DevSecOps Solution Resource: Automated Software Delivery

How GitLab approaches the Automated Software Delivery solution including messaging and key resources to help marketing and sales.

Looking for a customer-facing overview of GitLab’s Automated Software Delivery Capabilities?

See Automated Software Delivery

The page below is intended to align GitLab sales and marketing efforts with a single source of truth for our go-to-market efforts around Automated Software Delivery.

Who to contact

Product Marketing	Developer Advocate
Daniel Hom (@danielhom) / Aathira Nair (@anair5)	Itzik Gan Baruch (@iganbaruch)

Background (2 min read)

Automated Software Delivery allows organizations to develop software faster by making teams more productive, unlocking operational efficiencies, accelerating app modernization, and unleashing the value of digital transformation.

From a GitLab capabilities point of view - it includes DevOps essentials like SCM, CI, CD, GitOps, AutoDevOps and Observability

The opportunity is huge. As per the GitLab DevSecOps survey 2022 -

85% of organizations are using 2-10 DevOps tools
69% of organizations would like to consolidate their toolchains
Devs are spending more time than ever before on maintaining or integrating toolchains. Nearly 40% said they spend between one-quarter and one-half of their time on these tasks (more than double the 2021 percentage), while 33% are spending at least half their time and as much as all of their time on toolchain integration and maintenance

Cloud transformation and application modernization is a key CIO initiative for 2022

Automated Software Delivery becomes key to support the increase in cloud instances (microservices and ephemeral instances mean manually setting up, configuring and tearing down these instances is not feasible anymore)

Getting Started

Who to meet / Ideal Customer Profile

The persona interested in application automation is generally different from the persona interested in infrastructure automation and continuous delivery. Application automation interest comes from development or engineering organizations while infrastructure automation and continuous delivery interest comes from the operations, systems, infrastructure, platform and cloud side of the organization.

| | Enterprise | Mid Market | SMB | | - | ———– | ————– | | User Persona | SCM/CI-> Developer, team lead, DevOps Engineer
CD-> DevOps engineer, app operator, sys admin, release manager, platform engineer | SCM/CI-> Developer, team lead, DevOps Engineer
CD-> DevOps engineer, app operator, sys admin, release manager, platform engineer | varies | | Buyer Persona | CIO / CTO at C level
SCM/CI -> Mgr / Director - App Dev
CD -> Mgr / Director - Infra/Ops | CIO / CTO at C level
SCM/CI -> Mgr / Director - App Dev
CD -> Mgr / Director - Infra/Ops | varies | | Tech Stack | Includes GitHub, Perforce, Jenkins, BitBucket, Subversion, ArgoCD, Harness | Includes GitHub, Perforce, Jenkins, BitBucket, Bamboo, Subversion, ArgoCD, Harness OR the absence of a tech stack OR freemium version of GitLab / GitHub | Absence of tech stack OR freemium version of GitLab / GitHub | | Infra / Cloud Provider / Deploy Targets | AWS or GCP or internal data center or Kubernetes | AWS or GCP (or none) or Kubernetes | AWS or GCP (or none) or Kubernetes | | Additional Criteria | - Automation a key initiative
- merger & acquisition
- consolidation of CI-CD solutions
- increased hiring and projects
- hiring new CIO, App Dev, Infra teams | - Automation a key initiative
- increased hiring and projects
- hiring new CIO, App Dev, Infra teams | - increased hiring and projects
- adoption of new cloud/technologies | | Business Driver | - Digital Transformation
- Cloud Transformation
- Application Modernization
- Automated Software Delivery | - Cloud Transformation
- Application Modernization
- Automated Software Delivery | - Cloud Transformation
- Application Modernization
- Automated Software Delivery |

Keywords to listen for

Manual efforts
- including Manual builds, Manual code reviews, Manual peer reviews, Manual testing, manual deployments, manual infrastructure configurations, amongst others.
Employee dissatisfaction
- listen to Repetitive tasks, too much time in managing pipelines, setting up and configuring pipelines, setting up and configuring infrastructure, managing releases
Increase speed / velocity
Cloud native applications
Kubernetes and containers
Multi platform / multi language support
Cloud transformation
Application Modernization

Value discovery

Discovery Questions — Current State: Where’s the pain?

