Статья
NebulaCR: корпоративный OCI-реестр с observability и compliance
Стек registry на Rust, zero-trust OIDC, SCIM, метрики Prometheus и Kubernetes-native Helm-деплой
На этой странице
NebulaCR (github.com/bwalia/nebulacr) — Rust Cargo workspace: nebula-registry (OCI API, :5000), nebula-auth (OIDC + JWT, :5001), nebula-common, nebula-controller (CRD), nebula-mirror (pull-through), nebula-resilience и nebula-replication. Сборка: cargo build --workspace --release. Официальный сайт: nebulacr.org. Полный разбор: блог документации.
Диаграммы (из README / layout Cargo)
Ключевые моменты
- OCI Distribution API v2, совместимость с Docker и Podman
- Zero-trust OIDC для CI (GitHub Actions, GitLab) и интерактивного SSO
- Метрики Prometheus (напр. nebulacr_http_requests_total), структурированные логи, трейсинг OpenTelemetry
- Pull-through кэш для Docker Hub, GHCR, GCR, Quay, registry.k8s.io
- Helm OCI chart (ghcr.io/bwalia/charts), HPA, ingress TLS, ServiceMonitor
Ещё технические статьи
Big Prometheus at Scale: Pros, Cons, and a MoSCoW Map of Observability Tools
TenthMatrix rewrite of the Big Prometheus problem space: Thanos, Cortex/Mimir, VictoriaMetrics, M3/Chronosphere — plus MoSCoW across OTEL, Grafana, SaaS APM and more
WSL Vault Technical Deep Dive: Zero-Trust Secrets, Dual Control, MFA & Multi-Region HA
Technical deep dive: envelope hierarchy, dual-control workflows, MFA, leases, active/active multi-region HA, feature tours, and presentation chapters
Workstation AI Shop on Ring Promoter: Orbit, Version-Verified Health and the Path from INT to PROD
Technical guide: shop Helm/CI mapping, Orbit semantics, version-verified health for the AI agent, secrets per ring, promote API, and a production checklist