GitLab 13.11 lanzado con Agent for Kubernetes y Pipeline Configuration for Compliance

. DevOps-, . GitLab Kubernetes Agent GitLab.com, GitLab, GitLab.com . ( GitLab « »), , . , , , . 50 !

, . GitLab Kubernetes Agent GitLab Kubernetes, GitLab.com. GitLab, . , Kubernetes. , RBAC .

- , , . , , PCI, HIPPA . GitLab, . GitLab . , , .

, — , , .

. . . CI/CD, DORA 4, ; , . , DevOps , , DevOps GitLab.

Semgrep , GitLab SAST. . , SAML Git-. , , GitLab , . , DevOps.

, ! , , 13.12.

.

MVP — Yogi

Yogi GitLab , , . Yogi , , , . , . vue.js, GitLab.

Yogi MVP — 13.8 30 -, , UX . , Yogi!

GitLab 13.11

GitLab Kubernetes Agent GitLab.com

(SaaS: PREMIUM, ULTIMATE; self-managed: PREMIUM, ULTIMATE) DevOps: Configure

GitLab Kubernetes Agent - GitLab.com! , GitLab, GitLab.com . GitLab Kubernetes Agent — GitLab Kubernetes. pull-, , push-.

Kubernetes , GitLab RBAC- GitLab .

→ GitLab Kubernetes Agent .

(SaaS: ULTIMATE; self-managed: ULTIMATE) DevOps: Manage

, , .

, , , . , , . , , , .

, , , , , . , .

— , .

, !

→ .

(SaaS: PREMIUM, ULTIMATE; self-managed: PREMIUM, ULTIMATE) DevOps: Manage

GitLab , GDPR, HIPAA, PCI-DSS, SOC 2 SOX, . . , .

→ .

(SaaS: PREMIUM, ULTIMATE; self-managed: PREMIUM, ULTIMATE) DevOps: Monitor

. . - , ( ), .

. , . GitLab . , GitLab HTTP, .

→ .

(self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Manage

GitLab , . , , ; , , . , .

Diego Louzán Siemens. Diego. !

→ .

(self-managed: PREMIUM, ULTIMATE) DevOps: Manage

, , . GitLab API, .

export



GitLab, CSV-, , , , . .

→ .

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Verify

GitLab CI/CD , . , . . , .

→ .

DORA 4:

(SaaS: ULTIMATE; self-managed: ULTIMATE) DevOps: Release

— DevOps . API , . — , -.

→ .

GitLab + Semgrep: SAST

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Secure

SAST (Static application security testing, ) GitLab . . . , , , , .

GitLab . Semgrep, r2c. . Semgrep , : .

Semgrep , GitLab SAST. Semgrep 1000 , .

lint- SAST Semgrep. , GitLab Semgrep , . r2c Semgrep. Semgrep Semgrep JavaScript, TypeScript Python.

, SAST GitLab Semgrep. GitLab Semgrep, , .

→ GitLab SAST .

CA release CLI

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Release

, GitLab , release CLI , . GitLab 13.11 (Certificate authority, CA) ADDITIONAL_CA_CERT_BUNDLE



--additional-ca-cert-bundle



. , INSECURE_HTTPS



--insecure-https



, , SSL-, .

→ CA .

-

(SaaS: PREMIUM, ULTIMATE; self-managed: PREMIUM, ULTIMATE) DevOps: Plan

, , . , - ( GitLab « »). .gitlab



, , . , .

→ .

needs optional DAG-

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Verify

(Directed acyclic graph, DAG) GitLab CI/CD needs



, . rules



, only



except



, , . , needs



, , .

optional



needs



DAG-. , , needs



. , needs



, . , rules



, only



except



.

→ optional needs .

(SaaS: PREMIUM, ULTIMATE; self-managed: PREMIUM, ULTIMATE) DevOps: Configure

, . , . .

. ( GitLab «») , .

→ CI/CD .

CVE ID GitLab

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Secure

GitLab , . 2020 GitLab CVE Numbering Authority (CNA) IT- CVE GitLab, , GitLab.com.

GitLab 13.11 CVE GitLab . , GitLab.com, CVE « CVE» . GitLab CVE, .

, , . , GitLab.com. , .

→ ID CVE .

GitLab OpenShift Kubernetes GitLab (-)

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE)

GitLab , OpenShift. MVP GitLab Operator, GitLab Kubernetes OpenShift. - . ; GitLab Kubernetes OpenShift, GitLab Helm chart - . GitLab Operator .

→ GitLab .

GitLab 13.11

Developer+

(SaaS: PREMIUM, ULTIMATE; self-managed: PREMIUM, ULTIMATE) DevOps: Manage

— , , . , , , . , . , , .

> (Security & Compliance > Audit Events) . , . , , , . .

→ .

GPG

(SaaS: ULTIMATE; self-managed: ULTIMATE) DevOps: Manage

GPG . , GitLab, , , GitLab.

. , , . .

→ GPG .

OAuth

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Manage

OAuth . OAuth . OAuth.

13.11 Jonas Wälter Siemens!

→ .

(SaaS: PREMIUM, ULTIMATE; self-managed: PREMIUM, ULTIMATE) DevOps: Plan

( GitLab « ») . ( GitLab «») , « ».

→ .

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Create

GitLab 30 , , .

, , , .

→ GitLab .

