CNCF [Cloud Native Computing Foundation] Courses

How to Survive Managing Strimzi in an Enterprise

Lessons from running Kafka for a large enterprise lead to a topic management approach that maps owners and applications and lets teams administer their own topics.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Advanced Kubernetes Integrations with wasmCloud

Explore advanced ways to integrate wasmCloud with Kubernetes.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Free Video

API Security: Code-to-Cloud Context for Complete Protection

An integrated code-to-runtime approach connects API inventory with runtime protection to address security weaknesses across the development lifecycle.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Fine-Tuning Auto-Instrumentation for Observability

Learn how to tune automatic instrumentation configurations to capture useful telemetry while removing data you don’t need.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Detection Engineering in Kubernetes Environments - Wrangling Security Data Out of Your Clusters

Learn how Kubernetes logs and data sources can feed SIEMs and data lakes to build detections for malicious activity and risky configurations.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Toward Zero Trust with AI

See how K8sGPT helps operators advance Zero Trust in cloud-native environments through system guidance, event integration, and security tools.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Using Large Language Models to Improve Data Loss Prevention in Organizations

Explains how large language models can detect sensitive document categories that pattern matching misses, improving organizational data loss prevention.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Secure by Design: Strategies for LLM Adoption in Cloud-Native Environments

A practical threat-modeling approach to securing LLM applications in cloud-native environments, including RAG privacy and AI-agent risks.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Below the Radar: Identifying Hidden Threats Within the Development Ecosystem

Explore how exposed secrets hide in development tools and Kubernetes, how secret scanning can uncover them, and how these weaknesses enable supply chain attacks.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Navigating the Quantum Readiness Journey: Securing Kubernetes with Quantum-Resistant Cryptography

Explore quantum-resistant cryptography through demonstrations securing Kubernetes, containers, and software supply chains.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Security as a Culture: The Distributed Advocacy Approach

Security becomes part of development when advocates and developers share responsibility, embedding security requirements and compliance into the product’s core specifications.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Avengers Assemble: Threat Modeling Kubernetes Clusters at Massive Scale

The talk applies threat modeling to Kubernetes services, tracing access and data-exfiltration points to security controls.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Leveraging the Linux Kernel for Building a Zero-Trust Environment Without a Service Mesh

A kernel module brings mutual TLS and workload access control into the Linux kernel, avoiding service mesh overhead and application changes.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

CSI Forensics - Unraveling Kubernetes Crime Scenes

Learn how to preserve compromised Kubernetes applications for sandbox analysis and examine container evidence with memory forensics tools.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

CVE Context Matters - Prioritizing Vulnerabilities in Cloud-Native Projects

Learn how to judge which vulnerabilities matter in cloud-native projects and prioritize what vulnerability scanners should flag.

• YouTube
• 30 minutes
• Self-Paced
• Free Video