Petes Linkedin Blog

It's important to recognize that world events that cause global unrest and uncertainty can lead to an increase in cyberattacks. The GitLab Security department would like to remind our community of some suggested security hygiene measures that users should consider implementing to better protect themselves and reduce risk for their organizations, whether you are a GitLab.com or self-managed user. You may have seen coverage of recent cyber attacks in the press focused on the theft of private source code repositories that demand a ransom to prevent their public disclosure. While specific details on how these attacks were successful are not publicly available, our experience and various threat intelligence activities tell us that credential spraying, phishing, malware, and even attempting to purchase insider access are the most likely tactics in use. Credential spraying is when an attacker uses password lists paired with known username lists to try and brute force accounts. This r...

It is possible to use GitLab as a best-in-class GitOps tool, and we are going to show you how. This is the seventh post in a series of easy-to-follow tutorials. The posts focus on different user problems, including provisioning, managing a base infrastructure, and deploying various third-party or custom applications on top of them. Read the previous posts: Here's how to do GitOps with GitLab Infrastructure provisioning with GitLab and Terraform Connect with a Kubernetes cluster How to tackle secrets management The CI/CD Tunnel Auto DevOps In this article, we will look at how to connect an application project to a manifest project for controlled, GitOps-style deployments. Prerequisites This article builds upon the previous tutorials in this series. We will assume that you have a Kubernetes cluster connected to GitLab using the GitLab Agent for Kubernetes, and that you understand the basics of GitLab CI/CD . If this is not the case, I recommend following the previous art...

If it’s time to add to your skill set and improve your DevOps career, a new programming language is always a good choice, but a fundamental understanding of your company’s business might be better. Spending time to understand the “business side” isn’t just a nice-to-have – it can literally be the difference between remaining an individual contributor or moving into management. It’s so important that in our 2021 Global DevSecOps Survey, respondents ranked “subject matter expertise” as one of the top skills they’d need for their future DevOps careers. If you plan to stay a pure technologist and don’t want to manage anyone else or engage in strategy development, you can stop reading now. But if you want to jumpstart your DevOps career, be prepared to put in a couple of hours each week on the following six areas of subject matter expertise. (This is all while staying current with your tech skills , of course.) Enlist your HR department, your manager, and your mentor(s) for information an...

Today we are releasing version 14.8.4 for GitLab Community Edition and Enterprise Edition. This version resolves a number of regressions and bugs in this month's 14.8 release and prior versions. GitLab Community Edition and Enterprise Edition Pass issue ID to merge request creation form Detect and fix artifacts with backfilled expire_at Enable feature flags to resume artifact removal on self-managed Update OpenSSL to v1.1.1n Update OpenSSL to 1.1.1k-1+deb11u2 for Container Native GitLab Important notes on upgrading This version does not include any new migrations, and for multi-node deployments, should not require any downtime . Please be aware that by default the Omnibus packages will stop, run migrations, and start again, no matter how “big” or “small” the upgrade is. This behavior can be changed by adding a /etc/gitlab/skip-auto-reconfigure file, which is only used for updates . Updating To update, check out our update page . GitLab subscriptions Access to Git...

This blog post and linked pages contain information related to upcoming products, features, and functionality. It is important to note that the information presented is for informational purposes only. Please do not rely on this information for purchasing or planning purposes. As with all projects, the items mentioned in this blog post and linked pages are subject to change or delay. The development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc. Today, GitLab is excited to announce that our partner TestifySec has integrated their Witness open-source tool into GitLab allowing us to take another step along our Secure Software Supply Chain Direction . Secure software supply chain An emerging concern in the software development space is being able to secure your software supply chain, an important element of which is documenting the entire supply chain and development progress by creating a chain of custody starting from c...

Obsidian.md is a "knowledge base" application that uses plain text Markdown files stored in a local folder to organize your notes. The product has been growing in popularity, partly because of how extensible it is. There are a lot of community built plugins to help users configure the application to support their specific workflow. There are many people that use Obsidian to write their blog posts. Obsidian offers a paid service to publish your notes directly and is completely compatible with features Obsidian offers. I suggest you support the Obsidian developers if their product works for you. If you are looking for an alternative way to publish, this blog post provides a tutorial for how to publish your notes using GitLab Pages. You can find an Obsidian.md example in this demonstration project which deploys a GitLab Pages site . Introduction to Obsidian.md Obsidan.md , at it's core, is an application that helps manage your markdown files. You can download the appli...

Today we are releasing version 14.8.3 for GitLab Community Edition and Enterprise Edition. This version resolves a number of regressions and bugs in last month's 14.8 release and prior versions. GitLab Community Edition and Enterprise Edition Ensure cleanup job artifacts task does not include pipeline artifacts Be specific that default.md is not case-sensitive Fix handling of resource iteration events when deleting a User Fix rake task to setup the Geo tracking database Fix startup crash in Puma single mode Removes advice not to mix p/c with compliance pipes Move postcss to dependencies Doc: Update repository signing key expriation date Important notes on upgrading This version does not include any new migrations, and for multi-node deployments, should not require any downtime . Please be aware that by default the Omnibus packages will stop, run migrations, and start again, no matter how “big” or “small” the upgrade is. This behavior can be changed by adding a /etc/...