Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
IaC Sovereignty
- Exploring the risks associated with cloud consoles and SaaS IaC, such as vendor lock-in and audit deficiencies.
- A detailed examination of Terraform's architecture, including core components, providers, state management, and the plan/apply cycle.
- A comparative study of Terraform against alternatives like Pulumi, Ansible, and CloudFormation.
Configuration Language & Providers
- Perfecting HCL syntax for defining resources, data sources, variables, and outputs.
- Configuring on-premise providers such as Proxmox, libvirt, vSphere, and PowerDNS.
- Investigating community providers and the fundamentals of developing custom providers.
- Understanding resource dependencies and the graph theory that underpins them.
State Management
- Assessing the security trade-offs between local and remote state storage.
- Configuring self-hosted backends using PostgreSQL, S3-compatible storage (e.g., MinIO), Gitea, and etcd.
- Applying state locking, encryption at rest, and resilient backup protocols.
- Managing state migration and identifying configuration drift.
Modules & Workspaces
- Designing modules with clear inputs, outputs, and versioning best practices.
- Creating private module registries utilizing Git tags.
- Ensuring environment isolation across dev, staging, and production via workspaces.
- Adopting self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning & Lifecycle
- Integrating cloud-init and PXE for seamless bare-metal provisioning.
- Employing provisioners: local-exec, remote-exec, and file transfer mechanisms.
- Utilizing null resources and triggers to drive custom automation workflows.
- Controlling resource destruction, planning, and tainting to enable safe rollbacks.
Security & Compliance
- Enforcing variable validation and properly tagging sensitive data.
- Applying policy-as-code for on-premise settings using Sentinel and OPA alternatives.
- Establishing rigorous audit logging and plan review processes.
CI/CD Integration
- Automating plan and apply workflows using GitHub Actions or Woodpecker CI.
- Incorporating
terraform fmt,validate, and linting tools into pre-commit hooks. - Implementing cost estimation and budget control measures.
- Crafting comprehensive rollback strategies and state recovery procedures.
Requirements
- A solid intermediate grasp of infrastructure-as-code principles and cloud computing basics.
- Hands-on experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Working knowledge of on-premise virtualization platforms, including Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud assets.
- DevOps teams utilizing declarative configurations to manage on-premise resources.
- Organizations aiming to reduce dependence on cloud control planes for infrastructure state management.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
