Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
IaC Sovereignty
- Examining the risks associated with cloud consoles and SaaS IaC, such as vendor lock-in and audit blind spots.
- In-depth look at Terraform architecture: core elements, providers, state handling, and the plan/apply cycle.
- Comparing Terraform with other tools like Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- Perfecting HCL syntax: specifying resources, data sources, variables, and outputs.
- Setting up on-premise providers: Proxmox, libvirt, vSphere, and PowerDNS.
- Investigating community providers and the fundamentals of building custom providers.
- Comprehending resource dependencies and the underlying graph theory.
State Management
- Assessing the security trade-offs between local and remote state storage.
- Configuring self-hosted backends using PostgreSQL, S3-compatible storage (MinIO), Gitea, and etcd.
- Applying state locking, encryption at rest, and reliable backup protocols.
- Managing state migration and identifying configuration drift.
Modules and Workspaces
- Designing modules with inputs, outputs, and versioning best practices.
- Creating private module registries using Git tags.
- Maintaining separation across dev, staging, and production environments using workspaces.
- Utilizing self-hosted Terraform Cloud alternatives like Atlantis or Spacelift.
Provisioning and Lifecycle
- Incorporating cloud-init and PXE for bare-metal setup.
- Using provisioners: local-exec, remote-exec, and file transfers.
- Using null resources and triggers for bespoke automation workflows.
- Overseeing resource deletion, planning, and tainting for safe rollback capabilities.
Security and Compliance
- Applying variable validation and correctly flagging sensitive data.
- Applying policy-as-code for on-premise environments using Sentinel or OPA alternatives.
- Creating robust audit logs and plan file review procedures.
CI/CD Integration
- Automating plan and apply workflows in GitHub Actions or Woodpecker CI.
- Incorporating
terraform fmt,validate, and linting tools in pre-commit hooks. - Configuring cost estimation and budget controls.
- Creating detailed rollback strategies and state recovery procedures.
Requirements
- A solid intermediate grasp of infrastructure-as-code principles and cloud computing basics.
- Hands-on experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Knowledge of on-premise virtualization platforms such as Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud assets.
- DevOps teams overseeing on-premise resources via declarative configuration.
- Organizations looking to reduce dependence on cloud control planes for infrastructure state management.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