How much of your team’s job is manual? This should help scope interest. Many teams struggle with little or no automation - resulting in inefficiencies, errors and employee dissatisfaction. Key areas of manual effort include - unit testing, performance testing, code review, peer reviews, license checks, manual transfer of application images, manual deploy, manual post deploy testing, amongst others.
How much time is your team spending in configuring, fixing, or maintaining your pipelines compared to doing “real work”? Managing complex pipelines is a real problem. We find that our customers with complicated toolchains have more difficulty managing complex pipelines and supporting integrations. This usually makes implementing and maintaining CI/CD more expensive than originally planned.
Are you able to manage both current and latest technologies with your existing toolset? Moving to cloud or cloud native technologies like Kubernetes requires a different way of operation - their existing toolset may not be built ground up for such transformations and could require hacking a number of fragile integrations together to support.
Are you able to measure key success metrics for your automation? Metrics such as Change Lead Time, Deployment Frequency, Mean Time to Resolution, and Change Failure Rate. This will reveal the lack of integration and traceability across various tools being put together to achieve automation.
Are you able to deploy with confidence? Are you able to have full visibility into the pipeline from idea to production? Are you able to setup your infra, deploy in phases, test, roll back on error - all from a single application?

Discovery Questions — Future State: Where Would You Like to Be?

What does automation success look like? What parts of your SDLC would you have fully automated? This can help uncover areas that they immediately see a pain and can help you identify areas of growth for the customer
What would your team do with the time reclaimed from maintaining pipelines? This provides an opportunity to discuss what true success would look and how freeing resources improves productive value added by the team
What technologies do you see being supported by your CI-CD solution? This can help uncover future technology adoption and drivers for change. They may also have a need to have various technologies being supported by the same solution
What success metrics would you want to showcase? What are the short term metrics and long term metrics? This can help uncover areas of success we can immediately showcase
How important are safe, progressive deployments to your organization? This uncovers the importance of downtime and how flexible deployment options are key to their automation success.

Common Pains Points

Challenges “before scenarios”	So What? “negative consequences”
Manual processes, lack of standardization	Highly inefficient and error prone processes
Employee dissatisfaction due to manual and repetitive processes	Employee churn, inability to hire & retain talent
Fragile, complex pipelines are tough to maintain	Requires expert, expensive team members who become a single point of failure
Adoption of new technologies not fast enough	Requires new tools, expertise for managing new technologies
Infrastructure configuration not fast enough or repeatable	Lack of standardization and automation leads to higher downtime and errors
Lack of scalable review and authorization processes	Highly skilled workers doing menial tasks - leading to dissatisfaction
Lack of safe deployment options and traceability	Longer time to repair, downtime and customer perception issues

Common benefits

Desired Future State (“After Scenarios”)	So What? (“Positive Business Outcomes”)
Faster time to value with automation and standardization of testing, review, packaging, release and deployment	Automation to focus on “real work”, less risk, improved employee satisfaction
Faster mean time to repair with better traceability and deployment options	Reduce customer perception issues, downtime, improve retention
Faster adoption of cloud native technologies	Cloud native first development along with current deployment targets for more flexibility using a single tool
Better employee satisfaction	Improved automation, removal of manual / repetitive tasks and reduce integration work improves employee satisfaction

Required capabilities

Required capability	Customer Metrics
Test automation, pipeline configuration management	Automation to focus on “real work”, less risk, improved employee satisfaction
Change control and collaboration	Reduce customer perception issues, downtime, improve retention
Safe deployment and roll back	Cloud native first development along with current deployment targets for more flexibility using a single tool
Code quality, peer reviews	Improved automation, removal of manual / repetitive tasks and reduce integration work improves employee satisfaction

Customer Adoption and Value

These value statements are used to measure of GitLab Adoption by the customer and provide guidance to our field teams (CSMs in particular) for conversations on expanding usage.

