Get in Touch

Course Outline

DevSecOps Sovereignty with GitLab

  • Comparison of GitLab CE, EE, and GitLab.com regarding features and control levels.
  • Omnibus architecture and Kubernetes Helm deployment alternatives.
  • Risks associated with SaaS lock-in and data residency requirements.

Installation and Architecture

  • Omnibus installation on Ubuntu utilizing PostgreSQL and Redis.
  • GitLab Helm chart deployment on Kubernetes with persistent volumes.
  • Configuration of external services: object storage, SMTP, LDAP.
  • Geo replication for multi-region disaster recovery capabilities.

Repository and Project Management

  • Management of groups, subgroups, and project hierarchies.
  • Merge request workflows, code review processes, and approval rules.
  • Agile planning tools including issue boards, epics, and milestones.
  • Utilization of wiki, snippets, and release management features.

CI/CD Pipeline Engineering

  • Syntax of .gitlab-ci.yml, stage definitions, and job dependencies.
  • Different runner types: shared, group, and specific runners.
  • Docker executor, Kubernetes executor, and autoscaling configurations.
  • Artifact caching, registry publishing, and deployment stages.

Security Scanning

  • SAST, DAST, dependency scanning, and container scanning implementations.
  • Secret detection and license compliance verification.
  • Vulnerability dashboards and remediation tracking mechanisms.

Authentication and Authorization

  • LDAP, SAML, and OpenID Connect SSO integrations.
  • Two-factor authentication and personal access token management.
  • IP allowlisting and audit event logging.

Registry and Package Management

  • Container registry: authentication, cleanup policies, and replication.
  • Package registry support for Maven, npm, PyPI, and Conan.
  • Generic package uploads for internal artifact storage.

Monitoring and Scaling

  • GitLab Exporter metrics and Grafana dashboard integration.
  • Database tuning and PgBouncer connection pooling strategies.
  • Horizontal scaling of web, API, and sidekiq nodes.
  • Backup strategies encompassing rake tasks, object storage, and restore verification.

Requirements

  • Advanced Linux system administration skills and foundational knowledge of Ruby/Go.
  • Comprehension of CI/CD principles, container orchestration, and Git workflows.
  • Practical experience with PostgreSQL and Redis in large-scale environments.

Audience

  • Enterprise DevOps teams transitioning from GitLab.com or GitHub Enterprise.
  • Organizations demanding full sovereignty over their DevSecOps toolchain.
  • Regulated industries requiring on-premise CI/CD and registry solutions.
 21 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories