Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Sovereignty in Infrastructure-as-Code
- Analyze the pitfalls of relying on cloud consoles and SaaS-based IaC, specifically regarding vendor lock-in and compliance gaps.
- Explore the internal architecture of Terraform, covering core components, provider interactions, state handling, and the plan/apply lifecycle.
- Conduct a comparative assessment of Terraform against other popular tools such as Pulumi, Ansible, and CloudFormation.
Configuration Languages and Provider Ecosystem
- Gain proficiency in HCL syntax, focusing on resource definitions, data sources, variable management, and output configurations.
- Configure providers for on-premise environments, including Proxmox, libvirt, vSphere, and PowerDNS.
- Investigate community-maintained providers and the foundational concepts of developing custom providers.
- Understand how resource dependencies function and the graph theory principles that underpin Terraform’s execution model.
State Management Strategies
- Assess the security trade-offs between local and remote state storage methods.
- Deploy self-hosted state backends utilizing PostgreSQL, S3-compatible storage like MinIO, Gitea, or etcd.
- Apply best practices for state locking, data encryption at rest, and resilient backup protocols.
- Navigate state migration processes and techniques for detecting configuration drift.
Modular Architecture and Workspaces
- Design well-structured modules with clear input/output definitions and strict versioning standards.
- Create private module registries using Git tags for internal distribution.
- Achieve environment isolation across development, staging, and production tiers using Terraform workspaces.
- Adopt self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift, for enhanced control.
Provisioning Workflows and Lifecycle Management
- Integrate cloud-init and PXE booting to streamline bare-metal server provisioning.
- Deploy various provisioners, including local-exec, remote-exec, and file transfer mechanisms.
- Leverage null resources and trigger mechanisms to build custom automation logic.
- Control resource destruction, planning cycles, and tainting procedures to ensure safe rollback capabilities.
Security Posture and Compliance
- Enforce strict variable validation rules and properly flag sensitive data fields.
- Implement policy-as-code frameworks for on-premise systems using Sentinel or OPA-based alternatives.
- Establish comprehensive audit logging standards and rigorous plan file review workflows.
Continuous Integration and Delivery (CI/CD)
- Automate plan and apply executions within GitHub Actions or Woodpecker CI pipelines.
- Incorporate
terraform fmt,validate, and linting utilities into pre-commit hooks to maintain code quality. - Configure cost estimation features and financial budget guardrails.
- Formulate detailed rollback strategies and state recovery procedures to mitigate operational risks.
Requirements
- A solid grasp of infrastructure-as-code principles and core cloud computing concepts at an intermediate level.
- Hands-on experience working with JSON, HCL (HashiCorp Configuration Language), and standard version control systems.
- Working knowledge of on-premise virtualization technologies, specifically Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and managing private cloud resources.
- DevOps teams overseeing on-premise assets through declarative configuration management.
- Enterprises aiming to reduce dependency on cloud provider control planes for infrastructure state management.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
