cncf/curriculum
Curriculum
The CNCF Curriculum is an open-source repository that organizes exam domains and learning paths for CNCF certification courses covering Kubernetes and cloud-native technologies. It structures certification content into weighted domains that reflect exam question distribution, providing a structured study guide for candidates preparing for CNCF certifications.
The curriculum is organized around multiple cloud-native domains including networking, security, GitOps, platform engineering, and certification preparation. It teaches cloud-native concepts through the lens of building and operating internal developer platforms, and structures learning content around declarative configuration and version-controlled deployment workflows. The material introduces Istio and Cilium networking concepts in a layered progression from basics to advanced traffic control, and weaves Kyverno policy management into Kubernetes security and compliance learning tracks.
The repository covers application development and deployment on Kubernetes, including designing cloud-native applications using core Kubernetes resources and multi-container patterns. It addresses cluster management, networking and connectivity, security and access control, monitoring and observability, storage management, and workload orchestration. The curriculum also includes modules on GitOps workflows, platform engineering, and hands-on exercises across tools like Cilium, Istio, Kyverno, and Argo in a progressive skill path.
The documentation provides exam preparation material that organizes weighted domains and knowledge areas for CNCF certification exams in Kubernetes and cloud-native technologies, with course modules aligned to the official CNCF certification exam blueprints and tool landscape.
Features
- CNCF Exam Preparation Materials - Organizes weighted domains and knowledge areas for CNCF certification exams in Kubernetes and cloud-native technologies.
- Kubernetes Exam Preparation - Organizes exam domains and learning paths for CNCF Kubernetes certification courses.
- CNCF Certification Domain Lists - Lists the exam domains for each CNCF certification, detailing the topics covered in the curriculum.
- Kubernetes Security Fundamentals - Teaches fundamental security concepts for securing container-based applications in cloud native environments.
- Runtime Security Monitors - Teaches monitoring and responding to runtime security threats in cloud-native environments.
- Kubernetes Service Configurations - Teaches exposing applications and managing network policies and service discovery in Kubernetes.
- Internal Developer Platform Builders - Teaches designing and operating internal developer platforms for streamlined application delivery.
- GitOps Tools - Teaches using GitOps tools and implementing workflows for cloud-native deployments.
- Cloud Native Application Development - Teaches designing and building cloud-native applications using Kubernetes resources and multi-container patterns.
- Internal Developer Platforms - Teaches designing and operating internal developer platforms with automation and observability.
- Kubernetes Application Configurations - Teaches managing application configuration, environment variables, and security settings in Kubernetes.
- Workload Scheduling - Teaches assigning and managing containerized applications across cluster nodes using scheduling policies.
- Fundamental Principles - Teaches GitOps principles including declarative configuration and version control fundamentals.
- GitOps Workflows - Structures learning content around declarative configuration and version-controlled deployment workflows.
- Network Configurations - Teaches setting up and managing Kubernetes networking with Cilium for workload traffic control.
- Network Observability Features - Provides curriculum modules for monitoring Kubernetes network traffic with Cilium's observability features.
- Kubernetes Cluster Deployments - Teaches setting up a Kubernetes cluster from scratch covering architecture, installation, and configuration tasks.
- Hardening Practices - Provides structured guidance for applying security best practices to harden Kubernetes clusters.
- Kubernetes Application Deployments - Provides structured learning paths for deploying containerized applications onto Kubernetes clusters.
- Declarative Application Management - Teaches managing Kubernetes applications through declarative configuration using GitOps principles.
- Microservice Traffic Management - Teaches configuring Istio traffic routing, load balancing, and fault injection for microservices.
- Kubernetes Application Exposers - Teaches exposing Kubernetes applications to traffic and managing service discovery and network policies.
- Certification Exam Preparation - Structures exam content into weighted domains covering Kubernetes fundamentals, container orchestration, and application delivery.
- CNCF Exam Domain Lists - Lists the official exam domains for each CNCF certification, providing a structured study guide for candidates.
- CNCF Exam Domain Organizations - Organizes and displays the specific knowledge areas tested in CNCF certification exams.
- Weighted Exam Domains - Structures certification content into weighted domains reflecting exam question distribution.