CI Adoption Score

Area	Measure	Value
CI Utilization	Depth of CI Adoption as a percentage of licensed seats	- Increase build speeds. Development teams work more efficiently by reducing otherwise manual work. - Catch potential errors sooner rather than later before they intensify. - Maximize development time and improves productivity. Less manual work. - Faster feedback and less risk that changes cause builds to break. - Gives teams more flexibility, making it easier to adopt. - Reduces business risk and protects intellectual property. Instills confidence in end-users.
Container Registry	Container registry enabled	- Centralize the publication and consumption of container images - Standardize on authentication methods and authorization models throughout your software lifecycle - Eliminate the need to store & rotate credentials for third-party systems (i.e. leverage CI Job Tokens with GitLab CI to authenticate) - Ensure standardized use of cloud object storage to limit attack surface (eg. avoid leaks through open S3 buckets) - Improve visibility and control over cloud storage utilization on a per-project/per-group basis (i.e. through storage quotas, expiration policies, and usage reporting)
Templates	The number of instance-wide template repositories that exist in an instance	- Proliferate best-practices approaches through easily reusable pipeline templates - Promote innersourcing and collaboration through the use of templates - Speed time to green pipeline by providing new projects a well defined starting point - Improve compliance with required reporting, or other important pipeline tasks (test coverage, linting, scanning, etc.)
Deployments Utilization	Depth of Deployment adoption as a percentage of licensed seats	- Faster time to value with automation and standardization of testing, review, packaging, release and deployment - Faster mean time to repair with better traceability and deployment options - Cloud native first development along with current deployment targets for more flexibility using a single tool
Deployment Count per User L28D	Deployment Count per User (last 28 days) - Number of deployments within last 28D divided by number of licensed users	- Faster time to value with automation and standardization of testing, review, packaging, release and deployment - Faster mean time to repair with better traceability and deployment options - Cloud native first development along with current deployment targets for more flexibility using a single tool
Value Stream analytics	How many users went to the VSA page in the last 28 days	- VSA helps businesses identify and target waste and inefficiencies, and take action to optimize those workstreams to deliver the highest possible velocity of value. - GitLab’s one platform approach ensures a single platform, workspace and data model which creates a shared view of actionable insights, of your end to end software delivery lifecycle

Positioning value

Elevator pitch

GitLab enables you to deliver better software, faster. Unleash team productivity and efficiency, and accelerate the velocity of software development by automating the build, test, and deployment of your applications. Accelerate your digital transformation and app modernization goals with automated provisioning and maintenance of cloud-native infrastructure Finally, GitLab allows you to easily start where you are, and reduce tooling and complexity as your adoption matures with our flexible platform that has built-in, end-to-end security and out-of-the-box integrations

Value Proposition (How GitLab does it?)

GitLab helps you deliver better software, faster

“Instead of spending a full day setting up for production and doing manual tests, those simple tasks are now automated. This allowed release time to go from 24 hours to just 10 minutes.” - Airbus

GitLab is one of the easiest platforms to get started with your DevOps journey

“It just worked. That was the biggest success because we didn’t have any problems with installing GitLab, with updating it and it was really simple to start for us,” [MGA]

GitLab allows you to start where you are in your journey and reduce other tools as your adoption matures

“As per the Forrester Total Economic Impact study, customers were able to eliminate at least 3 tools per year” TEI

GitLab supports your cloud-native application transformations (as well as your traditional applications!)

“GitLab integrates natively with Kubernetes, which gives the development team peace of mind because they can trust that the tool will work automatically without constant maintenance.” - Hotjar

GitLab allows you to automate infrastructure and deploy to different cloud providers (and your existing infrastructure as well)

“Our DevOps teams can provision production-ready solutions within minutes, from Kubernetes to multi-cloud and multi-tier complex hybrid cloud infrastructures” - SURF

GitLab is a single application for full Automated Software Delivery including change management, CI/CD and infrastructure automation allowing you to achieve better stability and ship high quality applications faster

“If something goes wrong, GitLab offers a simple fix. For example, if we deployed the wrong ratio of our services to the server, we can see the history, read the commit message, and identify the author to roll back commits” - Parimatch

GitLab helps improve developer experience

“Developer happiness matters because happy developers simply do better work. You need to keep your developer experience at a high level because that’s the only way you really can deliver value fast. GitLab has played … a significant part in helping us increase our developer experience.” - Moneyfarm

Differentiators (How GitLab does Automated Software Delivery better?)

Apart from the single application, DevOps Platform narrative, there are a number of key areas which GitLab does well and better than competitors.

