CNCF [Cloud Native Computing Foundation] Courses

Kubernetes Benchmark Report 2023 - What's Working and What's Not

Explore key findings from the 2023 Kubernetes Benchmark Report, covering reliability, security, and efficiency in cloud-native environments.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Detecting Crypto-Jacking in Kubernetes Workloads

Detect crypto-jacking in Kubernetes workloads using Falco. Learn to create rules, test environments, and implement security measures for cloud-native applications.

• YouTube
• 57 minutes
• On-Demand
• Free Video

Zero Trust in the Cloud with WebAssembly and WasmCloud

Explore WebAssembly and WasmCloud for enhanced cloud security. Learn about sandbox isolation, cryptographic signatures, and verifiable capability models to deploy secure, untrusted code with confidence.

• YouTube
• 33 minutes
• On-Demand
• Free Video

SBOMs, VEX, and Kubernetes - Software Supply Chain Security in Cloud Native Environments

Explore software supply chain security with experts discussing SBOMs, VEX, and their practical applications in Kubernetes environments, from open-source projects to regulated industries.

• YouTube
• 36 minutes
• On-Demand
• Free Video

How to Build a Kubernetes Admission Controller from Scratch - Tutorial

Learn to build a Kubernetes admission controller from scratch, exploring fundamentals, installation, and Python implementation. Gain hands-on experience in enhancing cluster security and policy enforcement.

• YouTube
• 1 hour 23 minutes
• On-Demand
• Free Video

Self Healing GitOps - Continuous, Secure GitOps Using Argo CD, Helm and OPA

Explore continuous, secure GitOps using Argo CD, Helm, and OPA. Learn to automate secure deployments, ensure compliance, and implement self-healing GitOps for Kubernetes clusters.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Handling JWTs: Understanding Common Pitfalls

Explore JWT authentication, common pitfalls, and security best practices. Learn about JWT structure, verification, and protection against attacks like algorithm confusion and secret brute-forcing.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Journey to Cloud-Native, Kubernetes and Securing Clusters

Explore the journey into Cloud-Native technologies, including Linux, containers, Kubernetes, and cluster security. Gain insights for newcomers, especially from underrepresented backgrounds in tech.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Keyless Code Signing Without Fulcio

Explore keyless code signing without Fulcio, understanding its benefits and implementing it with existing PKI solutions like Vault and stepca for hassle-free, secure software signing.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Container Factory for Aerospace and Defense Enterprises

Explore how Collins Aerospace develops a container factory to meet governance and compliance rules for safety-critical software, addressing challenges and integrating innovative solutions for cybersecurity and compliance.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Spicing up Container Image Security with SLSA and GUAC

Explore SLSA and GUAC tools to enhance container image security, verify build provenance, and understand artifact composition for safer deployments in production environments.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Sharing Security Secrets: How to Encourage Security Advocates

Discover strategies for fostering a company-wide security culture, educating non-security teams, and implementing a successful security advocates program to enhance organizational data protection and service availability.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Learning from Supply Chain Failures and Best Practices in Other Industries

Explore supply chain best practices and failures across industries to enhance software supply chain security. Gain insights from physical world processes and apply lessons to critical infrastructure protection.

• YouTube
• 30 minutes
• On-Demand
• Free Video

12 Essential Requirements for Policy Enforcement and Governance with OSCAL

Explore policy enforcement and governance in Kubernetes using OSCAL. Learn 12 key requirements for multi-cluster environments, focusing on security, compliance, and policy-as-code practices.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Verifying Software Signatures with TUF and Sigstore

Explore secure software verification using TUF and Sigstore. Learn to design effective verification policies, understand signing limitations, and enhance security for open-source repositories and container registries.

• YouTube
• 36 minutes
• On-Demand
• Free Video