Reapply "Fix priority of most important trusted pipelines." (#2822)

[fweikert]

This reverts commit 5b81ed9.

Additional fix: Explicitly set priority value - TF doesn't like undefined variables, and $try doesn't help either.

[github-actions]

Terraform Plan for bazel-trusted 📖

Plan: 0 to add, 23 to change, 0 to destroy.

Show Plan

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # buildkite_pipeline.bazel-java-tools-updates will be updated in-place
  ~ resource "buildkite_pipeline" "bazel-java-tools-updates" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMThhMmVhZS1jYWE2LTQ3ZGUtYWM3NS0yODNlMzM4ZjAyZmE="
        name                                     = "Bazel java_tools updates"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "bazel-java-tools-updates" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 0
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/java-tools-testing/pipelines/bazel-java_tools-updates.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2404"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.bazel-release will be updated in-place
  ~ resource "buildkite_pipeline" "bazel-release" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS1kMTU1YjBhYy0zYjA1LTQzNDYtODY0Yi00NWZmNzRiNzQ2MWY="
        name                                     = "Bazel Release"
      ~ slug                                     = "bazel-release" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 50
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/bazel-release.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2404"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (13 unchanged attributes hidden)
    }

  # buildkite_pipeline.bazel-ssl-certificate-checker will be updated in-place
  ~ resource "buildkite_pipeline" "bazel-ssl-certificate-checker" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTliYmRkMS0yY2ZjLTRlYjYtYmM3Zi03NTg2ZDI2YmUwMjI="
        name                                     = "Bazel SSL Certificate Checker"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "bazel-ssl-certificate-checker" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
          + priority: 0
            steps:
              - command: |-
                  python3 .github/scripts/check_ssl.py
                label: ":lock: SSL Certificate Checker"
                agents:
                  - "queue=default"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.bcr-integrity will be updated in-place
  ~ resource "buildkite_pipeline" "bcr-integrity" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMThhMmUzMy00ODI4LTQ1MjYtODNhZi00ODNlZWY4MTI1MmM="
        name                                     = "BCR Integrity"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "bcr-integrity" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 0
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/java-tools-testing/pipelines/bcr-integrity.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2404"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.bcr-postsubmit will be updated in-place
  ~ resource "buildkite_pipeline" "bcr-postsubmit" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTgxZDdkMi1lZDA4LTQwNTItODRiMC00ZTAxZjhkZGY3NmE="
        name                                     = "BCR Postsubmit"
      ~ slug                                     = "bcr-postsubmit" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 75
            steps:
              - command: |-
                  curl -sS "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/buildkite/bazel-central-registry/bcr_postsubmit.py" -o bcr_postsubmit.py
                  python3 bcr_postsubmit.py
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2404"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (13 unchanged attributes hidden)
    }

  # buildkite_pipeline.collect-infra-ci-metrics will be updated in-place
  ~ resource "buildkite_pipeline" "collect-infra-ci-metrics" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTljMDk1MC03ZDQ1LTQ0MjAtOTViZC05N2JjM2Y5MzBmMmI="
        name                                     = "Collect Infra CI-Metrics"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "collect-infra-ci-metrics" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 0
            steps:
              - command: |-
                  cd buildkite
                  python3 -m pip install --upgrade pip setuptools wheel
                  python3 -m pip install pyyaml requests google-cloud-kms google-cloud-bigquery
                  python3 collect_infra_metrics.py
                label: ":chart_with_upwards_trend: Collect Infra CI-Metrics"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2204"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.create-linux-docker-images will be updated in-place
  ~ resource "buildkite_pipeline" "create-linux-docker-images" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTkzYjcwZC1hNTgyLTRlZGUtYjZkMi1jMGQxMzUxZWE2NDg="
        name                                     = "Create Linux Docker Images"
      ~ provider_settings                        = {
          ~ filter_condition                              = null -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
            # (22 unchanged attributes hidden)
        }
      ~ slug                                     = "create-linux-docker-images" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
          + priority: 100
            steps:
              - command: |-
                  docker builder prune -a -f
                  cd buildkite/docker
                  [ "$BUILDKITE_BRANCH" = "master" ] || [ "$BUILDKITE_BRANCH" = "testing" ] && git checkout $BUILDKITE_BRANCH
                  echo "--- Building docker images..."
                  ./build.sh
                  echo "--- Pushing docker images..."
                  ./push.sh
                label: ":pipeline: Create images"
                agents:
                  - "queue=default"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.create-linux-vm-image will be updated in-place
  ~ resource "buildkite_pipeline" "create-linux-vm-image" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTkzNzk0NC05MTc4LTQ2MmEtOWMxZi1lNTRiZTIxZDBkYzI="
        name                                     = "Create Linux VM image"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "create-linux-vm-image" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
              BAZEL_PROD_INSTANCE_GROUPS: "bk-docker,bk-docker-arm64,bk-trusted-docker,bk-trusted-docker-arm64"
              BAZEL_TEST_VM_NAMES: "bk-testing-docker,bk-testing-docker-arm64"
              BAZEL_VM_NAMES: "bk-docker,bk-docker-arm64"
            
