Posts

Showing posts from September, 2020

Leading SCM, CI and Code Review in one application

Image
GitLab enables streamlined CI, code reviews and collaboration at proven enterprise scale, making development workflows easier to manage and minimizing context switching required between tools in complex DevOps toolchains. Users can release software faster and outpace the competition with the ability to quickly respond to changes in the market. Watch this short video (3 minutes) to see a demo of the seamless flow developers having when using SCM, CI and Code Review in GitLab. Cover image by NESA by Makers on Unsplash from GitLab https://ift.tt/36lE0t7 #GitLab #DevSecOps

How to easily launch GitLab through cloud marketplaces

Image
Today almost every enterprise in the world moved at least some of its mission-critical workloads into public cloud environments, making it increasingly important that customers can easily deploy and manage their software in any cloud. All of the major cloud vendors have introduced marketplaces where customers can quickly deploy applications into their cloud computing infrastructure. Bitnami , now part of VMware, has long partnered with the leading cloud vendors to provide a library of open source software in their marketplaces that is always up-to-date, packaged using best practices, and completely free to end users. Bitnami and GitLab worked together for years on publishing GitLab Community Edition (CE) as part of this library. The Bitnami and GitLab partnership advantage GitLab CE provides value to millions of organizations and community contributors, and this has only been enhanced by our partnership with Bitnami. By taking the GitLab CE open source code and packaging it in a wa...

Gitter lands new home in Matrix with Element

Image
Gitter, the open source chat and networking platform , has been sold to secure chat application company Element which will continue to support and invest in the service and the user communities going forward. As many of you are aware, GitLab has been focused this year on driving efficiency with a goal of extending our depth in our core product categories. That focus led us to look for a buyer for Gitter that could increase investment required to serve developers. With Element’s acquisition of Gitter, GitLab has more bandwidth to devote to our core business and Gitter will continue to have opportunities to thrive. “A great project chat is an essential element of most open source projects and Gitter is the leading open source solution,” says Sid Sijbrandij , CEO, GitLab. “Under GitLab, Gitter’s community has grown to 1.7M users who have also contributed to improving the product for everyone. We are happy that Gitter will now have a fantastic home with Element. They have the momentum t...

What went down at the Q3'2020 GitLab Hackathon

Image
   This blog post is Unfiltered    The GitLab community gathered on September 2-3 for the Q3 Hackathon and once again the GitLab Community set an impressive Hackathon record with 313 MRs submitted! What did we accomplish? This opening line almost needs to be a place holder for Hackathon recaps, but the GitLab community is setting new heights with each iteration. I love seeing the chart below that shows an impressive growth in wider community contributions especially over the past 4 Hackathons. Once again, there were a lot of frontend/UX related epics that wider community members contributed to. A good example was for migration of Pajamas components and the Hackathon helped chip away at more than 1,000 issues related to this migration. One of the feedback from the previous Hackathon was to also have a plenty of backend-related issues for the Hackathon, and I want to thank many GitLab team members who helped populate the list of suggested Hackathon issues with ...

Start contributing to GitLab today

Image
   This blog post is Unfiltered    At GitLab, everyone can contribute . This has been our mission from day one, since GitLab started as –and is still– an open-source project. We believe that, when consumers become contributors, it benefits everyone: GitLab the product, GitLab the company, GitLab the community as well as all GitLab users all around the world. We already merged more than 7,700 “community contribution” merge requests from our wider community (at the gitlab-org group level). Merge requests from community members not employed by GitLab (aka from the GitLab wider community) Contributing tracks Now, it's your turn to contribute and improve GitLab! Since not everyone share the same interests nor competencies, we have multiple tracks to ensure everyone can contribute: Development (new features, bug fixes, performance improvements) Documentation addition, improvements, and fixes Translations UX design Project templates When you're ready, simp...

Our top tips for better bug bounty reports, plus a hacker contest!

Image
We recently wrote an article with tips on how to build and run a successful bug bounty program in the hopes that the processes and practices we’ve built would help other organizations go from zero to sixty as quickly as possible. But, the truth is, a bug bounty program will be a non-starter if you can't attract talented security hackers to join you. The reporters in our program bring an immense depth and breadth of expertise and research, represented in the unique and innovative findings they deliver and the thoughtful reports they submit. 🎉 For these reasons and more, we’re excited to announce that we’re once again holding a community hacking contest! See more details below and we look forward to your contributions! 🚀 But when we think about the reports that researchers submit to our program, questions come up. What makes a report stand out, makes it helpful, makes it…for lack of a better word…good? We asked two of our Application Security engineers, who work to triage, in...

