Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Sovereignty in Infrastructure as Code
- Understanding how cloud consoles and SaaS IaC solutions create vendor lock-in and audit gaps.
- Terraform architecture: core components, providers, state management, and the plan/apply cycle.
- Comparative analysis with Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- HCL syntax essentials: resources, data sources, variables, and outputs.
- On-premise providers: Proxmox, libvirt, vSphere, and PowerDNS.
- Community providers and the basics of custom provider development.
- Resource dependencies and the application of graph theory.
State Management
- Security implications of local versus remote state storage.
- Self-hosted backends: PostgreSQL, S3 (MinIO), Gitea, and etcd.
- State locking, encryption at rest, and backup procedures.
- State migration techniques and drift detection methods.
Modules and Workspaces
- Module structure, inputs, outputs, and versioning strategies.
- Setting up private module registries using Git tags.
- Workspace isolation for development, staging, and production environments.
- Self-hosted alternatives to Terraform Cloud: Atlantis or Spacelift.
Provisioning and Lifecycle Management
- Bare-metal provisioning via Cloud-init and PXE integration.
- Provisioners: local-exec, remote-exec, and file operations.
- Using null resources and triggers for custom workflows.
- Planning for resource destruction and resource tainting.
Security and Compliance
- Variable validation and marking variables as sensitive.
- On-premise alternatives to Sentinel and OPA for policy-as-code.
- Audit logging and processes for reviewing plan files.
CI/CD Integration
- Automating plan and apply steps in GitHub Actions or Woodpecker CI.
- Integrating Terraform fmt, validate, and lint checks in pre-commit hooks.
- Cost estimation and establishing budget guardrails.
- Rollback strategies and state recovery procedures.
Requirements
- Intermediate understanding of infrastructure-as-code and cloud concepts.
- Experience with JSON, HCL, and version control systems.
- Familiarity with on-premise virtualization technologies (Proxmox, VMware).
Target Audience
- Infrastructure engineers responsible for provisioning bare metal and private cloud environments.
- DevOps teams managing on-premise resources through declarative methods.
- Organizations seeking to avoid cloud control planes for managing infrastructure state.
14 Hours
Testimonials (3)
pacing for the most part was fantastic. Michal was very good at ensuring the audience were engaged and ensured everyone was following along for the most part
Asif Shaikh - Carpmaels & Ransford
Course - Terraform on Microsoft Azure
Checking all the details in practice - by writing real code
Michal Pipala - EY
Course - Advanced Terraform: Efficient Infrastructure as Code
the instructor was very well prepared
