Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Infrastructure-as-Code Sovereignty
- Why cloud consoles and SaaS IaC create lock-in and audit gaps.
- Terraform architecture: core, providers, state, and plan/apply.
- Comparison with Pulumi, Ansible, and CloudFormation.
Configuration Language and Providers
- HCL syntax: resources, data sources, variables, outputs.
- On-premise providers: Proxmox, libvirt, vSphere, and PowerDNS.
- Community providers and custom provider development basics.
- Resource dependencies and graph theory.
State Management
- Local state vs remote state security implications.
- Self-hosted backends: PostgreSQL, S3 (MinIO), Gitea, and etcd.
- State locking, encryption at rest, and backup.
- State migration and drift detection.
Modules and Workspaces
- Module structure, inputs, outputs, and versioning.
- Private module registries with Git tags.
- Workspace isolation for dev/staging/production.
- Terraform Cloud alternative: self-hosted Atlantis or Spacelift.
Provisioning and Lifecycle
- Cloud-init and PXE integration for bare-metal provisioning.
- Provisioners: local-exec, remote-exec, and file.
- Null resources and triggers for custom workflows.
- Destroy planning and resource tainting.
Security and Compliance
- Variable validation and sensitive marking.
- Sentinel and OPA policy-as-code alternatives for on-premise.
- Audit logging and plan file review processes.
CI/CD Integration
- Automated plan/apply in GitHub Actions or Woodpecker CI.
- Terraform fmt, validate, and lint in pre-commit.
- Cost estimation and budget guardrails.
- Rollback strategies and state recovery.
Requirements
- Intermediate infrastructure-as-code and cloud concepts.
- Experience with JSON, HCL, and version control.
- Familiarity with on-premise virtualization (Proxmox, VMware).
Audience
- Infrastructure engineers provisioning bare metal and private cloud.
- DevOps teams managing on-premise resources declaratively.
- Organizations avoiding cloud control planes for infrastructure state.
14 Hours
Testimonials (3)
pacing for the most part was fantastic. Michal was very good at ensuring the audience were engaged and ensured everyone was following along for the most part
Asif Shaikh - Carpmaels & Ransford
Course - Terraform on Microsoft Azure
Checking all the details in practice - by writing real code
Michal Pipala - EY
Course - Advanced Terraform: Efficient Infrastructure as Code
the instructor was very well prepared