Need DevOps buy-in? Here's how to convince stakeholders

Image
We know that DevOps is key to staying nimble in an increasingly competitive marketplace, but chances are your colleagues in finance or marketing aren’t as well-informed about software development. One of the major challenges technology teams embedded in non-tech organizations face is convincing key business stakeholders to invest in cutting-edge methodologies such as DevOps. Oftentimes, this challenge comes down to ineffective communication and misaligned incentives. "Unfortunately, the divide between these incentives and the misalignment in these incentives is not exclusively held between developers and operators, the similar divide exists between the business and IT, in fact, in the business, they may not even be able to tell the difference between developers and operators, it's all IT to them," said Nathen Harvey , Developer Advocate from Google, at GitLab Virtual Commit. "Much like from my perspective, it's just the business: finance, marketing, accounting,...

GitLab Patch Release: 13.4.1

Image
Today we are releasing version 13.4.1 for GitLab Community Edition and Enterprise Edition. This version resolves a number of regressions and bugs in this month's 13.4 release and prior versions. GitLab Community Edition and Enterprise Edition Revert required encryption on CI runner tokens Fix missing VSA request parameters Notification icons: Render empty string for "custom" setting Add missing fa- icons for file_type_icon_class Allow Unleash Clients to Request Feature Flags for Private Repositories Important notes on upgrading This version does not include any new migrations, and should not require any downtime. Please be aware that by default the Omnibus packages will stop, run migrations, and start again, no matter how “big” or “small” the upgrade is. This behavior can be changed by adding a /etc/gitlab/skip-auto-reconfigure file, which is only used for updates . Updating To update, check out our update page . GitLab subscriptions Access to GitLab Sta...

How to use GitLab’s CI/CD pipeline templates

Image
Writing deployment pipelines from scratch is a real pain in the branch. We want to make the continuous integration experience more automatic so teams can get up and running quickly with GitLab CI/CD. An easy way to get started is with GitLab’s CI/CD pipeline templates. Pipeline templates come in more than 30 popular programming languages and frameworks. We’ll show you how to use these pipeline templates for your specific needs. For an even more automatic continuous integration experience, we also offer Auto DevOps that does much of the legwork for you. Auto DevOps runs on pipelines automatically when a Dockerfile or matching buildpack exists, and identifies dependencies automatically. What are CI pipeline templates? Pipelines are an integral component of both continuous integration (CI) and continuous delivery (CD), and continuous deployment (the other "CD"). A deployment pipeline consists of two things: Jobs, which define what to do. For example, jobs that compile...

Understand the new GitLab Kubernetes Agent

Image
We are happy to share the first iteration of the GitLab Kubernetes Agent with our users and community. The GitLab Kubernetes Agent is the foundation for the next generation of GitLab's Kubernetes integrations. A bit of history GitLab's current Kubernetes integrations were introduced more than 3 years ago. Its primary goal was to allow a simple setup of clusters and provide a smooth deployment experience to our users. These integrations served us well in the past years but at the same time its weaknesses were limiting for some important and crucial use cases. The biggest weaknesses we see with the current integration are: the requirement to open up the cluster to the internet, especially to GitLab the need for cluster admin rights to get the benefit of GitLab Managed Clusters exclusive support for push-based deployments that might not suit some highly regulated industries A few months ago, the Configure Team at GitLab started going in a new direction to come up with an i...

GitLab 13.4 released with Vault for CI variables and Kubernetes Agent

Image
GitLab 13.4 released with Vault for CI variables, Kubernetes Agent, and Security Center… and we’re bringing feature flags to Starter! At GitLab, we are always focusing on how to help your team reduce risk, increase their efficiency, and accelerate their delivery speed with a platform you love. This month, we’re bringing all sorts of goodness that expands visibility into security, lowers vulnerabilities, improves efficiency, makes the user experience better, and helps your team deploy even faster. We hope that you find these top features, and the 53 other new features packed in this release, useful. Expanded security capabilities True to form, this month’s release adds several capabilities to your GitLab DevSecOps kit. First, secrets stored in HashiCorp Vault can now be injected into CI/CD jobs as part of the build and deploy process. Next, organizations who want to maintain a separation of code deployment duties can promote specific users with Reporter access to the role of Deploy...