feat(lago-pdf): default gotenberg to ghcr.io/getlago/gotenberg:8.32 with legacy Porter flags

The chart previously defaulted to `getlago/lago-gotenberg:8` on Docker
Hub. That tag is Gotenberg 8.5.0 (pushed 2024-05-07), whose default for
`--chromium-restart-after` is 0 — Chromium never restarts, which
reproduces the 5-minute request hang described in
`scripts/pdf.rb` on lago-infrastructure.

The Porter deployments `pdf-web` / `pdf-eu-web` have always run
`ghcr.io/getlago/gotenberg:8.32` with six explicit flags that restart
Chromium every 100 jobs, cap the Chromium queue at 20, disable JS
inside invoice HTML, ignore certificate errors on the fetcher, and
disable LibreOffice routes we do not use. lago-infrastructure PR #1483
pinned those on the three managed clusters. This change lifts them to
the chart default so self-hosted users get the same configuration.

- Chart.yaml: appVersion 8 → 8.32 (the container template resolves
  `gotenberg.image.tag | default .Chart.AppVersion`).
- values.yaml: gotenberg.image.repository getlago/lago-gotenberg →
  ghcr.io/getlago/gotenberg. Both images are public, so no
  imagePullSecrets change is needed.
- values.yaml: gotenberg.container.args → the seven-arg legacy set.
  The prior `--api-disable-health-check-logging` is intentionally
  dropped; it was renamed to
  `--api-disable-health-check-route-telemetry` in Gotenberg 8.32 and
  defaults to true, so health-check logging stays off with no flag set.
- Taskfile.yaml: dev/kind image ref bumped to match the new default so
  local integration tests exercise the same image.
- README.md: regenerated via helm-docs to reflect the new defaults.

Author: IxDay

Taskfile.yaml

@@ -9,7 +9,7 @@ vars:
       redis: redis:7-alpine
       api: getlago/api:{{.VERSION}}
       front: getlago/front:v1.41.0
-      gotenberg: getlago/lago-gotenberg:8.15
+      gotenberg: ghcr.io/getlago/gotenberg:8.32
   CHARTS:
     map:
       # Base configs (no dependencies)

charts/lago-pdf/Chart.yaml

@@ -6,7 +6,7 @@ type: application
 
 version: 0.9.0
 
-appVersion: "8"
+appVersion: "8.32"
 
 dependencies:
   - name: lago-config

charts/lago-pdf/README.md

@@ -1,15 +1,15 @@
 # lago-pdf
 
-![Version: 0.5.0](https://img.shields.io/badge/Version-0.5.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 8](https://img.shields.io/badge/AppVersion-8-informational?style=flat-square)
+![Version: 0.9.0](https://img.shields.io/badge/Version-0.9.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 8.32](https://img.shields.io/badge/AppVersion-8.32-informational?style=flat-square)
 
 A Helm chart for the Lago PDF stack (Gotenberg + optional Rails worker)
 
 ## Requirements
 
 | Repository | Name | Version |
 |------------|------|---------|
-| file://../lago-config | config(lago-config) | 0.5.0 |
-| file://../lago-rails | worker(lago-rails) | 0.5.0 |
+| file://../lago-config | config(lago-config) | 0.9.0 |
+| file://../lago-rails | worker(lago-rails) | 0.9.0 |
 
