GitOps schema catalog¶
Audience: data engineers, platform engineers, CI maintainers, and IDE/tooling authors who need the public GitOps JSON Schema contracts used by dpone self-service Airflow flows.
Use this page when you need to discover stable contract names, link a schema in CI, or validate a generated payload without importing Airflow, Vault clients, or runtime connector code.
Quick commands:
dpone gitops schema list --prefix dpone.safe-sample
dpone gitops schema show dpone.release-set.v1
dpone gitops schema validate --kind dpone.safe-sample-runtime-run.v1 --payload runtime-run.json
Update this generated reference after adding or changing a registered GitOps schema contract:
This section is auto-generated by dpone docs update-gitops-schema-reference.
Registered contracts: 99.
Use the schema catalog CLI for CI, IDE integrations, and platform automation:
dpone gitops schema list --prefix dpone.safe-sampledpone gitops schema show dpone.release-set.v1dpone gitops schema validate --kind dpone.safe-sample-runtime-run.v1 --payload runtime-run.json
dpone gitops schema list --prefix dpone.safe-sample
dpone gitops schema show dpone.release-set.v1
dpone gitops schema validate --kind dpone.safe-sample-runtime-run.v1 --payload runtime-run.json
| Name | Kind | Schema | Required fields |
|---|---|---|---|
affected |
gitops.affected |
schema | kind, changed_files, impacted_manifests |
affected-workloads |
gitops.affected_workloads |
schema | kind, schema_version, producer, changed_files, affected_workloads |
airflow-admission-check |
gitops.airflow_admission_check |
schema | kind, schema_version, producer, mode, runner_policy, artifact_dir, manifest_path, pod_spec_path, timeout_seconds, commands, results, warnings, blockers |
airflow-artifact-index |
gitops.airflow_artifact_index |
schema | kind, schema_version, producer, artifact_dir, output_path, created_at, entries |
airflow-artifact-publish |
dpone.airflow-artifact-publish.v1 |
schema | schema, passed, changes, errors, status, release_id, deployment_id, environment, artifact_registry_ref, created_objects, existing_equal_objects, published_release, published_deployment |
airflow-authoring-fix |
dpone.airflow-authoring-fix.v1 |
schema | kind, schema, passed, changes, errors, mode, apply, applied, target, summary |
airflow-authoring-migration-plan |
dpone.airflow-authoring-migration-plan.v1 |
schema | kind, schema, mode, apply, source_path, summary, changes |
airflow-cache-materialize |
dpone.airflow-cache-materialize.v1 |
schema | schema, passed, changes, errors, status, release_id, deployment_id, environment, artifact_registry_ref, downloaded_objects, downloaded_bytes, local_release_state, local_deployment_state, projection_verified, activated |
airflow-cluster-doctor |
gitops.airflow_cluster_doctor |
schema | kind, schema_version, producer, mode, runner_policy, artifact_dir, runtime_profile_path, pod_contract_path, namespace, service_account, timeout_seconds, secret_refs, external_secret_refs, checks, commands, results |
airflow-connection-bridge-plan |
gitops.airflow_connection_bridge_plan |
schema | kind, schema_version, producer, artifact_dir, output_path, runtime_profile_path, pod_contract_path, mode, runtime_mode, required_connection_ids, env, artifacts |
airflow-connection-secret-gc-apply |
dpone.airflow-connection-secret-gc-apply.v1 |
schema | schema, status, namespace, actor, observed_at, minimum_age_seconds, max_delete_count, items, deleted_secret_refs, skipped_secret_refs, failed_secret_refs |
airflow-connection-secret-gc-plan |
dpone.airflow-connection-secret-gc-plan.v1 |
schema | schema, status, namespace, observed_at, minimum_age_seconds, page_size, inventory, items, delete_candidates |
airflow-correlation |
dpone.airflow-correlation.v1 |
