blob: 78b6cd63dd1697521674bef798b9d3c382769a29 [file] [log] [blame]
[
{
"cmd": [],
"name": "ensure cloudkms"
},
{
"cmd": [
"cipd",
"ensure",
"-root",
"[START_DIR]/cipd/cloudkms",
"-ensure-file",
"infra/tools/luci/cloudkms/${platform} latest",
"-json-output",
"/path/to/tmp/json"
],
"infra_step": true,
"name": "ensure cloudkms.ensure_installed",
"~followup_annotations": [
"@@@STEP_NEST_LEVEL@1@@@",
"@@@STEP_LOG_LINE@json.output@{@@@",
"@@@STEP_LOG_LINE@json.output@ \"result\": {@@@",
"@@@STEP_LOG_LINE@json.output@ \"\": [@@@",
"@@@STEP_LOG_LINE@json.output@ {@@@",
"@@@STEP_LOG_LINE@json.output@ \"instance_id\": \"resolved-instance_id-of-latest----------\", @@@",
"@@@STEP_LOG_LINE@json.output@ \"package\": \"infra/tools/luci/cloudkms/resolved-platform\"@@@",
"@@@STEP_LOG_LINE@json.output@ }@@@",
"@@@STEP_LOG_LINE@json.output@ ]@@@",
"@@@STEP_LOG_LINE@json.output@ }@@@",
"@@@STEP_LOG_LINE@json.output@}@@@",
"@@@STEP_LOG_END@json.output@@@"
]
},
{
"cmd": [
"[START_DIR]/cipd/cloudkms/cloudkms",
"decrypt",
"-input",
"[START_DIR]/ciphertext.txt",
"-output",
"[START_DIR]/plaintext.txt",
"crypto/key/path"
],
"name": "decrypt secret"
},
{
"name": "$result"
}
]