Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
DevSecOps Sovereignty with GitLab
- Comparison of features and control levels among GitLab CE, EE, and GitLab.com.
- Exploration of Omnibus architecture and Kubernetes Helm deployment options.
- Analysis of SaaS lock-in risks and data residency requirements.
Installation and Architecture
- Omnibus installation on Ubuntu with PostgreSQL and Redis configurations.
- Deploying GitLab via Helm charts on Kubernetes with persistent volumes.
- Integration of external services: object storage, SMTP, and LDAP.
- Implementation of Geo replication for multi-region disaster recovery.
Repository and Project Management
- Structure of groups, subgroups, and project hierarchies.
- Merge request workflows, code review processes, and approval rules.
- Agile planning tools including issue boards, epics, and milestones.
- Utilization of wiki, snippets, and release management features.
CI/CD Pipeline Engineering
- Syntax, stages, and job dependencies in .gitlab-ci.yml.
- Different runner types: shared, group, and specific runners.
- Use of Docker executors, Kubernetes executors, and autoscaling mechanisms.
- Artifact caching, registry publishing, and deployment stages.
Security Scanning
- Implementation of SAST, DAST, dependency scanning, and container scanning.
- Secret detection and license compliance checks.
- Vulnerability dashboards and tracking of remediation efforts.
Authentication and Authorization
- SSO configurations via LDAP, SAML, and OpenID Connect.
- Enforcement of two-factor authentication and management of personal access tokens.
- IP allowlisting and audit event logging for security compliance.
Registry and Package Management
- Container registry management: authentication, cleanup policies, and replication.
- Package registry support for Maven, npm, PyPI, and Conan.
- Generic package uploads for handling internal artifacts.
Monitoring and Scaling
- Metrics via GitLab Exporter and visualization with Grafana dashboards.
- Database tuning and connection pooling using PgBouncer.
- Horizontal scaling of web, API, and Sidekiq nodes.
- Backup strategies involving rake tasks, object storage, and restore verification procedures.
Requirements
- Advanced Linux system administration skills and foundational knowledge of Ruby/Go.
- Understanding of CI/CD principles, container orchestration, and Git workflows.
- Experience managing PostgreSQL and Redis at scale.
Audience
- Enterprise DevOps teams looking to replace GitLab.com or GitHub Enterprise.
- Organizations that require complete sovereignty over their DevSecOps toolchain.
- Sectors in regulated industries needing on-premise CI/CD and registry solutions.
21 Hours
Testimonials (1)
I like that I've got immediately answer to my questions.