schema | schema, correlation_id, attempt_ref, airflow, dpone, artifacts, pod |
airflow-deployment-index |
dpone.airflow-deployment-index.v1 |
schema | schema, release_id, deployment_id, dag_specs, workload_packs, runtime_artifact_delivery |
airflow-deployment-index-v2 |
dpone.airflow-deployment-index.v2 |
schema | schema, release_id, deployment_id, trust_tier, dag_specs, workload_packs, binding_set_ref, connection_registry_ref, credential_runtime_ref, binding_set, connection_registry, credential_runtime, runtime_image_ref, runtime_image_digest, airflow_bundle_ref, runtime_artifact_delivery, release, deployment |
airflow-doctor |
gitops.airflow_doctor |
schema | kind, bundle_path, pod_template, image_contract, runner_policy, checks |
airflow-evidence-bundle |
gitops.airflow_evidence_bundle |
schema | kind, schema_version, producer, runner_policy, attempt, pod, artifacts |
airflow-explain |
dpone.airflow-explain.v1 |
schema | kind, passed, changes, errors, pipeline_ref, source_path, artifact_state, operator_diagnostics, hint |
airflow-image-contract |
gitops.airflow_image_contract |
schema | kind, output_path, contract |
airflow-k8s-manifests |
gitops.airflow_k8s_manifests |
schema | kind, schema_version, producer, artifact_dir, manifest_path, runtime_profile_path, pod_contract_path, gitops_controller, namespace, service_account, objects, controller_hints, warnings, blockers |
airflow-k8s-smoke |
gitops.airflow_k8s_smoke |
schema | kind, schema_version, producer, mode, runner_kind, runner_policy, run_spec_path, runtime_profile_path, pod_contract_path, namespace, service_account, image, image_ref, smoke_name, timeout_seconds, checks, commands, results |
airflow-mapping-item |
dpone.airflow-mapping-item.v1 |
schema | schema, mode, mapping_plan_fingerprint, backfill_plan_hash, item_index, first_chunk_index, last_chunk_index, chunks_count |
airflow-mapping-plan |
dpone.airflow-mapping-plan.v1 |
schema | schema, mode, plan_fingerprint, backfill_plan_hash, chunks_total, items_total, limits, items |
airflow-operator-diagnostics |
dpone.airflow-operator-diagnostics.v1 |
schema | kind, status, index_path, parse_side_effects, operator_pinning, checks, summary, next_actions |
airflow-outcome-gate |
gitops.airflow_outcome_gate |
schema | kind, schema_version, producer, xcom_summary_path, required_status, status, passed |
airflow-pack |
gitops.airflow_pack |
schema | kind, schema_version, pack_identity, pack_fingerprint, producer, artifact_dir, output_path, bundle_path, mode, runner_policy, include_live_gates, artifacts, steps, next_actions, warnings, blockers |
airflow-pod-contract |
gitops.airflow_pod_contract |
schema | kind, schema_version, producer, bundle_path, run_spec_path, runtime_profile_path, pod_spec_path, kpo_kwargs_path, image, namespace, service_account, xcom, pod_spec, kpo_kwargs |
airflow-pod-doctor |
gitops.airflow_pod_doctor |
schema | kind, schema_version, producer, artifact_dir, pod_contract_path, pod_spec_path, kpo_kwargs_path, runner_policy, checks |
airflow-pod-launch-evidence |
gitops.airflow_pod_launch_evidence |
schema | kind, schema_version, producer, mode, runner_policy, runtime_profile_path, pod_contract_path, pod_name, namespace, service_account, image, expected_phase, timeout_seconds, log_tail_lines, checks, commands, results, observed_pod |
airflow-preflight |
gitops.airflow_preflight |
schema | kind, schema_version, producer, artifact_dir, artifact_index_path, runner_policy, artifact_index, pod_doctor, checks, next_actions |
airflow-render |
gitops.airflow_render |
schema | kind, bundle_path, output_dir, image, artifacts, commands |
airflow-rerun-plan |
dpone.airflow-rerun-plan.v1 |
schema | schema, status, critical, source_attempt, selection, resolved, airflow_request, retention_refs, warnings, blockers |
airflow-run-identity |
dpone.airflow-run-identity.v1 |
schema | schema, release_id, deployment_id, dag_spec, workload_pack, runtime_image_digest, binding_set_ref, connection_registry_ref, credential_runtime_ref, airflow_bundle |
airflow-run-spec |
gitops.airflow_run_spec |
schema | kind, schema_version, producer, bundle_path, image, worktree, evidence_output, entries, steps |
airflow-runtime-evidence |
gitops.airflow_runtime_evidence |
schema | kind, schema_version, producer, run_spec_path, bundle_path, image, status, started_at, finished_at, duration_seconds, steps |
airflow-runtime-init-fetch-plan |
dpone.airflow-runtime-init-fetch-plan.v1 |
schema | schema, environment, trust_tier, release_id, deployment_id, runtime_image, registry, trust_policy, identity, release, deployment, binding_set, connection_registry, credential_runtime, workload_pack, execution, verify |
airflow-runtime-profile |
gitops.airflow_runtime_profile |
schema | kind, schema_version, producer, bundle_path, run_spec_path, runtime_evidence_path, xcom_summary_path, dag_factory_path, outcome_gate_path, image, namespace, service_account, resources, artifact_sink, runner_policy, outcome_mode |
airflow-xcom-summary |
gitops.airflow_xcom_summary |
schema | kind, schema_version, producer, status, run_spec_path, runtime_evidence_path |
attestation |
gitops.bundle.attestation |
schema | schema_version, producer, hash_algorithm, bundle_digest, provenance, artifacts |
authoring-migration |
dpone.authoring-migration.v1 |
schema | kind, schema, passed, mode, status, plan_id, source, target, changes, retained_files, warnings, errors |
binding-set |
dpone.binding-set.v1 |
schema | schema, environment, bindings, runtime |
bundle |
gitops.bundle |
schema | kind, output_dir, affected_path, summary_path, entries, policy |
catalog-bundle |
dpone.catalog-bundle.v1 |
schema | schema, bundle_id, kind, publisher_id, environment, entrypoint, artifacts |
catalog-bundle-verification |
dpone.catalog-bundle-verification.v1 |
schema | schema, decision, code, bundle_id, bundle_manifest_sha256, kind, publisher_id, environment, policy_fingerprint, verified_artifacts, verifier_version, verified_at, errors |
catalog-trust-policy |
dpone.catalog-trust-policy.v1 |
schema | schema, policy_id, allowed_kinds, allowed_publishers, certificate_identity, certificate_oidc_issuer, trusted_root_sha256, verifier |
clickhouse-safe-sample-insert-plan |
dpone.clickhouse-safe-sample-insert-plan.v1 |
schema | schema, sql, row_count, temporary_table, sink |
connection-check |
dpone.connection-check.v1 |
schema | schema, passed, changes, errors, mode, network, secrets, source_queries, handshake, environment, connection_refs, resolved_connection_refs, airflow_connection_bridge, binding_set_path, connection_registry_path, credential_runtime_path |
connection-registry |
dpone.connection-registry.v1 |
schema | schema, connections |
connection-registry-migration-plan |
dpone.connection-registry-migration-plan.v1 |
schema | kind, schema, mode, apply, environment, registry_path, summary, changes |
credential-runtime |
dpone.credential-runtime.v1 |
schema | schema, environment |
current-pointer |
dpone.current-pointer.v1 |
schema | schema, environment, deployment_id, release_id, promoted_by, promoted_at |
deployment-cache-recovery-apply |
dpone.deployment-cache-recovery-apply.v1 |
schema | schema, environment, recovered_deployment_id, release_id, current_path, pointer_path |
deployment-cache-recovery-plan |
dpone.deployment-cache-recovery-plan.v1 |
schema | schema, environment, status, current_deployment_id, current_path_deployment_id, preferred_repair_deployment_id, issues, repair_candidates |
deployment-cache-retention-apply |
dpone.deployment-cache-retention-apply.v1 |
