Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
DevSecOps Sovereignty with GitLab
- Comparison of features and control among GitLab CE, EE, and GitLab.com.
- Omnibus architecture and Kubernetes Helm deployment options.
- Risks of SaaS lock-in and data residency compliance requirements.
Installation and Architecture
- Omnibus installation on Ubuntu with PostgreSQL and Redis configuration.
- GitLab Helm chart deployment on Kubernetes with persistent volumes.
- External service integration: object storage, SMTP, LDAP.
- Geo replication for multi-region disaster recovery.
Repository and Project Management
- Structure of groups, subgroups, and project hierarchies.
- Merge request workflows, code review processes, and approval rules.
- Agile planning using issue boards, epics, and milestones.
- Wiki management, snippets, and release handling.
CI/CD Pipeline Engineering
- .gitlab-ci.yml syntax, pipeline stages, and job dependencies.
- Runner configurations: shared, group, and specific runners.
- Docker executor, Kubernetes executor, and autoscaling capabilities.
- Artifact caching, registry publishing, and deployment stages.
Security Scanning
- SAST, DAST, dependency scanning, and container image scanning.
- Secret detection and license compliance checking.
- Vulnerability dashboards and remediation tracking.
Authentication and Authorization
- LDAP, SAML, and OpenID Connect for single sign-on (SSO).
- Two-factor authentication and personal access tokens.
- IP allowlisting and audit event logging.
Registry and Package Management
- Container registry: authentication, cleanup policies, and replication.
- Package registry support for Maven, npm, PyPI, and Conan.
- Generic package uploads for internal artifacts.
Monitoring and Scaling
- GitLab Exporter metrics and Grafana dashboard visualization.
- Database tuning and PgBouncer connection pooling.
- Horizontal scaling of web, API, and sidekiq nodes.
- Backup strategies utilizing rake tasks, object storage, and restore verification.
Requirements
- Advanced Linux system administration skills and foundational knowledge of Ruby/Go.
- Understanding of CI/CD concepts, container orchestration, and Git workflows.
- Experience managing PostgreSQL and Redis at scale.
Audience
- Enterprise DevOps teams looking to replace GitLab.com or GitHub Enterprise.
- Organizations requiring full sovereignty over their DevSecOps toolchain.
- Regulated industries necessitating on-premise CI/CD and registry solutions.
21 Hours
Testimonials (1)
I like that I've got immediately answer to my questions.
