Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Sovereignty in Infrastructure-as-Code
- Assessing the risks associated with cloud consoles and SaaS-based IaC, such as vendor lock-in and potential audit gaps.
- An in-depth exploration of Terraform’s architecture, covering core components, providers, state management, and the plan/apply workflow.
- A comparative analysis of Terraform alongside alternative tools like Pulumi, Ansible, and CloudFormation.
Configuration Languages and Providers
- Refining HCL syntax skills: defining resources, data sources, variables, and outputs with precision.
- Configuring on-premise providers, including Proxmox, libvirt, vSphere, and PowerDNS.
- Exploring the ecosystem of community providers and the fundamentals of developing custom providers.
- Understanding resource dependencies and the underlying principles of graph theory in state processing.
State Management Strategies
- Evaluating the security trade-offs between local and remote state storage options.
- Establishing self-hosted backends utilizing PostgreSQL, S3-compatible storage (such as MinIO), Gitea, and etcd.
- Implementing state locking mechanisms, encryption at rest, and reliable backup strategies.
- Managing state migrations and identifying configuration drift effectively.
Modules and Workspaces
- Designing modular structures with clear inputs, outputs, and versioning best practices.
- Creating private module registries using Git tags for better control and distribution.
- Ensuring environmental isolation across dev, staging, and production setups through workspaces.
- Adopting self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift, for enhanced autonomy.
Provisioning and Lifecycle Management
- Integrating cloud-init and PXE technologies for efficient bare-metal provisioning.
- Utilizing various provisioners, including local-exec, remote-exec, and file transfer mechanisms.
- Leveraging null resources and triggers to build custom automation workflows.
- Managing resource destruction, planning, and tainting to ensure safe and controlled rollbacks.
Security and Compliance
- Enforcing variable validation and properly marking sensitive data to protect integrity.
- Implementing policy-as-code for on-premise environments using Sentinel or OPA alternatives.
- Establishing rigorous audit logging and plan file review processes for compliance.
CI/CD Integration
- Automating plan and apply workflows within GitHub Actions or Woodpecker CI pipelines.
- Incorporating
terraform fmt,validate, and linting tools into pre-commit hooks for quality assurance. - Setting up cost estimation tools and budget guardrails to control expenditures.
- Developing comprehensive rollback strategies and state recovery procedures to ensure resilience.
Requirements
- A solid intermediate grasp of infrastructure-as-code principles and cloud computing basics.
- Practical proficiency with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Working familiarity with on-premise virtualization platforms such as Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud resources.
- DevOps teams overseeing on-premise resources via declarative configuration methods.
- Organizations aiming to minimize reliance on cloud-based control planes for infrastructure state management.
14 Hours
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
