Course Outline
Achieving DevSecOps Sovereignty with GitLab
- Comparison of GitLab CE, EE, and GitLab.com regarding features and control.
- Omnibus architecture and deployment options via Kubernetes Helm charts.
- Risks of SaaS lock-in and adherence to data residency regulations.
Installation and Architecture Design
- Omnibus installation on Ubuntu with PostgreSQL and Redis integration.
- Deploying GitLab Helm charts on Kubernetes with persistent volumes.
- Configuration of external services: object storage, SMTP, and LDAP.
- Implementing Geo replication for multi-region disaster recovery.
Repository and Project Management
- Structuring groups, subgroups, and project hierarchies.
- Managing merge request workflows, code reviews, and approval rules.
- Utilising issue boards, epics, and milestones for Agile planning.
- Leveraging wikis, snippets, and release management features.
CI/CD Pipeline Engineering
- Mastering .gitlab-ci.yml syntax, stages, and job dependencies.
- Differentiating between shared, group, and specific runners.
- Configuring Docker and Kubernetes executors with autoscaling capabilities.
- Implementing artifact caching, registry publishing, and deployment stages.
Security Scanning Implementation
- Executing SAST, DAST, dependency scanning, and container scanning.
- Detecting secrets and ensuring license compliance.
- Monitoring vulnerability dashboards and tracking remediation efforts.
Authentication and Authorisation
- Setting up LDAP, SAML, and OpenID Connect SSO.
- Enforcing two-factor authentication and managing personal access tokens.
- Configuring IP allowlisting and audit event logging.
Registry and Package Management
- Managing the container registry: authentication, cleanup policies, and replication.
- Utilising the package registry for Maven, npm, PyPI, and Conan.
- Handling generic package uploads for internal artefacts.
Monitoring and Scalability
- Analyzing GitLab Exporter metrics and Grafana dashboards.
- Tuning database performance and configuring PgBouncer connection pooling.
- Horizontally scaling web, API, and Sidekiq nodes.
- Developing backup strategies using rake tasks, object storage, and restore verification.
Requirements
- Proficiency in advanced Linux system administration and foundational knowledge of Ruby/Go.
- Understanding of CI/CD principles, container orchestration, and Git workflows.
- Practical experience managing PostgreSQL and Redis at scale.
Target Audience
- Enterprise DevOps teams transitioning away from GitLab.com or GitHub Enterprise.
- Organisations demanding complete sovereignty over their DevSecOps toolchain.
- Regulated industries requiring on-premise CI/CD pipelines and registry solutions.
Testimonials (2)
I like that I've got immediately answer to my questions.
Szabolcs Kriston - Ericsson
Course - Advanced GitLab
I liked the easy communication between trainer and us, care given to our problems, insights and additional knowledge provided in anwers to our questions. I liked the pace, it didn't feel rushed at any point, even with technical problems. Each subject was taken care of properly.