July 2023 Summaries

GitLab's commitment to open source is highlighted by its efforts to simplify contributions through the GitLab Development Kit (GDK) and the new Remote Development workspaces, which are currently in beta. This initiative aims to address resource constraints faced by contributors by leveraging cloud-based environments, particularly Kubernetes clusters, to streamline the setup and operation of GDK. The process involves setting up a workspace with a .devfile.yaml, configuring the necessary containers, and utilizing pre-built images to reduce the time and resources required for development. Challenges such as memory limitations during repository cloning are addressed through optimized configurations, and contributors are guided to generate necessary configuration files like gdk.yml for proper workspace functionality. While the setup process can be complex, involving scripts and pre-seeded databases, the ultimate goal is to enhance the ease and speed of contributing to GitLab, fostering a more inclusive environment for developers.

GitLab Flow and GitLab Duo offer a comprehensive approach to implementing DevSecOps practices, enhancing productivity, code quality, and security while streamlining the software development lifecycle. GitLab Flow provides a structured workflow that spans the entire DevSecOps lifecycle, incorporating planning, code development, security scanning, continuous review, and deployment, with an emphasis on feedback loops to optimize processes. GitLab Duo supplements this with AI-powered capabilities that assist in tasks such as issue description generation, code suggestions, and vulnerability resolution, facilitating collaboration and enhancing efficiency. These tools enable organizations to shift security left, thereby identifying vulnerabilities early in the development cycle, and offer advanced deployment options like continuous delivery and continuous deployment. By leveraging dashboards and metrics, GitLab Flow supports continuous improvement and optimization of applications and processes, making it a valuable framework for organizations looking to integrate AI-driven capabilities into their DevSecOps strategies.

GitLab places a strong emphasis on Environmental, Social, and Governance (ESG) and Diversity, Inclusion, and Belonging (DIB) as essential components of its business and culture, even prior to the explicit use of these terms. The company has recently published its first ESG and DIB reports to enhance transparency and detail its commitment to these areas, reflecting feedback from customers, investors, community members, and team members. Key initiatives include increasing diversity and representation across job grades, assessing greenhouse gas emissions from remote work and business operations, fostering talent engagement, ensuring robust information security and data privacy, promoting responsible product development, and adhering to high standards of business ethics. GitLab conducted a double materiality assessment to identify areas where it can have the greatest impact, focusing on six main topics: DIB, greenhouse gas emissions, talent engagement, information security and data privacy, responsible product development, and business ethics. The company is committed to ongoing progress and stakeholder updates in these areas.

GitLab is expanding its integration of AI/ML into its DevSecOps platform by introducing new plugins for JetBrains and Neovim, which support GitLab Duo Code Suggestions for both GitLab SaaS and self-managed environments. This effort follows previous expansions into Visual Studio and Visual Studio Code, aiming to enhance developer productivity by providing inline code suggestions across various development environments. The GitLab for JetBrains plugin is available on the JetBrains Plugin Marketplace, while the Neovim plugin can be found on GitLab, both offering configuration options to customize user experience. GitLab plans to continue improving the GitLab Duo Code Suggestions experience, including the development of a GitLab Language Server to standardize and accelerate IDE extension iterations, ensuring broader accessibility even without official extensions. The company is committed to enhancing the software development lifecycle with AI-assisted features and encourages feedback through its ongoing blog series, which offers updates, tutorials, and demos.

GitLab, Inc. expresses its support for open source and artificial intelligence, highlighting its investment in AI within its DevSecOps platform. The company discusses the BigScience Open RAIL-M license, which is part of a new wave of AI licenses aimed at promoting responsible usage by imposing behavioral restrictions on AI models. While the license places ethical considerations at the forefront by prohibiting harmful applications, GitLab points out that RAIL-M is not truly open due to its use-based restrictions, which could conflict with future regulatory laws. Despite its imperfections, RAIL-M signals a commitment from the AI community to prioritize ethics and encourages both open-source and proprietary entities to address potential AI-related harms. The initiative is seen as a means to foster a culture of informed sharing and ethical responsibility within AI development and usage.

DevSecOps represents an advanced iteration of DevOps, integrating security throughout the software development lifecycle and fostering collaboration across development, operations, and security teams. By adopting DevSecOps, organizations can achieve faster software delivery without compromising on quality or security, enhancing overall business results and ROI. Key advantages include reduced costs from consolidating toolchains, increased productivity and time-to-market, improved security measures that protect brand integrity, and streamlined compliance through unified access controls and audits. A comprehensive DevSecOps platform centralizes features, security tools, and automation, which helps reduce technology spending while maintaining competitive edge and customer trust. This integration not only mitigates compliance and security breach risks but also provides executives with greater insights into operational efficiencies, offering a compelling case for its adoption in business strategy.

