CNCF [Cloud Native Computing Foundation] Courses

Bridging Mesh Enclaves - Securing and Maintaining Mesh Heterogeneity

See how SPIFFE and SPIRE establish trust for workloads across Istio and custom Envoy meshes.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Level Up Your Security Career with the TAG Security Community

A TAG Security collaborator traces how community participation connects practitioners with CNCF project security work and emerging industry directions.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Where Does Your Software Really Come From - Artifact Attestations and Open Source Verification

Artifact attestations create an unforgeable, verifiable paper trail showing where open-source software comes from and how it was built.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

How to Generate VEX Automatically for Your Project

Learn how automated VEX generation can reduce false positives and help project users focus on exploitable vulnerabilities.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Learn to Navigate the Perils and Pitfalls of Multi-Tenant Identity Infrastructure

Examines tradeoffs in multi-tenant identity systems, from shared platforms and tenant isolation to policy enforcement and user experience.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Implementing Transaction Tokens with Keycloak for API Request Authentication

See how OAuth 2.0 token exchange can issue transaction tokens that let downstream workloads identify call chains, with an implementation using Keycloak.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

How to Secure and Observe with Cilium - Different Angles

Explore how different projects in the Cilium family offer distinct perspectives for securing applications and workloads.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Amplifying Impact: Documentation and Supply Chain Security

Teams with high-quality documentation are more likely to adopt security practices; the talk explores how documentation can support security efforts.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

End-to-End Encryption for Container Checkpointing in Kubernetes

Learn how container checkpoint snapshots can expose sensitive memory, and how end-to-end encryption can protect them in Kubernetes.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

User Namespaces in Kubernetes - Security and Flexibility

See how Linux user namespaces strengthen container isolation and allow Docker to run inside a container without privileged mode.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Shadow Vulnerabilities in AI/ML Data Stacks - What You Don't Know Can Hurt You

Explore why conventional code scanners miss vulnerabilities in AI model checkpoints, and how runtime context and eBPF can help detect them.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Guardians of the Dataverse - Securing the AI Supply and Data Chain

Explore how software supply chain security strategies and open source controls can protect AI/ML pipelines and the data behind them.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

SPIFFE Ecosystem: MTLS and Identity with Linkerd and Teleport

A practical demonstration of Linkerd and Teleport using SPIFFE identities together to secure Kubernetes and workloads outside the cluster.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

A Needle in a Haystack: Finding Threats in Billions of Cloud Logs

Learn how to reduce billions of cloud audit log records to actionable threat alerts with a custom detection platform and analytics.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Hacking Istio: The Good, the Bad, and the Misconfigured

A hands-on tutorial where participants find and exploit Istio security misconfigurations, including access-control considerations in Ambient mode.

• YouTube
• 44 minutes
• Self-Paced
• Free Video