 ## Values
 
@@ -25,29 +25,29 @@ A Helm chart for the Lago PDF stack (Gotenberg + optional Rails worker)
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
-| worker | object | `{"config":{"enabled":false,"nameOverride":"lago-pdf-config"},"container":{"command":["./scripts/start.worker.sh"],"ports":null},"enabled":true,"livenessProbe":null,"nameOverride":"lago-pdf-worker","readinessProbe":null,"service":{"enabled":false}}` | PDF worker subchart (lago-rails configured as a background worker) |
+| worker | object | `{"config":{"enabled":false,"nameOverride":"lago-pdf-config"},"container":{"command":["./scripts/start.worker.sh"],"ports":[]},"enabled":true,"livenessProbe":{"enabled":false},"nameOverride":"lago-pdf-worker","readinessProbe":{"enabled":false},"service":{"enabled":false}}` | PDF worker subchart (lago-rails configured as a background worker) |
 | worker.enabled | bool | `true` | Deploy the PDF worker |
 | worker.nameOverride | string | `"lago-pdf-worker"` | Override the worker subchart release name |
 | worker.config.enabled | bool | `false` | Disable nested config (uses parent config) |
 | worker.config.nameOverride | string | `"lago-pdf-config"` | Config subchart name override |
 | worker.service.enabled | bool | `false` | Disable service for the worker (no inbound traffic) |
-| worker.livenessProbe | string | `nil` | Liveness probe (disabled for worker) |
-| worker.readinessProbe | string | `nil` | Readiness probe (disabled for worker) |
+| worker.livenessProbe | object | `{"enabled":false}` | Liveness probe (disabled for worker) |
+| worker.readinessProbe | object | `{"enabled":false}` | Readiness probe (disabled for worker) |
 | worker.container.command | list | `["./scripts/start.worker.sh"]` | Worker entrypoint command |
-| worker.container.ports | string | `nil` | Worker container ports (none needed) |
+| worker.container.ports | list | `[]` | Worker container ports (none needed) |
 
 ### Gotenberg
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
-| gotenberg | object | `{"affinity":{},"autoscaling":{"enabled":false,"external":false,"maxReplicas":100,"minReplicas":1,"targetCPUUtilizationPercentage":80},"container":{"args":["gotenberg","--api-disable-health-check-logging"],"command":[],"name":"","ports":{"http":3000}},"extraEnv":{},"extraEnvFrom":[],"fullnameOverride":"","image":{"pullPolicy":"IfNotPresent","repository":"getlago/lago-gotenberg","tag":null},"imagePullSecrets":[],"livenessProbe":{"httpGet":{"path":"/health","port":"http"},"initialDelaySeconds":10,"periodSeconds":30},"nameOverride":"","nodeSelector":{},"podAnnotations":{},"podLabels":{},"podSecurityContext":{},"readinessProbe":{"httpGet":{"path":"/health","port":"http"},"initialDelaySeconds":10,"periodSeconds":3},"replicaCount":1,"resources":{},"securityContext":{},"service":{"enabled":true,"port":80,"type":"ClusterIP"},"serviceAccount":{"annotations":{},"automount":true,"create":true,"name":""},"tolerations":[],"volumeMounts":[],"volumes":[]}` | Gotenberg HTML-to-PDF conversion service |
-| gotenberg.image.repository | string | `"getlago/lago-gotenberg"` | Gotenberg image repository |
+| gotenberg | object | `{"affinity":{},"autoscaling":{"enabled":false,"external":false,"maxReplicas":100,"minReplicas":1,"targetCPUUtilizationPercentage":80},"container":{"args":["gotenberg","--libreoffice-disable-routes=true","--chromium-ignore-certificate-errors=true","--chromium-disable-javascript=true","--api-timeout=30s","--chromium-max-queue-size=20","--chromium-restart-after=100"],"command":[],"name":"","ports":{"http":3000}},"extraEnv":{},"extraEnvFrom":[],"fullnameOverride":"","image":{"pullPolicy":"IfNotPresent","repository":"ghcr.io/getlago/gotenberg","tag":null},"imagePullSecrets":[],"livenessProbe":{"httpGet":{"path":"/health","port":"http"},"initialDelaySeconds":10,"periodSeconds":30},"nameOverride":"","nodeSelector":{},"podAnnotations":{},"podLabels":{},"podSecurityContext":{},"readinessProbe":{"httpGet":{"path":"/health","port":"http"},"initialDelaySeconds":10,"periodSeconds":3},"replicaCount":1,"resources":{},"securityContext":{},"service":{"enabled":true,"port":80,"type":"ClusterIP"},"serviceAccount":{"annotations":{},"automount":true,"create":true,"name":""},"tolerations":[],"topologySpreadConstraints":[],"volumeMounts":[],"volumes":[]}` | Gotenberg HTML-to-PDF conversion service |
+| gotenberg.image.repository | string | `"ghcr.io/getlago/gotenberg"` | Gotenberg image repository |
 | gotenberg.image.tag | string | `nil` | Override the Gotenberg image tag |
 | gotenberg.image.pullPolicy | string | `"IfNotPresent"` | Image pull policy |
 | gotenberg.replicaCount | int | `1` | Number of Gotenberg replicas (ignored when autoscaling is enabled) |
 | gotenberg.container.name | string | `""` | Override the container name |
 | gotenberg.container.command | list | `[]` | Container entrypoint command |
-| gotenberg.container.args | list | `["gotenberg","--api-disable-health-check-logging"]` | Container command arguments |
+| gotenberg.container.args | list | `["gotenberg","--libreoffice-disable-routes=true","--chromium-ignore-certificate-errors=true","--chromium-disable-javascript=true","--api-timeout=30s","--chromium-max-queue-size=20","--chromium-restart-after=100"]` | Container command arguments. Match the legacy Porter deployments (`pdf-web` / `pdf-eu-web`): restart Chromium every 100 jobs to avoid zombie processes, cap the queue at 20, disable JS in invoice HTML, ignore certificate errors on the Chromium fetcher, disable LibreOffice routes we do not use, and cap the API timeout at 30s. `--api-disable-health-check-logging` was renamed to `--api-disable-health-check-route-telemetry` in Gotenberg 8.32 and defaults to `true`, so it is intentionally not set here. |
 | gotenberg.container.ports.http | int | `3000` | HTTP container port |
 | gotenberg.service.enabled | bool | `true` | Create a Service for Gotenberg |
 | gotenberg.service.type | string | `"ClusterIP"` | Service type |
@@ -84,9 +84,9 @@ A Helm chart for the Lago PDF stack (Gotenberg + optional Rails worker)
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| annotations | object | `{}` | Deployment metadata annotations (e.g. Stakater Reloader) |
 | nameOverride | string | `""` | Override the chart name |
 | fullnameOverride | string | `""` | Override the full release name |
-| annotations | object | `{}` | Deployment metadata annotations |
 
