Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
DevSecOps Sovereignty with GitLab
- Comparison of features and control between GitLab CE, EE, and GitLab.com.
- Omnibus architecture overview and Kubernetes Helm deployment options.
- Risks of SaaS lock-in and data residency requirements.
Installation and Architecture
- Omnibus installation on Ubuntu with PostgreSQL and Redis.
- GitLab Helm chart deployment on Kubernetes with persistent volumes.
- Configuration of external services: object storage, SMTP, and LDAP.
- Geo replication setup for multi-region disaster recovery.
Repository and Project Management
- Management of groups, subgroups, and project hierarchies.
- Merge request workflows, code review processes, and approval rules.
- Agile planning using issue boards, epics, and milestones.
- Utilization of wikis, snippets, and release management features.
CI/CD Pipeline Engineering
- Mastery of .gitlab-ci.yml syntax, stages, and job dependencies.
- Understanding runner types: shared, group, and specific runners.
- Implementation of Docker executors, Kubernetes executors, and autoscaling.
- Artifact caching, registry publishing, and deployment stage configurations.
Security Scanning
- Deployment of SAST, DAST, dependency scanning, and container scanning tools.
- Secret detection and license compliance checks.
- Vulnerability dashboards and remediation tracking processes.
Authentication and Authorization
- Integration of LDAP, SAML, and OpenID Connect for SSO.
- Configuration of two-factor authentication and personal access tokens.
- Implementation of IP allowlisting and audit event logging.
Registry and Package Management
- Container registry management: authentication, cleanup policies, and replication.
- Package registry support for Maven, npm, PyPI, and Conan.
- Generic package uploads for internal artifacts.
Monitoring and Scaling
- Analysis of GitLab Exporter metrics and Grafana dashboards.
- Database tuning and PgBouncer connection pooling optimization.
- Horizontal scaling strategies for web, API, and Sidekiq nodes.
- Backup strategies involving rake tasks, object storage, and restore verification.
Requirements
- Advanced Linux system administration skills and foundational knowledge of Ruby/Go.
- Understanding of CI/CD concepts, container orchestration, and Git workflows.
- Experience managing PostgreSQL and Redis at scale.
Audience
- Enterprise DevOps teams looking to migrate away from GitLab.com or GitHub Enterprise.
- Organizations requiring complete sovereignty over their DevSecOps toolchain.
- Regulated industries needing on-premise CI/CD and registry solutions.
21 Hours
Testimonials (1)
I like that I've got immediately answer to my questions.