sealed-secrets-v0.32.1

v0.32.1 (2025-09-12T13:17:45Z)

New v0.32.1 release!

Changelog

• 85fbe30 Bump distroless version (#1804)
• 5861be3 Fix release process (#1803)
• d74c2d7 Release carvel package 2.17.5 (#1802)
• 18bb889 Release notes 0.32.1 (#1805)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.32.1/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.32.1/kubeseal-0.32.1-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.32.1-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

sealed-secrets-v0.32.0

v0.32.0 (2025-09-12T09:51:47Z)

New v0.32.0 release!

Changelog

• ccff2fa Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.24.0 (#1776)
• 227deab Bump github.com/onsi/ginkgo/v2 from 2.25.1 to 2.25.3 (#1793)
• 0bef6f1 Bump github.com/onsi/gomega from 1.38.0 to 1.38.1 (#1787)
• f8770ca Bump github.com/prometheus/client_golang from 1.23.0 to 1.23.2 (#1796)
• 65597c1 Bump github.com/spf13/pflag from 1.0.7 to 1.0.10 (#1794)
• 73067a4 Bump golang.org/x/crypto from 0.41.0 to 0.42.0 (#1797)
• e62fd6e Bump k8s.io/api from 0.33.3 to 0.33.4 (#1775)
• 8ccd3cb Bump k8s.io/apimachinery from 0.33.3 to 0.33.4 (#1777)
• 473b46f Bump k8s.io/apimachinery from 0.33.4 to 0.34.0 (#1795)
• f926b14 Bump k8s.io/client-go from 0.33.3 to 0.33.4 (#1774)
• f0aaea8 Bump k8s.io/code-generator from 0.33.3 to 0.33.4 (#1778)
• 50e549b Compile again binaries and create containers internally (#1779)
• 53aea42 Fix regression mismatching namespace (#1798)
• baed768 Release carvel package 2.17.4 (#1782)
• 5761457 Release notes 0.32 (#1799)
• b651d56 Update Goreleaser to use the latest one version (#1783)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.32.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.32.0/kubeseal-0.32.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.32.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

helm-v2.17.6

Helm chart for the sealed-secrets controller.

helm-v2.17.5

Helm chart for the sealed-secrets controller.

helm-v2.17.4

Helm chart for the sealed-secrets controller.

sealed-secrets-v0.31.0

v0.31.0 (2025-08-20T09:48:03Z)

New v0.31.0 release!

Changelog

• b0a847a Bump VIB action version and updates the service URL (#1770)
• 0fff860 Bump github.com/onsi/gomega from 1.37.0 to 1.38.0 (#1760)
• f6ed853 Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 (#1767)
• cf3bed4 Bump github.com/spf13/pflag from 1.0.6 to 1.0.7 (#1765)
• 60b609a Bump golang version to latest available one for 1.24 (#1769)
• 56c8e2c Bump golang.org/x/crypto from 0.39.0 to 0.40.0 (#1755)
• 0e10111 Bump golang.org/x/crypto from 0.40.0 to 0.41.0 (#1768)
• fee8825 Bump k8s.io/api from 0.33.2 to 0.33.3 (#1766)
• cf2a0a0 Bump k8s.io/client-go from 0.33.1 to 0.33.2 (#1749)
• c7cde46 Bump k8s.io/client-go from 0.33.2 to 0.33.3 (#1761)
• 1243157 Bump k8s.io/code-generator from 0.33.1 to 0.33.2 (#1752)
• 776e268 Bump k8s.io/code-generator from 0.33.2 to 0.33.3 (#1759)
• 716fcfe Fix keyrenewperiod template chart (#1756)
• b3055d9 Fix namespace validation to prevent mismatch errors (#1754)
• c7d5581 Release carvel package 2.17.3 (#1746)
• 5e46a80 Simplify VIB helm chart validation (#1771)
• 443107a Update release notes for v0.31.0 (#1772)
• 1aa1ec3 add watch for secrets (#1737)
• 5794c95 fix: metrics cleanup for deleted SealedSecrets (#1764)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.31.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.31.0/kubeseal-0.31.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.31.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

sealed-secrets-v0.30.0

v0.30.0 (2025-06-12T10:04:50Z)

New v0.30.0 release!

