Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
DevSecOps Sovereignty with GitLab
- Comparison of features and control among GitLab CE, EE, and GitLab.com.
- Omnibus architecture and Kubernetes Helm deployment options.
- Risks of SaaS lock-in and data residency requirements.
Installation and Architecture
- Omnibus installation on Ubuntu with PostgreSQL and Redis.
- GitLab Helm chart deployment on Kubernetes with persistent volumes.
- Configuration of external services: object storage, SMTP, LDAP.
- Geo replication for multi-region disaster recovery.
Repository and Project Management
- Management of groups, subgroups, and project hierarchies.
- Merge request workflows, code review processes, and approval rules.
- Agile planning using issue boards, epics, and milestones.
- Utilization of wiki, snippets, and release management tools.
CI/CD Pipeline Engineering
- Mastery of .gitlab-ci.yml syntax, stages, and job dependencies.
- Understanding runner types: shared, group, and specific runners.
- Deployment via Docker executor, Kubernetes executor, and autoscaling strategies.
- Artifact caching, registry publishing, and deployment stages.
Security Scanning
- Implementation of SAST, DAST, dependency scanning, and container scanning.
- Secret detection and license compliance checks.
- Navigating vulnerability dashboards and tracking remediation efforts.
Authentication and Authorization
- Configuration of LDAP, SAML, and OpenID Connect for single sign-on (SSO).
- Enabling two-factor authentication and managing personal access tokens.
- Setting up IP allowlisting and audit event logging.
Registry and Package Management
- Container registry: handling authentication, cleanup policies, and replication.
- Package registry support for Maven, npm, PyPI, and Conan.
- Uploading generic packages for internal artifact storage.
Monitoring and Scaling
- Utilizing GitLab Exporter metrics and Grafana dashboards.
- Database tuning and implementing PgBouncer connection pooling.
- Horizontal scaling of web, API, and sidekiq nodes.
- Backup strategies involving rake tasks, object storage, and restore verification.
Requirements
- Advanced Linux system administration skills and foundational knowledge of Ruby/Go.
- Familiarity with CI/CD concepts, container orchestration, and Git workflows.
- Experience managing PostgreSQL and Redis at scale.
Audience
- Enterprise DevOps teams migrating away from GitLab.com or GitHub Enterprise.
- Organizations requiring complete sovereignty over their DevSecOps toolchain.
- Regulated industries needing on-premise CI/CD and registry solutions.
21 Hours
Testimonials (1)
I like that I've got immediately answer to my questions.
