Artikel
NebulaCR: enterprise OCI-registry met observability en compliance
Rust-registrystack, zero-trust OIDC, SCIM, Prometheus-metrics en Kubernetes-native Helm-deployment
Op deze pagina
NebulaCR (github.com/bwalia/nebulacr) is een Rust Cargo-workspace: nebula-registry (OCI API, :5000), nebula-auth (OIDC + JWT, :5001), nebula-common, nebula-controller (CRD's), nebula-mirror (pull-through), nebula-resilience en nebula-replication. Bouwen: cargo build --workspace --release. Officiële site: nebulacr.org. Volledige uitwerking: documentatieblog.
Diagrammen (uit README / Cargo-layout)
Hoogtepunten
- OCI Distribution API v2, Docker- en Podman-compatibel
- Zero-trust OIDC voor CI (GitHub Actions, GitLab) en interactieve SSO
- Prometheus-metrics (bijv. nebulacr_http_requests_total), gestructureerde logs, OpenTelemetry-tracing
- Pull-through cache voor Docker Hub, GHCR, GCR, Quay, registry.k8s.io
- Helm OCI-chart (ghcr.io/bwalia/charts), HPA, ingress TLS, ServiceMonitor
Meer technische artikelen
Big Prometheus at Scale: Pros, Cons, and a MoSCoW Map of Observability Tools
TenthMatrix rewrite of the Big Prometheus problem space: Thanos, Cortex/Mimir, VictoriaMetrics, M3/Chronosphere — plus MoSCoW across OTEL, Grafana, SaaS APM and more
WSL Vault Technical Deep Dive: Zero-Trust Secrets, Dual Control, MFA & Multi-Region HA
Technical deep dive: envelope hierarchy, dual-control workflows, MFA, leases, active/active multi-region HA, feature tours, and presentation chapters
Workstation AI Shop on Ring Promoter: Orbit, Version-Verified Health and the Path from INT to PROD
Technical guide: shop Helm/CI mapping, Orbit semantics, version-verified health for the AI agent, secrets per ring, promote API, and a production checklist