Welcome
StackNGO is a cloud platform for developers. You describe what you want to run in
YAML manifests, you apply them with the sng CLI, and the platform takes care of the
rest: containers, networking, certificates, storage, secrets, DNS, image registry,
monitoring. You don't manage any servers.
sng sso login
sng tenant use acme
sng template gen App web
sng apply web.yml
A few minutes later, your application responds at https://web-web.acme.dev.stackngo.app.
Three ways to use StackNGO
| Tool | For whom | Where to read more |
|---|---|---|
Manifests (App, SSMSecret, DNSRecord, …) | Everyone: they are the source of truth for your tenant, and can be versioned in git | Manifest reference |
sng CLI | Developers and CI pipelines: applies manifests, reads state, drives operations | CLI reference |
| HTTP API | Integrations, SDKs, in-house tooling: the same surface as the CLI, in REST + JSON | API reference |
The web console (https://console.dev.stackngo.fr) is built on the same API.
How to read this documentation
- Get started: a fifteen-minute walkthrough, from installing the CLI to a first application online. Start here.
- Guides: one page per task (deploy from docker compose, add a domain, rotate a secret, deploy from GitLab CI…). Each guide links to the reference for field details.
- Reference: exhaustive and generated from the code for fields and commands. Three entries in the navigation bar: Manifests, CLI, API.
- Security and privacy: what the platform guarantees for your data, your access and your applications.
- Troubleshooting: index of conditions, error codes and messages.
Feature status
Each page carries a badge at the top:
- Available: deployed and supported.
- Beta: being rolled out; the interface described is the one in the next release and may still change.
- Coming soon: in preparation; the page describes the target interface to gather your feedback.
All manifests are at version v1alpha1. The compatibility policy
explains what this implies.
A few principles to know
- One tenant, one isolated space. Everything you create lives in your tenant. You never have to specify it in a manifest: it follows from your session.
- Declarative. You describe the desired state; the platform applies it, usually in less
than a minute, and tells you where it stands in the
statusof each resource. - Secure by default. A service only accepts the traffic you allow, containers never run as administrator, secrets never appear in your manifests, and a missing permission always means a denial.
- Everything goes through the API. CLI, console, CI: same authentication, same permissions, same responses.
Ready? Install the CLI.