NebulaCR (github.com/bwalia/nebulacr) is a Rust Cargo workspace: nebula-registry (OCI API, :5000), nebula-auth (OIDC + JWT, :5001), nebula-common, nebula-controller (CRDs), nebula-mirror (pull-through), nebula-resilience, and nebula-replication. Build with cargo build --workspace --release. Official site: nebulacr.org. Full write-up: documentation blog.
Diagrams (from README / Cargo layout)
Highlights
- OCI Distribution API v2, Docker and Podman compatible
- Zero-trust OIDC for CI (GitHub Actions, GitLab) and interactive SSO
- Prometheus metrics (e.g. nebulacr_http_requests_total), structured logs, OpenTelemetry tracing
- Pull-through cache for Docker Hub, GHCR, GCR, Quay, registry.k8s.io
- Helm OCI chart (ghcr.io/bwalia/charts), HPA, ingress TLS, ServiceMonitor
