CNCF [Cloud Native Computing Foundation] Courses

Gateway API - A New Set of Kubernetes APIs for Advanced Traffic Routing

See how Kubernetes Gateway API enables advanced traffic routing across implementations, with demos of traffic splitting, header matching, and load balancing.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Hacking into Kubernetes Security for Beginners

A beginner-oriented overview of Kubernetes security that builds a mental framework by exploiting weaknesses in cluster controls, Linux, code, and dependencies.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Building a Community - How Cortex Went from a Vendor Project to a Community

Learn how Cortex grew from a vendor-driven project into a wider community through better documentation, regular communication, and end-user participation.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Building the Multi-Cluster Data Layer

See how a distributed SQL database can keep persistent data globally accessible across Kubernetes clusters, including during a regional outage.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

BuildKit CLI for kubectl - A New Way to Build Container Images

Build Docker images inside a Kubernetes cluster with a kubectl plugin that makes them available immediately for testing.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Writing for Developers - Take Your Project Docs to the Next Level

Use the hero’s journey and user goals to rethink developer documentation, revise an existing project page, and draft feature docs from scratch.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Secrets Store CSI Driver - Keeping Secrets Secret

See how the Secrets Store CSI Driver mounts and rotates secrets from external stores in Kubernetes applications, with trade-offs and portability considerations.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Enhancing Kubernetes with the Security Profiles Operator

The Security Profiles Operator brings seccomp profile management into Kubernetes through cloud-native APIs, with a demonstration of securing workloads.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

The Art of Hiding Yourself

Examines how attackers hide their traces after compromising a Kubernetes cluster, from tampering with audit logs to concealing processes, files, and network connections.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Multi-Cluster Service Deployments with Operators and KubeCarrier

See how Kubernetes operators, KubeCarrier, and Submariner coordinate services across clusters, including cross-cluster communication and multi-tenant deployments.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Get In Containerds, We’re Going Securing - Kubernetes SIG Security is Here

Learn how Kubernetes SIG Security coordinates project-wide security work and how to get involved.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Better Scalability and More Isolation? The Cortex "Shuffle Sharding" Story

See how shuffle sharding assigns tenants to replica sets to limit outage impact while scaling Cortex clusters.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

How to Break Your Kubernetes Cluster with Networking

A tour of Kubernetes networking failure modes, from DNS and network policies to MTU issues, NodePort behavior, and scaling surprises.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Operationalizing Kubernetes Sidecars in Production at Salesforce

A production recipe for building highly available Kubernetes admission webhooks and rolling out sidecars safely at scale.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Compliance Beyond Security - A Cloud Native GDPR Implementation Experience

Explore how cloud native systems can support GDPR’s right to be forgotten, including timely removal of personal data from logs, backups, and other stateful resources.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk