Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Infrastructure-as-Code Sovereignty
- Examining the risks associated with cloud consoles and SaaS-based IaC, such as vendor lock-in and audit compliance gaps.
- An in-depth look at Terraform architecture, including core components, provider mechanisms, state management, and the plan/apply lifecycle.
- A comparative analysis of Terraform versus other tools like Pulumi, Ansible, and CloudFormation.
Configuration Language and Provider Ecosystem
- Mastery of HCL syntax for defining resources, data sources, variables, and outputs.
- Configuration of on-premise providers, including Proxmox, libvirt, vSphere, and PowerDNS.
- Exploring community-driven providers and the fundamentals of developing custom providers.
- Understanding resource dependencies and the graph theory principles underlying them.
State Management Strategies
- Assessing the security implications of local versus remote state storage.
- Configuring self-hosted backends using PostgreSQL, S3-compatible storage (such as MinIO), Gitea, and etcd.
- Implementing state locking, encryption at rest, and comprehensive backup protocols.
- Managing state migration and detecting configuration drift.
Modular Architecture and Workspaces
- Designing modules with clear inputs, outputs, and best practices for versioning.
- Creating private module registries utilizing Git tags.
- Ensuring environment isolation across dev, staging, and production tiers through workspaces.
- Adopting self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle Automation
- Integrating cloud-init and PXE technologies for bare-metal provisioning.
- Utilizing various provisioners, including local-exec, remote-exec, and file transfer mechanisms.
- Leveraging null resources and triggers to build custom automation workflows.
- Managing resource destruction, planning, and tainting to ensure safe rollbacks.
Security and Compliance Measures
- Enforcing variable validation and correctly marking sensitive data.
- Implementing policy-as-code for on-premise environments using Sentinel or OPA-based alternatives.
- Establishing rigorous audit logging and plan file review processes.
CI/CD Integration
- Automating plan and apply workflows within GitHub Actions or Woodpecker CI.
- Incorporating
terraform fmt,validate, and linting tools into pre-commit hooks. - Setting up cost estimation tools and budget guardrails.
- Developing comprehensive rollback strategies and state recovery procedures.
Requirements
- A solid grasp of infrastructure-as-code principles and fundamental cloud computing concepts.
- Hands-on experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Working knowledge of on-premise virtualization platforms, particularly Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud resources.
- DevOps teams managing on-premise assets through declarative configuration methods.
- Organizations looking to reduce dependency on external cloud control planes for infrastructure state management.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
