CNCF [Cloud Native Computing Foundation] Courses

The Runtime Rodeo - Taming Open Source Image Behavior

Explores a proposed standard for cryptographically verified runtime fingerprints of open source images to strengthen software supply chain verification.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Securing CI/CD Runners Through eBPF Agent

A walkthrough of attacks against development pipelines and an eBPF agent designed to detect them.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Cloud Native Governance, Risk, and Compliance - Policy-as-Code Applications

Policy-as-code turns cloud-native governance into continuous, automated audits that track compliance across infrastructure and applications.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

A Mouthful of Mayhem: Taste Test and Gut Response to SLSA, GUAC, and Supply Chain Security

A tour of SLSA, GUAC, and other software supply chain tools, showing how organizations can combine them to respond to supply chain threats.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Embracing the Future: Effortless Mutual TLS and Rich Layer 7 Authorization Policy Without Sidecars

An Istio two-layer design removes sidecars while enabling mutual TLS and rich Layer 7 authorization policies.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Implementing a Multi-Tenant, Relationship-Based Authorization Model with OpenFGA

A case study of replacing custom database-backed permissions with OpenFGA to model hierarchical, relationship-based authorization in a multi-tenant service.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Drawing Lines in the Sand - Running Unprivileged eBPF in Kubernetes

Maps Linux capabilities to eBPF instrumentation requirements, showing when Kubernetes workloads can run without privileged mode.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Demystifying and Enabling Workload Identity Across the Cloud Native Ecosystem

Explore how workload identities replace long-lived credentials, and use SPIFFE and SPIRE to secure systems across cloud and other environments.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Free Video

Kyverno Policy Writing and Image Verification - Part 2

A follow-up to Kyverno that explores writing custom policies and verifying container images.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

What Could Go Wrong with a GraphQL Query and Can OpenTelemetry Help?

A look at how OpenTelemetry can help diagnose failures and performance problems in GraphQL services running in production.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

Design Choices in OpenTelemetry .NET Metrics API and SDK

A look inside the OpenTelemetry .NET Metrics SDK’s design trade-offs for nanosecond-scale recording, bounded memory, and zero-allocation performance.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

The Zen of Python Exemplars - Tying Metrics and Traces Together

A comparison of ways to connect metrics and traces with exemplars across Prometheus and OpenTelemetry metrics.

• YouTube
• 15 minutes
• Self-Paced
• Free Video

Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem

Examines how AI is changing open-source security, from risks in AI software supply chains to automated vulnerability management and AI contributions to open source.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Using Native OpenTelemetry Instrumentation to Make Client Libraries Better

Shows how native OpenTelemetry signals from stress tests reveal avoidable requests, retry gaps, excess memory use, and thread pool configuration problems in client libraries.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Implementing Auto Instrumentation for OTel Java Agent with GraalVM Static Compilation

A static instrumentation design preserves OTel Java Agent auto-instrumentation after GraalVM compilation, with test results showing how the solution performs.

• YouTube
• 19 minutes
• Self-Paced
• Free Video