CNCF [Cloud Native Computing Foundation] Courses

Nix, Kubernetes, and the Pursuit of Reproducibility

An exploration of whether Nix’s reproducibility and package model can simplify Kubernetes infrastructure and workloads enough to justify its trade-offs.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Discovering Chicago Film Sets with MLOps in Kubernetes

See how Kubernetes-based MLOps workflows use Chicago filming-permit data to help identify film locations to visit.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Learnings from Sustainably Steering the Kubernetes Project

Learn how Kubernetes’ Steering Committee sets project-wide direction and uses community group reports to support sustainable open-source governance.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Building Carbon Awareness with KEDA - Taking the First Step Towards Sustainability

See how the Carbon Aware KEDA Operator can reduce software infrastructure’s carbon footprint without application code changes.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

The Future of Kubernetes Auth and Policy Config: Common Expression Language

A look at how Kubernetes is adopting CEL to make authorization and policy configuration more dynamic, including runtime behavior, typing, and possible expansions.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Introducing the BACK Stack - Building an Internal Developer Platform with CNCF Projects

The BACK stack combines four CNCF projects to create an open, composable internal developer platform with self-service workflows and consistent controls.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Challenge to Implementing Scalable Authorization with Keycloak

The talk outlines scalable authorization with Keycloak and OPA, including an architecture designed to avoid a single point of failure and withstand regional outages.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Safeguarding Clusters: Exploring the Benefits and Navigating the Dangers of Admission Controllers

Explore how Kubernetes admission controllers can introduce cluster risks, with a live demo of ways to break, fix, and mitigate them.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Kubernetes Cost Control: Tales of Overspending and Redemption

Learn ways to control Kubernetes cloud spending through cost visibility, right-sizing, discounts, and practices that help avoid costly mistakes.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Getting Buildpacks Ready for the Multi-Architecture Future

Learn how Buildpacks and Builder Images can produce multi-architecture application images, including the challenges of supporting ARM64.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Cloud Native Application Threat Modeling and Adversary Emulation - Techniques and Tools

Explore how data-flow diagrams and attack-surface analysis can model threats in cloud-native applications, then use open-source tools to emulate realistic attacks.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

On-Demand Systems and Scaled Training Using the JobSet API

A demonstration of using the JobSet API to orchestrate large-scale model training and create on-demand HPC systems.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Releasing Kubernetes: Flexible and Fast Delivery of Packages

A look at how Kubernetes’ release team is refining release delivery, including Open Build Service integration for Debian and RPM packages and repository migration.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

K8s Post-Exploitation: Privilege Escalation, Sidecar Container Injection, and Runtime Security

See how attackers hide malware in Kubernetes sidecars, escalate privileges from a compromised pod, and how defenders detect these attacks with audit logs and runtime rules.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

OIDC and Workload Identity in Kubernetes

See how OpenID Connect enables Kubernetes workloads to access public cloud resources without distributing individual service account credentials.

• YouTube
• 35 minutes
• Self-Paced
• Free Video