Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
DevSecOps Sovereignty with GitLab
- Comparative analysis of GitLab CE, EE, and GitLab.com regarding features and control.
- Exploring Omnibus architecture versus Kubernetes Helm deployment options.
- Mitigating SaaS lock-in risks and addressing data residency mandates.
Installation and Architecture
- Setting up Omnibus on Ubuntu with PostgreSQL and Redis integration.
- Deploying GitLab Helm charts on Kubernetes with persistent volume configurations.
- Connecting external services including object storage, SMTP, and LDAP.
- Implementing Geo replication for multi-region disaster recovery.
Repository and Project Management
- Structuring groups, subgroups, and project hierarchies effectively.
- Optimizing merge request workflows, code reviews, and approval rules.
- Utilizing issue boards, epics, and milestones for Agile planning.
- Managing wikis, snippets, and software releases.
CI/CD Pipeline Engineering
- Mastering .gitlab-ci.yml syntax, stage definitions, and job dependencies.
- Configuring shared, group, and specific runner types.
- Implementing Docker and Kubernetes executors with autoscaling capabilities.
- Managing artifact caching, registry publishing, and deployment stages.
Security Scanning
- Applying SAST, DAST, dependency scanning, and container scanning techniques.
- Enforcing secret detection and license compliance checks.
- Tracking vulnerabilities through dashboards and remediation workflows.
Authentication and Authorization
- Integrating LDAP, SAML, and OpenID Connect for SSO.
- Implementing two-factor authentication and personal access token management.
- Configuring IP allowlisting and comprehensive audit event logging.
Registry and Package Management
- Administering the container registry: authentication, cleanup, and replication.
- Serving packages for Maven, npm, PyPI, and Conan via the package registry.
- Handling generic package uploads for internal artifacts.
Monitoring and Scaling
- Leveraging GitLab Exporter metrics and Grafana dashboards for insights.
- Tuning databases and optimizing PgBouncer connection pooling.
- Scaling web, API, and Sidekiq nodes horizontally.
- Executing backup strategies via rake tasks, object storage, and restore verification.
Requirements
- Proficiency in advanced Linux system administration, along with foundational knowledge of Ruby and Go.
- Solid understanding of CI/CD concepts, container orchestration, and Git workflows.
- Hands-on experience managing PostgreSQL and Redis at scale.
Target Audience
- Enterprise DevOps teams transitioning away from GitLab.com or GitHub Enterprise.
- Organizations demanding full sovereignty over their DevSecOps toolchain.
- Regulated industries requiring on-premises solutions for CI/CD and artifact management.
21 Hours
Testimonials (1)
I like that I've got immediately answer to my questions.