CNCF [Cloud Native Computing Foundation] Courses

Solving Multi-Service Communication Without a Service Mesh

Explore Kubernetes primitives for secure microservices communication without service mesh. Learn about NetworkPolicy, token projection, API gateways, and more for authentication, encryption, and compliance.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Refactor Monolithic Application with Konveyor Data Gravity Insights

Learn to refactor monolithic applications using Konveyor Data Gravity Insights, enhancing application performance and scalability in cloud-native environments.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Cloud Cost Monitoring with OpenCost and Kubernetes Optimization Strategies

Explore OpenCost for Kubernetes cost monitoring and learn optimization strategies for workloads, infrastructure, and operating systems to enhance cloud efficiency.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Cloud Custodian - Proactive Governance of Your Cloud, Cluster, and Code

Discover proactive governance for cloud, cluster, and code with Cloud Custodian. Learn to manage resources efficiently and enhance security across your infrastructure.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Avoiding IAC Potholes with Policy and Cloud Controllers

Discover how to secure self-serve cloud infrastructure for Kubernetes teams using policy engines and cloud controllers. Learn to enforce compliance while enabling application teams to provision resources efficiently.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Welcome and Opening Remarks for Cloud Native Computing Foundation Conference

Priyanka Sharma delivers opening remarks, highlighting key developments and future directions in cloud native computing and CNCF-hosted projects.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Unpacking Open Source Security in Public Repositories and Registries

Explore security risks in popular open-source projects and public registries. Learn about common misconfigurations, vulnerabilities, and best practices to safeguard your systems when using public resources.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

So You Want to Run Your Own Sigstore - Recommendations for a Secure Setup

Explore secure setups for private Sigstore instances, covering motivations, threat modeling, and operational requirements for enterprise artifact signing and verification.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

How to Trust Your Open Source Software Using Scorecards

Explore OSSF Scorecards to assess open source software health, automate risk evaluation, and build dependency policies for informed decision-making in software development.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

How to Secure Your Supply Chain at Scale

Learn how Yahoo secures its software supply chain using open-source tools like Grafeas, Sigstore, and Kyverno. Discover strategies for source code scanning, vulnerability management, and protecting Kubernetes deployments at scale.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Standardization and Security - Improving Cloud Security Posture Through Standardization

Explore how Northwestern Mutual enhanced cloud security through standardization, addressing the paradox of choice in development tools and patterns to improve efficiency and reduce vulnerabilities.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Securing Self-Hosted GitHub Actions with Kubernetes and Actions-Runner-Controller

Explore secure deployment of self-hosted GitHub Actions runners using Kubernetes and actions-runner-controller. Learn about cluster settings, controller configurations, and runner pod security for regulated environments.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Application Security for Better Business Value - Expert Insights

Experts discuss how application security practices in cloud-native environments can reduce risks, enhance compliance, and drive innovation, leading to improved business value.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Network Security at Scale: L3 Through L7 at Splunk

Explore Splunk's multi-cloud network security architecture, from VPCs to Istio, addressing scalability, agility, and security challenges across L3 to L7 layers.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

More Than Just a Pretty Penny - Why You Need Cybersecurity in Your Culture

Discover strategies to integrate cybersecurity into workplace culture, empowering employees to identify and address potential risks, fostering a safer digital environment for your organization.

• YouTube
• 29 minutes
• Self-Paced
• Free Video