Earlier quoted context omitted.
I’m a Gitlab fanboy, but you’re right. We run a medium sized Gitlab instance and wanted to automate a bunch of tasks on it - like you should as a good adherent to DevOps principals. But Gitlab is actively hostile to you building automations on top of it. Every access token is tied to a Gitlab User and every user is charged X$ a month, regardless of if it’s a bot or not. So the end result of this is a single bot user…
They're addressing the lack of service accounts, targeted for 13.1: https://gitlab.com/gitlab-org/gitlab/-/issues/6883
GitLab acquires Peach Tech and Fuzzit
41–50 of 55 posts
Re: GitLab acquires Peach Tech and Fuzzit
#42Gitlab looks more and more like SAP these days. That's not necessarily a bad thing, enterprises out there choose all-in-one solutions because they need tech that covers the most ground with the easiest budget allocation, POC efforts from internal buyers and streamlined consulting at the post-sale effort. But once in, Gitlab, differently from SAP or Salesforce, is customized from around instead of from within. Meaning…
You nailed it. I am personally guilty of creating all kinds of helper tools over GitLab CI/CD madness. This is exactly what is the problem with GitLab - too many features and high complexity and on the other hand, missing some fairly basic and important stuff. And then there is that kubernates fetish... :S I wonder every several weeks what is keeping me on it - is it just sunken cost of my team or there is something…
Re: GitLab acquires Peach Tech and Fuzzit
#43Gitlab looks more and more like SAP these days. That's not necessarily a bad thing, enterprises out there choose all-in-one solutions because they need tech that covers the most ground with the easiest budget allocation, POC efforts from internal buyers and streamlined consulting at the post-sale effort. But once in, Gitlab, differently from SAP or Salesforce, is customized from around instead of from within. Meaning…
“building a solid platform for dev and ops taking code to production” => great, that is a big focus for us!
We already have invested a lot to make this easier, including environments, feature flags, and more. Our direction is on https://about.gitlab.com/direction/ops/#release
What is the top feature you would like to see?
Re: GitLab acquires Peach Tech and Fuzzit
#44Earlier quoted context omitted.
You nailed it. I am personally guilty of creating all kinds of helper tools over GitLab CI/CD madness. This is exactly what is the problem with GitLab - too many features and high complexity and on the other hand, missing some fairly basic and important stuff. And then there is that kubernates fetish... :S I wonder every several weeks what is keeping me on it - is it just sunken cost of my team or there is something…
What are the top 3 basic and important things that GitLab could add?
2. issue relations in core
3. getting a repository file via curl easily (yeah, seriously)
Re: GitLab acquires Peach Tech and Fuzzit
#45Earlier quoted context omitted.
They're addressing the lack of service accounts, targeted for 13.1: https://gitlab.com/gitlab-org/gitlab/-/issues/6883
Yep, we want to charge only for people, not bots. Sorry it took a while to resolve this, it was complex.
Until this epic is completed you are charging people full-seat price for automation users which, because of the poorly-scoped token permissions, require multiple “user” accounts to implement securely.
An automation utility in no way delivers the same value as a full time developer and it really shook me to know that this is how you have historically valued bots. It runs counter to everything that you publicise.
Re: GitLab acquires Peach Tech and Fuzzit
#46Earlier quoted context omitted.
What are the top 3 basic and important things that GitLab could add?
1. running CI locally 2. issue relations in core 3. getting a repository file via curl easily (yeah, seriously)
1. This works but not nearly with all functionality.
2. Maybe an options to have related in core and more detailed relations like blocking in a paid version.
3. I’m surprised this isn’t possible already. Is this easy to contribute for anyone?
Re: GitLab acquires Peach Tech and Fuzzit
#47Earlier quoted context omitted.
What are the top 3 basic and important things that GitLab could add?
1. running CI locally 2. issue relations in core 3. getting a repository file via curl easily (yeah, seriously)
Re: GitLab acquires Peach Tech and Fuzzit
#48That's cool, but I wish they'd polish the base experience a little bit first. As well as stop this 'everything on kubernetes' thing. Right now I need kubernetes for at least half of all Gitlab functionality, and I have no doubt this latest acquisition will be the same thing.
Re: GitLab acquires Peach Tech and Fuzzit
#49Gitlab looks more and more like SAP these days. That's not necessarily a bad thing, enterprises out there choose all-in-one solutions because they need tech that covers the most ground with the easiest budget allocation, POC efforts from internal buyers and streamlined consulting at the post-sale effort. But once in, Gitlab, differently from SAP or Salesforce, is customized from around instead of from within. Meaning…
IMO acquiring a small business does not shift focus away from other parts of the product. Peach Tech and Fuzzit now have the support of the rest of GitLab and that benefits everyone. I don't know the headcount of the two companies that were acquired but I would think this would be equivalent to spinning off a small team to focus on an area (fuzzing) that could add value to the greater software community.
The idea that these companies were acquired to check a checkbox is disrespectful to the work that they were doing before the acquisition.
When GitLab decided to give the `.gitlab-ci.yml` a try it was a risk. It seems to have paid off because others started to copy them. Introducing fuzzing to be part of the devops life cycle could be thought of the same way.
> Focus on the platform, enabling integrated customization and implementation robustness while orchestrating the outside moving parts and a great plugin ecosystem. Then get that certification program going strong. Right now your competitor Github "are belong to" Microsoft, and MS, better or worse, sure can do the platform thing for the many sizes of businesses where the meat of your revenue is truly coming from.
It sounds like you have some amazing ideas. Contribute them https://gitlab.com/gitlab-org/gitlab/-/issues/new. The issue tracker isn't the equivalent of `/dev/null`. Community contribution is the core of GitLab. Everyone can contribute.
GitHub might host a lot of open source but GitLab is open source.
Re: GitLab acquires Peach Tech and Fuzzit
#50Also on https://devops.com/gitlab-adds-fuzz-testing-to-devsecops-too... and https://siliconangle.com/2020/06/11/gitlab-acquires-peach-te... We think that Fuzzing will grow in importance as security gets more focus in the software development process.
Anyone has any stats on the adoption of security scanning in general for devops projects? and fuzzing in particular?