Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Infrastructure-as-Code Sovereignty
- Understanding how cloud consoles and SaaS IaC tools create lock-in and audit gaps.
- Terraform architecture: core components, providers, state management, and the plan/apply workflow.
- Comparison of Terraform with Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- HCL syntax covering resources, data sources, variables, and outputs.
- On-premise providers: Proxmox, libvirt, vSphere, and PowerDNS.
- Overview of community providers and basics of custom provider development.
- Resource dependencies and application of graph theory.
State Management
- Security implications of local versus remote state storage.
- Self-hosted backends: PostgreSQL, S3 (MinIO), Gitea, and etcd.
- State locking, encryption at rest, and backup strategies.
- State migration techniques and drift detection.
Modules and Workspaces
- Module structure, inputs, outputs, and versioning practices.
- Setting up private module registries using Git tags.
- Workspace isolation for development, staging, and production environments.
- Self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle
- Integrating cloud-init and PXE for bare-metal provisioning.
- Utilizing provisioners: local-exec, remote-exec, and file.
- Leveraging null resources and triggers for custom workflows.
- Planning destroy operations and applying resource tainting.
Security and Compliance
- Variable validation and marking sensitive data.
- On-premise alternatives to Sentinel and OPA for policy-as-code.
- Processes for audit logging and reviewing plan files.
CI/CD Integration
- Automating plan and apply steps in GitHub Actions or Woodpecker CI.
- Running Terraform fmt, validate, and lint checks via pre-commit hooks.
- Implementing cost estimation and budget guardrails.
- Establishing rollback strategies and state recovery procedures.
Requirements
- Intermediate knowledge of infrastructure as code and cloud concepts.
- Experience with JSON, HCL, and version control systems.
- Familiarity with on-premise virtualization technologies (Proxmox, VMware).
Target Audience
- Infrastructure engineers responsible for provisioning bare metal and private cloud environments.
- DevOps teams managing on-premise resources through declarative methods.
- Organizations seeking to avoid cloud control planes for managing infrastructure state.
14 Hours
Testimonials (3)
pacing for the most part was fantastic. Michal was very good at ensuring the audience were engaged and ensured everyone was following along for the most part
Asif Shaikh - Carpmaels & Ransford
Course - Terraform on Microsoft Azure
Checking all the details in practice - by writing real code
Michal Pipala - EY
Course - Advanced Terraform: Efficient Infrastructure as Code
the instructor was very well prepared
