Article
NebulaCR : registry OCI entreprise avec observabilité et conformité
Stack registry Rust, OIDC zero-trust, SCIM, métriques Prometheus et déploiement Helm natif Kubernetes
Sur cette page
NebulaCR (github.com/bwalia/nebulacr) est un workspace Cargo Rust : nebula-registry (API OCI, :5000), nebula-auth (OIDC + JWT, :5001), nebula-common, nebula-controller (CRD), nebula-mirror (pull-through), nebula-resilience et nebula-replication. Build : cargo build --workspace --release. Site officiel : nebulacr.org. Article complet : blog de documentation.
Diagrammes (depuis README / layout Cargo)
Points clés
- OCI Distribution API v2, compatible Docker et Podman
- OIDC zero-trust pour CI (GitHub Actions, GitLab) et SSO interactif
- Métriques Prometheus (ex. nebulacr_http_requests_total), logs structurés, tracing OpenTelemetry
- Cache pull-through pour Docker Hub, GHCR, GCR, Quay, registry.k8s.io
- Chart Helm OCI (ghcr.io/bwalia/charts), HPA, ingress TLS, ServiceMonitor
Plus d'articles techniques
Big Prometheus at Scale: Pros, Cons, and a MoSCoW Map of Observability Tools
TenthMatrix rewrite of the Big Prometheus problem space: Thanos, Cortex/Mimir, VictoriaMetrics, M3/Chronosphere — plus MoSCoW across OTEL, Grafana, SaaS APM and more
WSL Vault Technical Deep Dive: Zero-Trust Secrets, Dual Control, MFA & Multi-Region HA
Technical deep dive: envelope hierarchy, dual-control workflows, MFA, leases, active/active multi-region HA, feature tours, and presentation chapters
Workstation AI Shop on Ring Promoter: Orbit, Version-Verified Health and the Path from INT to PROD
Technical guide: shop Helm/CI mapping, Orbit semantics, version-verified health for the AI agent, secrets per ring, promote API, and a production checklist