Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Infrastructure-as-Code Sovereignty
- Analyze the risks associated with cloud consoles and SaaS-based IaC, such as vendor lock-in and audit gaps.
- Explore the core Terraform architecture, including providers, state management, and the plan/apply lifecycle.
- Compare Terraform with alternative tools like Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- Master HCL syntax for defining resources, data sources, variables, and outputs.
- Configure on-premise providers for Proxmox, libvirt, vSphere, and PowerDNS.
- Explore community providers and the fundamentals of custom provider development.
- Understand resource dependencies and the underlying graph theory concepts.
State Management
- Evaluate the security considerations of local versus remote state storage.
- Implement self-hosted backends using PostgreSQL, S3-compatible storage (e.g., MinIO), Gitea, and etcd.
- Apply state locking, encryption at rest, and resilient backup strategies.
- Address state migration and configuration drift detection.
Modules and Workspaces
- Design modular structures with best practices for inputs, outputs, and versioning.
- Create private module registries using Git tags.
- Maintain isolation across development, staging, and production environments using workspaces.
- Utilize self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle
- Integrate cloud-init and PXE for automated bare-metal provisioning.
- Utilize provisioners including local-exec, remote-exec, and file transfer mechanisms.
- Use null resources and triggers to build custom automation workflows.
- Manage resource destruction, planning, and tainting to ensure safe rollbacks.
Security and Compliance
- Enforce variable validation and properly mark sensitive data.
- Implement policy-as-code for on-premise environments using Sentinel or OPA alternatives.
- Establish robust audit logging and plan file review processes.
CI/CD Integration
- Automate plan and apply workflows within GitHub Actions or Woodpecker CI.
- Incorporate
terraform fmt,validate, and linting tools into pre-commit hooks. - Configure cost estimation and budget guardrails.
- Develop comprehensive rollback strategies and state recovery procedures.
Requirements
- A solid intermediate grasp of infrastructure-as-code principles and cloud computing fundamentals.
- Hands-on experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Working knowledge of on-premise virtualization platforms like Proxmox and VMware.
Intended Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud resources.
- DevOps teams overseeing on-premise resources via declarative configuration.
- Organizations aiming to reduce reliance on external cloud control planes for infrastructure state management.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
