Get in Touch

Course Outline

Achieving DevSecOps Sovereignty with GitLab

  • Comparing features and control levels across GitLab CE, EE, and GitLab.com.
  • Exploring Omnibus architecture and Kubernetes Helm deployment options.
  • Assessing SaaS lock-in risks and addressing data residency requirements.

Installation and Architecture Design

  • Installing Omnibus on Ubuntu with PostgreSQL and Redis configurations.
  • Deploying GitLab Helm charts on Kubernetes with persistent volume storage.
  • Integrating external services such as object storage, SMTP, and LDAP.
  • Implementing Geo replication for multi-region disaster recovery.

Repository and Project Administration

  • Structuring groups, subgroups, and project hierarchies.
  • Defining merge request workflows, code reviews, and approval rules.
  • Utilizing issue boards, epics, and milestones for Agile project planning.
  • Managing wikis, snippets, and release cycles.

CI/CD Pipeline Engineering

  • Mastering .gitlab-ci.yml syntax, stage definitions, and job dependencies.
  • Distinguishing between shared, group, and specific runner types.
  • Configuring Docker and Kubernetes executors with autoscaling capabilities.
  • Optimizing artifact caching, registry publishing, and deployment stages.

Security Scanning Integration

  • Implementing SAST, DAST, dependency scanning, and container scanning.
  • Detecting secrets and ensuring license compliance.
  • Tracking vulnerability dashboards and remediation efforts.

Authentication and Access Control

  • Setting up LDAP, SAML, and OpenID Connect for single sign-on.
  • Enabling two-factor authentication and managing personal access tokens.
  • Applying IP allowlisting and configuring audit event logging.

Registry and Package Management

  • Managing the container registry, including authentication, cleanup, and replication.
  • Utilizing the package registry for Maven, npm, PyPI, and Conan.
  • Uploading generic packages for internal artifact distribution.

Monitoring and Scalability

  • Utilizing GitLab Exporter metrics and Grafana dashboards for insights.
  • Tuning database performance and configuring PgBouncer for connection pooling.
  • Scaling web, API, and Sidekiq nodes horizontally.
  • Developing backup strategies using rake tasks, object storage, and restore verification.

Requirements

  • Proficiency in advanced Linux system administration, along with foundational knowledge of Ruby/Go.
  • A solid grasp of CI/CD concepts, container orchestration, and Git workflows.
  • Practical experience managing PostgreSQL and Redis in scaled environments.

Target Audience

  • Enterprise DevOps teams seeking to replace GitLab.com or GitHub Enterprise.
  • Organizations prioritizing sovereignty over their DevSecOps toolchain.
  • Entities in regulated sectors requiring on-premise CI/CD and registry solutions.
 21 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories