Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Infrastructure-as-Code Sovereignty
- Analyze the risks associated with cloud consoles and SaaS IaC, such as vendor lock-in and audit gaps.
- Explore Terraform architecture in depth, including core components, providers, state management, and the plan/apply workflow.
- Conduct a comparative analysis of Terraform versus alternatives like Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- Master HCL syntax by defining resources, data sources, variables, and outputs.
- Configure on-premise providers, including Proxmox, libvirt, vSphere, and PowerDNS.
- Investigate community providers and the fundamentals of developing custom providers.
- Comprehend resource dependencies and the underlying graph theory concepts.
State Management
- Assess the security implications of local versus remote state storage.
- Set up self-hosted backends utilizing PostgreSQL, S3-compatible storage (MinIO), Gitea, and etcd.
- Implement state locking, encryption at rest, and robust backup strategies.
- Manage state migration and detect configuration drift.
Modules and Workspaces
- Organize modules with clear inputs, outputs, and versioning best practices.
- Create private module registries using Git tags.
- Ensure environment isolation across dev, staging, and production using workspaces.
- Utilize self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle
- Integrate cloud-init and PXE for bare-metal provisioning.
- Employ provisioners for local-exec, remote-exec, and file transfer tasks.
- Use null resources and triggers to facilitate custom automation workflows.
- Manage resource destruction, planning, and tainting to ensure safe rollbacks.
Security and Compliance
- Enforce variable validation and properly mark sensitive data.
- Apply policy-as-code for on-premise environments using Sentinel and OPA alternatives.
- Establish robust audit logging and plan file review processes.
CI/CD Integration
- Automate plan and apply workflows in GitHub Actions or Woodpecker CI.
- Incorporate
terraform fmt,validate, and linting tools into pre-commit hooks. - Configure cost estimation and budget guardrails.
- Develop comprehensive rollback strategies and state recovery procedures.
Requirements
- A solid intermediate grasp of infrastructure-as-code principles and cloud computing basics.
- Hands-on experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Knowledge of on-premise virtualization platforms such as Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud resources.
- DevOps teams overseeing on-premise resources via declarative configuration.
- Organizations aiming to minimize dependence on cloud control planes for infrastructure state management.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
