From 63e29efbc664b0b4bcc62b39b661b484ffeceb5a Mon Sep 17 00:00:00 2001
From: Victor Martinez <victormartinezrubio@gmail.com>
Date: Mon, 6 May 2024 16:32:36 +0200
Subject: [PATCH] github-action: undeploy serverless for closed PRs using
 `ci:project-deploy-observability` (#182374)

Automate the undeployment for all those Kibana PRs using the label
`ci:project-deploy-observability` once those PRs have been closed
(merged, closed).

This will help with tidying up all the ongoing deployments that were
created automatically as part of the recent automation with
https://github.com/elastic/kibana/pull/181851
---
 .github/CODEOWNERS                       |  1 +
 .github/workflows/undeploy-my-kibana.yml | 32 ++++++++++++++++++++++++
 2 files changed, 33 insertions(+)
 create mode 100644 .github/workflows/undeploy-my-kibana.yml

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 545281afe5fc9..d37cf5f076b1c 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -1030,6 +1030,7 @@ packages/kbn-monaco/src/esql @elastic/kibana-esql
 
 # Observability robots
 /.github/workflows/deploy-my-kibana.yml @elastic/observablt-robots
+/.github/workflows/undeploy-my-kibana.yml @elastic/observablt-robots
 /.github/workflows/oblt-github-commands @elastic/observablt-robots
 
 # Infra Monitoring
diff --git a/.github/workflows/undeploy-my-kibana.yml b/.github/workflows/undeploy-my-kibana.yml
new file mode 100644
index 0000000000000..a288702cbb537
--- /dev/null
+++ b/.github/workflows/undeploy-my-kibana.yml
@@ -0,0 +1,32 @@
+---
+##
+## This the automation will undeploy an existing automated deployment
+## caused by a merged/closed event and if the GitHub label matches
+## the automated one.
+##
+## Owner: @elastic/observablt-robots
+## Further details: https://ela.st/oblt-deploy-my-kibana
+##
+name: undeploy-my-kibana
+
+on:
+  pull_request:
+    types: [closed]
+
+permissions:
+  contents: read
+
+jobs:
+  undeploy-my-kibana:
+    if: contains(github.event.pull_request.labels.*.name, 'ci:project-deploy-observability')
+    runs-on: ubuntu-latest
+    steps:
+      - uses: elastic/apm-pipeline-library/.github/actions/github-token@current
+        with:
+          url: ${{ secrets.OBLT_VAULT_ADDR }}
+          roleId: ${{ secrets.OBLT_VAULT_ROLE_ID }}
+          secretId: ${{ secrets.OBLT_VAULT_SECRET_ID }}
+
+      - uses: elastic/apm-pipeline-library/.github/actions/undeploy-my-kibana@current
+        with:
+          token: ${{ env.GITHUB_TOKEN }}