Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Sovereignty in Infrastructure-as-Code
- Analyzing the risks associated with cloud consoles and SaaS-based IaC, such as vendor lock-in and auditing blind spots.
- An in-depth exploration of Terraform architecture, covering core components, providers, state handling, and the plan/apply cycle.
- A comparative review of Terraform versus alternatives like Pulumi, Ansible, and CloudFormation.
Configuration Syntax and Providers
- Proficiency in HCL syntax: specifying resources, data sources, variables, and outputs.
- Configuration of on-premise providers, including Proxmox, libvirt, vSphere, and PowerDNS.
- Exploration of community providers and an introduction to developing custom providers.
- Comprehension of resource dependencies and the underlying graph theory principles.
State Management
- Assessing the security trade-offs between local and remote state storage.
- Implementation of self-hosted backends using PostgreSQL, S3-compatible storage (such as MinIO), Gitea, and etcd.
- Application of state locking, encryption at rest, and reliable backup protocols.
- Management of state migration and identification of configuration drift.
Modules and Workspaces
- Organizing modules with clear inputs, outputs, and adherence to versioning best practices.
- Construction of private module registries utilizing Git tags.
- Guaranteeing environment isolation for dev, staging, and production via workspaces.
- Utilization of self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle
- Integration of cloud-init and PXE for bare-metal provisioning tasks.
- Application of provisioners, including local-exec, remote-exec, and file transfer mechanisms.
- Utilization of null resources and triggers to build custom automation workflows.
- Oversight of resource destruction, planning, and tainting to ensure safe rollbacks.
Security and Compliance
- Enforcement of variable validation and proper designation of sensitive data.
- Implementation of policy-as-code for on-premise setups using Sentinel or OPA alternatives.
- Establishment of solid audit logging and plan file review procedures.
CI/CD Integration
- Automation of plan and apply workflows within GitHub Actions or Woodpecker CI.
- Incorporation of
terraform fmt,validate, and linting tools via pre-commit hooks. - Configuration of cost estimation features and budget controls.
- Development of thorough rollback strategies and state recovery mechanisms.
Requirements
- Intermediate-level grasp of infrastructure-as-code principles and fundamental cloud computing concepts.
- Hands-on experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- A working knowledge of on-premise virtualization platforms, including Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud assets.
- DevOps teams overseeing on-premise resources via declarative configuration methods.
- Organizations aiming to reduce dependence on cloud control planes for infrastructure state management.
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
