Get in Touch

Course Outline

Achieving DevSecOps Sovereignty with GitLab

  • Comparison of GitLab CE, EE, and GitLab.com regarding features and control.
  • Omnibus architecture and deployment options via Kubernetes Helm charts.
  • Risks of SaaS lock-in and adherence to data residency regulations.

Installation and Architecture Design

  • Omnibus installation on Ubuntu with PostgreSQL and Redis integration.
  • Deploying GitLab Helm charts on Kubernetes with persistent volumes.
  • Configuration of external services: object storage, SMTP, and LDAP.
  • Implementing Geo replication for multi-region disaster recovery.

Repository and Project Management

  • Structuring groups, subgroups, and project hierarchies.
  • Managing merge request workflows, code reviews, and approval rules.
  • Utilising issue boards, epics, and milestones for Agile planning.
  • Leveraging wikis, snippets, and release management features.

CI/CD Pipeline Engineering

  • Mastering .gitlab-ci.yml syntax, stages, and job dependencies.
  • Differentiating between shared, group, and specific runners.
  • Configuring Docker and Kubernetes executors with autoscaling capabilities.
  • Implementing artifact caching, registry publishing, and deployment stages.

Security Scanning Implementation

  • Executing SAST, DAST, dependency scanning, and container scanning.
  • Detecting secrets and ensuring license compliance.
  • Monitoring vulnerability dashboards and tracking remediation efforts.

Authentication and Authorisation

  • Setting up LDAP, SAML, and OpenID Connect SSO.
  • Enforcing two-factor authentication and managing personal access tokens.
  • Configuring IP allowlisting and audit event logging.

Registry and Package Management

  • Managing the container registry: authentication, cleanup policies, and replication.
  • Utilising the package registry for Maven, npm, PyPI, and Conan.
  • Handling generic package uploads for internal artefacts.

Monitoring and Scalability

  • Analyzing GitLab Exporter metrics and Grafana dashboards.
  • Tuning database performance and configuring PgBouncer connection pooling.
  • Horizontally scaling web, API, and Sidekiq nodes.
  • Developing backup strategies using rake tasks, object storage, and restore verification.

Requirements

  • Proficiency in advanced Linux system administration and foundational knowledge of Ruby/Go.
  • Understanding of CI/CD principles, container orchestration, and Git workflows.
  • Practical experience managing PostgreSQL and Redis at scale.

Target Audience

  • Enterprise DevOps teams transitioning away from GitLab.com or GitHub Enterprise.
  • Organisations demanding complete sovereignty over their DevSecOps toolchain.
  • Regulated industries requiring on-premise CI/CD pipelines and registry solutions.
 21 Hours

Testimonials (2)

Related Categories