Reference
Find API documentation, CLI commands and Git documentation.
Content
Latest updates
Section titled “Latest updates”- announcement
One SSH address for all STACKIT Git instances
Section titled “One SSH address for all STACKIT Git instances”On October 27, 2026, from 20:00 to 23:00 (UTC), SSH access to STACKIT Git moves to one shared address. The name of your instance becomes the first element of the repository path. This reduces the publicly exposed surface of your instance and lets us improve the reliability of Git operations over SSH in one place.
- Previous address:
git@ssh.<instance>.git.onstackit.cloud:<owner>/<repository>.git - Address after the maintenance:
ssh://git@ssh.git.onstackit.cloud/<instance>/<owner>/<repository>.git
How you are affected
Section titled “How you are affected”During the maintenance every Git instance is restarted once and is unavailable for about one minute. The restarts are staggered, so not all instances are affected at the same time. Access over HTTPS, your repositories, your users, your registered SSH keys and your IP allowlists do not change.
The previous address keeps working until April 27, 2027. Your existing clones and your automation continue to work after the maintenance, so you can move them at your own pace. We remind you before we switch the previous address off.
What to prepare before October 27, 2026
Section titled “What to prepare before October 27, 2026”- Allow outbound traffic to
213.17.16.145on port22, if your network restricts outbound connections. - Add the host key of
ssh.git.onstackit.cloud, if your systems verify host keys. Its fingerprint isSHA256:I4jgl6ALgx5qOWwpQVC2M613dV7R0Wy6LfQQ5LQKwR4(ED25519). - Make sure the SSH key your client offers to
ssh.git.onstackit.cloudis registered in your instance. - Identify every place that holds the address: local clones, build pipelines, deployment automation, infrastructure as code module sources and repository mirrors.
What to do after the maintenance
Section titled “What to do after the maintenance”Update the remote address of each repository:
Terminal window git remote set-url origin "$(git remote get-url origin | sed -E 's#^(ssh://)?git@ssh\.([^.]+)\.git\.onstackit\.cloud[:/]#ssh://git@ssh.git.onstackit.cloud/\2/#')"If you have any questions, our Help Center is always at your disposal.
- Previous address:
- announcement
New Pipeline Approvals & Portal Controls
Section titled “New Pipeline Approvals & Portal Controls”We are pleased to announce a major update to STACKIT Git & Pipelines, introducing enhanced security controls, pipeline governance, and advanced identity management features directly from the STACKIT Portal.
Pipeline Governance: Protected Workflows & Approvers
Section titled “Pipeline Governance: Protected Workflows & Approvers”To ensure higher resilience and meet enterprise change management standards, we have introduced Pipeline Approvers. Empower your team to ensure the highest quality standards by enabling designated members to review and authorize critical deployment pipelines before execution. There are two ways to implement this functionality depending on your setup:
- Manual Workflow Approval: A seamless UI-driven configuration within the STACKIT Portal to pause workflows and require manual validation before moving to high-risk deployment stages.
- Split workflow: Configure your code in two different files, so you get the same final behaviour but with less customization.
Advanced Identity & Access Management (IAM)
Section titled “Advanced Identity & Access Management (IAM)”We have significantly improved user life cycle management and access security:
- Identity Provider (IdP) Integration: Connect your corporate Identity Provider directly to your STACKIT Git instance to automate user onboarding and federation.
- Local vs. Technical User Creation: Administrators can now differentiate between standard internal users (Local) and automated automation tokens/accounts (Technical Users), reducing the risk of unauthorized privilege escalation.
Network & administrative controls from the Portal
Section titled “Network & administrative controls from the Portal”You no longer need to manage advanced configuration with API or backend support requests. The STACKIT Portal now offers full self-service capabilities for:
- IP Address Whitelisting (ACL Control): Secure your Git repositories by restricting inbound and outbound traffic to trusted enterprise network ranges directly from the instance network settings.
- User Admin Management: Complete control over user permissions, seat allocations, and project visibility through a unified administrative panel.
- announcement
STACKIT Pipelines: Introducing STACKIT-managed Runners
Section titled “STACKIT Pipelines: Introducing STACKIT-managed Runners”We are excited to announce the integration of STACKIT-managed Runners into STACKIT Git, significantly enhancing your Continuous Integration and Continuous Delivery (CI/CD) workflows. This new feature automates and validates your code changes, new features, and critical bug fixes without manual intervention, all within your STACKIT environment.
Key Highlights:
- Automated & Scalable CI/CD: STACKIT-managed Runners automatically provision, run, and de-provision based on your code pushes or specific events, ensuring efficient and scalable pipeline run.
- High GitHub Actions Compatibility: Enjoy approximately 90% compatibility with GitHub Actions, allowing you to leverage existing workflows with minimal adjustments.
- Secure isolated environments: Every job is running in a completely isolated disk, making sure no leaks to other jobs or instances occur.
- Broad Development Environment Support: We support popular development environments including Java, Node.js, Salesforce, Go, and Python, with a variety of in-docker images for diverse use cases.
- Deep STACKIT Ecosystem Integration: Experience seamless and secure integration with other STACKIT services, such as STACKIT Secret Manager. Your code and services remain within the STACKIT Network, enhancing security and speed by avoiding public internet access.
- Comprehensive Logging & Security: Detailed logs provide insights for pipeline optimization, and sensitive information is automatically obscured for your security.
- Direct Integration with STACKIT Container Registry: Build and push images directly to the STACKIT Container Registry, streamlining your software development lifecycle within STACKIT.
This release marks a significant step towards centralizing your entire SDLC within the STACKIT ecosystem.