Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
DevSecOps Sovereignty with GitLab
- Comparison of features and control between GitLab CE, EE, and GitLab.com.
- Omnibus architecture and Kubernetes Helm deployment options.
- Risks of SaaS lock-in and data residency compliance requirements.
Installation and Architecture
- Omnibus installation on Ubuntu with PostgreSQL and Redis.
- GitLab Helm chart deployment on Kubernetes with persistent volumes.
- Configuration of external services: object storage, SMTP, and LDAP.
- Geo replication for multi-region disaster recovery.
Repository and Project Management
- Nesting groups, subgroups, and project hierarchies.
- Merge request workflows, code review processes, and approval rules.
- Issue boards, epics, and milestones for Agile planning.
- Utilizing wikis, snippets, and release management tools.
CI/CD Pipeline Engineering
- Understanding .gitlab-ci.yml syntax, stages, and job dependencies.
- Different runner types: shared, group-specific, and specific runners.
- Docker executor, Kubernetes executor, and autoscaling capabilities.
- Artifact caching, registry publishing, and deployment stages.
Security Scanning
- SAST, DAST, dependency scanning, and container scanning features.
- Secret detection and license compliance monitoring.
- Vulnerability dashboards and remediation tracking.
Authentication and Authorization
- Integration with LDAP, SAML, and OpenID Connect SSO.
- Two-factor authentication and management of personal access tokens.
- IP allowlisting and audit event logging.
Registry and Package Management
- Container registry: authentication, cleanup policies, and replication.
- Package registry support for Maven, npm, PyPI, and Conan.
- Generic package uploads for internal artifacts.
Monitoring and Scaling
- Utilizing GitLab Exporter metrics and Grafana dashboards.
- Database tuning and PgBouncer connection pooling.
- Horizontal scaling of web, API, and sidekiq nodes.
- Backup strategies involving rake tasks, object storage, and restore verification.
Requirements
- Advanced Linux system administration skills and foundational knowledge of Ruby/Go.
- Familiarity with CI/CD processes, container orchestration, and Git workflows.
- Practical experience managing PostgreSQL and Redis at scale.
Audience
- Enterprise DevOps teams looking to replace GitLab.com or GitHub Enterprise.
- Organizations requiring full sovereignty over their DevSecOps toolchain.
- Regulated industries necessitating on-premise CI/CD and registry solutions.
21 Hours
Testimonials (1)
I like that I've got immediately answer to my questions.
