ResolvedDag

Shape

• edgesarray of ResolvedEdge

  • The ResolvedEdge schema
  • from_nodeNodeId (string)
  • to_nodeNodeId (string)
  • from_portPortName (string) or nulloptionalAbsent on a dependency-only connection — one that orders two steps and carries nothing.
  • to_portPortName (string) or nulloptionalAbsent on a dependency-only edge.
• nodesarray of ResolvedNode

  • The ResolvedNode schema
  • capability_idCapabilityId (string)
  • configobjectThe step's own settings, in whatever shape its capability defines. Passed through unread.
  • inputsarray of NodePortSpec

    • The NodePortSpec schema
    • namePortName (string)
    • port_typePortTypegit_refartifactcontainer_imagetest_reportdeployment_refcredentialsevidencevaluecustomWhat kind of data a port carries. Two ports connect only when their types match.
    • requiredboolean
    • cardinalityPortCardinalityonemanyoptionalHow many connections this port accepts (input ports only). A many input waits for every connection feeding it.
    • schema_idPortSchemaId (string) or nulloptionalFor a custom port, the id of the schema it carries (e.g. aws.ecs.task-definition/v1).
  • max_retriesinteger · int320–∞
  • node_idNodeId (string)
  • outputsarray of NodePortSpec

    • The NodePortSpec schema
    • namePortName (string)
    • port_typePortTypegit_refartifactcontainer_imagetest_reportdeployment_refcredentialsevidencevaluecustomWhat kind of data a port carries. Two ports connect only when their types match.
    • requiredboolean
    • cardinalityPortCardinalityonemanyoptionalHow many connections this port accepts (input ports only). A many input waits for every connection feeding it.
    • schema_idPortSchemaId (string) or nulloptionalFor a custom port, the id of the schema it carries (e.g. aws.ecs.task-definition/v1).
  • provider_idProviderId (string)
  • provider_imagestringThe container image this step runs. Set by the platform from the capability and version the step resolved to; a value supplied by the caller is ignored.
  • retry_delay_secondsinteger · int320–∞
  • secret_refsarray of SecretRefThe credentials this step needs, named rather than valued — a secret's value never appears here.

    • The SecretRef schema
    • connection_idConnectionId (string · uuid)The provider connection the credential comes from.
    • keystringA JSON path within the connection's credentials (e.g. $.password). It does not select part of them: the step receives the connection's credentials whole.
    • logical_namestringThe name the step's provider knows this credential by.
  • stage_idStageId (string)
  • stage_indexinteger · int320–∞
  • timeout_secondsinteger · int320–∞
  • allow_failurebooleanoptionalWhether the step is allowed to fail: if it fails or times out, only the steps that depend on it are skipped, and the run ends succeeded_with_warnings rather than failed.
  • approvalManualApproval or nulloptionalThe approval gate on this step itself, if the pipeline put one there. A step can also inherit a gate from the environment it deploys to.

    • The ManualApproval schema
    • approversarray of ApproverRefoptional
    • requiredinteger · int32 or nulloptional0–∞Distinct approvals needed, 1–10. On a gated environment the larger of this and the environment's own count applies.
  • cache_enabledbooleanoptionalWhether this step uses the build cache, as its capability declares.
  • cpustring or nulloptionalHow much CPU this step asked for. Unset means the default for its capability.
  • environmentResolvedEnvironment or nulloptionalThe environment this step deploys to, frozen as it was when the run was triggered.

    • The ResolvedEnvironment schema
    • environment_idEnvironmentId (string · uuid)
    • full_pathstringThe environment's unique name: the full path of the group or repository that owns it, :, then its slug (e.g. acme/platform:production). Two groups may each have a production environment; this tells them apart.
    • slugEnvironmentSlug (string)
    • tierEnvironmentTierdevelopmenttestingstagingproductionWhat kind of environment this is, whatever it is called: development, testing, staging or production. A production environment is protected by default.
    • accept_fromAcceptFrompeople_signed_inpeoplepeople_and_service_accountspeople_and_agentsoptionalWhich kinds of approval count toward a rule.
    • approversarray of ApproverRefoptional
    • concurrency_keyConcurrencyKey (string) or nulloptionalThe lock deploys to this environment take, so that only one runs at a time. Absent when the environment allows deploys to run at the same time.
    • concurrency_modeConcurrencyModequeueskipcancel_previousoptionalWhat happens when another run holds the lock: queue waits for it, skip skips this step, cancel_previous cancels the other run.
    • max_lock_wait_secondsinteger · int32optional0–∞How long a queued step waits for the lock before failing, in seconds. 0 means it waits for as long as the pipeline's timeout allows.
    • prevent_self_approvalbooleanoptional
    • requiredinteger · int32optional0–∞
    • requires_approvalbooleanoptional
    • variablesarray of ResolvedEnvironmentVariableoptionalThe environment's variables, in name order. A secret appears here by name only — its value is never included.

      • The ResolvedEnvironmentVariable schema
      • nameEnvironmentVariableName (string)
      • valueEnvironmentVariableValue (string) or nulloptional
    • wait_timer_secondsinteger · int32optional0–∞
  • image_digeststring or nulloptionalThe exact build of the container image this step runs, when the catalog records one. Pinned, so the step cannot pick up a different build behind the same tag.
  • memorystring or nulloptional
  • namestringoptionalThe step's display name, as the pipeline's author wrote it when the run started. Empty for older runs recorded without one.
  • oidc_federationNodeOidcFederation or nulloptionalThe cloud role this step assumes with a short-lived identity token, when its connection uses OIDC federation. Absent for steps that use only stored credentials.

    • The NodeOidcFederation schema
    • role_arnRoleArn (string)The IAM role the step assumes with sts:AssumeRoleWithWebIdentity.
    • audiencestring or nulloptionalA custom audience for the identity token, when the connection sets one. The standard audience is sts.amazonaws.com.
    • regionAwsRegion (string) or nulloptionalThe AWS region for the step's calls, when the connection sets one.
  • originNodeOrigin or nulloptionalThe component this step came from, when the author wrote a component instance rather than the step itself. Absent for a step the pipeline declares directly.

    • The NodeOrigin schema
    • component_idComponentId (string · uuid)
    • component_nameComponentName (string)
    • inner_node_idNodeId (string)This node's identifier inside the component body — what its author called it, before expansion prefixed it with the instance.
    • instance_idNodeId (string)The component instance in the pipeline the author wrote.
    • versionComponentVersion (string)The version the instance's reference resolved to.
  • requires_dockerbooleanoptionalWhether this step needs a Docker daemon, as its capability declares.
  • resource_groupResolvedResourceGroup or nulloptionalThe resource group this step holds while it runs, so no other step naming the same group runs at the same time.

    • The ResolvedResourceGroup schema
    • keyConcurrencyKey (string)The lock a step takes so that only one step holding it runs at a time: env: followed by an environment's id, or rg: followed by your organization's id and a resource group's name. Set by the platform.
    • max_lock_wait_secondsinteger · int320–∞How long a queued step waits before failing, in seconds. 0 means it waits for as long as the pipeline's timeout allows.
    • modeConcurrencyModequeueskipcancel_previousWhat happens when another run holds the group: queue waits for it, skip skips this step.
  • service_idServiceId (string · uuid) or nulloptionalThe catalog service this step acts on, as it was identified when the run started.
  • variables_fromResolvedEnvironmentVariables or nulloptionalThe environment whose plain variables this step reads without deploying there, as it stood when the run was triggered.

    • The ResolvedEnvironmentVariables schema
    • environment_idEnvironmentId (string · uuid)The environment the step reads from.
    • full_pathstringThe environment's unique name: the full path of the group or repository that owns it, :, then its slug (e.g. acme/platform:production).
    • slugEnvironmentSlug (string)The environment's slug, as the step's variables_from names it.
    • plainarray of ResolvedPlainVariableoptionalThe environment's non-secret variables, in name order, with their values.

      • The ResolvedPlainVariable schema
      • nameEnvironmentVariableName (string)The variable's name.
      • valueEnvironmentVariableValue (string)Its value.
    • withheldarray of EnvironmentVariableName (string)optionalThe names of the environment's secrets, in name order. The step does not receive them.
  • versionProviderVersion (string) or nulloptionalThe provider version this step runs: the one the pipeline pins, or else the provider's default version for the repository when the run started. It must be enabled and allowed by the provider policy that applies.
• stagesarray of ResolvedStage

  • The ResolvedStage schema
  • barrier_modeBarrierModestrictlenientWhen a stage is allowed to start. strict waits for every step in every earlier stage to finish, so a failure anywhere stops what follows. lenient waits only for the steps a given step actually depends on, so an unrelated branch failing does not block it. strict is the default.
  • stage_idStageId (string)
  • stage_indexinteger · int320–∞
• pipeline_variablesarray of ResolvedPipelineVariableoptionalThe variables available to every step in this run, resolved from the repository and the groups above it when the run was triggered. Changing a variable afterwards does not affect a run already under way, and re-running uses the values the run started with.

  • The ResolvedPipelineVariable schema
  • nameEnvironmentVariableName (string)
  • scope_idstringThe id of the group or repository that declared the variable.
  • valueEnvironmentVariableValue (string) or nulloptional

Graph

Used by