Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Sovereignty in Infrastructure-as-Code
- Analyzing the risks associated with cloud consoles and SaaS-based IaC, such as vendor lock-in and audit deficiencies.
- An in-depth examination of Terraform architecture, including core components, providers, state management, and the plan/apply cycle.
- A comparative study of Terraform versus alternatives like Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- Proficiency in HCL syntax for defining resources, data sources, variables, and outputs.
- Configuring on-premise providers, including Proxmox, libvirt, vSphere, and PowerDNS.
- Exploring community-driven providers and the fundamentals of developing custom providers.
- Understanding resource dependencies and the underlying principles of graph theory.
State Management
- Assessing the security impacts of choosing between local and remote state storage.
- Establishing self-hosted backends using PostgreSQL, S3-compatible storage (such as MinIO), Gitea, and etcd.
- Implementing state locking, encryption at rest, and reliable backup strategies.
- Managing state migrations and identifying configuration drift.
Modules and Workspaces
- Organizing modules with best practices for inputs, outputs, and versioning.
- Creating private module registries utilizing Git tags.
- Maintaining environmental isolation across development, staging, and production via workspaces.
- Utilizing self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle Management
- Incorporating cloud-init and PXE for bare-metal provisioning tasks.
- Using provisioners effectively, including local-exec, remote-exec, and file transfer mechanisms.
- Leveraging null resources and triggers to build custom automation workflows.
- Overseeing resource destruction, planning, and tainting processes to ensure safe rollbacks.
Security and Compliance
- Enforcing variable validation and correctly tagging sensitive data.
- Implementing policy-as-code for on-premise setups using Sentinel and OPA-based alternatives.
- Establishing strong audit logging and rigorous plan file review procedures.
CI/CD Integration
- Automating plan and apply workflows using platforms like GitHub Actions or Woodpecker CI.
- Incorporating
terraform fmt,validate, and linting utilities into pre-commit hooks. - Configuring cost estimation and budgetary guardrails.
- Formulating comprehensive rollback strategies and state recovery procedures.
Requirements
- A solid grasp of infrastructure-as-code principles and fundamental cloud computing concepts.
- Hands-on experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Familiarity with on-premise virtualization stacks, specifically Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud assets.
- DevOps teams overseeing on-premise resources using declarative configuration methods.
- Organizations aiming to reduce dependency on external cloud control planes for managing infrastructure state.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
