Get in Touch

Course Outline

DevSecOps Sovereignty with GitLab

  • Comparative analysis of GitLab CE, EE, and GitLab.com regarding features and control.
  • Exploring Omnibus architecture versus Kubernetes Helm deployment options.
  • Mitigating SaaS lock-in risks and addressing data residency mandates.

Installation and Architecture

  • Setting up Omnibus on Ubuntu with PostgreSQL and Redis integration.
  • Deploying GitLab Helm charts on Kubernetes with persistent volume configurations.
  • Connecting external services including object storage, SMTP, and LDAP.
  • Implementing Geo replication for multi-region disaster recovery.

Repository and Project Management

  • Structuring groups, subgroups, and project hierarchies effectively.
  • Optimizing merge request workflows, code reviews, and approval rules.
  • Utilizing issue boards, epics, and milestones for Agile planning.
  • Managing wikis, snippets, and software releases.

CI/CD Pipeline Engineering

  • Mastering .gitlab-ci.yml syntax, stage definitions, and job dependencies.
  • Configuring shared, group, and specific runner types.
  • Implementing Docker and Kubernetes executors with autoscaling capabilities.
  • Managing artifact caching, registry publishing, and deployment stages.

Security Scanning

  • Applying SAST, DAST, dependency scanning, and container scanning techniques.
  • Enforcing secret detection and license compliance checks.
  • Tracking vulnerabilities through dashboards and remediation workflows.

Authentication and Authorization

  • Integrating LDAP, SAML, and OpenID Connect for SSO.
  • Implementing two-factor authentication and personal access token management.
  • Configuring IP allowlisting and comprehensive audit event logging.

Registry and Package Management

  • Administering the container registry: authentication, cleanup, and replication.
  • Serving packages for Maven, npm, PyPI, and Conan via the package registry.
  • Handling generic package uploads for internal artifacts.

Monitoring and Scaling

  • Leveraging GitLab Exporter metrics and Grafana dashboards for insights.
  • Tuning databases and optimizing PgBouncer connection pooling.
  • Scaling web, API, and Sidekiq nodes horizontally.
  • Executing backup strategies via rake tasks, object storage, and restore verification.

Requirements

  • Proficiency in advanced Linux system administration, along with foundational knowledge of Ruby and Go.
  • Solid understanding of CI/CD concepts, container orchestration, and Git workflows.
  • Hands-on experience managing PostgreSQL and Redis at scale.

Target Audience

  • Enterprise DevOps teams transitioning away from GitLab.com or GitHub Enterprise.
  • Organizations demanding full sovereignty over their DevSecOps toolchain.
  • Regulated industries requiring on-premises solutions for CI/CD and artifact management.
 21 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories