Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Sovereignty in Infrastructure-as-Code
- Comprehending the risks associated with cloud consoles and SaaS IaC, such as vendor lock-in and audit gaps.
- An in-depth look at Terraform architecture: core components, providers, state management, and the plan/apply workflow.
- A comparative study of Terraform versus alternatives like Pulumi, Ansible, and CloudFormation.
Configuration Languages and Providers
- Perfecting HCL syntax: defining resources, data sources, variables, and outputs.
- Configuring on-premise providers: Proxmox, libvirt, vSphere, and PowerDNS.
- Exploring community providers and the fundamentals of custom provider development.
- Grasping resource dependencies and the underlying graph theory.
State Management
- Assessing the security implications of local versus remote state storage.
- Configuring self-hosted backends using PostgreSQL, S3-compatible storage (MinIO), Gitea, and etcd.
- Applying state locking, encryption at rest, and robust backup strategies.
- Managing state migration and identifying configuration drift.
Modules and Workspaces
- Designing modules with inputs, outputs, and versioning best practices.
- Creating private module registries using Git tags.
- Ensuring isolation across dev, staging, and production environments via workspaces.
- Utilizing self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle
- Integrating cloud-init and PXE for bare-metal provisioning.
- Using provisioners: local-exec, remote-exec, and file transfer.
- Employing null resources and triggers for custom automation workflows.
- Overseeing resource destruction, planning, and tainting for safe rollbacks.
Security and Compliance
- Enforcing variable validation and properly labeling sensitive data.
- Applying policy-as-code for on-premise environments using Sentinel and OPA alternatives.
- Establishing robust audit logging and plan file review processes.
CI/CD Integration
- Automating plan and apply workflows in GitHub Actions or Woodpecker CI.
- Integrating
terraform fmt,validate, and linting tools in pre-commit hooks. - Setting up cost estimation and budget guardrails.
- Developing comprehensive rollback strategies and state recovery procedures.
Requirements
- A solid grasp of infrastructure-as-code concepts and cloud computing fundamentals.
- Hands-on experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Knowledge of on-premise virtualization platforms such as Proxmox and VMware.
Audience
- Infrastructure engineers responsible for provisioning bare metal servers and private cloud resources.
- DevOps teams managing on-premise resources through declarative configuration.
- Organizations actively seeking to avoid reliance on cloud control planes for managing infrastructure state.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