GitLab's 2023 Global DevSecOps Report highlights the growing significance of artificial intelligence (AI) and machine learning (ML) in enhancing developer productivity and operational efficiency, with a particular focus on the capabilities of GitLab Duo. Generative AI, integral to this advancement, accelerates development cycles, streamlines code reviews, and fosters secure software development. GitLab Duo employs large language models (LLMs) to offer features such as Code Suggestions, which improve developer experience by providing accurate suggestions within integrated development environments (IDEs), and the "explain this code" experiment, which clarifies code behavior in natural language. Additional features include AI-generated tests for code changes, vulnerability recommendations for swift remediation, and tools for improved code review processes, such as merge request summaries and suggested reviewers. These AI-driven enhancements are designed to reduce development time, bolster productivity, and ensure the secure delivery of software, while experiments like GitLab Duo Chat and AI-assisted merge request descriptions are underway to further streamline the development lifecycle.

GitLab's second annual Partner Leadership Summit in June celebrated its channel, technology, and cloud partners by presenting the Partner Leadership Awards, including new and established categories like Partner of the Year and Emerging Partner of the Year. The event emphasized GitLab's commitment to fostering collaborative and mutually beneficial relationships, encouraging partners to align with its values of Collaboration, Results, Efficiency, Diversity, Inclusion & Belonging, Iteration, and Transparency (CREDIT). Key awardees included SHI Stratascale as Partner of the Year for its consultancy-driven approach to DevSecOps transformations, NextLink Labs as Emerging Partner of the Year for its innovative practices, and Flywheel Data, Carahsoft, and Sirius Federal in public sector categories for their significant contributions to GitLab's mission. The awards highlighted the partners' alignment with GitLab's values and their success in helping clients leverage the DevSecOps platform to meet diverse technological and operational needs.

Corporate shadow programs, such as those at GitLab, offer employees the opportunity to accompany and learn from senior colleagues, including executives, during their regular workdays. These programs provide insights into decision-making processes, foster collaboration with leadership teams, and offer personalized learning opportunities through real-time experiences and interactions. Participants gain a deeper understanding of the organization's operations and values, such as collaboration, efficiency, and transparency, while building cross-functional relationships and acquiring new skills. By allowing employees to observe and engage with leadership, shadow programs help demystify executive roles, enhance workplace inclusivity, and can inspire participants to pursue leadership positions themselves.

The blog post details the setup and management of cloud-based development environments using Kubernetes and GitLab, emphasizing the benefits of streamlined developer onboarding and increased team efficiency. It guides users through the process of preparing infrastructure for on-demand cloud-based environments, including managing Kubernetes clusters across various cloud providers like Google Kubernetes Engine (GKE), Amazon Elastic Kubernetes Service (EKS), and Azure Managed Kubernetes Service (AKS). The post explains how to create custom workspaces and container images while adhering to cloud-native best practices, such as using the GitLab agent for Kubernetes and OAuth GitLab app for secure, reproducible setups. It also covers troubleshooting tips, certificate management, and the integration of GitLab's Web IDE for enhanced development processes. The tutorial highlights the importance of maintaining a consistent development environment to facilitate efficient collaboration and bug reproduction, encouraging users to share their experiences and contribute to the community.

Convincing business executives, particularly those in the C-suite, to adopt DevSecOps requires a keen understanding of their priorities and the ability to translate technical benefits into business gains. It's essential to tailor your communication to the audience, whether they prefer detailed information or high-level overviews, and to align the discussion with their specific business goals, such as cost reduction, increased efficiency, and improved security. Finding an executive champion, preparing a strategic plan, and focusing on how DevSecOps can enhance visibility and collaboration across the company are key strategies. Avoiding technical jargon and emphasizing the financial benefits, including cost savings and return on investment, can significantly bolster your case. Understanding the company's financial landscape and strategic goals, and continuously educating oneself about business needs, can improve one's influence within the organization and contribute to personal career advancement.

Migrating from GitHub to GitLab can be a straightforward process using GitLab's built-in project import functionality, which simplifies transferring repository data, issues, pull requests, and more. The GitLab platform offers a user-friendly interface for importing projects directly from GitHub by authenticating with a GitHub account and selecting the data to migrate. After importing, GitLab allows users to manually migrate GitHub Actions to GitLab CI/CD pipelines, using a syntax that mirrors GitHub's but adapted for GitLab's environment. The transition involves creating a `.gitlab-ci.yml` file to define pipeline stages and jobs, accommodating tasks such as unit tests, linting, and smoke tests. GitLab supports importing from various other platforms, including Bitbucket and Jira, and provides comprehensive documentation to facilitate migration, making it an efficient choice for DevSecOps teams aiming to unify their workflows on an AI-powered platform.

