Get in Touch

Course Outline

Achieving DevSecOps Sovereignty with GitLab

  • Comparison of features and control levels between GitLab CE, EE, and GitLab.com.
  • Overview of Omnibus architecture and Kubernetes Helm deployment options.
  • Risks of SaaS lock-in and compliance with data residency requirements.

Installation and Architecture

  • Omnibus installation on Ubuntu utilizing PostgreSQL and Redis.
  • GitLab Helm chart deployment on Kubernetes with persistent volumes.
  • Configuration of external services: object storage, SMTP, and LDAP.
  • Implementing Geo replication for multi-region disaster recovery.

Repository and Project Management

  • Structuring groups, subgroups, and project hierarchies.
  • Managing merge request workflows, code reviews, and approval rules.
  • Utilizing issue boards, epics, and milestones for Agile planning.
  • Managing wikis, snippets, and release processes.

CI/CD Pipeline Engineering

  • Understanding .gitlab-ci.yml syntax, stages, and job dependencies.
  • Differentiating between shared, group, and specific runner types.
  • Configuring Docker executor, Kubernetes executor, and autoscaling features.
  • Implementing artifact caching, registry publishing, and deployment stages.

Security Scanning

  • Utilizing SAST, DAST, dependency scanning, and container scanning.
  • Performing secret detection and license compliance checks.
  • Analyzing vulnerability dashboards and tracking remediation efforts.

Authentication and Authorization

  • Configuring LDAP, SAML, and OpenID Connect SSO.
  • Enabling two-factor authentication and managing personal access tokens.
  • Setting up IP allowlisting and auditing event logs.

Registry and Package Management

  • Managing container registry: authentication, cleanup policies, and replication.
  • Hosting package registries for Maven, npm, PyPI, and Conan.
  • Handling generic package uploads for internal artifacts.

Monitoring and Scaling

  • Viewing GitLab Exporter metrics and Grafana dashboards.
  • Optimizing database performance and configuring PgBouncer connection pooling.
  • Horizontally scaling web, API, and sidekiq nodes.
  • Developing backup strategies using rake tasks, object storage, and verifying restores.

Requirements

  • Advanced Linux system administration skills and a basic understanding of Ruby/Go.
  • Knowledge of CI/CD concepts, container orchestration, and Git workflows.
  • Experience managing PostgreSQL and Redis at scale.

Target Audience

  • Enterprise DevOps teams transitioning from GitLab.com or GitHub Enterprise.
  • Organizations requiring full sovereignty over their DevSecOps toolchain.
  • Regulated industries necessitating on-premise CI/CD and registry solutions.
 21 Hours

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories