sealed-secrets-v0.38.4

v0.38.4 (2026-07-03T12:45:25Z)

New v0.38.4 release!

Changelog

• 0cc547a Release notes 0.38.4 (#2003)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami/sealed-secrets/releases/download/v0.38.4/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami/sealed-secrets/releases/download/v0.38.4/kubeseal-0.38.4-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.38.4-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

sealed-secrets-v0.38.3

v0.38.3 (2026-07-03T10:35:56Z)

New v0.38.3 release!

Changelog

• cae5fdd Release notes 0.38.3 (#2002)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami/sealed-secrets/releases/download/v0.38.3/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami/sealed-secrets/releases/download/v0.38.3/kubeseal-0.38.3-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.38.3-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

sealed-secrets-v0.38.2

v0.38.2 (2026-07-03T09:39:04Z)

New v0.38.2 release!

Changelog

• ab52b38 Add Artifact Hub badge to README (#1999)
• 2623137 Bump github.com/onsi/ginkgo/v2 from 2.30.0 to 2.32.0 (#1998)
• c2dc705 Bump github.com/onsi/gomega from 1.41.0 to 1.42.0 (#1995)
• 183e91c Bump github.com/onsi/gomega from 1.42.0 to 1.42.1 (#1997)
• 792723c Bump k8s.io/api from 0.36.1 to 0.36.2 (#1994)
• 5e4abed Bump k8s.io/client-go from 0.36.1 to 0.36.2 (#1996)
• e256932 Bump k8s.io/code-generator from 0.36.1 to 0.36.2 (#1993)
• 33b890d Publish Artifact Hub repository metadata for verified publisher status (#2000)
• 20c250b Release carvel package 2.19.0 (#1991)
• e88bf0a Release notes 0.38.2 (#2001)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami/sealed-secrets/releases/download/v0.38.2/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami/sealed-secrets/releases/download/v0.38.2/kubeseal-0.38.2-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.38.2-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

helm-v2.19.1

Helm chart for the sealed-secrets controller.

sealed-secrets-v0.38.1

v0.38.1 (2026-06-18T12:58:39Z)

New v0.38.1 release!

Changelog

• 7065289 Release notes v0.38.1 (#1989)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami/sealed-secrets/releases/download/v0.38.1/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami/sealed-secrets/releases/download/v0.38.1/kubeseal-0.38.1-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.38.1-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

sealed-secrets-v0.38.0

v0.38.0 (2026-06-18T12:28:41Z)

New v0.38.0 release!

Changelog

• 8ba4b5b Adding default prometheusRule in helmChart to watch out of sync secrets (#1980)
• 9a5984c Bump Golang to 1.26.4 (#1987)
• 85834b4 Bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 (#1976)
• fddaab3 Bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.30.0 (#1985)
• 8bba338 Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 (#1975)
• ae2c71d Bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#1977)
• b7f2626 Bump golang.org/x/crypto from 0.52.0 to 0.53.0 (#1984)
• fa71a75 Change oci registry for publishing the chart (#1970)
• 5d360fd Migrate all bitnami-labs references to bitnami org (#1983)
• dc9f8fc Release notes v0.38.0 (#1988)
• 8a9e832 Revert "Fix oci push" (#1979)
• 4e61da0 Update security context defaults to comply with restricted pod securi… (#1981)
• 9d63881 feat: add ppc64le architecture support (#1973)
• 5ba86c2 fix: add mutex locking to KeyRegistry to prevent data races (#1905)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami/sealed-secrets/releases/download/v0.38.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami/sealed-secrets/releases/download/v0.38.0/kubeseal-0.38.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.38.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

helm-v2.19.0

Helm chart for the sealed-secrets controller.

sealed-secrets-v0.37.0

v0.37.0 (2026-05-21T14:29:22Z)

New v0.37.0 release!

Changelog

• 208c1e4 Bump 0.36.1 api,client-go,apimachinery and code-generator (#1965)
• 7da6cc6 Bump Go version to 1.26.3 (#1966)
• 7f1392e Bump distroless/static from 47b2d72 to 3592aa8 in /docker (#1964)
• 4165330 Bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 (#1943)
• 3897afa Bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22 (#1954)
• 0ecd79a Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.3 (#1956)
• 77fb71c Bump golang.org/x/crypto from 0.49.0 to 0.50.0 (#1942)
• 1362d36 Bump golang.org/x/crypto from 0.50.0 to 0.51.0 (#1957)
• f91e690 Bump k8s.io/client-go from 0.35.3 to 0.35.4 (#1947)
• 9bf8cd0 Bump k8s.io/code-generator from 0.35.3 to 0.35.4 (#1946)
• 4d6122f Cooldown period for dependency updates and update K8S support (#1955)
• 8c3d506 Expose plaintext template.data values in template rendering context (#1940)
• 00f0e5b Fix oci push (#1967)
• 8e4ed46 Release notes v0.37.0 (#1968)
• 86671a8 chore: typo occured -> occurred in prometheus-mixin README (#1949)
• ce3fec4 fix: add explicit GITHUB_TOKEN permissions to workflows (#1933)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.37.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.37.0/kubeseal-0.37.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.37.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!

helm-v2.18.6

Helm chart for the sealed-secrets controller.

sealed-secrets-v0.36.6

v0.36.6 (2026-04-09T17:17:25Z)

New v0.36.6 release!

Changelog

• 6dc8803 Release notes for 0.36.6 (#1938)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.36.6/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.36.6/kubeseal-0.36.6-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.36.6-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!