[
  {
    "cmd": [
      "cipd",
      "ensure",
      "-root",
      "[START_DIR]/cloudkms",
      "-ensure-file",
      "infra/tools/luci/cloudkms/${platform} latest",
      "-max-threads",
      "0",
      "-json-output",
      "/path/to/tmp/json"
    ],
    "name": "ensure_installed",
    "~followup_annotations": [
      "@@@STEP_LOG_LINE@json.output@{@@@",
      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
      "@@@STEP_LOG_LINE@json.output@      {@@@",
      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-latest----------\", @@@",
      "@@@STEP_LOG_LINE@json.output@        \"package\": \"infra/tools/luci/cloudkms/resolved-platform\"@@@",
      "@@@STEP_LOG_LINE@json.output@      }@@@",
      "@@@STEP_LOG_LINE@json.output@    ]@@@",
      "@@@STEP_LOG_LINE@json.output@  }@@@",
      "@@@STEP_LOG_LINE@json.output@}@@@",
      "@@@STEP_LOG_END@json.output@@@"
    ]
  },
  {
    "cmd": [
      "python",
      "-u",
      "RECIPE_MODULE[depot_tools::gsutil]/resources/gsutil_smart_retry.py",
      "--",
      "RECIPE_REPO[depot_tools]/gsutil.py",
      "----",
      "cp",
      "gs://dart-ci-credentials/not_a_secret.encrypted",
      "not_a_secret.encrypted"
    ],
    "cwd": "[CLEANUP]",
    "infra_step": true,
    "name": "gsutil download"
  },
  {
    "cmd": [
      "[START_DIR]/cloudkms/cloudkms",
      "decrypt",
      "-input",
      "not_a_secret.encrypted",
      "-output",
      "[CLEANUP]/not_a_secret.key",
      "projects/dart-ci/locations/us-central1/keyRings/dart-ci/cryptoKeys/dart-ci"
    ],
    "cwd": "[CLEANUP]",
    "name": "cloudkms get key"
  },
  {
    "name": "$result"
  }
]