Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
DevSecOps Sovereignty with GitLab
- Comparing GitLab CE vs. EE vs. GitLab.com in terms of features and control.
- Omnibus architecture and Kubernetes Helm deployment options.
- Risks of SaaS lock-in and data residency requirements.
Installation and Architecture
- Installing Omnibus on Ubuntu with PostgreSQL and Redis.
- Deploying the GitLab Helm chart on Kubernetes with persistent volumes.
- Configuring external services: object storage, SMTP, and LDAP.
- Implementing Geo replication for multi-region disaster recovery.
Repository and Project Management
- Navigating groups, subgroups, and project hierarchies.
- Managing merge request workflows, code reviews, and approval rules.
- Utilizing issue boards, epics, and milestones for Agile planning.
- Leveraging wikis, snippets, and release management features.
CI/CD Pipeline Engineering
- Mastering .gitlab-ci.yml syntax, stages, and job dependencies.
- Distinguishing between shared, group, and specific runners.
- Configuring Docker executors, Kubernetes executors, and autoscaling.
- Managing artifact caching, registry publishing, and deployment stages.
Security Scanning
- Implementing SAST, DAST, dependency scanning, and container scanning.
- Performing secret detection and license compliance checks.
- Utilizing vulnerability dashboards and tracking remediation efforts.
Authentication and Authorization
- Setting up LDAP, SAML, and OpenID Connect SSO.
- Enabling two-factor authentication and managing personal access tokens.
- Configuring IP allowlisting and audit event logging.
Registry and Package Management
- Managing the container registry: authentication, cleanup policies, and replication.
- Using the package registry for Maven, npm, PyPI, and Conan.
- Uploading generic packages for internal artifacts.
Monitoring and Scaling
- Analyzing GitLab Exporter metrics and Grafana dashboards.
- Tuning databases and configuring PgBouncer connection pooling.
- Horizontally scaling web, API, and Sidekiq nodes.
- Establishing backup strategies using rake tasks, object storage, and restore verification.
Requirements
- Advanced Linux system administration skills and basic knowledge of Ruby/Go.
- Understanding of CI/CD principles, container orchestration, and Git workflows.
- Hands-on experience with PostgreSQL and Redis at scale.
Audience
- Enterprise DevOps teams transitioning from GitLab.com or GitHub Enterprise.
- Organizations demanding full sovereignty over their DevSecOps toolchain.
- Regulated industries requiring on-premise CI/CD pipelines and registries.
21 Hours
Testimonials (1)
I like that I've got immediately answer to my questions.