schema | schema, environment, promoted_by, current_deployment_id, items, deleted_deployment_ids, skipped_deployment_ids |
deployment-cache-retention-plan |
dpone.deployment-cache-retention-plan.v1 |
schema | schema, environment, current_deployment_id, protected_deployment_ids, items, delete_candidates |
deployment-set |
dpone.deployment-set.v1 |
schema | schema, deployment_id, environment, release_ref, runtime_artifact_delivery |
deployment-set-v2 |
dpone.deployment-set.v2 |
schema | schema, deployment_id, deployment_type, runnable, environment, trust_tier, release_ref, binding_set_ref, connection_registry_ref, credential_runtime_ref, binding_set, connection_registry, credential_runtime, runtime_image_ref, runtime_image_digest, airflow_bundle_ref, runtime_artifact_delivery, workloads |
domain-ownership |
dpone.domain-ownership.v1 |
schema | schema, domain, owner, approvers |
error |
dpone.error.v1 |
schema | schema, code, stage, severity, message |
extension-check-receipt |
dpone.extension-check-receipt.v1 |
schema | schema, check, subject_digest, status, producer, command |
extension-conformance |
dpone.extension-conformance.v1 |
schema | schema, conformance_id, profile, subject, status, checks, evaluated_at |
extension-conformance-request |
dpone.extension-conformance-request.v1 |
schema | schema, profile, subject, evidence |
live-preflight |
dpone.live-preflight.v1 |
schema | schema, passed, runner, network, secrets, source_queries, planned_network, planned_secrets, planned_source_queries, environment, connection_refs, resolved_connection_refs, probes, errors |
mssql-clickhouse-safe-sample-copy-config |
dpone.mssql-clickhouse-safe-sample-copy-config.v1 |
schema | schema, source_connection_ref, source_table |
mssql-safe-sample-read-plan |
dpone.mssql-safe-sample-read-plan.v1 |
schema | schema, sql, parameters, sample_rows, max_bytes, timeout_seconds, source_read_only, source |
plan |
gitops.plan |
schema | kind, manifest, workload_root, runner, command, sparse_paths |
project |
dpone.project.v1 |
schema | schema |
release-set |
dpone.release-set.v1 |
schema | schema, release_id, artifacts |
route-attestation |
dpone.route-attestation.v1 |
schema | schema, attestation_id, claims |
route-attestation-policy |
dpone.route-attestation-policy.v1 |
schema | schema, backend, certificate_identity, certificate_oidc_issuer, trusted_root, cosign, allowed_environments, allowed_authorization_profiles, allowed_certification_profiles, minimum_certification_level, max_validity_seconds, clock_skew_seconds, revoked_attestation_ids, revoked_certificate_identities |
route-attestation-verification |
dpone.route-attestation-verification.v1 |
schema | schema, decision, code, message, attestation_id, attestation_sha256, certification_bundle_sha256, policy_fingerprint, route_id, release_id, deployment_id, environment, authorization_profile, signer, validity, verified_at, errors |
route-certification-matrix |
dpone.route-certification-matrix.v1 |
schema | schema, expected_commit, evaluated_at, has_input_failures, counts, rows, errors |
route-matrix-claim |
dpone.route-matrix-claim.v1 |
schema | schema, release_id, source_commit, certified_at, route |
runtime-fetch-ready |
dpone.runtime-fetch-ready.v1 |
schema | schema, plan_sha256, release_id, deployment_id, runtime_image_digest, trust_tier, artifact_registry_ref, registry_config_sha256, trust_policy_sha256, workload_id, pack_fingerprint, artifacts, verification |
safe-sample-airflow-deployment-context |
dpone.safe-sample-airflow-deployment-context.v1 |
schema | schema, release_id, deployment_id, environment, deployment_type, runnable, runtime_artifact_delivery, workload_packs, binding_set_ref, connection_registry_ref, credential_runtime_ref, runtime_image_digest, airflow_bundle_ref, index_path, deployment_path, parse_side_effects |
