Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Sovereignty in Infrastructure-as-Code
- Understanding how cloud consoles and SaaS-based IaC can create vendor lock-in and audit gaps.
- Terraform architecture: core components, providers, state management, and the plan/apply cycle.
- Comparison with Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- HCL syntax: resources, data sources, variables, and outputs.
- On-premise providers: Proxmox, libvirt, vSphere, and PowerDNS.
- Community providers and the basics of custom provider development.
- Resource dependencies and graph theory.
State Management
- Security implications of local versus remote state storage.
- Self-hosted backends: PostgreSQL, S3 (MinIO), Gitea, and etcd.
- State locking, encryption at rest, and backup strategies.
- State migration and drift detection.
Modules and Workspaces
- Module structure, inputs, outputs, and versioning.
- Establishing private module registries using Git tags.
- Workspace isolation for development, staging, and production environments.
- Alternatives to Terraform Cloud: self-hosted Atlantis or Spacelift.
Provisioning and Lifecycle Management
- Integration of cloud-init and PXE for bare-metal provisioning.
- Utilising provisioners: local-exec, remote-exec, and file.
- Using null resources and triggers for custom workflows.
- Planning resource destruction and applying resource tainting.
Security and Compliance
- Variable validation and marking sensitive data.
- Implementing Sentinel and OPA for policy-as-code on-premise.
- Audit logging and processes for reviewing plan files.
CI/CD Integration
- Automating plan and apply processes in GitHub Actions or Woodpecker CI.
- Running Terraform fmt, validate, and lint in pre-commit hooks.
- Establishing cost estimation and budget guardrails.
- Rollback strategies and state recovery procedures.
Requirements
- Intermediate knowledge of infrastructure-as-code and cloud concepts.
- Experience with JSON, HCL, and version control systems.
- Familiarity with on-premise virtualisation technologies (Proxmox, VMware).
Target Audience
- Infrastructure engineers responsible for provisioning bare metal and private cloud environments.
- DevOps teams managing on-premise resources through declarative methods.
- Organisations seeking to avoid reliance on cloud control planes for infrastructure state management.
14 Hours
Testimonials (3)
pacing for the most part was fantastic. Michal was very good at ensuring the audience were engaged and ensured everyone was following along for the most part
Asif Shaikh - Carpmaels & Ransford
Course - Terraform on Microsoft Azure
Checking all the details in practice - by writing real code
Michal Pipala - EY
Course - Advanced Terraform: Efficient Infrastructure as Code
the instructor was very well prepared