Changelog

• 2c5002c Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#1723)
• e9b0179 Bump github.com/onsi/gomega from 1.36.3 to 1.37.0 (#1722)
• 963d760 Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 (#1724)
• b8d74f8 Bump golang to 1.24.4 (#1743)
• 5d6dc33 Bump golang.org/x/crypto from 0.36.0 to 0.37.0 (#1721)
• 51bd3de Bump golang.org/x/crypto from 0.37.0 to 0.38.0 (#1731)
• d8abd61 Bump golang.org/x/crypto from 0.38.0 to 0.39.0 (#1742)
• bbdb061 Bump golang.org/x/net from 0.37.0 to 0.38.0 in the go_modules group (#1725)
• b9687b7 Bump k8s.io/api from 0.32.3 to 0.33.0 (#1730)
• c92355e Bump k8s.io/api from 0.33.0 to 0.33.1 (#1733)
• a77d07c Bump k8s.io/client-go from 0.32.3 to 0.33.0 (#1729)
• c480b8e Bump k8s.io/client-go from 0.33.0 to 0.33.1 (#1734)
• 2f2598d Bump k8s.io/code-generator from 0.32.3 to 0.33.0 (#1728)
• 24fdb09 Bump k8s.io/code-generator from 0.33.0 to 0.33.1 (#1732)
• 130b471 Bump to go1.24.1 (#1713)
• ab00d33 Fix potential controller sensitive data exposure by sprig template functions (#1703)
• 87c960e Fix typo in RBAC namespaced roles documentation (#1720)
• 40f39fb Release carvel package 2.17.2 (#1718)
• 6e0beae Release notes 0.30 (#1744)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.30.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.30.0/kubeseal-0.30.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.30.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

helm-v2.17.3

Helm chart for the sealed-secrets controller.

sealed-secrets-v0.29.0

v0.29.0 (2025-03-27T12:17:52Z)

New v0.29.0 release!

Changelog

• 008e497 Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#1696)
• 49f53c8 Bump github.com/onsi/ginkgo/v2 from 2.22.2 to 2.23.0 (#1701)
• 1814f94 Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.3 (#1711)
• 4457558 Bump github.com/onsi/gomega from 1.36.2 to 1.36.3 (#1712)
• 0bdb507 Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 (#1695)
• f40f549 Bump github.com/prometheus/client_golang from 1.21.0 to 1.21.1 (#1700)
• 558c154 Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 (#1683)
• 4aadfe5 Bump golang.org/x/crypto from 0.32.0 to 0.33.0 (#1685)
• b281468 Bump golang.org/x/crypto from 0.33.0 to 0.35.0 (#1697)
• dcba055 Bump golang.org/x/crypto from 0.35.0 to 0.36.0 (#1699)
• d87ba07 Bump golang.org/x/net from 0.35.0 to 0.36.0 in the go_modules group (#1702)
• fe292af Bump k8s.io/client-go from 0.32.0 to 0.32.1 (#1678)
• f0a38be Bump k8s.io/client-go from 0.32.1 to 0.32.2 (#1691)
• 3350c69 Bump k8s.io/client-go from 0.32.2 to 0.32.3 (#1705)
• 956395b Bump k8s.io/code-generator from 0.32.0 to 0.32.1 (#1677)
• 8b81e0d Bump k8s.io/code-generator from 0.32.1 to 0.32.2 (#1693)
• 4520217 Bump k8s.io/code-generator from 0.32.2 to 0.32.3 (#1708)
• ab16dfb Bump to go1.23.7 (#1714)
• 30c1d2d Fix register a key using secret creationTimestamp instead of certificate validity timestamp (#1681)
• 0d9cfaf Release Notes for 0.29.0 (#1715)
• bd31ab8 Release carvel package 2.17.1 (#1676)
• c66a23d Update environment k8s version on CI (#1688)
• d23a4a4 Update go tooling to 1.23.6 (#1686)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.29.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.29.0/kubeseal-0.29.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.29.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

helm-v2.17.2

Helm chart for the sealed-secrets controller.