In April 2023, the Fedora Project community celebrated the launch of their new Fedora Project websites, a product of extensive collaboration among various teams, including Fedora Websites and Apps, Fedora Infrastructure, and Fedora Marketing. This initiative aimed to revamp not only the websites but also the underlying workflows by adopting GitLab, which streamlined processes, enhanced operational efficiency, and aligned community practices with industry standards. By transitioning the technology stack to use tools like NuxtJS and NetlifyCMS, and employing GitLab's CI/CD capabilities, the team automated deployment workflows and simplified contribution processes, reducing the risk of volunteer burnout and attracting more contributors. These efforts fostered a more inclusive environment, inviting a wider range of contributors to participate in documenting and translating content, thus supporting Fedora Project's mission to maintain a sustainable and engaging community for open-source development.

GitLab is revolutionizing CI/CD workflows with the introduction of CI/CD components, reusable building blocks that abstract pipeline configuration units, enhancing modularity, reusability, and maintenance simplicity. These components allow developers to create dynamic, versioned CI/CD catalogs, offering flexibility with input parameters for customization across various pipeline stages. GitLab emphasizes the importance of testing components to maintain high-quality standards and ensure reliability, recommending the use of version tags for stability and easy upgrades. The upcoming CI/CD catalog will serve as a centralized repository of curated components, streamlining pipeline configurations and facilitating collaboration among teams. GitLab's commitment to continuous improvement is demonstrated through its internal use and testing of these components, ensuring their practical effectiveness. The CI/CD component catalog, currently in an experimental phase, represents a significant step towards simplifying modern software development, and its official launch is anticipated to unlock new possibilities for efficient and adaptable CI/CD workflows.

GitLab's blog post discusses the integration of AI and machine learning into its DevSecOps platform, focusing on the introduction of GPU-enabled runners to enhance ModelOps and high-performance computing (HPC) capabilities. These runners, available on GitLab.com SaaS, provide accelerated processing power essential for tasks like training large language models and running complex scientific simulations. The post outlines practical examples of using these GPU-enabled runners, such as model training with Python and scientific simulations, highlighting the benefits of improved processing speeds without the need for users to manage their own hardware. Additionally, the blog provides guidance on setting up and utilizing these runners, including the creation of custom Docker images for efficient model training. GitLab aims to expand these capabilities further, addressing current limitations such as timeouts and planning to offer more powerful computing resources in future updates.

Automating the creation and management of GitLab Runners is crucial for optimizing runner fleet operations, especially following the deprecation of the legacy runner registration token. This guide outlines the transition to a new workflow for automating runner setup, highlighting the introduction of reusable runner configurations that group runners with the same settings, thus decluttering the user interface. The process involves creating an access token, using it to create a runner via API calls, and optionally automating runner installation on cloud platforms using infrastructure as code, such as Terraform, to streamline operations. The shift offers enhanced security, easier troubleshooting, and better management capabilities by allowing only the creator or administrators to modify runner configurations, ultimately aiming to integrate this automation cycle into GitLab's product for improved management of runner fleets.

The Good Docs Project aims to enhance software documentation throughout the open source ecosystem by providing templates and resources for developers to effectively create and maintain project documentation. After migrating to GitLab, the community found that using the all-in-one DevSecOps platform streamlined their operations, leading them to join the GitLab Open Source Partners community. By doing so, they are now able to share their expertise and resources with other open source projects on GitLab, fostering a more collaborative environment. The project's members highlight the advantages of unifying planning, development, and testing on a single platform, and how technical writers and editors are developing documentation as code. They have also developed community-focused Git toolchain training on GitLab, contributing to the future of open source development.

In a detailed tutorial, users are guided through setting up GitLab and Flux CD to deploy workloads on Red Hat OpenShift, with an emphasis on using GitOps practices. The tutorial covers the creation of a sample project, a bootstrap Flux installation, and authentication with a project deploy token, culminating in the deployment of an NGINX workload from a GitLab repository via Flux. Key steps include creating personal access tokens, setting up Flux and OpenShift manifest repositories, configuring Flux to sync manifests, and verifying configurations. Users are instructed to install Flux with cluster-admin privileges, either through OperatorHub or CLI, and make necessary adjustments to security contexts. The tutorial provides a comprehensive roadmap for automating deployments, ensuring that any updates to the repository are automatically synced to the OpenShift cluster, thereby illustrating the integration of GitLab with Flux for efficient and continuous delivery in a cloud-native environment.

The rapidly evolving technical landscape has prompted GitLab to undertake the "Beautifying our UI" initiative, which aims to enhance the user experience by making visual and usability improvements to its platform, particularly in the continuous integration and delivery (CI/CD) area. This initiative allows product designers and frontend engineers to collaborate voluntarily, focusing on refining UI elements that may have been previously overlooked due to other priorities. Recent efforts include redesigning the pipeline detail page for better usability, harmonizing badges and link styles to reduce visual noise, and improving navigation by linking runner numbers directly to the runner admin page. These changes involved significant technical challenges, such as refactoring code to improve performance and maintainability, and were guided by user feedback and usage data. The team plans to continue these enhancements, aiming for a more intuitive and efficient user experience.