 ### Extra Objects
 

charts/lago-pdf/values.yaml

@@ -357,7 +357,7 @@ gotenberg:
   image:
     # -- Gotenberg image repository
     # @section -- Gotenberg
-    repository: getlago/lago-gotenberg
+    repository: ghcr.io/getlago/gotenberg
     # -- Override the Gotenberg image tag
     # @section -- Gotenberg
     tag:
@@ -376,9 +376,23 @@ gotenberg:
     # -- Container entrypoint command
     # @section -- Gotenberg
     command: []
-    # -- Container command arguments
+    # -- Container command arguments. Match the legacy Porter deployments
+    # (`pdf-web` / `pdf-eu-web`): restart Chromium every 100 jobs to avoid
+    # zombie processes, cap the queue at 20, disable JS in invoice HTML,
+    # ignore certificate errors on the Chromium fetcher, disable
+    # LibreOffice routes we do not use, and cap the API timeout at 30s.
+    # `--api-disable-health-check-logging` was renamed to
+    # `--api-disable-health-check-route-telemetry` in Gotenberg 8.32 and
+    # defaults to `true`, so it is intentionally not set here.
     # @section -- Gotenberg
-    args: ["gotenberg", "--api-disable-health-check-logging"]
+    args:
+      - gotenberg
+      - --libreoffice-disable-routes=true
+      - --chromium-ignore-certificate-errors=true
+      - --chromium-disable-javascript=true
+      - --api-timeout=30s
+      - --chromium-max-queue-size=20
+      - --chromium-restart-after=100
     ports:
       # -- HTTP container port
       # @section -- Gotenberg