CNCF [Cloud Native Computing Foundation] Courses

From Kubernetes to PaaS to Developer Control Planes

Explore the evolution from Kubernetes to developer control planes, discussing full-cycle development, service ownership, and real-world examples from major tech companies.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Replacing PSPs - Keep Bad Pods out of Your Cluster Using Kyverno

Explore Kyverno for Kubernetes security: replace PSPs, enforce Pod security standards, and generate policy reports. Learn to keep bad Pods out and improve cluster security posture.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

The State of Vulnerability in Cloud Native Security

Análisis de vulnerabilidades en herramientas nativas de la nube, presentando resultados de auditorías de seguridad y ofreciendo recomendaciones para mejorar la seguridad en proyectos de código abierto.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Protecting the Omniverse - How NVIDIA is Securing Containers

Discover NVIDIA's approach to container security, integrating automated checks into CI/CD pipelines for early issue detection and resolution, empowering development teams with decentralized policies.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Data Security and Storage Hardening in Rook and Ceph

Explore security options for Rook with Ceph, including threat modeling, encryption, access controls, and infrastructure hardening for robust data protection in container-based storage systems.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

Security Chaos Engineering for Cloud Native Infrastructure

Explore Security Chaos Engineering for proactive cloud-native security. Learn to inject controlled faults, analyze mechanisms, identify blind spots, and enhance resilience against cyber threats.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

SBOM: The Rest of the Story - Understanding Software Bill of Materials

Experts discuss Software Bill of Materials (SBOM), addressing misconceptions, sharing challenges, and exploring implementation strategies for enhanced software supply chain security.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Change is Hard - Securing the Future Today

Explore the socio-technical challenges of implementing modern security practices, blending research and anecdotes to address resistance to change and holistic problem-solving approaches.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Security TAG Closing - Highlights and Future Work

Wrap-up of Cloud Native Security Con, highlighting Security TAG's work, future plans, and ways to get involved. Covers whitepapers, assessments, audits, and ecosystem insights.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

The Long and Windy Road to Cloud Native Security

Explore cloud-native security strategies, from leadership buy-in to InfoSec collaboration. Learn to establish scalable programs, engage with organizational structures, and leverage upstream communities for guidance.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Cryptographic Signatures - A Building Block Not A Panacea

Explore cryptographic signatures in software supply chain security, their benefits, limitations, and effective implementation strategies for cloud-native applications.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Correlating Signals in OpenTelemetry - Benefits, Stories, and Future Developments

Explore OpenTelemetry's advanced capabilities for correlating traces, metrics, and logs, enabling seamless investigations across services and infrastructure. Learn from real-world examples and future developments.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Fluentd and Fluent Bit - Observability Pipelines for Logging and Metrics

Explore unified observability with Fluentd and Fluent Bit, covering log and metric collection, processing, and integration with Prometheus for enhanced monitoring in production environments.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

SIG-Autoscaling: Introduction and HPA/VPA Updates

Explore Kubernetes autoscaling features, including horizontal, vertical, and cluster autoscalers. Learn to optimize efficiency and cost savings through proper configuration and upcoming enhancements.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

SPIFFE: In Theory and Practice - Deep Dive and Q&A

Explore SPIFFE's vision, components, and role in cloud-native environments. Learn about the SPIFFE specification, IDs, naming, and trust domains in this informative deep dive with Q&A.

• YouTube
• 36 minutes
• Self-Paced
• Free Video