Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
DevSecOps Sovereignty with GitLab
- Comparing features and control levels across GitLab CE, EE, and GitLab.com.
- Exploring Omnibus architecture and Kubernetes Helm deployment strategies.
- Addressing SaaS lock-in risks and data residency mandates.
Installation and Architecture
- Installing Omnibus on Ubuntu with PostgreSQL and Redis.
- Deploying the GitLab Helm chart on Kubernetes with persistent volumes.
- Integrating external services: object storage, SMTP, and LDAP.
- Implementing Geo replication for multi-region disaster recovery.
Repository and Project Management
- Structuring groups, subgroups, and project hierarchies.
- Managing merge request workflows, code reviews, and approval rules.
- Utilizing issue boards, epics, and milestones for Agile planning.
- Handling wikis, snippets, and release management.
CI/CD Pipeline Engineering
- Mastering .gitlab-ci.yml syntax, stages, and job dependencies.
- Configuring runner types: shared, group, and specific runners.
- Setting up Docker executor, Kubernetes executor, and autoscaling.
- Managing artifact caching, registry publishing, and deployment stages.
Security Scanning
- Applying SAST, DAST, dependency scanning, and container scanning.
- Detecting secrets and ensuring license compliance.
- Tracking vulnerabilities via dashboards and remediation workflows.
Authentication and Authorization
- Configuring LDAP, SAML, and OpenID Connect SSO.
- Enforcing two-factor authentication and personal access tokens.
- Managing IP allowlists and audit event logging.
Registry and Package Management
- Managing the container registry: authentication, cleanup policies, and replication.
- Utilizing the package registry for Maven, npm, PyPI, and Conan.
- Handling generic package uploads for internal artifacts.
Monitoring and Scaling
- Using GitLab Exporter metrics and Grafana dashboards.
- Tuning databases and implementing PgBouncer connection pooling.
- Horizontally scaling web, API, and sidekiq nodes.
- Developing backup strategies using rake tasks, object storage, and restore verification.
Requirements
- Advanced Linux system administration and basic knowledge of Ruby/Go.
- Familiarity with CI/CD, container orchestration, and Git workflows.
- Experience scaling PostgreSQL and Redis.
Target Audience
- Enterprise DevOps teams migrating away from GitLab.com or GitHub Enterprise.
- Organizations seeking complete sovereignty over their DevSecOps toolchain.
- Regulated sectors requiring on-premise CI/CD and registry solutions.
21 Hours
Testimonials (1)
I like that I've got immediately answer to my questions.