kibana-deploy-project-from-pr"],
+      "kibana_build_reuse_pipeline_slugs": [
+        "kibana-pull-request",
+        "kibana-on-merge",
+        "kibana-deploy-project-from-pr"
+      ],
       "kibana_build_reuse_regexes": [
         "^test/",
         "^x-pack/test/",
@@ -84,8 +106,13 @@
       "skip_ci_labels": [],
       "enabled": true,
       "allow_org_users": true,
-      "allowed_repo_permissions": ["admin", "write"],
-      "allowed_list": ["elastic-vault-github-plugin-prod[bot]"],
+      "allowed_repo_permissions": [
+        "admin",
+        "write"
+      ],
+      "allowed_list": [
+        "elastic-vault-github-plugin-prod[bot]"
+      ],
       "set_commit_status": true,
       "commit_status_context": "kibana-deploy-cloud-from-pr",
       "build_on_commit": false,
@@ -94,7 +121,11 @@
       "trigger_comment_regex": "^(?:(?:buildkite\\W+)?(?:deploy)\\W+(?:cloud))$",
       "kibana_versions_check": true,
       "kibana_build_reuse": true,
-      "kibana_build_reuse_pipeline_slugs": ["kibana-pull-request", "kibana-on-merge", "kibana-deploy-cloud-from-pr"],
+      "kibana_build_reuse_pipeline_slugs": [
+        "kibana-pull-request",
+        "kibana-on-merge",
+        "kibana-deploy-cloud-from-pr"
+      ],
       "kibana_build_reuse_regexes": [
         "^test/",
         "^x-pack/test/",
@@ -104,6 +135,26 @@
         "/__snapshots__/",
         "\\.test\\.(ts|tsx|js|jsx)"
       ]
+    },
+    {
+      "repoOwner": "elastic",
+      "repoName": "kibana",
+      "pipelineSlug": "kibana-renovate-helper",
+      "skip_ci_labels": [],
+      "enabled": true,
+      "allow_org_users": true,
+      "allowed_repo_permissions": [
+        "admin",
+        "write"
+      ],
+      "allowed_list": [
+        "elastic-vault-github-plugin-prod[bot]"
+      ],
+      "build_on_commit": true,
+      "build_on_comment": true,
+      "build_drafts": false,
+      "trigger_comment_regex": "^(?:(?:buildkite\\W+)?(?:run)\\W+(?:renovate)\\W+(?:helper))$",
+      "kibana_versions_check": true
     }
   ]
 }
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+source .buildkite/scripts/common/util.sh
+.buildkite/scripts/bootstrap.sh
+
+echo --- Deduplicate yarn.lock
+cmd="node scripts/yarn_deduplicate.js && yarn kbn bootstrap && node scripts/yarn_deduplicate.js"
+eval "$cmd"
+check_for_changed_files "$cmd" true
+
+echo --- Additional helpers
+# We only want the deploy label on the main branch instead of all branches in the Renovate group
+if [ "$GITHUB_PR_BRANCH" = "renovate/main-chainguard" ] && ! is_pr_with_label "ci:cloud-deploy"; then
+  echo "Adding deploy label to main chainguard PR"
+  gh api "repos/elastic/kibana/issues/${GITHUB_PR_NUMBER}/labels" --method POST -f "labels[]=ci:cloud-deploy" >/dev/null
+fi
@@ -0,0 +1,14 @@
+#!/bin/bash
+
+set -euo pipefail
+
+echo --- Triggering Kibana Pull Request Pipeline
+
+# The Github env vars need to be passed along manually
+# GITHUB_PR_* is used to avoid any sensitive vars being passed along
+GITHUB_ENV_VARS=()
+for var in $(env | grep ^GITHUB_PR_ | cut -d= -f1); do
+  GITHUB_ENV_VARS+=("$var=${!var}")
+done
+
+ts-node .buildkite/scripts/steps/trigger_pipeline.ts kibana-pull-request "$BUILDKITE_BRANCH" "$BUILDKITE_COMMIT" "" "${GITHUB_ENV_VARS[*]}"
@@ -13,6 +13,8 @@ const pipelineSlug = process.argv[2];
 const branch = process.argv[3] || 'main';
 const commit = process.argv[4] || 'HEAD';
 const kibanaBuildId = process.argv[5] || '';
+// key=value pairs in space separated string
+const extraEnvVariables = process.argv[6] || '';
 
 (async () => {
   try {
@@ -22,6 +24,11 @@ const kibanaBuildId = process.argv[5] || '';
       branch,
       env: {
         ...(kibanaBuildId && { KIBANA_BUILD_ID: kibanaBuildId }),
+        ...extraEnvVariables.split(' ').reduce<Record<string, string>>((acc, varString) => {
+          const [key, value] = varString.split('=');
+          acc[key] = value;
+          return acc;
+        }, {}),
       },
       ignore_pipeline_branch_filters: true, // Required because of a Buildkite bug
     });