CNCF [Cloud Native Computing Foundation] Courses

Hands-on Hacking Kubernetes and Ways to Prevent It

Hands-on workshop exploring Kubernetes vulnerabilities and prevention strategies. Demonstrates remote code execution exploit and teaches mitigation techniques for enhanced container security.

• YouTube
• 1 hour 13 minutes
• On-Demand
• Free Video

Digital Forensics and Incident Response in Containerized Environments

Explore Digital Forensics and Incident Response (DFIR) techniques for containerized applications, focusing on Kubernetes. Learn best practices for evidence collection and incident containment in modern cloud environments.

• YouTube
• 39 minutes
• On-Demand
• Free Video

A Sneak Peek Into Open Source Security Reviews

Explore open source security reviews, their importance, and differences from audits. Learn about TAG contributions to the upcoming Security guide and how to get involved in its development.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Solving Multi-Service Communication Without a Service Mesh

Explore Kubernetes primitives for secure microservices communication without service mesh. Learn about NetworkPolicy, token projection, API gateways, and more for authentication, encryption, and compliance.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Refactor Monolithic Application with Konveyor Data Gravity Insights

Learn to refactor monolithic applications using Konveyor Data Gravity Insights, enhancing application performance and scalability in cloud-native environments.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Cloud Cost Monitoring with OpenCost and Kubernetes Optimization Strategies

Explore OpenCost for Kubernetes cost monitoring and learn optimization strategies for workloads, infrastructure, and operating systems to enhance cloud efficiency.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Cloud Custodian - Proactive Governance of Your Cloud, Cluster, and Code

Discover proactive governance for cloud, cluster, and code with Cloud Custodian. Learn to manage resources efficiently and enhance security across your infrastructure.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Avoiding IAC Potholes with Policy and Cloud Controllers

Discover how to secure self-serve cloud infrastructure for Kubernetes teams using policy engines and cloud controllers. Learn to enforce compliance while enabling application teams to provision resources efficiently.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Welcome and Opening Remarks for Cloud Native Computing Foundation Conference

Priyanka Sharma delivers opening remarks, highlighting key developments and future directions in cloud native computing and CNCF-hosted projects.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Unpacking Open Source Security in Public Repositories and Registries

Explore security risks in popular open-source projects and public registries. Learn about common misconfigurations, vulnerabilities, and best practices to safeguard your systems when using public resources.

• YouTube
• 34 minutes
• On-Demand
• Free Video

So You Want to Run Your Own Sigstore - Recommendations for a Secure Setup

Explore secure setups for private Sigstore instances, covering motivations, threat modeling, and operational requirements for enterprise artifact signing and verification.

• YouTube
• 33 minutes
• On-Demand
• Free Video

How to Trust Your Open Source Software Using Scorecards

Explore OSSF Scorecards to assess open source software health, automate risk evaluation, and build dependency policies for informed decision-making in software development.

• YouTube
• 27 minutes
• On-Demand
• Free Video

How to Secure Your Supply Chain at Scale

Learn how Yahoo secures its software supply chain using open-source tools like Grafeas, Sigstore, and Kyverno. Discover strategies for source code scanning, vulnerability management, and protecting Kubernetes deployments at scale.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Standardization and Security - Improving Cloud Security Posture Through Standardization

Explore how Northwestern Mutual enhanced cloud security through standardization, addressing the paradox of choice in development tools and patterns to improve efficiency and reduce vulnerabilities.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Securing Self-Hosted GitHub Actions with Kubernetes and Actions-Runner-Controller

Explore secure deployment of self-hosted GitHub Actions runners using Kubernetes and actions-runner-controller. Learn about cluster settings, controller configurations, and runner pod security for regulated environments.

• YouTube
• 41 minutes
• On-Demand
• Free Video