Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Infrastructure-as-Code Sovereignty
- Recognizing the risks associated with cloud consoles and SaaS IaC, specifically vendor lock-in and audit gaps.
- Examining the Terraform architecture in depth: core components, providers, state management, and the plan/apply workflow.
- Performing a comparative analysis of Terraform against alternatives such as Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- Mastering HCL syntax for defining resources, data sources, variables, and outputs.
- Configuring on-premise providers, including Proxmox, libvirt, vSphere, and PowerDNS.
- Exploring community providers and the fundamentals of custom provider development.
- Understanding resource dependencies and the underlying graph theory.
State Management
- Assessing the security implications of local versus remote state storage.
- Establishing self-hosted backends using PostgreSQL, S3-compatible storage (MinIO), Gitea, and etcd.
- Implementing state locking, encryption at rest, and reliable backup strategies.
- Managing state migration and identifying configuration drift.
Modules and Workspaces
- Structuring modules with attention to inputs, outputs, and versioning best practices.
- Creating private module registries utilizing Git tags.
- Ensuring isolation across dev, staging, and production environments through workspaces.
- Utilizing self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle
- Integrating cloud-init and PXE for bare-metal provisioning.
- Using provisioners such as local-exec, remote-exec, and file transfer.
- Leveraging null resources and triggers for custom automation workflows.
- Managing resource destruction, planning, and tainting to facilitate safe rollbacks.
Security and Compliance
- Enforcing variable validation and appropriately marking sensitive data.
- Implementing policy-as-code for on-premise environments using Sentinel and OPA alternatives.
- Establishing robust audit logging and plan file review processes.
CI/CD Integration
- Automating plan and apply workflows in GitHub Actions or Woodpecker CI.
- Incorporating
terraform fmt,validate, and linting tools into pre-commit hooks. - Configuring cost estimation and budget guardrails.
- Developing comprehensive rollback strategies and state recovery procedures.
Requirements
- An intermediate grasp of infrastructure-as-code principles and cloud computing fundamentals.
- Practical experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Familiarity with on-premise virtualization platforms, including Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare metal servers and private cloud resources.
- DevOps teams that manage on-premise resources via declarative configuration.
- Organizations aiming to reduce dependence on cloud control planes for managing infrastructure state.
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
