sealed-secrets-v0.33.1

v0.33.1 (2025-11-06T16:33:36Z)

New v0.33.1 release!

Changelog

• 7e519eb Release carvel package 2.17.8 (#1826)
• 1e1ac9e Release notes 0.33.1 (#1828)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.33.1/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.33.1/kubeseal-0.33.1-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.33.1-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

sealed-secrets-v0.33.0

v0.33.0 (2025-11-06T10:20:52Z)

New v0.33.0 release!

Changelog

• 9ed6cdf Bump Go to 1.25.4 (#1823)
• f7f163a Bump github.com/onsi/ginkgo/v2 from 2.25.3 to 2.26.0 (#1817)
• 7830c61 Bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.2 (#1820)
• 47bd276 Bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#1818)
• 15f5972 Release carvel package 2.17.7 (#1814)
• dff8c07 Release notes 0.33 (#1824)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.33.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.33.0/kubeseal-0.33.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.33.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

helm-v2.17.9

Helm chart for the sealed-secrets controller.

helm-v2.17.8

Helm chart for the sealed-secrets controller.

sealed-secrets-v0.32.2

v0.32.2 (2025-09-15T09:29:00Z)

New v0.32.2 release!

Changelog

• 34d6ba4 Activate dockerfile checks with dependabot (#1808)
• f559d81 Bump k8s.io/code-generator from 0.33.4 to 0.34.1 (#1809)
• dc723f9 Fix controller yaml (#1811)
• 0fb2950 Release carvel package 2.17.6 (#1807)
• ad0c2e0 Release notes 0.32.2 (#1812)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.32.2/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.32.2/kubeseal-0.32.2-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.32.2-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

helm-v2.17.7

Helm chart for the sealed-secrets controller.

sealed-secrets-v0.32.1

v0.32.1 (2025-09-12T13:17:45Z)

New v0.32.1 release!

Changelog

• 85fbe30 Bump distroless version (#1804)
• 5861be3 Fix release process (#1803)
• d74c2d7 Release carvel package 2.17.5 (#1802)
• 18bb889 Release notes 0.32.1 (#1805)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.32.1/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.32.1/kubeseal-0.32.1-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.32.1-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

sealed-secrets-v0.32.0

v0.32.0 (2025-09-12T09:51:47Z)

New v0.32.0 release!

Changelog

• ccff2fa Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.24.0 (#1776)
• 227deab Bump github.com/onsi/ginkgo/v2 from 2.25.1 to 2.25.3 (#1793)
• 0bef6f1 Bump github.com/onsi/gomega from 1.38.0 to 1.38.1 (#1787)
• f8770ca Bump github.com/prometheus/client_golang from 1.23.0 to 1.23.2 (#1796)
• 65597c1 Bump github.com/spf13/pflag from 1.0.7 to 1.0.10 (#1794)
• 73067a4 Bump golang.org/x/crypto from 0.41.0 to 0.42.0 (#1797)
• e62fd6e Bump k8s.io/api from 0.33.3 to 0.33.4 (#1775)
• 8ccd3cb Bump k8s.io/apimachinery from 0.33.3 to 0.33.4 (#1777)
• 473b46f Bump k8s.io/apimachinery from 0.33.4 to 0.34.0 (#1795)
• f926b14 Bump k8s.io/client-go from 0.33.3 to 0.33.4 (#1774)
• f0aaea8 Bump k8s.io/code-generator from 0.33.3 to 0.33.4 (#1778)
• 50e549b Compile again binaries and create containers internally (#1779)
• 53aea42 Fix regression mismatching namespace (#1798)
• baed768 Release carvel package 2.17.4 (#1782)
• 5761457 Release notes 0.32 (#1799)
• b651d56 Update Goreleaser to use the latest one version (#1783)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.32.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.32.0/kubeseal-0.32.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.32.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

helm-v2.17.6

Helm chart for the sealed-secrets controller.

helm-v2.17.5

Helm chart for the sealed-secrets controller.