Institut-du-Numerique-Responsable/perf-sentinel chart-v0.31.3

perf-sentinel chart v0.31.3

on GitHub

What's new in chart-v0.31.3

appVersion moves to 0.31.3 and image.tag follows it to :0.31.3. No values.yaml key, schema or template changes. Under the default values the rendered manifests differ from what chart-v0.31.2 rendered by the image, the version labels and checksum/config only, and the rendered perf-sentinel.toml is unchanged. With prometheusRule.enabled, the PrometheusRule differs by its version labels only.

What moves inside the pod

The daemon's SQL normalizer masks three literal forms it used to keep in the template: a quote escaped with a backslash, which leaked the rest of its string into the reports, the query API, the archive and PerfSentinelHub, a hexadecimal number and a number with an exponent. Whether a backslash escapes follows the span's db.system. The image is built with Rust 1.99.1. See the v0.31.3 binary notes.

Upgrade impact

• Pods roll on the image. helm upgrade replaces them because appVersion and image.tag move together.
• checksum/config moves. The ConfigMap carries helm.sh/chart and app.kubernetes.io/version labels that bump with the chart. The rendered perf-sentinel.toml itself does not change.
• Findings on such queries change signature. Their acknowledgments, in the ack store or the TOML file, no longer match and have to be made again.
• No values.yaml key is added or removed, and no other template changes.

Verifying this chart

Charts signed before the move carry the original account's identity, so the regex accepts both owners:

cosign verify \
  --certificate-identity-regexp '^https://github.com/(robintra|Institut-du-Numerique-Responsable)/perf-sentinel/\.github/workflows/helm-release\.yml@refs/tags/chart-v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel:0.31.3

helm pull oci://ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel --version 0.31.3
gh attestation verify perf-sentinel-0.31.3.tgz \
  --repo Institut-du-Numerique-Responsable/perf-sentinel

cosign 3.0 or newer is required, the signature is an OCI 1.1 referrer bundle.

Install

The chart is published as an OCI artifact on GHCR, install it directly with no helm repo add step:

helm install perf-sentinel oci://ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel --version 0.31.3

View this release on Artifact Hub.