Differentiator	Description
Multi-platform	Execute builds on Unix, Windows, OSX, and any other platform that supports Go
Multi-language	Build scripts work with Java, PHP, Ruby, C, and any other language
Multi-deployment targets	Deploy to embedded systems, on-premise servers, Raspberry Pi devices, mainframes, virtual machines, Kubernetes clusters, FaaS offerings, multiple clouds like AWS, GCP, Azure, IBM and Oracle
Faster builds	GitLab splits builds over multiple machines for parallel execution
Autoscaling	Automatically spin up and down VM’s or Kubernetes pods to make sure your builds get processed immediately while minimizing costs
Versioned tests	a .gitlab-ci.yml file that contains your tests, allowing developers to contribute changes and ensuring every branch gets the tests it needs
Flexible Pipelines	Define multiple jobs per stage and even trigger other pipelines
Ease test environment creation	With the review app - use custom Docker images, spin up services as part of testing, build new Docker images, run on Kubernetes - use this to run UX tests, DAST, usability tests etc
Built in Container Registry	built-in container registry to store, share, and use container images
Distributed version control	Reduced time to clone and fetch large repos for geographically distributed teams
Product development management	Version control not just source code but also IP, graphic assets, animations and binaries to mention a few
Unified deployment and observability	Visualise what goes into production (Review apps and release planning), what to deploy to production (feature flags) , who to deploy it to (Progressive Delivery and deployment strategies like Canary), monitor performance of deployment (via browser performance testing, performance monitoring/tracing) and rollback based on performance via post deployment monitoring, all from a single application
Secure Kubernetes Cluster access	Avoid exposing your cluster by establishing a secure connection with your Kubernetes cluster for your CI/CD jobs
Push and pull based deployments	Majority of customers still prefer the control that push based deployment gives, we support both

Competitors

From a competitive comparison for Automated Software Delivery, the following are the key competitors and what they are lacking at a high level. Review the detailed comparison in the devops-tools comparison pages

GitHub - Strong on SCM, GitHub Actions for CI/CD is still not ready for primetime. GitLab can integrate and migrate customers using GitHub for SCM easily with GitLab.
Jenkins - Complex to manage, many fragile integrations, not suitable for cloud native transformation
JFrog - Strong on CI, but requires integrations or has limited capabilities for rest of the areas.
Circle CI
Weaveworks Flux CD - Main solution only for the GitOps operator, requires multiple integrations to achieve end to end GitOps flow.

Handling Objections

Objection	Response
“I don’t need another tool to replace my existing tool”	- We can meet you where you are - you don’t need to rip and replace all your existing tools - You can start by supplementing GitLab CI or CD or SCM with your existing toolset of Jira, GitHub, Jenkins etc - Once you find value in the specific area (e.g., SCM, CI, CD, Security, Compliance) - you can expand your use of GitLab to achieve better ROI
“I don’t want to be locked into one company for my entire DevOps lifecycle”	- Toolchain sprawl is a reality - many customers have stopped benefitting from DevOps due to this - Application & resource integration & management actually hinders how fast the organization can move. - Customers partner with GitLab to accelerate time to market for new products/services, improve efficiencies & reduce security & compliance risks. Walk me through how your priorities align with these outcomes.
“Each development team decides what they need”	- Allowing each team to decide creates silos of innovation & development. It also significantly limits the impact of your digital transformation. - Each team then also needs to setup, integrate and maintain these integrations. - Describe how this works for you. How many tools have you spent money on as a result?

Key Value at different tiers

Value at Premium

As organizations get started and grow in their automation journey, GitLab Premium offers Faster Code Reviews, Advanced CI/CD, Release Controls and Self-managed reliability with expert support to enhance team productivity and collaboration. GitLab Premium adds enterprise level features like priority support, upgrade assistance and a technical account managers (for eligible accounts).

For up-to-date and full list of value at Premium, visit Why Premium. Some key features include (based on highest Post Purchase Survey Results):

