Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Sovereignty in Infrastructure-as-Code
- Analyze the risks associated with cloud consoles and SaaS-based IaC, such as vendor lock-in and audit gaps.
- Examine Terraform's architecture in depth, including core components, providers, state management, and the plan/apply workflow.
- Compare Terraform with alternatives like Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- Master HCL syntax: defining resources, data sources, variables, and outputs.
- Configure on-premise providers, including Proxmox, libvirt, vSphere, and PowerDNS.
- Explore community providers and the fundamentals of custom provider development.
- Understand resource dependencies and the underlying graph theory.
State Management
- Evaluate the security implications of local versus remote state storage.
- Set up self-hosted backends using PostgreSQL, S3-compatible storage (MinIO), Gitea, and etcd.
- Implement state locking, encryption at rest, and robust backup strategies.
- Manage state migration and detect configuration drift.
Modules and Workspaces
- Structure modules with inputs, outputs, and versioning best practices.
- Build private module registries using Git tags.
- Ensure isolation across dev, staging, and production environments using workspaces.
- Leverage self-hosted alternatives to Terraform Cloud, such as Atlantis or Spacelift.
Provisioning and Lifecycle
- Integrate cloud-init and PXE for bare-metal provisioning.
- Utilize provisioners: local-exec, remote-exec, and file transfer.
- Use null resources and triggers for custom automation workflows.
- Manage resource destruction, planning, and tainting to enable safe rollbacks.
Security and Compliance
- Enforce variable validation and properly mark sensitive data.
- Implement policy-as-code for on-premise environments using Sentinel and OPA alternatives.
- Establish robust audit logging and plan file review processes.
CI/CD Integration
- Automate plan and apply workflows in GitHub Actions or Woodpecker CI.
- Integrate
terraform fmt,validate, and linting tools in pre-commit hooks. - Set up cost estimation and budget guardrails.
- Develop comprehensive rollback strategies and state recovery procedures.
Requirements
- Intermediate knowledge of infrastructure-as-code principles and cloud computing fundamentals.
- Practical experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Familiarity with on-premise virtualization platforms, such as Proxmox and VMware.
Target Audience
- Infrastructure engineers tasked with provisioning bare-metal servers and private cloud resources.
- DevOps teams managing on-premise resources through declarative configuration.
- Organizations aiming to minimize reliance on cloud control planes for infrastructure state management.
14 Hours
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 3200 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
