CI label to deploy security project of type AI for SOC (#219071)

amirbenun · web-flow · commit 4aab645d783e · 2025-07-14T14:55:52.000+03:00
## Summary

Support `ci:project-deploy-ai4soc` Github label to deploy AI for SOC
projects to the QA environment.
diff --git a/.buildkite/pipelines/serverless_deployment/build_pr_and_deploy_project.yml b/.buildkite/pipelines/serverless_deployment/build_pr_and_deploy_project.yml
@@ -22,7 +22,7 @@ steps:
         timeout_in_minutes: 5
 
   - group: 'Project Deployment'
-    if: "build.env('GITHUB_PR_LABELS') =~ /ci:project-deploy-(elasticsearch|observability|log_essentials|security)/"
+    if: "build.env('GITHUB_PR_LABELS') =~ /ci:project-deploy-(elasticsearch|observability|log_essentials|security|ai4soc)/"
 
     steps:
       - command: .buildkite/scripts/lifecycle/pre_build.sh
diff --git a/.buildkite/scripts/pipelines/pull_request/pipeline.ts b/.buildkite/scripts/pipelines/pull_request/pipeline.ts
@@ -179,7 +179,8 @@ const getPipeline = (filename: string, removeSteps = true) => {
       GITHUB_PR_LABELS.includes('ci:project-deploy-elasticsearch') ||
       GITHUB_PR_LABELS.includes('ci:project-deploy-observability') ||
       GITHUB_PR_LABELS.includes('ci:project-deploy-log_essentials') ||
-      GITHUB_PR_LABELS.includes('ci:project-deploy-security')
+      GITHUB_PR_LABELS.includes('ci:project-deploy-security') ||
+      GITHUB_PR_LABELS.includes('ci:project-deploy-ai4soc')
     ) {
       pipeline.push(getPipeline('.buildkite/pipelines/pull_request/deploy_project.yml'));
     } else if (GITHUB_PR_LABELS.includes('ci:build-serverless-image')) {
diff --git a/.buildkite/scripts/steps/cloud/purge_projects.ts b/.buildkite/scripts/steps/cloud/purge_projects.ts
@@ -102,7 +102,7 @@ async function purgeProjects() {
     } else if (
       !Boolean(
         pullRequest.labels.filter((label: any) =>
-          /^ci:project-deploy-(elasticsearch|observability|log_essentials|security)$/.test(
+          /^ci:project-deploy-(elasticsearch|observability|log_essentials|security|ai4soc)$/.test(
             label.name
           )
         ).length
diff --git a/.buildkite/scripts/steps/serverless/deploy.sh b/.buildkite/scripts/steps/serverless/deploy.sh
@@ -26,8 +26,16 @@ deploy() {
   PRODUCT_TIER_JSON_ENTRY=""
   PRODUCT_TIER_NAME=""
   if [ -n "${PRODUCT_TIER:-}" ]; then
-    PRODUCT_TIER_JSON_ENTRY='"product_tier": "'"$PRODUCT_TIER"'",'
     PRODUCT_TIER_NAME="-$PRODUCT_TIER"
+
+    case $PRODUCT_TIER in
+      logs_essentials)
+        PRODUCT_TIER_JSON_ENTRY='"product_tier": "'"$PRODUCT_TIER"'",'
+      ;;
+      ai_soc)
+        PRODUCT_TIER_JSON_ENTRY='"product_types": [{ "product_line": "ai_soc", "product_tier": "search_ai_lake" }],'
+      ;;
+    esac
   fi
 
   PROJECT_NAME="kibana-pr-$BUILDKITE_PULL_REQUEST-$PROJECT_TYPE$PRODUCT_TIER_NAME"
@@ -171,6 +179,7 @@ EOF
 
 is_pr_with_label "ci:project-deploy-elasticsearch" && deploy "elasticsearch"
 is_pr_with_label "ci:project-deploy-security" && deploy "security"
+is_pr_with_label "ci:project-deploy-ai4soc" && deploy "security" "ai_soc"
 is_pr_with_label "ci:project-deploy-log_essentials" && deploy "observability" "logs_essentials"
 if is_pr_with_label "ci:project-deploy-observability" ; then
   # Only deploy observability if the PR is targeting main
diff --git a/dev_docs/tutorials/ci.mdx b/dev_docs/tutorials/ci.mdx
@@ -111,6 +111,10 @@ Create or update a serverless Observability project (in the Log Essentials tier)
 
 Create or update a serverless Security project on Elastic Cloud QA.
 
+#### `ci:project-deploy-ai4soc`
+
+Create or update a serverless Security project of type AI for SOC on Elastic Cloud QA.
+
 #### `ci:project-persist-deployment`
 
 Prevents an existing deployment from being shutdown due to inactivity.

Original file line number	Diff line number	Diff line change
`@@ -102,7 +102,7 @@ async function purgeProjects() {`
`102`	`102`	`} else if (`
`103`	`103`	`!Boolean(`
`104`	`104`	`pullRequest.labels.filter((label: any) =>`
`105`		`- /^ci:project-deploy-(elasticsearch\|observability\|log_essentials\|security)$/.test(`
	`105`	`+ /^ci:project-deploy-(elasticsearch\|observability\|log_essentials\|security\|ai4soc)$/.test(`
`106`	`106`	`label.name`
`107`	`107`	`)`
`108`	`108`	`).length`