GitLab 13.4 combines CI and Vault
TL;DR
GitLab version 13.4 enables secrets managed in Hashicorp's Vault to be injected into the Continuous Integration (CI) process.
Key Facts
With version 13.4, GitLab extends the platform's DevSecOps capabilities with new features.
The integration of direct injection of secrets managed in the Hashicorp Vault into the Continuous Integration (CI) process.
The integration of the new GitLab Kubernets agent (GKA).
The support for automatic version control for new Terraform states files
Integration of GitLab Security Center (formerly GitLab Instance Security Dashboard) with reports and vulnerability settings.
Details
GitLab 13.4 incorporates other enhancements, such as allowing deployment without code access privileges to keep development and deployment tasks separate. In other words, the Deployer role follows the least privilege access concept, enabling developers to accept merge requests and deploy code in secure environments without needing access to change the code itself. This version comes also with enhancements in UX.
Get similar news in your inbox weekly, for free
Share this news:
DevOps and the Alternative Cloud Research Report Insights into the capabilities developers expect from cloud infrastructure providers
Listen to the stories behind the stories and learn new things each week The DevOps FAUNCast
The Cloud Computing Golden Ratio Discover the golden ratio of price to performance
Introducing the DevSecGuide to IaC Download for IaC security research findings, practical DevSecOps tips, and more! Free for FAUN readers.
Sponsor The Chief I/O Get in touch!
Latest stories
Why Your Business Should Connect Directly To Your Cloud
Today, companies make the most use of cloud technology regardless of their size and sector. …
7 Must-Watch DevSecOps Videos
Security is a crucial part of application development and DevSecOps makes it easy and continuous.The …
Top Ways To Optimize Your Cyber Security And Performance Monitoring Tools Using Load Balancing
In this post, you will learn how to optimize your cybersecurity and performance monitoring tools …
SRE: From Theory to Practice | What's difficult about on-call?
We launched the first episode of a webinar series to tackle one of the major …
