What's new in chart-v0.31.4
appVersion moves to 0.31.4 and image.tag follows it to :0.31.4. No values.yaml key, schema or template changes. Under the default values the rendered manifests differ from what chart-v0.31.3 rendered by the image, the version labels and checksum/config only, and the rendered perf-sentinel.toml is unchanged. With prometheusRule.enabled, the PrometheusRule differs by its version labels only.
What moves inside the pod
Nothing the daemon does. The release adds a round-trip property to the SQL tokenizer's tests and moves a yanked inout to 0.2.4, so the daemon normalizes, detects and reports as v0.31.3 did. See the v0.31.4 binary notes.
Upgrade impact
- Pods roll on the image.
helm upgradereplaces them becauseappVersionandimage.tagmove together. checksum/configmoves. The ConfigMap carrieshelm.sh/chartandapp.kubernetes.io/versionlabels that bump with the chart. The renderedperf-sentinel.tomlitself does not change.- Findings and acknowledgments are untouched. No signature changes.
- No
values.yamlkey is added or removed, and no other template changes.
Verifying this chart
Charts signed before the move carry the original account's identity, so the regex accepts both owners:
cosign verify \
--certificate-identity-regexp '^https://github.com/(robintra|Institut-du-Numerique-Responsable)/perf-sentinel/\.github/workflows/helm-release\.yml@refs/tags/chart-v' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel:0.31.4
helm pull oci://ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel --version 0.31.4
gh attestation verify perf-sentinel-0.31.4.tgz \
--repo Institut-du-Numerique-Responsable/perf-sentinelcosign 3.0 or newer is required, the signature is an OCI 1.1 referrer bundle.
Install
The chart is published as an OCI artifact on GHCR, install it directly with no helm repo add step:
helm install perf-sentinel oci://ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel --version 0.31.4View this release on Artifact Hub.