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Create

GitLab 13.11, , (cherry-pick) - . (Pick into project) , , > (Options > Cherry-pick) .

, .patch



, .

.

→ .

force push

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Create

force push



Git, . force push



, , .

GitLab 13.11 force push , « » (Allowed to push) force push



.

→ force push .

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Create

GitLab . , , .

, , , . , .

.

→ .

GitLab Workflow VS Code

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Create

GitLab Workflow Visual Studio Code (VS Code), GitLab. , , , .

GitLab Workflow VS Code , . , GitLab.

→ VS Code .

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Verify

— CI/CD. , .gitlab-ci.yml



. , .

→ .

CI/CD

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Verify

, CI/CD, API . CI/CD CI_COMMIT_AUTHOR



.

Craig Andrews !

→ CI/CD .

SemVer

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Package

GitLab . , , GitLab CI/CD .

GitLab 13.11 GitLab (SemVer). , SemVer .

GitLab 13.11 , SemVer . , .

→ .

Composer v2 GitLab

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Package

Composer , PHP- GitLab. Composer (v2) , , runtime-. .

, GitLab Composer v2. , - GitLab. MVC metadata-URL



. GET group/:id/-/packages/composer/p2/:package_name



, . Composer , %package_name%



, URL.

, providers-api



list-api



. .

→ Composer v2 .

Composer

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Package

Composer: source



dist



. Composer dist



zip



-. . --prefer-source



, Composer Git, zip



. , Git- .

Composer prefer-source



preferred-install



. - GitLab Composer.

, Composer . , prefer-source



, : composer update --prefer-source



.

→ Composer .

OpenShift SAST

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Secure

13.3 GitLab Red Hat OpenShift. GitLab . 13.11 GitLab SAST OpenShift. .gitlab-ci.yml



SAST , . , OpenShift. , , ​​ .

→ SAST .

Kotlin SAST

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Secure

13.5 SAST GitLab , Android, Kotlin. Kotlin . GitLab 13.11 GitLab Core Hannes Rosenögger (@haynes), Java- Spotbugs Kotlin. Kotlin Java , GitLab SAST .

→ GitLab SAST .

Semgrep Python, JavaScript TypeScript

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Secure

Semgrep GitLab SAST -, Semgrep Python, JavaScript TypeScript. Python, JavaScript TypeScript, , .

• Semgrep Python Bandit, Python. , , .
• Semgrep JavaScript TypeScript ESLint. ESLint, Semgrep.

, , SAST 'gitlab-ci.yml ', Semgrep SAST. , , . . .

→ GitLab SAST .

SAST

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Secure

SAST ( ) GitLab , GitLab . , 13.11. , .

• ESLint 7.23.0: -, .
• MobSF 3.4.0: -, .
• njsscan 0.2.3: -, . : njsscan 25 5 ; Sequelize.
• gitleaks 0.2.3: -, . : PyPI GitHub.

GitLab SAST (SAST.gitlab-ci.yml), , . , CI, CI.

→ SAST .

Prometheus, GitLab — Kubernetes

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Configure

GitLab, GitLab, , Prometheus . , GitLab, .

Prometheus Kubernetes GitLab , . . - , GitLab, Prometheus, GitLab.

→ Prometheus .

Geo

(self-managed: PREMIUM, ULTIMATE)

Geo . , . Geo , .

, .

Geo Geo, .

→ Geo .

DevOps

(SaaS: ULTIMATE; self-managed: ULTIMATE) DevOps: Manage

DevOps , GitLab DevOps . , . DevOps , , DevOps GitLab.

→ DevOps .

SAML Git

(SaaS: PREMIUM, ULTIMATE) DevOps: Manage

GitLab , SAML Git. , , , GitLab SAML. SAML GitLab. Git CLI SSO SAML. , Git Group SAML SSO , - SAML Git .

→ SAML .

SSH

(self-managed: ULTIMATE) DevOps: Manage

SSH, , , .

GitLab , - . , , .

→ SSH GitLab .

(SaaS: ULTIMATE; self-managed: ULTIMATE) DevOps: Plan

, , . , !

CI/CD, .

→ .

-

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Create

, -, . GitLab , , .

. -.

Lee Tickett !

→ .

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Create

, . , .

, #L



URL . , . , Web IDE !

, URL , #L87-98



, () .

→ .

Jira Connect

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Create

GitLab.com Jira , , .

→ Jira Connect .

-

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Create

- . GitLab , - - . , , -.

GitLab -, -. , -, .

→ - .

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Verify

. - , , .

-, , , .

→ .

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Package

GitLab . GitLab, , , .

GitLab 13.11 , . . , - .

GitLab 13.11 , URL- . , .

→ .

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE) DevOps: Release

GitLab 13.2 CI/CD . , . ; GitLab 13.11 . , .

→ .

Geo

(self-managed: PREMIUM, ULTIMATE)

Geo , Geo, . Geo . , . Geo , .

→ Geo .

(SaaS: FREE, PREMIUM, ULTIMATE; self-managed: FREE, PREMIUM, ULTIMATE)

.

UI Polish . , , .

GitLab 13.11 , , ( GitLab «») ! GitLab 13.11:

• , «» «» .
• , .
• .
• UX / "CI/CD".
• .
• .
• "CI Lint" .

GitLab 13.11.

---

/ : GitLab 13.11 released with Kubernetes Agent and Pipeline Compliance.

cattidourden, maryartkey, ainoneko rishavant.