Get in Touch

Course Outline

Establishing DevSecOps Sovereignty with GitLab

  • Comparing features and control levels among GitLab CE, EE, and GitLab.com.
  • Exploring Omnibus architecture and Kubernetes Helm deployment options.
  • Evaluating risks of SaaS lock-in and addressing data residency requirements.

Installation and Architecture

  • Performing Omnibus installations on Ubuntu with PostgreSQL and Redis.
  • Deploying GitLab via Helm charts on Kubernetes with persistent volumes.
  • Configuring external services: object storage, SMTP, and LDAP.
  • Implementing Geo replication for multi-region disaster recovery.

Repository and Project Management

  • Navigating groups, subgroups, and project hierarchies.
  • Managing merge request workflows, code reviews, and approval rules.
  • Utilizing issue boards, epics, and milestones for Agile planning.
  • Leveraging wiki, snippets, and release management tools.

CI/CD Pipeline Engineering

  • Mastering .gitlab-ci.yml syntax, stages, and job dependencies.
  • Configuring runner types: shared, group, and specific runners.
  • Utilizing Docker executors, Kubernetes executors, and autoscaling features.
  • Managing artifact caching, registry publishing, and deployment stages.

Security Scanning

  • Implementing SAST, DAST, dependency scanning, and container scanning.
  • Conducting secret detection and license compliance checks.
  • Monitoring vulnerability dashboards and tracking remediation efforts.

Authentication and Authorization

  • Setting up LDAP, SAML, and OpenID Connect for Single Sign-On (SSO).
  • Enforcing two-factor authentication and managing personal access tokens.
  • Configuring IP allowlisting and auditing event logs.

Registry and Package Management

  • Managing the container registry: authentication, cleanup policies, and replication.
  • Utilizing the package registry for Maven, npm, PyPI, and Conan.
  • Handling generic package uploads for internal artifacts.

Monitoring and Scaling

  • Analyzing metrics via GitLab Exporter and Grafana dashboards.
  • Tuning databases and configuring PgBouncer for connection pooling.
  • S horizontally scaling web, API, and Sidekiq nodes.
  • Implementing backup strategies using rake tasks, object storage, and verifying restores.

Requirements

  • Advanced Linux system administration skills and foundational knowledge of Ruby/Go.
  • Understanding of CI/CD concepts, container orchestration, and Git workflows.
  • Hands-on experience managing PostgreSQL and Redis at scale.

Audience

  • Enterprise DevOps teams replacing GitLab.com or GitHub Enterprise.
  • Organizations requiring complete sovereignty over their DevSecOps toolchain.
  • Regulated industries needing on-premise CI/CD pipelines and container registries.
 21 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories