What's new in chart-v0.31.0
appVersion moves to 0.31.0 and image.tag follows it to :0.31.0. No template, values.yaml key or schema changes. Under the default values the rendered perf-sentinel.toml differs from what chart-v0.30.0 rendered by three comment lines only, 5833 bytes against 5655, and no setting changes. The other manifest changes are the image, the version labels and checksum/config.
What moves inside the pod
[daemon.hub_export] takes request_timeout_secs, from 1 to 60 seconds and 10 by default as before, which bounds one push of findings, incidents or correlations to PerfSentinelHub. A Hub slowed down while catching up no longer makes every push time out, back off up to five minutes and drop findings from a full pending table. The comment on [daemon.hub_export] in values.yaml, which the chart copies into the rendered perf-sentinel.toml, now shows the key. Set it in config like any other key of the block.
The image also carries the new CLI commands of the v0.31.0 binary notes, disclose-pdf among them. None of them changes what the daemon does in the pod.
Upgrade impact
- Pods roll on the image.
helm upgradereplaces them becauseappVersionandimage.tagmove together. checksum/configmoves. The renderedperf-sentinel.tomlgains the three comment lines, and the ConfigMap carrieshelm.sh/chartandapp.kubernetes.io/versionlabels that bump with the chart.- No
values.yamlkey is added or removed, no template changes, and the shippedPrometheusRuleis untouched. A release that leavesrequest_timeout_secsunset keeps the 10 seconds it had.
Verifying this chart
Charts signed before the move carry the original account's identity, so the regex accepts both owners:
cosign verify \
--certificate-identity-regexp '^https://github.com/(robintra|Institut-du-Numerique-Responsable)/perf-sentinel/\.github/workflows/helm-release\.yml@refs/tags/chart-v' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel:0.31.0
helm pull oci://ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel --version 0.31.0
gh attestation verify perf-sentinel-0.31.0.tgz \
--repo Institut-du-Numerique-Responsable/perf-sentinelcosign 3.0 or newer is required, the signature is an OCI 1.1 referrer bundle.
Install
The chart is published as an OCI artifact on GHCR, install it directly with no helm repo add step:
helm install perf-sentinel oci://ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel --version 0.31.0Upgrade an existing release:
helm upgrade perf-sentinel oci://ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel --version 0.31.0Read docs/HELM-DEPLOYMENT.md for the ServiceMonitor section, sizing and Ingress postures.
If you are upgrading from chart-v0.23.0 or earlier, read the chart-v0.24.0 notes first: that release raises the default workload.statefulset.persistence.size to 2Gi, which an existing StatefulSet does not pick up on its own. From chart-v0.18.0 or earlier, read the chart-v0.19.0 notes as well: that release adds a grouping label to five metrics and is breaking for an unaggregated alert on any of them. From chart-v0.16.0 or earlier, the chart-v0.17.0 notes change the shipped PrometheusRule.
Full Changelog: chart-v0.30.0...chart-v0.31.0