Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
DevSecOps Sovereignty with GitLab
- Comparing GitLab CE, EE, and GitLab.com: features and control levels.
- Omnibus architecture and Kubernetes Helm deployment options.
- Risks of SaaS lock-in and data residency compliance requirements.
Installation and Architecture
- Omnibus installation on Ubuntu with PostgreSQL and Redis integration.
- GitLab Helm chart deployment on Kubernetes with persistent volumes.
- Integration of external services: object storage, SMTP, and LDAP.
- Geo replication for multi-region disaster recovery.
Repository and Project Management
- Structuring groups, subgroups, and project hierarchies.
- Managing merge request workflows, code reviews, and approval rules.
- Utilizing issue boards, epics, and milestones for Agile planning.
- Managing wikis, snippets, and release processes.
CI/CD Pipeline Engineering
- Mastery of .gitlab-ci.yml syntax, stages, and job dependencies.
- Understanding Runner types: shared, group, and specific runners.
- Configuring Docker executors, Kubernetes executors, and autoscaling.
- Implementing artifact caching, registry publishing, and deployment stages.
Security Scanning
- Conducting SAST, DAST, dependency scanning, and container scanning.
- Performing secret detection and license compliance checks.
- Utilizing vulnerability dashboards and tracking remediation efforts.
Authentication and Authorization
- Setting up LDAP, SAML, and OpenID Connect for single sign-on (SSO).
- Enabling two-factor authentication and managing personal access tokens.
- Implementing IP allowlisting and audit event logging.
Registry and Package Management
- Managing the container registry: authentication, cleanup policies, and replication.
- Utilizing the package registry for Maven, npm, PyPI, and Conan.
- Uploading generic packages for internal artifact storage.
Monitoring and Scaling
- Analyzing GitLab Exporter metrics via Grafana dashboards.
- Tuning databases and configuring PgBouncer connection pooling.
- Horizontally scaling web, API, and Sidekiq nodes.
- Executing backup strategies using rake tasks, object storage, and verifying restore processes.
Requirements
- Advanced Linux system administration skills and foundational knowledge of Ruby/Go.
- Understanding of CI/CD processes, container orchestration, and Git workflows.
- Experience managing PostgreSQL and Redis at scale.
Audience
- Enterprise DevOps teams aiming to migrate away from GitLab.com or GitHub Enterprise.
- Organizations requiring complete sovereignty over their DevSecOps toolchain.
- Regulated industries needing on-premise solutions for CI/CD and registries.
21 Hours
Testimonials (1)
I like that I've got immediately answer to my questions.