          + priority: 100
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/publish-vm-image.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2204"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.create-windows-vm-image will be updated in-place
  ~ resource "buildkite_pipeline" "create-windows-vm-image" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTkzNzkxNS00YTVlLTQyYzEtOThlNy05NjZkYjZiZjliYjU="
        name                                     = "Create Windows VM image"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "create-windows-vm-image" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
              BAZEL_PROD_INSTANCE_GROUPS: "bk-windows,bk-trusted-windows"
              BAZEL_TEST_VM_NAMES: "bk-testing-windows"
              BAZEL_VM_NAMES: "bk-windows"
            
          + priority: 100
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/publish-vm-image.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2204"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.docgen-bazel will be updated in-place
  ~ resource "buildkite_pipeline" "docgen-bazel" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0xYjhlNWE5Mi04MjAyLTRhZjMtOWZkMC1hZjg0MmQ2ZDRmNjY="
        name                                     = "DocGen: Bazel"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "docgen-bazel" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 0
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/bazel-docgen.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2404"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (12 unchanged attributes hidden)
    }

  # buildkite_pipeline.docgen-bazel-blog will be updated in-place
  ~ resource "buildkite_pipeline" "docgen-bazel-blog" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS00ZGZhNzdiMi1mNTllLTQ1MzAtYjBlYS1mYzBiZDczMzBlNmE="
        name                                     = "DocGen: Bazel-blog"
      ~ slug                                     = "docgen-bazel-blog" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 0
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/bazel-docgen.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2404"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (13 unchanged attributes hidden)
    }

  # buildkite_pipeline.docgen-bazel-website will be updated in-place
  ~ resource "buildkite_pipeline" "docgen-bazel-website" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS1mMzZmYTMxYy1jOTY0LTQzMDItYmJhZS0yYmU2M2RkZTZkYmU="
        name                                     = "DocGen: Bazel-website"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "docgen-bazel-website" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 0
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/bazel-docgen.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2404"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (12 unchanged attributes hidden)
    }

  # buildkite_pipeline.docker-update will be updated in-place
  ~ resource "buildkite_pipeline" "docker-update" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTg4MGQyMS0yNjI4LTRiYWYtYjRjOS01NDhkMDI4NmI0MTg="
        name                                     = "Docker update"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "docker-update" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 0
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/docker-update.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2404"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.java-tools-binaries-java will be updated in-place
  ~ resource "buildkite_pipeline" "java-tools-binaries-java" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0yOWE5YzYzYy05ZmIzLTQwZjktOTE1NS1iOTBiZTBlNmQzODk="
        name                                     = "java_tools binaries :java:"
      ~ slug                                     = "java-tools-binaries-java" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 0
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/java_tools-binaries.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2404"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (12 unchanged attributes hidden)
    }

  # buildkite_pipeline.java-tools-rc will be updated in-place
  ~ resource "buildkite_pipeline" "java-tools-rc" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMThiOTc3Mi1iZTE4LTQ3MTUtOWY5Ny1kZWJlMzgwNzVmMjc="
        name                                     = "java_tools RC"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "java-tools-rc" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 0
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/java_tools-rc.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2004-java11"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.java-tools-release will be updated in-place
  ~ resource "buildkite_pipeline" "java-tools-release" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMThhNDNkMy1jODQ4LTRhNjEtOGE4NS0zYzBkNmVmOWMyZDE="
        name                                     = "java_tools release"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "java-tools-release" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 0
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/java_tools-release.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2404"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.mirror-404-artifacts-for-bazel will be updated in-place
  ~ resource "buildkite_pipeline" "mirror-404-artifacts-for-bazel" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTk5ZGQ3Ni0wMmNiLTQ4MDQtYTdjMS1iOGI5NTlhNmZlMTc="
        name                                     = "Mirror 404 artifacts for Bazel"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "mirror-404-artifacts-for-bazel" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
          + priority: 0
            steps:
              - command: |-
                  cd buildkite
                  python3 mirror_404_downloads.py
                label: ":mirror: Mirror missing artifacts"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2204"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (12 unchanged attributes hidden)
    }

  # buildkite_pipeline.mirror-last-green-commit-for-bazel will be updated in-place
  ~ resource "buildkite_pipeline" "mirror-last-green-commit-for-bazel" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTkyYjMzMS00OTI3LTQwZmItODcyYi05OTdkZjhhOTA5Nzc="
        name                                     = "Mirror last green commit for Bazel"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                   
... (truncated due to length. Read full plan in 'Terraform Plan' step of GitHub Actions run) ...