Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Infrastructure-as-Code Sovereignty
- Assessing operational risks associated with cloud-based consoles and SaaS IaC platforms, specifically vendor dependency and audit trail deficiencies.
- Analyzing Terraform architectural components, including core elements, provider mechanisms, state management protocols, and the plan/apply execution workflow.
- Conducting a comparative evaluation of Terraform against alternative tools such as Pulumi, Ansible, and CloudFormation for government applications.
Configuration Language and Providers
- Developing proficiency in HCL syntax for defining resources, data sources, variables, and output parameters.
- Configuring on-premise infrastructure providers, including Proxmox, libvirt, vSphere, and PowerDNS.
- Exploring community-supported providers and the foundational aspects of custom provider development for government needs.
- Analyzing resource dependencies and the graph theory principles underpinning dependency resolution.
State Management
- Evaluating the security implications of local versus remote state storage methods for government data handling.
- Establishing self-hosted backend solutions using PostgreSQL, S3-compatible storage (MinIO), Gitea, and etcd.
- Implementing state locking mechanisms, encryption at rest, and robust backup protocols to ensure integrity.
- Managing state migration processes and detecting configuration drift to maintain compliance.
Modules and Workspaces
- Designing modular structures with defined inputs, outputs, and versioning best practices.
- Creating private module registries utilizing Git tags to secure code assets.
- Ensuring environment isolation across development, staging, and production sectors via workspace management.
- Utilizing self-hosted alternatives to proprietary cloud services, such as Atlantis or Spacelift, for government control.
Provisioning and Lifecycle
- Integrating cloud-init and PXE technologies for bare-metal provisioning scenarios.
- Deploying provisioners including local-exec, remote-exec, and file transfer mechanisms.
- Utilizing null resources and trigger mechanisms to construct custom automation workflows.
- Managing resource destruction, planning phases, and tainting processes to ensure safe rollbacks.
Security and Compliance
- Enforcing variable validation rules and properly classifying sensitive data for government security standards.
- Implementing policy-as-code frameworks for on-premise environments using Sentinel or Open Policy Agent (OPA) alternatives.
- Establishing comprehensive audit logging and formal plan file review procedures to enhance accountability.
CI/CD Integration
- Automating plan and apply workflows within GitHub Actions or Woodpecker CI pipelines.
- Incorporating
terraform fmt,validate, and linting tools into pre-commit hooks to ensure code quality. - Configuring cost estimation models and budget guardrails for fiscal oversight.
- Developing comprehensive rollback strategies and state recovery procedures to mitigate operational risks.
Requirements
- Intermediate understanding of infrastructure-as-code concepts and cloud computing fundamentals.
- Practical experience with JSON, HCL (HashiCorp Configuration Language), and version control systems.
- Familiarity with on-premise virtualization platforms such as Proxmox and VMware.
Audience
- Infrastructure engineers responsible for provisioning bare metal servers and private cloud resources.
- DevOps teams managing on-premise resources through declarative configuration.
- Organizations actively seeking to avoid reliance on external cloud control planes for managing infrastructure state for government purposes.
Testimonials (1)
The trainer was very knowledgeable and easy to talk to, he helped with troubleshooting issues for some of the participants and answered all the questions. Course material was good and had a lot of examples.
