CNCF [Cloud Native Computing Foundation] Courses

Modifying the Immutable: Attaching Artifacts to OCI Images

Learn how OCI standardizes attaching metadata and artifacts to immutable images, including how vendors publish SBOMs and users find them.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Protecting Kubernetes Clusters When Administrators Quit - Revoking Access and Best Practices

Revoking departing administrators’ and users’ Kubernetes cluster access with minimal disruption, including credential and certificate trust changes.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Security That Enables - Breaking Down Security Silos in the DevOps Ecosystem

A walkthrough of the Dropbox breach traces how attackers impersonated CircleCI to steal repositories, then examines CI/CD controls that can help teams secure builds.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Cloud Native Security Whitepapers Overview

An overview of CNCF security whitepapers and reference architectures that map out practical pathways for securing cloud-native infrastructure.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Container Patching: Making It Less Gross Than the Seattle Gum Wall

A “Prevent, Detect, Fix, Monitor” strategy for finding container vulnerabilities, automating remediation, and meeting patching timelines.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Delivering Secure Healthcare Applications with Open Source Software

How an all open source, Kubernetes-based platform can reduce duplicated security work for healthcare applications in regulated cloud environments.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Hands-on Hacking Kubernetes and Ways to Prevent It

Walk through a remote code execution exploit against Kubernetes, then examine steps that can mitigate the attack.

• YouTube
• 1 hour 13 minutes
• Self-Paced
• Free Video

Digital Forensics and Incident Response in Containerized Environments

A practical look at how Kubernetes changes digital forensics and incident response, including remote pod evidence preservation and filesystem-change extraction.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

A Sneak Peek Into Open Source Security Reviews

A look at why open-source security reviews are needed, how they differ from audits, and how the community can help develop a security guide.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Solving Multi-Service Communication Without a Service Mesh

Learn how Kubernetes primitives can secure communication between microservices without a service mesh, and what service meshes add.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Refactor Monolithic Application with Konveyor Data Gravity Insights

Refactor a monolithic application using Konveyor Data Gravity Insights.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Cloud Cost Monitoring with OpenCost and Kubernetes Optimization Strategies

See how OpenCost breaks down Kubernetes cluster, asset, idle, and workload costs, then explore optimization strategies across workloads, clusters, operating systems, and cloud infrastructure.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Cloud Custodian - Proactive Governance of Your Cloud, Cluster, and Code

See how Cloud Custodian approaches proactive governance across cloud, clusters, and code.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Avoiding IAC Potholes with Policy and Cloud Controllers

Shows how policy as code can secure Kubernetes-driven cloud provisioning while preserving self-service for application teams.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Unpacking Open Source Security in Public Repositories and Registries

Research findings map security risks in widely used open-source projects and public container registries, from compliance gaps and misconfigurations to known vulnerabilities.

• YouTube
• 34 minutes
• Self-Paced
• Free Video