Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Infrastructure-as-Code Sovereignty
- Understanding how cloud consoles and SaaS-based IaC create lock-in and audit gaps.
- Terraform architecture: core components, providers, state management, and the plan/apply workflow.
- Comparison with Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- HCL syntax: resources, data sources, variables, and outputs.
- On-premise providers: Proxmox, libvirt, vSphere, and PowerDNS.
- Overview of community providers and basics of custom provider development.
- Resource dependencies and graph theory concepts.
State Management
- Security implications of local state versus remote state.
- Self-hosted backends: PostgreSQL, S3 (MinIO), Gitea, and etcd.
- State locking, encryption at rest, and backup strategies.
- State migration and drift detection techniques.
Modules and Workspaces
- Module structure, inputs, outputs, and versioning.
- Establishing private module registries using Git tags.
- Workspace isolation for dev, staging, and production environments.
- Self-hosted alternatives to Terraform Cloud: Atlantis or Spacelift.
Provisioning and Lifecycle
- Cloud-init and PXE integration for bare-metal provisioning.
- Provisioners: local-exec, remote-exec, and file.
- Using Null resources and triggers for custom workflows.
- Planning destruction and resource tainting.
Security and Compliance
- Variable validation and sensitive data marking.
- Sentinel and OPA policy-as-code alternatives suitable for on-premise use.
- Audit logging and plan file review processes.
CI/CD Integration
- Automating plan and apply workflows using GitHub Actions or Woodpecker CI.
- Incorporating Terraform fmt, validate, and lint in pre-commit hooks.
- Cost estimation and establishing budget guardrails.
- Rollback strategies and state recovery procedures.
Requirements
- Intermediate understanding of infrastructure-as-code and cloud concepts.
- Experience with JSON, HCL, and version control systems.
- Familiarity with on-premise virtualization technologies (Proxmox, VMware).
Target Audience
- Infrastructure engineers responsible for provisioning bare metal and private cloud environments.
- DevOps teams managing on-premise resources through declarative methods.
- Organizations seeking to avoid relying on cloud control planes for infrastructure state management.
14 Hours
Testimonials (3)
pacing for the most part was fantastic. Michal was very good at ensuring the audience were engaged and ensured everyone was following along for the most part
Asif Shaikh - Carpmaels & Ransford
Course - Terraform on Microsoft Azure
Checking all the details in practice - by writing real code
Michal Pipala - EY
Course - Advanced Terraform: Efficient Infrastructure as Code
the instructor was very well prepared
