Institut-du-Numerique-Responsable/perf-sentinel chart-v0.31.2

perf-sentinel chart v0.31.2

on GitHub

What's new in chart-v0.31.2

appVersion moves to 0.31.2 and image.tag follows it to :0.31.2. No values.yaml key or schema changes. Under the default values the rendered manifests differ from what chart-v0.31.1 rendered by the image, the version labels and checksum/config only, and the rendered perf-sentinel.toml is unchanged. With prometheusRule.enabled, the PrometheusRule gains one rule and changes another.

The PrometheusRule

PerfSentinelHubExportDropping fires when the daemon drops findings, incidents or correlation episodes bound for PerfSentinelHub: evicted from a full pending table, too large for a payload, rejected, or held for a Hub without the route. The Hub's long history then has a gap the daemon cannot refill. It reads the three perf_sentinel_hub_export*_dropped_total counters over 30 minutes against a 15-minute for, so a single drop fires, and stays silent while the Hub export is off.

PerfSentinelArchiveDropping never fired on a single dropped archive window: its 15-minute rate fell back to zero before its 15-minute for elapsed. Its rate now spans 30 minutes.

What moves inside the pod

The daemon's tuning advisor names what the Hub export dropped, /api/status reports findings_stored_total and /api/config reports hub_export_enabled. See the v0.31.2 binary notes.

Upgrade impact

• Pods roll on the image. helm upgrade replaces them because appVersion and image.tag move together.
• checksum/config moves. The ConfigMap carries helm.sh/chart and app.kubernetes.io/version labels that bump with the chart. The rendered perf-sentinel.toml itself does not change.
• With prometheusRule.enabled, a past archive drop or a Hub export drop can now fire where the rule stayed silent before.
• No values.yaml key is added or removed, and no other template changes.

Verifying this chart

Charts signed before the move carry the original account's identity, so the regex accepts both owners:

cosign verify \
  --certificate-identity-regexp '^https://github.com/(robintra|Institut-du-Numerique-Responsable)/perf-sentinel/\.github/workflows/helm-release\.yml@refs/tags/chart-v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel:0.31.2

helm pull oci://ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel --version 0.31.2
gh attestation verify perf-sentinel-0.31.2.tgz \
  --repo Institut-du-Numerique-Responsable/perf-sentinel

cosign 3.0 or newer is required, the signature is an OCI 1.1 referrer bundle.

Install

The chart is published as an OCI artifact on GHCR, install it directly with no helm repo add step:

helm install perf-sentinel oci://ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel --version 0.31.2

View this release on Artifact Hub.