Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Achieving DevSecOps Sovereignty with GitLab
- Comparing GitLab CE, EE, and GitLab.com: A detailed look at features and control levels.
- Exploring Omnibus architecture and deployment options via Kubernetes Helm charts.
- Analyzing SaaS lock-in risks and addressing data residency obligations.
Installation and System Architecture
- Setting up Omnibus on Ubuntu with integrated PostgreSQL and Redis.
- Deploying GitLab Helm charts on Kubernetes using persistent volumes.
- Integrating external services such as object storage, SMTP, and LDAP.
- Configuring Geo replication for multi-region disaster recovery.
Repository and Project Administration
- Managing groups, subgroups, and project hierarchies.
- Streamlining merge request workflows, code reviews, and approval rules.
- Utilizing issue boards, epics, and milestones for Agile project planning.
- Managing wikis, code snippets, and release cycles.
CI/CD Pipeline Engineering
- Mastering .gitlab-ci.yml syntax, stage definitions, and job dependencies.
- Selecting appropriate runner types: shared, group, or specific.
- Implementing Docker and Kubernetes executors with autoscaling capabilities.
- Optimizing artifact caching, registry publication, and deployment stages.
Security Scanning
- Deploying SAST, DAST, dependency, and container scanning.
- Implementing secret detection and license compliance checks.
- Using vulnerability dashboards for effective remediation tracking.
Authentication and Authorization
- Configuring LDAP, SAML, and OpenID Connect for SSO.
- Enforcing two-factor authentication and managing personal access tokens.
- Applying IP allowlists and logging audit events.
Registry and Package Management
- Managing the container registry: authentication, cleanup policies, and replication.
- Utilizing the package registry for Maven, npm, PyPI, and Conan.
- Uploading generic packages for internal artifact management.
Monitoring and Scaling
- Leveraging GitLab Exporter metrics and Grafana dashboards.
- Tuning database performance and implementing PgBouncer connection pooling.
- Scaling web, API, and sidekiq nodes horizontally.
- Defining backup strategies including rake tasks, object storage, and restore verification.
Requirements
- Advanced Linux system administration skills and foundational knowledge of Ruby/Go.
- Proficiency in CI/CD concepts, container orchestration, and Git workflows.
- Practical experience managing PostgreSQL and Redis in high-scale environments.
Target Audience
- Enterprise DevOps teams looking to migrate from GitLab.com or GitHub Enterprise.
- Organizations prioritizing complete DevSecOps toolchain independence.
- Industries under regulatory mandates requiring on-premise CI/CD and registry solutions.
Testimonials (1)
I like that I've got immediately answer to my questions.