safe-sample-certified-copy-request |
dpone.safe-sample-certified-copy-request.v1 |
schema | schema, certification_id, source, sink, strategy, sample_rows, max_bytes, timeout_seconds, source_read_only, pii_policy, proof |
safe-sample-cli-argument-validation |
dpone.safe-sample-cli-argument-validation.v1 |
schema | schema, errors |
safe-sample-data-copier-registry |
dpone.safe-sample-data-copier-registry.v1 |
schema | schema, registered_copiers |
safe-sample-data-copy |
dpone.safe-sample-data-copy.v1 |
schema | schema, status, source_request, copy_request, rows_read, rows_written, bytes_read, pii_policy, diagnostics, errors |
safe-sample-execution-plan |
dpone.safe-sample-execution-plan.v1 |
schema | schema, sample_rows, environment, runnable, policy_result, artifact_pinning, blockers |
safe-sample-runtime-evidence-write |
dpone.safe-sample-runtime-evidence-write.v1 |
schema | schema, path, sha256, bytes, release_id, deployment_id |
safe-sample-runtime-execution |
dpone.safe-sample-runtime-execution.v1 |
schema | schema, execution_status, data_outcome, release_id, deployment_id, errors |
safe-sample-runtime-handoff |
dpone.safe-sample-runtime-handoff.v1 |
schema | schema, plan_path, plan_sha256, plan_bytes, command, live_copy_command, live_copy_requires |
safe-sample-runtime-readiness |
dpone.safe-sample-runtime-readiness.v1 |
schema | schema, ready, available_contracts, blockers, errors |
safe-sample-runtime-run |
dpone.safe-sample-runtime-run.v1 |
schema | schema, release_id, deployment_id, execution_status, data_outcome, runtime_execution, evidence_write, errors |
safe-sample-source-request |
dpone.safe-sample-source-request.v1 |
schema | schema, status, mode, sample_rows, max_bytes, timeout_seconds, source_read_only, full_scan_allowed, pii_policy, target, errors |
selected-safe-sample-report |
dpone.selected-safe-sample-report.v1 |
schema | schema, passed, exit_code, selection, results, unscheduled, errors |
selection-report |
dpone.selection-report.v1 |
schema | schema, selection_fingerprint, catalog_fingerprint, state_fingerprint, expressions, selected, excluded, unmatched, removed |
selection-state |
dpone.selection-state.v1 |
schema | schema, state_fingerprint, nodes |
self-service-certification |
dpone.self-service-certification.v1 |
schema | schema, expected_commit, evaluated_at, overall_status, has_input_failures, usability, reference_deployments |
self-service-usability-study |
dpone.self-service-usability-study.v1 |
schema | schema, protocol, target_commit, facilitator_ref, started_at, completed_at, sessions |
test-manifest |
dpone.test.v1 |
schema | kind, pipeline, input, expect |
test-report |
dpone.test-report.v1 |
schema | schema, test_id, name, status, execution_status, data_outcome, coverage, pipeline, process, fixtures, temporary_target, expectations, errors, duration_ms |
test-suite-report |
dpone.test-suite-report.v1 |
schema | schema, passed, status, counts, tests, duration_ms |
verify |
gitops.verify |
schema | kind, plan, worktree, manifest, checked_paths |
workload-change-impact |
dpone.workload-change-impact.v1 |
schema | schema, baseline_fingerprint, current_fingerprint, baseline_content_sha256, current_content_sha256, current_source, validation_status, discovery_status, issues, added, modified, removed |
workload-index |
dpone.workload-index.v1 |
schema | schema, project_fingerprint, layout_mode, layout_root, pipeline_id_scope, workloads |
workload-index-promotion |
dpone.workload-index-promotion.v1 |
schema | schema, status, mode, baseline_path, baseline_before_sha256, baseline_before_fingerprint, promoted_sha256, promoted_fingerprint |
workloads |
gitops.workloads |
schema | kind, schema_version, producer, workload_set, env, workloads |
Next likely tasks: