Artigo
NebulaCR: registry OCI empresarial com observabilidade e conformidade
Stack de registry em Rust, OIDC zero-trust, SCIM, métricas Prometheus e implantação Helm nativa do Kubernetes
Nesta página
NebulaCR (github.com/bwalia/nebulacr) é um workspace Cargo em Rust: nebula-registry (API OCI, :5000), nebula-auth (OIDC + JWT, :5001), nebula-common, nebula-controller (CRDs), nebula-mirror (pull-through), nebula-resilience e nebula-replication. Build: cargo build --workspace --release. Site oficial: nebulacr.org. Artigo completo: blog de documentação.
Diagramas (do README / layout Cargo)
Destaques
- OCI Distribution API v2, compatível com Docker e Podman
- OIDC zero-trust para CI (GitHub Actions, GitLab) e SSO interativo
- Métricas Prometheus (ex. nebulacr_http_requests_total), logs estruturados, tracing OpenTelemetry
- Cache pull-through para Docker Hub, GHCR, GCR, Quay, registry.k8s.io
- Chart Helm OCI (ghcr.io/bwalia/charts), HPA, ingress TLS, ServiceMonitor
Mais artigos técnicos
Big Prometheus at Scale: Pros, Cons, and a MoSCoW Map of Observability Tools
TenthMatrix rewrite of the Big Prometheus problem space: Thanos, Cortex/Mimir, VictoriaMetrics, M3/Chronosphere — plus MoSCoW across OTEL, Grafana, SaaS APM and more
WSL Vault Technical Deep Dive: Zero-Trust Secrets, Dual Control, MFA & Multi-Region HA
Technical deep dive: envelope hierarchy, dual-control workflows, MFA, leases, active/active multi-region HA, feature tours, and presentation chapters
Workstation AI Shop on Ring Promoter: Orbit, Version-Verified Health and the Path from INT to PROD
Technical guide: shop Helm/CI mapping, Orbit semantics, version-verified health for the AI agent, secrets per ring, promote API, and a production checklist