CNCF [Cloud Native Computing Foundation] Courses

Avoiding IAC Potholes with Policy and Cloud Controllers

Discover how to secure self-serve cloud infrastructure for Kubernetes teams using policy engines and cloud controllers. Learn to enforce compliance while enabling application teams to provision resources efficiently.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Welcome and Opening Remarks for Cloud Native Computing Foundation Conference

Priyanka Sharma delivers opening remarks, highlighting key developments and future directions in cloud native computing and CNCF-hosted projects.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Unpacking Open Source Security in Public Repositories and Registries

Explore security risks in popular open-source projects and public registries. Learn about common misconfigurations, vulnerabilities, and best practices to safeguard your systems when using public resources.

• YouTube
• 34 minutes
• On-Demand
• Free Video

So You Want to Run Your Own Sigstore - Recommendations for a Secure Setup

Explore secure setups for private Sigstore instances, covering motivations, threat modeling, and operational requirements for enterprise artifact signing and verification.

• YouTube
• 33 minutes
• On-Demand
• Free Video

How to Trust Your Open Source Software Using Scorecards

Explore OSSF Scorecards to assess open source software health, automate risk evaluation, and build dependency policies for informed decision-making in software development.

• YouTube
• 27 minutes
• On-Demand
• Free Video

How to Secure Your Supply Chain at Scale

Learn how Yahoo secures its software supply chain using open-source tools like Grafeas, Sigstore, and Kyverno. Discover strategies for source code scanning, vulnerability management, and protecting Kubernetes deployments at scale.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Standardization and Security - Improving Cloud Security Posture Through Standardization

Explore how Northwestern Mutual enhanced cloud security through standardization, addressing the paradox of choice in development tools and patterns to improve efficiency and reduce vulnerabilities.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Securing Self-Hosted GitHub Actions with Kubernetes and Actions-Runner-Controller

Explore secure deployment of self-hosted GitHub Actions runners using Kubernetes and actions-runner-controller. Learn about cluster settings, controller configurations, and runner pod security for regulated environments.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Application Security for Better Business Value - Expert Insights

Experts discuss how application security practices in cloud-native environments can reduce risks, enhance compliance, and drive innovation, leading to improved business value.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Network Security at Scale: L3 Through L7 at Splunk

Explore Splunk's multi-cloud network security architecture, from VPCs to Istio, addressing scalability, agility, and security challenges across L3 to L7 layers.

• YouTube
• 31 minutes
• On-Demand
• Free Video

More Than Just a Pretty Penny - Why You Need Cybersecurity in Your Culture

Discover strategies to integrate cybersecurity into workplace culture, empowering employees to identify and address potential risks, fostering a safer digital environment for your organization.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Fighting the Next War - Future Threats to OSS and Software Supply Chain Security

Explore future threats to open-source software and supply chain security, discussing emerging attack vectors and strategies for OSS projects to prepare and protect against evolving risks.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Establishing a Production Zero Trust Architecture

Comprehensive guide to implementing Zero Trust Architecture using CNCF technologies, covering workload identities, security policies, DevSecOps, and organizational culture change.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Cryptographic Agility: Preparing Modern Apps for Quantum Safety and Beyond

Explore cryptographic agility for modern apps, focusing on quantum safety. Learn strategies for seamless transitions between cryptography standards and preparing for future cryptographic migrations.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Identity Based Segmentation for Zero Trust Architecture

Explore Zero Trust Architecture implementation using identity-based segmentation, focusing on cloud-to-premises communication through DMZs with identity-aware proxies and service mesh.

• YouTube
• 38 minutes
• On-Demand
• Free Video