Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Infrastructure-as-Code Sovereignty
- Examining the risks associated with cloud consoles and SaaS-based IaC, such as vendor lock-in and audit deficiencies.
- An in-depth exploration of Terraform’s architecture, covering core components, providers, state management, and the plan/apply lifecycle.
- A comparative assessment of Terraform against alternative tools like Pulumi, Ansible, and CloudFormation.
Configuration Syntax and Provider Integration
- Proficiency in HCL syntax, including the definition of resources, data sources, variables, and outputs.
- Configuration of on-premise providers for Proxmox, libvirt, vSphere, and PowerDNS.
- Investigation of community providers and fundamental concepts in custom provider development.
- Comprehension of resource dependencies and the underlying graph theory principles.
State Management Strategies
- Assessing the security implications of local versus remote state storage options.
- Deployment of self-hosted backends utilizing PostgreSQL, S3-compatible storage (such as MinIO), Gitea, and etcd.
- Implementation of state locking, encryption at rest, and robust backup protocols.
- Managing state migrations and identifying configuration drift.
Modularization and Workspace Isolation
- Designing modules with clear inputs, outputs, and versioning best practices.
- Creation of private module registries leveraging Git tags.
- Maintaining environment isolation across dev, staging, and production tiers via workspaces.
- Utilizing self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle Orchestration
- Integration of cloud-init and PXE bootstrapping for bare-metal provisioning.
- Application of provisioners, including local-exec, remote-exec, and file transfer mechanisms.
- Leveraging null resources and triggers to build custom automation workflows.
- Controlling resource destruction, planning, and tainting to ensure safe rollback capabilities.
Security and Compliance Frameworks
- Enforcing variable validation and properly tagging sensitive data.
- Adopting policy-as-code for on-premise environments using Sentinel or OPA alternatives.
- Establishing rigorous audit logging and plan file review processes.
CI/CD Pipeline Integration
- Automating plan and apply workflows within GitHub Actions or Woodpecker CI.
- Incorporating
terraform fmt,validate, and linting tools into pre-commit hooks. - Configuration of cost estimation models and budget guardrails.
- Formulation of comprehensive rollback strategies and state recovery procedures.
Requirements
- A solid grasp of infrastructure-as-code principles and core cloud computing concepts at an intermediate level.
- Practical proficiency with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Working knowledge of on-premise virtualization platforms, specifically Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud resources.
- DevOps teams overseeing on-premise resources through declarative configuration methods.
- Organizations striving to minimize dependency on external cloud control planes for infrastructure state management.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
