Efficient DevSecOps Pipelines in a Cloud-Native World

Continuous integration and delivery/deployment helps speed up development and review workflows. Developers can focus on code reliably tested in different environments. At some point, things are stuck. Broken pipelines, resource hungry jobs, security leaks and broken dependencies make production deployments impossible.
Who can fix production deployments fast? Learn how Dev meets Sec and Ops and hear best practices on efficiency, iteration and insights.

This workshop uses GitLab as a CI/CD platform and demonstrates basic and advanced best practices for workflow optimization. This includes auto-scaling, parallelization, hidden gems in DSL configuration and many more YAML tips and tricks. We’ll also dive into cloud native deployments and tackle the questions on automated deployments with and without Kubernetes and Infrastructure as Code use cases for Terraform and Ansible. Observability and quality gates with SLOs and secure deployments help shape the learning curve for future production deployments.

Basic GitLab, CI/CD and container knowledge is recommended (for example, following this workshop: https://gitlab.com/gitlab-de/workshops/gitlab-cicd-go-tanuki-workshop)

Michael Friedrich is a Developer Evangelist at GitLabfocusing on backend development, ops and infrastructure management. He studied Hardware/Software Systems Engineering and moved into a role on DNS and monitoring development at the University of Vienna and ACO.net. Michael was a maintainer of Icinga, an OSS monitoring software, for 11 years before joining GitLab. He loves engaging with new technologies in the Monitoring/Observability, CI/CD and security area and regularly speaks at events and meetups. Current projects involve Prometheus exporters, tracing and pipeline efficiency. Michael hosts a weekly technology coffee chat called “#everyonecancontribute cafe” on everyonecancontribute.com.

This post is also available in: German