Co-Founder at Tek4Real, building AI-powered software, cloud solutions, and digital products for growing businesses.

Iurie Rotari • Peerlist

Role: Lead Architect & Engineer The Challenge: As we scaled our SaaS platform, managing the lifecycle of our container images and Helm charts became a bottleneck. We needed a secure, private, and scalable registry to manage our artifacts, enforce security policies, and ensure smooth operations. Using public registries posed risks regarding rate limits, security compliance, and proprietary code management. My Solution & Technical Implementation: I led the design, deployment, and management of a production-grade container registry using the CNCF-graduated open-source project, Harbor. This project was critical to our platform's security and operational efficiency. - Architecture & Deployment: I deployed Harbor on our Kubernetes cluster using its official Helm chart, configuring it for high availability (HA) with an external PostgreSQL database and a highly available Redis cluster to eliminate single points of failure and ensure resilience. - Secure Access & Authentication: I integrated Harbor with our enterprise identity provider (e.g., OIDC/LDAP) to centralize user management and leverage Role-Based Access Control (RBAC). This ensured that developers and services only had the permissions they needed via projects and robot accounts. - Security & Compliance: I implemented automated vulnerability scanning (using Trivy) for all images on push. I also configured image signing (e.g., with Cosign) and enforced policies to prevent the deployment of unsigned or vulnerable images, significantly strengthening our supply chain security. - Operational Efficiency: I configured artifact replication rules to mirror critical images to a cloud-based registry for disaster recovery. Additionally, setting up Harbor as a proxy cache for popular public images (like from Docker Hub) eliminated rate limiting issues and improved build times.