Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Infrastructure-as-Code Sovereignty
- Examining the risks associated with cloud consoles and SaaS-based IaC, such as vendor lock-in and audit deficiencies.
- An in-depth look at Terraform architecture: core components, providers, state management, and the plan/apply workflow.
- A comparative analysis of Terraform against alternatives like Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- Mastering HCL syntax: defining resources, data sources, variables, and outputs.
- Configuring on-premise providers, including Proxmox, libvirt, vSphere, and PowerDNS.
- Exploring community providers and the fundamentals of developing custom providers.
- Understanding resource dependencies and the underlying graph theory principles.
State Management
- Assessing the security implications of storing state locally versus using remote storage.
- Setting up self-hosted backends using PostgreSQL, S3-compatible storage (such as MinIO), Gitea, and etcd.
- Implementing state locking, encryption at rest, and robust backup strategies.
- Managing state migration and identifying configuration drift.
Modules and Workspaces
- Structuring modules with best practices for inputs, outputs, and versioning.
- Building private module registries using Git tags.
- Ensuring environment isolation across dev, staging, and production via workspaces.
- Leveraging self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle
- Integrating cloud-init and PXE for bare-metal provisioning.
- Utilising provisioners: local-exec, remote-exec, and file transfer mechanisms.
- Leveraging null resources and triggers to create custom automation workflows.
- Managing resource destruction, planning, and tainting to enable safe rollbacks.
Security and Compliance
- Enforcing variable validation and correctly marking sensitive data.
- Implementing policy-as-code for on-premise environments using Sentinel and OPA alternatives.
- Establishing robust audit logging and plan file review processes.
CI/CD Integration
- Automating plan and apply workflows using GitHub Actions or Woodpecker CI.
- Integrating
terraform fmt,validate, and linting tools into pre-commit hooks. - Setting up cost estimation and budget guardrails.
- Developing comprehensive rollback strategies and state recovery procedures.
Requirements
- A solid intermediate grasp of infrastructure-as-code principles and fundamental cloud computing concepts.
- Hands-on experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Familiarity with on-premise virtualisation platforms, particularly Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud resources.
- DevOps teams responsible for managing on-premise resources via declarative configuration.
- Organisations aiming to reduce dependency on external cloud control planes for infrastructure state management.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
