Intrati in legatura

Schița de curs

Infrastructure-as-Code Sovereignty

  • Why cloud consoles and SaaS IaC create lock-in and audit gaps.
  • Terraform architecture: core, providers, state, and plan/apply.
  • Comparison with Pulumi, Ansible, and CloudFormation.

Configuration Language and Providers

  • HCL syntax: resources, data sources, variables, outputs.
  • On-premise providers: Proxmox, libvirt, vSphere, and PowerDNS.
  • Community providers and custom provider development basics.
  • Resource dependencies and graph theory.

State Management

  • Local state vs remote state security implications.
  • Self-hosted backends: PostgreSQL, S3 (MinIO), Gitea, and etcd.
  • State locking, encryption at rest, and backup.
  • State migration and drift detection.

Modules and Workspaces

  • Module structure, inputs, outputs, and versioning.
  • Private module registries with Git tags.
  • Workspace isolation for dev/staging/production.
  • Terraform Cloud alternative: self-hosted Atlantis or Spacelift.

Provisioning and Lifecycle

  • Cloud-init and PXE integration for bare-metal provisioning.
  • Provisioners: local-exec, remote-exec, and file.
  • Null resources and triggers for custom workflows.
  • Destroy planning and resource tainting.

Security and Compliance

  • Variable validation and sensitive marking.
  • Sentinel and OPA policy-as-code alternatives for on-premise.
  • Audit logging and plan file review processes.

CI/CD Integration

  • Automated plan/apply in GitHub Actions or Woodpecker CI.
  • Terraform fmt, validate, and lint in pre-commit.
  • Cost estimation and budget guardrails.
  • Rollback strategies and state recovery.

Cerințe

  • Intermediate infrastructure-as-code and cloud concepts.
  • Experience with JSON, HCL, and version control.
  • Familiarity with on-premise virtualization (Proxmox, VMware).

Audience

  • Infrastructure engineers provisioning bare metal and private cloud.
  • DevOps teams managing on-premise resources declaratively.
  • Organizations avoiding cloud control planes for infrastructure state.
 14 Ore

Numărul de participanți


Pret per participant

Mărturii (2)

Cursuri viitoare

Categorii înrudite