Get in Touch

Course Outline

DevSecOps Sovereignty with GitLab

  • Comparison of features and control among GitLab CE, EE, and GitLab.com.
  • Omnibus architecture alongside Kubernetes Helm deployment options.
  • Risks of SaaS lock-in and data residency compliance requirements.

Installation and Architecture

  • Omnibus installation on Ubuntu utilising PostgreSQL and Redis.
  • GitLab Helm chart deployment on Kubernetes with persistent volumes.
  • Integration of external services: object storage, SMTP, and LDAP.
  • Geo replication for multi-region disaster recovery.

Repository and Project Management

  • Groups, subgroups, and project hierarchy structures.
  • Merge request workflows, code review processes, and approval rules.
  • Issue boards, epics, and milestones for Agile planning.
  • Wiki, snippets, and release management tools.

CI/CD Pipeline Engineering

  • Syntax, stages, and job dependencies within .gitlab-ci.yml.
  • Runner types: shared, group, and specific runners.
  • Docker executor, Kubernetes executor, and autoscaling capabilities.
  • Artifact caching, registry publishing, and deployment stages.

Security Scanning

  • SAST, DAST, dependency scanning, and container scanning.
  • Secret detection and license compliance checks.
  • Vulnerability dashboards and remediation tracking.

Authentication and Authorization

  • LDAP, SAML, and OpenID Connect for Single Sign-On (SSO).
  • Two-factor authentication and personal access tokens.
  • IP allowlisting and audit event logging.

Registry and Package Management

  • Container registry: authentication, cleanup policies, and replication.
  • Package registry support for Maven, npm, PyPI, and Conan.
  • Generic package uploads for internal artefacts.

Monitoring and Scaling

  • GitLab Exporter metrics and Grafana dashboards.
  • Database tuning and PgBouncer connection pooling.
  • Horizontal scaling of web, API, and Sidekiq nodes.
  • Backup strategies: rake tasks, object storage, and restore verification.

Requirements

  • Advanced Linux system administration skills and foundational knowledge of Ruby/Go.
  • Understanding of CI/CD principles, container orchestration, and Git workflows.
  • Hands-on experience with PostgreSQL and Redis in large-scale environments.

Audience

  • Enterprise DevOps teams looking to migrate away from GitLab.com or GitHub Enterprise.
  • Organisations requiring full sovereignty over their DevSecOps toolchain.
  • Regulated industries necessitating on-premise CI/CD and registry solutions.
 21 Hours

Custom Corporate Training

Training solutions designed exclusively for businesses.

  • Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
  • Flexible Schedule: Dates and times adapted to your team's agenda.
  • Format: Online (live), In-company (at your offices), or Hybrid.
Investment

Price per private group, online live training, starting from 3900 € + VAT*

Contact us for an exact quote and to hear our latest promotions

Testimonials (1)

Provisional Upcoming Courses (Contact Us For More Information)

Related Categories