Artículo
NebulaCR: registro OCI empresarial con observabilidad y cumplimiento
Stack de registro en Rust, OIDC zero-trust, SCIM, métricas Prometheus y despliegue Helm nativo de Kubernetes
En esta página
NebulaCR (github.com/bwalia/nebulacr) es un workspace Cargo en Rust: nebula-registry (API OCI, :5000), nebula-auth (OIDC + JWT, :5001), nebula-common, nebula-controller (CRDs), nebula-mirror (pull-through), nebula-resilience y nebula-replication. Compilación: cargo build --workspace --release. Sitio oficial: nebulacr.org. Artículo completo: blog de documentación.
Diagramas (desde README / layout Cargo)
Aspectos destacados
- OCI Distribution API v2, compatible con Docker y Podman
- OIDC zero-trust para CI (GitHub Actions, GitLab) y SSO interactivo
- Métricas Prometheus (p. ej. nebulacr_http_requests_total), logs estructurados, trazas OpenTelemetry
- Caché pull-through para Docker Hub, GHCR, GCR, Quay, registry.k8s.io
- Chart Helm OCI (ghcr.io/bwalia/charts), HPA, ingress TLS, ServiceMonitor
Más artículos técnicos
Big Prometheus at Scale: Pros, Cons, and a MoSCoW Map of Observability Tools
TenthMatrix rewrite of the Big Prometheus problem space: Thanos, Cortex/Mimir, VictoriaMetrics, M3/Chronosphere — plus MoSCoW across OTEL, Grafana, SaaS APM and more
WSL Vault Technical Deep Dive: Zero-Trust Secrets, Dual Control, MFA & Multi-Region HA
Technical deep dive: envelope hierarchy, dual-control workflows, MFA, leases, active/active multi-region HA, feature tours, and presentation chapters
Workstation AI Shop on Ring Promoter: Orbit, Version-Verified Health and the Path from INT to PROD
Technical guide: shop Helm/CI mapping, Orbit semantics, version-verified health for the AI agent, secrets per ring, promote API, and a production checklist