Institut-du-Numerique-Responsable/perf-sentinel chart-v0.32.0

perf-sentinel chart v0.32.0

on GitHub

What's new in chart-v0.32.0

appVersion moves to 0.32.0 and image.tag follows it to :0.32.0. The PrometheusRule gains one alert, behind prometheusRule.energyScrapers. No values.yaml key or schema changes. Under the default values the rendered manifests differ from what chart-v0.31.4 rendered by the image, the version labels and checksum/config only, and the rendered perf-sentinel.toml is unchanged.

A stale host CPU probe, alerted

PerfSentinelHostCpuProbeStale is emitted once per host subsystem, database and broker, next to the energy scraper rules when prometheusRule.energyScrapers is on. It fires when perf_sentinel_<subsystem>_cpu_last_scrape_age_seconds exceeds scraperStaleSeconds for 5 minutes, with severity: warning and a subsystem label. At that point a dedicated [green.database_static] or [green.broker_static] declaration bills its SPECpower ceiling, and a shared one bills no host energy. With energyScrapers off, the default, the rule set is unchanged apart from its version labels.

What moves inside the pod

The daemon now counts database and broker host energy inside the totals, from [green.database_static], [green.broker_static] or Alumet, splits a node shared by several services by their operations, prices managed instance classes, and adds grid operator carbon intensity feeds. Some configurations stop loading: a [green.broker_static] without placement, a database or broker source without an effective region, or a Redfish chassis declared under two endpoint ids. See the v0.32.0 binary notes.

Upgrade impact

• Pods roll on the image. helm upgrade replaces them because appVersion and image.tag move together.
• Check the daemon config before upgrading. A config the chart passes through config that the new daemon refuses keeps the new pod from starting. The binary notes list those configurations and the fix each message names.
• checksum/config moves. The ConfigMap carries helm.sh/chart and app.kubernetes.io/version labels that bump with the chart. The rendered perf-sentinel.toml itself does not change.
• Findings and acknowledgments are untouched. No signature changes.
• No values.yaml key is added or removed. Only the energyScrapers comment and the PrometheusRule template change.

Verifying this chart

Charts signed before the move carry the original account's identity, so the regex accepts both owners:

cosign verify \
  --certificate-identity-regexp '^https://github.com/(robintra|Institut-du-Numerique-Responsable)/perf-sentinel/\.github/workflows/helm-release\.yml@refs/tags/chart-v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel:0.32.0

helm pull oci://ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel --version 0.32.0
gh attestation verify perf-sentinel-0.32.0.tgz \
  --repo Institut-du-Numerique-Responsable/perf-sentinel

cosign 3.0 or newer is required, the signature is an OCI 1.1 referrer bundle.

Install

The chart is published as an OCI artifact on GHCR, install it directly with no helm repo add step:

helm install perf-sentinel oci://ghcr.io/institut-du-numerique-responsable/charts/perf-sentinel --version 0.32.0

View this release on Artifact Hub.