Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
IaC Sovereignty
- Analyzing the risks associated with cloud consoles and SaaS-based IaC, such as vendor lock-in and audit deficiencies.
- Examining the Terraform architecture in detail: core elements, provider mechanisms, state handling, and the plan/apply cycle.
- Comparing Terraform with other tools like Pulumi, Ansible, and CloudFormation.
Configuration Syntax and Provider Integration
- Gaining proficiency in HCL syntax: specifying resources, data sources, variables, and outputs.
- Configuring on-premise providers: Proxmox, libvirt, vSphere, and PowerDNS.
- Reviewing community providers and the fundamentals of developing custom providers.
- Understanding resource dependencies and the associated graph theory concepts.
State Handling
- Assessing the security trade-offs between local and remote state storage.
- Configuring self-hosted backends using PostgreSQL, S3-compatible storage (MinIO), Gitea, and etcd.
- Applying state locking, encryption at rest, and comprehensive backup protocols.
- Managing state transitions and identifying configuration drift.
Modularity and Workspace Management
- Designing modules with defined inputs, outputs, and versioning standards.
- Creating private module registries using Git tags.
- Ensuring environment isolation for dev, staging, and production via workspaces.
- Adopting self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle Management
- Integrating cloud-init and PXE for bare-metal setup.
- Using provisioners: local-exec, remote-exec, and file transfer mechanisms.
- Utilizing null resources and triggers to build custom automation workflows.
- Controlling resource destruction, planning, and tainting for safe rollback processes.
Security and Compliance
- Applying variable validation and properly tagging sensitive information.
- Enforcing policy-as-code for on-premise setups using Sentinel and OPA alternatives.
- Implementing rigorous audit logging and plan file review procedures.
CI/CD Integration
- Automating plan and apply processes within GitHub Actions or Woodpecker CI.
- Incorporating
terraform fmt,validate, and linting utilities into pre-commit hooks. - Configuring cost estimation and budget control mechanisms.
- Formulating detailed rollback strategies and state recovery workflows.
Requirements
- A solid intermediate grasp of infrastructure-as-code principles and core cloud computing concepts.
- Hands-on experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Working knowledge of on-premise virtualization environments, including Proxmox and VMware.
Intended Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud assets.
- DevOps teams overseeing on-premise resources through declarative methods.
- Organizations aiming to reduce reliance on cloud-based control planes for infrastructure state management.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
