Project

Nimbus

An OpenShift-style developer platform composed from CNCF parts

Overview

Nimbus gives a small team the developer experience of a big platform: source-to-image builds with Cloud Native Buildpacks on Tekton, Harbor registry, Argo CD GitOps, Traefik on Gateway API, a Backstage portal with a golden path template, Kyverno and Pod Security Admission, Prometheus and OpenTelemetry, Keycloak OIDC, OpenBao secrets, and Knative plus KEDA for serverless.

The design rule is compose, do not fork: every piece is a mature Apache-2.0 project pinned by version and managed as an Argo CD app-of-apps. The console is React with a read-only Go BFF. Not yet run on a live cluster; that is the next milestone.

Highlights

  • GitOps-managed platform with pinned versions and offline policy tests.
  • Multi-tenancy via namespace-per-team generated by Kyverno.
  • Console with 15 screens across developer and admin perspectives.

Source is private for now.