Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Achieving DevSecOps Sovereignty with GitLab
- Comparing features and control levels across GitLab CE, EE, and GitLab.com.
- Exploring Omnibus architecture and Kubernetes Helm deployment options.
- Assessing SaaS lock-in risks and addressing data residency requirements.
Installation and Architecture Design
- Installing Omnibus on Ubuntu with PostgreSQL and Redis configurations.
- Deploying GitLab Helm charts on Kubernetes with persistent volume storage.
- Integrating external services such as object storage, SMTP, and LDAP.
- Implementing Geo replication for multi-region disaster recovery.
Repository and Project Administration
- Structuring groups, subgroups, and project hierarchies.
- Defining merge request workflows, code reviews, and approval rules.
- Utilizing issue boards, epics, and milestones for Agile project planning.
- Managing wikis, snippets, and release cycles.
CI/CD Pipeline Engineering
- Mastering .gitlab-ci.yml syntax, stage definitions, and job dependencies.
- Distinguishing between shared, group, and specific runner types.
- Configuring Docker and Kubernetes executors with autoscaling capabilities.
- Optimizing artifact caching, registry publishing, and deployment stages.
Security Scanning Integration
- Implementing SAST, DAST, dependency scanning, and container scanning.
- Detecting secrets and ensuring license compliance.
- Tracking vulnerability dashboards and remediation efforts.
Authentication and Access Control
- Setting up LDAP, SAML, and OpenID Connect for single sign-on.
- Enabling two-factor authentication and managing personal access tokens.
- Applying IP allowlisting and configuring audit event logging.
Registry and Package Management
- Managing the container registry, including authentication, cleanup, and replication.
- Utilizing the package registry for Maven, npm, PyPI, and Conan.
- Uploading generic packages for internal artifact distribution.
Monitoring and Scalability
- Utilizing GitLab Exporter metrics and Grafana dashboards for insights.
- Tuning database performance and configuring PgBouncer for connection pooling.
- Scaling web, API, and Sidekiq nodes horizontally.
- Developing backup strategies using rake tasks, object storage, and restore verification.
Requirements
- Proficiency in advanced Linux system administration, along with foundational knowledge of Ruby/Go.
- A solid grasp of CI/CD concepts, container orchestration, and Git workflows.
- Practical experience managing PostgreSQL and Redis in scaled environments.
Target Audience
- Enterprise DevOps teams seeking to replace GitLab.com or GitHub Enterprise.
- Organizations prioritizing sovereignty over their DevSecOps toolchain.
- Entities in regulated sectors requiring on-premise CI/CD and registry solutions.
21 Hours
Testimonials (1)
I like that I've got immediately answer to my questions.