Frequently asked questions
Deployed and supported. The fields and commands described here are stable within version v1alpha1.
Why doesn't my manifest specify a tenant?
Because there is only one possible value: the one from your session. The platform rejects a
manifest that specifies a tenant or a location in metadata. Switching tenants is done
with sng tenant use, not in the manifest.
Which tools do I use to manage my resources?
The sng CLI, the API and the console cover everything you can do on your tenant.
You have no servers to administer: you manage your applications through their manifest
(App), you observe them through their status (sng app describe) and their logs
(sng app logs).
How do I put a password in an App?
Never in clear text in the manifest. Create a secret (sng secret set db-password or an
SSMSecret), then reference it: env: {DB_PASSWORD: {secret: db-password, key: value}}.
See Injection into an App.
My secret was rotated: does my application have the new value?
Yes, within five minutes, after a rolling restart triggered automatically by the platform. An application that reads its variable at startup has nothing to do. See Rotation.
Can I use my own domain name?
Yes, by bringing it (DNSZone), which requires a verification TXT and then a delegation
at your registrar. See Bring a domain.
Buying a domain from StackNGO is not offered yet.
My deployment stays pending without an error.
Look at the service's reason: QuotaExceeded (the tier is full),
WaitingForDependency (a service in dependsOn is not ready), SecretNotFound,
RegistryAccessPending (tenant just created: registry access is being prepared),
WaitingForDNSZone (brought domain whose zone is not ready yet),
CertificatePending (the HTTPS certificate is being issued). A Failed service with
DNSConflict has a domain name already taken in DNS. See
Conditions and reasons.
I deleted a secret by mistake.
sng secret restore NAME puts it back into service with its value and all its versions. See
Versions and restore.
How do I deploy from my CI without storing a token?
With an OIDC trust: your GitLab or GitHub pipeline exchanges its own token for a tenant session. See Deploy without a secret.
Are there API keys?
No, and that is deliberate: no long-term secret on the server side. A person signs in
with sng sso login, a CI with OIDC, a machine with a declared application
(client_credentials). See Security and privacy.
Several environments: how?
One tenant per environment (acme-dev, acme-staging, acme-prod): each has its own
rights, quota and domain. sng tenant use switches between them.
See Environments and restore.
I deleted an App: where is my data?
The volumes of an App survive its deletion. Reapplying an App with the same name, the
same services and the same paths gets them back.
Manifests are in v1alpha1: is it stable?
Valid manifests stay valid; additions are non-breaking and incompatible changes are announced in advance. See Versions and compatibility.
Which version of the documentation should I read?
The one that matches the platform you use, chosen in the version selector at the top of the page. The "dev (next)" version describes what is coming.