NebulaCR (github.com/bwalia/nebulacr) é um workspace Cargo em Rust: nebula-registry (API OCI, :5000), nebula-auth (OIDC + JWT, :5001), nebula-common, nebula-controller (CRDs), nebula-mirror (pull-through), nebula-resilience e nebula-replication. Build: cargo build --workspace --release. Site oficial: nebulacr.org. Artigo completo: blog de documentação.
Diagramas (do README / layout Cargo)
Destaques
- OCI Distribution API v2, compatível com Docker e Podman
- OIDC zero-trust para CI (GitHub Actions, GitLab) e SSO interativo
- Métricas Prometheus (ex. nebulacr_http_requests_total), logs estruturados, tracing OpenTelemetry
- Cache pull-through para Docker Hub, GHCR, GCR, Quay, registry.k8s.io
- Chart Helm OCI (ghcr.io/bwalia/charts), HPA, ingress TLS, ServiceMonitor
