感謝您提交詢問!我們的一位團隊成員將在短時間內與您聯繫。
感謝您提交預訂!我們的一位團隊成員將在短時間內與您聯繫。
課程簡介
Infrastructure-as-Code Sovereignty
- Understanding how cloud consoles and SaaS-based IaC create lock-in and audit gaps.
- Terraform architecture: core components, providers, state management, and the plan/apply workflow.
- Comparison with Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- HCL syntax: resources, data sources, variables, and outputs.
- On-premise providers: Proxmox, libvirt, vSphere, and PowerDNS.
- Overview of community providers and basics of custom provider development.
- Resource dependencies and graph theory concepts.
State Management
- Security implications of local state versus remote state.
- Self-hosted backends: PostgreSQL, S3 (MinIO), Gitea, and etcd.
- State locking, encryption at rest, and backup strategies.
- State migration and drift detection techniques.
Modules and Workspaces
- Module structure, inputs, outputs, and versioning.
- Establishing private module registries using Git tags.
- Workspace isolation for dev, staging, and production environments.
- Self-hosted alternatives to Terraform Cloud: Atlantis or Spacelift.
Provisioning and Lifecycle
- Cloud-init and PXE integration for bare-metal provisioning.
- Provisioners: local-exec, remote-exec, and file.
- Using Null resources and triggers for custom workflows.
- Planning destruction and resource tainting.
Security and Compliance
- Variable validation and sensitive data marking.
- Sentinel and OPA policy-as-code alternatives suitable for on-premise use.
- Audit logging and plan file review processes.
CI/CD Integration
- Automating plan and apply workflows using GitHub Actions or Woodpecker CI.
- Incorporating Terraform fmt, validate, and lint in pre-commit hooks.
- Cost estimation and establishing budget guardrails.
- Rollback strategies and state recovery procedures.
最低要求
- Intermediate understanding of infrastructure-as-code and cloud concepts.
- Experience with JSON, HCL, and version control systems.
- Familiarity with on-premise virtualization technologies (Proxmox, VMware).
Target Audience
- Infrastructure engineers responsible for provisioning bare metal and private cloud environments.
- DevOps teams managing on-premise resources through declarative methods.
- Organizations seeking to avoid relying on cloud control planes for infrastructure state management.
14 小時
客戶評論 (3)
節奏總體非常出色。Michal非常擅長確保觀衆參與,並確保大部分人都能跟上進度。
Asif Shaikh - Carpmaels & Ransford
課程 - Terraform on Microsoft Azure
機器翻譯
通過編寫實際代碼,檢查所有細節
Michal Pipala - EY
課程 - Advanced Terraform: Efficient Infrastructure as Code
機器翻譯
講師準備得非常充分
Federico Biavati - CRIF S.P.A.
課程 - Terraform for Managing Cloud Infrastructure
機器翻譯