Architecture: Harbor

arch-harbor Doc

architecture active

Project

Architecture: Harbor

Harbor is the private container registry for the pal-e platform, deployed via Helm in pal-e-platform/terraform/modules/harbor/.

Image Strategy

Shared Arch Linux base images in the pal-e Harbor project, consumed by per-app image builds:

pal-e/ruby-arch:latest — Arch + Ruby + bundler + jemalloc + postgresql-libs (weekly rebuild)
pal-enterprises/app:{SHA} — app image, FROM ruby-arch base

Registry URLs

Internal (CI): harbor.harbor.svc.cluster.local
External: harbor.tail5b443a.ts.net

Weekly Base Image Rebuild

A Woodpecker cron pipeline in pal-e-platform rebuilds the Arch base image weekly. Arch's rolling release means each rebuild picks up the latest Ruby, system libs, and security patches automatically — eliminating manual version bump tickets.