CNCF [Cloud Native Computing Foundation] Courses

Proactive Kubernetes Security: Anomaly Detection and Runtime Alerting in Kubernetes Workloads

See how workload behavior baselines can expose anomalous Kubernetes activity, with a KubeCop demonstration across real attack scenarios.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

All I Know About Cybersecurity I Learned from Fungus

Using fungal growth and parasitic infections as analogies, the talk draws cybersecurity lessons for defending cloud-native applications.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Kubernetes Node Firewalling from the Inside Out

Explores declarative ways to secure Kubernetes node host networks, where standard Kubernetes network policy leaves a gap.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Threat Modelling: How to Improve Your Kubernetes Security Posture

A non-conventional threat modeling methodology helps development and SRE teams identify emerging threats in complex Kubernetes environments.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Leveraging Cryptographic Lineage for Context and Connected Trust

Shows how cryptographic lineage and attested claims can add context, traceability, and a chain of custody to distributed transactions.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

The Runtime Rodeo - Taming Open Source Image Behavior

Explores a proposed standard for cryptographically verified runtime fingerprints of open source images to strengthen software supply chain verification.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Securing CI/CD Runners Through eBPF Agent

A walkthrough of attacks against development pipelines and an eBPF agent designed to detect them.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Cloud Native Governance, Risk, and Compliance - Policy-as-Code Applications

Policy-as-code turns cloud-native governance into continuous, automated audits that track compliance across infrastructure and applications.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

A Mouthful of Mayhem: Taste Test and Gut Response to SLSA, GUAC, and Supply Chain Security

A tour of SLSA, GUAC, and other software supply chain tools, showing how organizations can combine them to respond to supply chain threats.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Embracing the Future: Effortless Mutual TLS and Rich Layer 7 Authorization Policy Without Sidecars

An Istio two-layer design removes sidecars while enabling mutual TLS and rich Layer 7 authorization policies.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Implementing a Multi-Tenant, Relationship-Based Authorization Model with OpenFGA

A case study of replacing custom database-backed permissions with OpenFGA to model hierarchical, relationship-based authorization in a multi-tenant service.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Drawing Lines in the Sand - Running Unprivileged eBPF in Kubernetes

Maps Linux capabilities to eBPF instrumentation requirements, showing when Kubernetes workloads can run without privileged mode.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Demystifying and Enabling Workload Identity Across the Cloud Native Ecosystem

Explore how workload identities replace long-lived credentials, and use SPIFFE and SPIRE to secure systems across cloud and other environments.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Free Video

Kyverno Policy Writing and Image Verification - Part 2

A follow-up to Kyverno that explores writing custom policies and verifying container images.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

What Could Go Wrong with a GraphQL Query and Can OpenTelemetry Help?

A look at how OpenTelemetry can help diagnose failures and performance problems in GraphQL services running in production.

• YouTube
• 18 minutes
• Self-Paced
• Free Video