diff --git a/Chart.yaml b/Chart.yaml
index e1ef9c8..5783e2c 100644
--- a/Chart.yaml
+++ b/Chart.yaml
@@ -23,8 +23,8 @@ description: |
       Git).
 
 type: application
-version: 0.3.1
-appVersion: "0.3.1"
+version: 0.3.2
+appVersion: "0.3.2"
 
 dependencies:
   - name: cert-manager
diff --git a/values.yaml b/values.yaml
index fc2a0af..ae1ca78 100644
--- a/values.yaml
+++ b/values.yaml
@@ -150,3 +150,12 @@ longhorn:
   backupCredsSecret:
     namespace: tenants
     name: s3-backup-creds
+  # Disable the Helm pre-upgrade checker Job. It's annotated as a
+  # `helm.sh/hook: pre-upgrade,pre-install` which Argo translates to
+  # PreSync — but the Job's ServiceAccount lives in the regular sync
+  # phase, so the Job fails ("ServiceAccount not found") before the
+  # SA gets created. Argo's sync model already gives us proper
+  # ordering on regular resources; the safety check is redundant.
+  preUpgradeChecker:
+    jobEnabled: false
+    upgradeVersionCheck: false