Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
DevSecOps Sovereignty with GitLab
- Comparison of features and control levels between GitLab CE, EE, and GitLab.com.
- Omnibus architecture and deployment options for Kubernetes using Helm charts.
- Risks associated with SaaS lock-in and data residency requirements.
Installation and Architecture
- Omnibus installation on Ubuntu paired with PostgreSQL and Redis.
- Deploying GitLab Helm charts on Kubernetes with persistent volumes.
- Integration of external services: object storage, SMTP, and LDAP.
- Geo replication for multi-region disaster recovery capabilities.
Repository and Project Management
- Managing groups, subgroups, and project hierarchies.
- Implementing merge request workflows, code reviews, and approval rules.
- Utilizing issue boards, epics, and milestones for Agile planning.
- Using wikis, snippets, and release management tools.
CI/CD Pipeline Engineering
- Understanding .gitlab-ci.yml syntax, stages, and job dependencies.
- Differentiating runner types: shared, group, and specific runners.
- Configuring Docker executors, Kubernetes executors, and autoscaling mechanisms.
- Managing artifact caching, registry publishing, and deployment stages.
Security Scanning
- Conducting SAST, DAST, dependency scanning, and container scanning.
- Implementing secret detection and license compliance checks.
- Monitoring vulnerability dashboards and tracking remediation efforts.
Authentication and Authorization
- Configuring LDAP, SAML, and OpenID Connect for single sign-on (SSO).
- Enabling two-factor authentication and managing personal access tokens.
- Setting up IP allowlists and audit event logging.
Registry and Package Management
- Managing the container registry: authentication, cleanup policies, and replication.
- Using package registries for Maven, npm, PyPI, and Conan.
- Uploading generic packages for internal artifacts.
Monitoring and Scaling
- Utilizing GitLab Exporter metrics and Grafana dashboards for monitoring.
- Tuning databases and configuring PgBouncer connection pooling.
- Horizontally scaling web, API, and Sidekiq nodes.
- Implementing backup strategies: rake tasks, object storage, and restore verification.
Requirements
- Advanced Linux system administration skills along with basic knowledge of Ruby/Go.
- A solid understanding of CI/CD principles, container orchestration, and Git workflows.
- Practical experience managing PostgreSQL and Redis at scale.
Audience
- Enterprise DevOps teams looking to migrate away from GitLab.com or GitHub Enterprise.
- Organizations that require full sovereignty over their DevSecOps toolchain.
- Regulated industries needing on-premise CI/CD and registry solutions.
21 Hours
Testimonials (1)
I like that I've got immediately answer to my questions.