- Kubernetes Exam Guides - Provides a structured study guide mapping Kubernetes topics to certification exam domains.
- CNCF Certification Content - Open-source curriculum organizing exam domains and learning paths for CNCF certification courses.
- Open-Source CNCF Certification Curricula - An open-source curriculum that organizes exam domains and learning paths for CNCF certification courses.
- Certification Learning Paths - Provides a learning path covering cloud-native technologies for certification preparation.
- CNCF Certification Blueprint Mappings - Aligns all course modules with official CNCF certification exam blueprints and tool landscape.
- Kubernetes Cluster Foundations - Teaches configuring cluster authentication, authorization, and TLS certificates for a secure foundation.
- Container Security - Teaches securing container runtimes, images, and registries within cloud native workflows.
- Kubernetes Policy Enforcers - Teaches enforcing policies on Kubernetes resources to control and secure cluster operations.
- Kubernetes Policy Engines - Teaches Kyverno as a policy engine for validating and enforcing Kubernetes security policies.
- Kubernetes Security - Teaches Kubernetes-specific security concepts including cluster hardening and pod security.
- Host Hardening - Teaches host-level security configurations to reduce the attack surface of Kubernetes nodes.
- Service Communication Security - Teaches Istio security policies including mTLS and authorization for inter-service traffic.
- Software Supply Chain Security - Teaches validating container images and enforcing trusted registries throughout the build pipeline.
- Platform Engineering - Teaches cloud-native concepts through the lens of building and operating internal developer platforms.
- Istio Service Mesh Understandings - Teaches Istio architecture, traffic management, observability, and security for microservices.
- Advanced Istio Configurations - Implement advanced Istio capabilities such as multi-cluster mesh, ingress/egress gateways, and custom resource extensions.
- Cluster Troubleshooting Tools - Teaches diagnosing and resolving problems with cluster components, workloads, networking, and storage.
- Platform Health Monitors - Provides curriculum for monitoring and maintaining cloud-native platform health and conformance.
- Prometheus Monitoring Practices - Teaches Prometheus-based monitoring including PromQL, metrics collection, and alerting for cloud-native systems.
- Policy as Code - Weaves Kyverno policy management into Kubernetes security and compliance learning tracks.
- Kubernetes Volume Management - Teaches attaching and managing persistent storage volumes for stateful applications in Kubernetes.
- Ecosystem Components - Teaches understanding Argo Workflows, CD, Rollouts, and Events for managing Kubernetes applications.
- API-Based Infrastructure Provisioners - Teaches using platform APIs to automate infrastructure provisioning and reduce manual setup.
- Pipeline Security Practices - Covers applying security and observability practices to protect GitOps pipelines.
- Platform Delivery Practices - Covers applying continuous delivery practices within platform engineering contexts.
- Architecture Understandings - Teaches the architecture and component roles of Cilium for cloud-native networking and security.
- Security Policy Enforcers - Teaches implementing and managing workload security policies with Cilium for inter-service protection.
- GitOps Learning Units - Provides a curriculum module teaching GitOps principles and workflows for Kubernetes.
- Platform Engineering Learning Units - Provides a curriculum module covering designing and operating internal developer platforms.
- Progressive Multi-Tool Labs - Arranges hands-on exercises across Cilium, Istio, Kyverno, and Argo in a progressive skill path.
- eBPF Networking Concepts - Teaches eBPF-based networking concepts and core Cilium principles for cloud-native environments.
- Kubernetes Policy Lifecycles - Handles the full lifecycle of Kubernetes policies including creation, application, and ongoing management.
- Runtime Threat Responders - Teaches collecting and analyzing runtime data to detect and respond to security incidents in containers.
- Blast Radius Reduction - Teaches pod security contexts and network policies to limit the blast radius of compromised workloads.
- Layered Service Mesh Introductions - Introduces Istio and Cilium networking concepts in a layered progression from basics to advanced traffic control.
- Kubernetes Application Maintenance - Teaches monitoring application health and performing maintenance on Kubernetes applications.
- Service Mesh Observability - Teaches using Istio telemetry and observability tools to monitor microservices in a service mesh.
- Certification Preparation - Official exam objectives and curriculum guidelines for certification candidates.
