CNCF [Cloud Native Computing Foundation] Courses

Good Fences Make Good Neighbors - Making Cross-Namespace References More Secure with ReferenceGrant

Explore secure cross-namespace communication in Kubernetes using ReferenceGrant. Learn how this resource ensures mutual agreement for safer interactions between namespaces in Gateway API.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Modifying the Immutable: Attaching Artifacts to OCI Images

Explore how to attach metadata like attestations, signatures, and SBOMs to OCI images without altering their immutable digest. Learn about standardization, implementation, and potential challenges.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Protecting Kubernetes Clusters When Administrators Quit - Revoking Access and Best Practices

Explore strategies for revoking access to Kubernetes clusters when administrators or users leave, addressing real-world security challenges and best practices for minimal disruption.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Security That Enables - Breaking Down Security Silos in the DevOps Ecosystem

Explore strategies to integrate security seamlessly into DevOps, addressing challenges in CI/CD workflows and learning from real-world breaches to enable confident, secure deployments.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Cloud Native Security Whitepapers Overview

Overview of TAG Security's whitepapers and reference architectures for cloud native security, covering topics like supply chain security, zero knowledge, and security controls mapping.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Container Patching: Making It Less Gross Than the Seattle Gum Wall

Explore strategies for efficient container patching, including prevention, detection, fixing, and monitoring. Learn about opensource tools and best practices to streamline the process and meet security requirements.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Delivering Secure Healthcare Applications with Open Source Software

Explore how open-source software enables secure, standardized Kubernetes-based platforms in regulated healthcare environments, focusing on efficiency, compliance, and cultural change.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Hands-on Hacking Kubernetes and Ways to Prevent It

Hands-on workshop exploring Kubernetes vulnerabilities and prevention strategies. Demonstrates remote code execution exploit and teaches mitigation techniques for enhanced container security.

• YouTube
• 1 hour 13 minutes
• Self-Paced
• Free Video

Digital Forensics and Incident Response in Containerized Environments

Explore Digital Forensics and Incident Response (DFIR) techniques for containerized applications, focusing on Kubernetes. Learn best practices for evidence collection and incident containment in modern cloud environments.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

A Sneak Peek Into Open Source Security Reviews

Explore open source security reviews, their importance, and differences from audits. Learn about TAG contributions to the upcoming Security guide and how to get involved in its development.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Solving Multi-Service Communication Without a Service Mesh

Explore Kubernetes primitives for secure microservices communication without service mesh. Learn about NetworkPolicy, token projection, API gateways, and more for authentication, encryption, and compliance.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Refactor Monolithic Application with Konveyor Data Gravity Insights

Learn to refactor monolithic applications using Konveyor Data Gravity Insights, enhancing application performance and scalability in cloud-native environments.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Cloud Cost Monitoring with OpenCost and Kubernetes Optimization Strategies

Explore OpenCost for Kubernetes cost monitoring and learn optimization strategies for workloads, infrastructure, and operating systems to enhance cloud efficiency.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Cloud Custodian - Proactive Governance of Your Cloud, Cluster, and Code

Discover proactive governance for cloud, cluster, and code with Cloud Custodian. Learn to manage resources efficiently and enhance security across your infrastructure.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Avoiding IAC Potholes with Policy and Cloud Controllers

Discover how to secure self-serve cloud infrastructure for Kubernetes teams using policy engines and cloud controllers. Learn to enforce compliance while enabling application teams to provision resources efficiently.

• YouTube
• 41 minutes
• Self-Paced
• Free Video