CNCF [Cloud Native Computing Foundation] Courses

ADHD: Understanding, Awareness, and Inclusivity in Cloud-Native Communities

1 rating

Exploring ADHD in tech: Neurodivergent speakers share experiences, insights, and tips for recognizing and supporting ADHD in the cloud-native community, promoting inclusivity and awareness.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Data Integrity Tests in CI/CD Pipelines for Stateful Applications on Kubernetes

1 rating

Explore strategies for managing stateful applications in Kubernetes, integrating data integrity tests into CI/CD pipelines, and automating data workflows for safer, more repeatable deployments.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Building Monorepo gRPC Services with Bazel

1 rating

Explore monorepo and trunk-based development for gRPC services using Bazel, addressing collaboration challenges and enabling efficient multi-language builds.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Data Security - Theoretical and Real World Approaches to Compartmentalization

1 rating

Explore theoretical and practical approaches to data security in cloud environments, covering formal methods, secure languages, and container-based storage solutions for enhanced protection and reliability.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Journey to Cloud-Native, Kubernetes and Securing Clusters

Explore the journey into Cloud-Native technologies, including Linux, containers, Kubernetes, and cluster security. Gain insights for newcomers, especially from underrepresented backgrounds in tech.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Keyless Code Signing Without Fulcio

Explore keyless code signing without Fulcio, understanding its benefits and implementing it with existing PKI solutions like Vault and stepca for hassle-free, secure software signing.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Container Factory for Aerospace and Defense Enterprises

Explore how Collins Aerospace develops a container factory to meet governance and compliance rules for safety-critical software, addressing challenges and integrating innovative solutions for cybersecurity and compliance.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Spicing up Container Image Security with SLSA and GUAC

Explore SLSA and GUAC tools to enhance container image security, verify build provenance, and understand artifact composition for safer deployments in production environments.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Sharing Security Secrets: How to Encourage Security Advocates

Discover strategies for fostering a company-wide security culture, educating non-security teams, and implementing a successful security advocates program to enhance organizational data protection and service availability.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Learning from Supply Chain Failures and Best Practices in Other Industries

Explore supply chain best practices and failures across industries to enhance software supply chain security. Gain insights from physical world processes and apply lessons to critical infrastructure protection.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

12 Essential Requirements for Policy Enforcement and Governance with OSCAL

Explore policy enforcement and governance in Kubernetes using OSCAL. Learn 12 key requirements for multi-cluster environments, focusing on security, compliance, and policy-as-code practices.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Verifying Software Signatures with TUF and Sigstore

Explore secure software verification using TUF and Sigstore. Learn to design effective verification policies, understand signing limitations, and enhance security for open-source repositories and container registries.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Leveraging SBOMs to Automate Packaging, Transfer, and Reporting of Dependencies Between Secure Environments

Explore innovative uses of Software Bill of Materials (SBOMs) for secure asset transfer, dependency management, and cloud-native infrastructure deployments using CycloneDX and open-source tools.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Security Threat Modeling Live from Scratch Session

Hands-on workshop demonstrating lightweight threat modeling for CNCF projects, led by Andrew Martin. Learn practical techniques to identify and mitigate security risks in cloud-native environments.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

CNI or Service Mesh? Comparing Security Policies Across Cloud Native Networking Solutions

Explore recent changes in cloud native networking solutions, comparing CNI and service mesh implementations for security policies, and understanding trade-offs between different approaches.

• YouTube
• 33 minutes
• Self-Paced
• Free Video