Faster code reviews Ensure high code quality across teams through seamless code review workflows
- Multiple approvers in code review To ensure strict code review, you can require a minimum number of users to approve of a merge request before it is able to be merged.
- Code Owners Assign Code Owners to files to indicate the team members responsible for code in your project. Code owners are assigned automatically as merge request approvers.
- Code Review Analytics Find bottlenecks in your code review process by understanding how long open merge requests have been in review.
Advanced CI/CD Build, maintain, deploy, and monitor complex pipelines
- CI/CD Pipelines Dashboard Visualize the history and current status of pipelines across projects and groups all in a single dashboard that can be customized for each user.
- Multi-project pipeline graphs Visualize how pipelines across projects are linked together, including cross project dependencies.
- Merge Trains Reduce pipeline queueing and waiting time with merge trains which allows parallel pipeline execution, with each pipeline building off the merge result of the previous one.
- CI/CD for external repo Connect your projects hosted on external services (like GitHub or Bitbucket) and leverage the power of GitLab CI/CD pipelines to build, test, and deploy your applications easily.
Release Controls Implement controls to ensure teams ship high quality and secure code
- Approval rules for code review Approval rules ensure that the right people review merge requests by specifying eligible approvers and the minimum number of approvals required for a merge request.
- Required Merge Request Approvals Guarantee quality and standards of your code by mandating a set number of necessary approvals and predefine a list of specific approvers.
- Merge Request Dependencies Coordinate the order in which merge requests are merged within the same project and/or across different projects.
- Push rules Reject new code and commits that don’t comply with company policy.
Self Managed Reliability Ensure disaster recovery, high availability and load balancing of your self-managed deployment
- Disaster Recovery Fail over in minutes to another data-center.
- Maintenance mode Maintenance mode allows systems administrators to perform maintenance operations, such as preparing for a scheduled failover, with minimal disruption to end users.
- Fault-tolerant Git storage with Gitaly Configure replicated Git storage with automatic failover, strong consistency, and read distribution for improved fault tolerance and performance.

Value at Ultimate

Most of the value of the Automated Software Delivery Solution is available to customers at the GitLab Premium tier. GitLab Ultimate adds Security, Compliance, Portfolio and Value Stream Management - which are covered by other solution areas.

For up-to-date list of value at Ultimate, visit Why Premium.

Resources

Continuous integration (Sales Resource Page, Customer Solution Page)
Continuous Delivery (Sales Resource Page, Customer Solution Page)
Source Code Management (Sales Resource Page, Customer Solution Page)
GitOps (Sales Resource Page, Customer Solution Page)

Customer Stories

More case studies here -> Filter by Usecase CI or CD or SCM or GitOps to find the latest case studies in the case study board

Webinars, e-books, whitepapers, videos, presentations

Customer facing presentations

WebPage, Whitepapers, infographics, blogs

Videos

SCM: Source Code Walk Through, January 2020 by James Ramsey, Group Product Manager for the Create Stage
SCM: GitLab Flow pattern
SCM: Design Management Walkthrough, January 2020 by Christen Dybenko, PM Knowledge Group
SCM: Web IDE walkthrough, January 2020 by Kai Armstrong, PM Editor Group
SCM: Merge Request and Source Control as part of the Software Development Life Cycle by William Chia sPMM CI/CD
SCM: GitLab Namespaces: users, groups and subgroups by Brendan O’Leary, Tech Evangelist
SCM: Rich Change Controls for Building Workflows you can Trust by Darwin Sanoy, Solutions Architect
CI/CD: CI/CD with GitLab
CI/CD: GitLab for complex CI/CD: Robust, visible pipelines
CI/CD: How do Runners work?
CI/CD: Mastering CI/CD
CI/CD: What is Auto DevOps?
GitOps: What is GitOps? Why is it important? How can you get started?
GitOps: What is Infrastructure as Code
GitOps: Infrastructure as Code using GitLab & Ansible
GitOps: Part 1 of 3: How GitLab supports GitOps: The Process
GitOps: Part 2 of 3: How GitLab supports GitOps: The Infrastructure
GitOps: Part 3 of 3: How GitLab supports GitOps: The Application
GitOps: GitOps with GitLab and Terraform
GitOps: Using GitLab for GitOps to break down silos and encourage collaboration
GitOps: GitOps Click Through Demo

Training

Git in Gifs
Why You Should Move To Git
CI/CD Overview Video
CS Skills Exchange: CI Deep Dive
CS Skills Exchange: Runners Overview
CS Skills Exchange: Runners Overview
Technically Competing Against Microsoft Azure DevOps (GitLab internal only)
Competing Against Jenkins (GitLab internal only)
Make Your Life Easier with CI/CD Presentation

Demo Videos and Click through demos

Services

GitLab Professional Services help customers become efficient in GitLab quickly. GitLab (or a GitLab partner) offers a number of service offerings to support customers.

Here are some service offerings you can position with the customer:

Advisory/Consulting services to help with GitOps rollout are planned to be rolled out later this year. Please register your interest for a GitOps Advisory offering here to help PS effectively prioritize!

As you position services, you can use our Services Pitch Deck to help establsh the value of engaging with PS. Other services can be found in our Complete list of professional service offerings

Talk with @em in the professional services slack channel to learn more.

Last modified November 26, 2024: Fix broken external links (bc83f2be)

View page source - Edit this page - please contribute.