tl;dr: This request is already in progress via #839; merge that PR after the required onboarding prerequisites are done (catalog-info token policy first), then verify distribution/dashboard/secrets for elastic/observability-catalog.

Recommendation

Proceed with #839 as the implementation vehicle for this issue, and treat #838 as tracking/coordination. The code change in #839 is the correct enrollment mechanism (config/obs/active-repositories.json), but onboarding is only complete after the documented sequencing and post-merge checks are done.

Findings

Exact implementation already exists in open PR: #839 (enroll elastic/observability-catalog in obs group) modifies only config/obs/active-repositories.json to add "elastic/observability-catalog".
Why this file is the right place:
- scripts/common.py:156-165 unions repos from config/<org-key>/active-repositories.json.
- scripts/build_target_operations.py:86-94 converts that union into install targets.
- scripts/sync_control_plane_dashboard.py:126-135 selects org configs by membership in active-repositories.json; :344-350 exits with error when repo is not listed.
Workflow triggers tied to that config file:
- .github/workflows/distribute-client-workflow.yml:7-9 triggers on config/**/active-repositories.json changes.
- .github/workflows/sync-control-plane-dashboard.yml:8-10 also triggers on config/**/active-repositories.json changes.
Documented onboarding sequencing beyond the config edit:
- docs/onboarding/registering-a-repository.md:7-10 and :47-64 require elastic/catalog-info token policy to be merged/active before merging the oblt-aw registration PR.
- docs/onboarding/registering-a-repository.md:65-71 and :71-89 require post-merge verification and COPILOT_GITHUB_TOKEN provisioning.
- .github/remote-workflow-template/oblt-aw.yml:24-29 shows id-token: write and required COPILOT_GITHUB_TOKEN secret.
Historical precedent: merged PR #160 followed the same enrollment pattern (single active-repositories.json addition).

Verification

I ran these commands in the workspace:

$ grep -n "observability-catalog" config/obs/active-repositories.json
# (no output)

$ python3 -c "from pathlib import Path; from scripts.common import merge_active_repositories_from_org_trees; repos=merge_active_repositories_from_org_trees(Path('config')); print('repos_count', len(repos)); print('contains_observability_catalog', 'elastic/observability-catalog' in repos)"
repos_count 11
contains_observability_catalog False

$ GH_TOKEN=dummy python3 scripts/sync_control_plane_dashboard.py --repo elastic/observability-catalog
ERROR: Repository elastic/observability-catalog is not listed in any config/<org-key>/active-repositories.json

(Attempted targeted pytest as well, but pytest is not installed in this runner image.)

Detailed Action Plan

Continue/finish #839 (already contains the needed config edit in config/obs/active-repositories.json).
Before merging #839, ensure elastic/catalog-info token policy PR is merged/active per docs/onboarding/registering-a-repository.md:47-64.
Merge #839 to main (this triggers distribution and dashboard sync via .github/workflows/distribute-client-workflow.yml and .github/workflows/sync-control-plane-dashboard.yml).
Verify distribution result: confirm PR was opened in elastic/observability-catalog adding/updating .github/workflows/oblt-aw.yml (per onboarding doc step 5 at docs/onboarding/registering-a-repository.md:67).
Verify dashboard sync: confirm [oblt-aw] Control Plane Dashboard issue exists/updates in elastic/observability-catalog (step 6 at docs/onboarding/registering-a-repository.md:69).
Provision COPILOT_GITHUB_TOKEN via elastic/observability-github-secrets as required by docs/onboarding/registering-a-repository.md:71-89 and .github/remote-workflow-template/oblt-aw.yml:29.
Close #838 once the above is complete (or keep linked to #839 until merge).

Related Items

Type	Link	Relevance
Issue	#838	Tracking request to enroll `elastic/observability-catalog`
PR	#839	Active implementation for this exact enrollment
PR	#160	Prior merged enrollment pattern (`active-repositories.json` update)
File	`config/obs/active-repositories.json`	Enrollment source of truth for obs org
File	`scripts/common.py:156-165`	Union of active repositories consumed by workflows
File	`docs/onboarding/registering-a-repository.md`	Required sequencing and post-merge onboarding steps

Note

🔒 Integrity filter blocked 2 items

The following items were blocked because they don't meet the GitHub integrity level.

#744 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
#674 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

What is this? | From workflow: Observability Agentic Workflow Entrypoint

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

enroll elastic/observability-catalog #838

Description

Metadata

Metadata

Assignees

Labels

Type

Fields

Projects

Milestone

Relationships

Development

Issue actions