Sealed Secrets for Kubernetes Files

v0.29.0 (2025-03-27T12:17:52Z)

New v0.29.0 release!

Changelog

• 008e497c Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#1696)
• 49f53c80 Bump github.com/onsi/ginkgo/v2 from 2.22.2 to 2.23.0 (#1701)
• 1814f94d Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.3 (#1711)
• 4457558c Bump github.com/onsi/gomega from 1.36.2 to 1.36.3 (#1712)
• 0bdb5076 Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 (#1695)
• f40f5495 Bump github.com/prometheus/client_golang from 1.21.0 to 1.21.1 (#1700)
• 558c154e Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 (#1683)
• 4aadfe58 Bump golang.org/x/crypto from 0.32.0 to 0.33.0 (#1685)
• b2814682 Bump golang.org/x/crypto from 0.33.0 to 0.35.0 (#1697)
• dcba0557 Bump golang.org/x/crypto from 0.35.0 to 0.36.0 (#1699)
• d87ba070 Bump golang.org/x/net from 0.35.0 to 0.36.0 in the go_modules group (#1702)
• fe292af1 Bump k8s.io/client-go from 0.32.0 to 0.32.1 (#1678)
• f0a38bef Bump k8s.io/client-go from 0.32.1 to 0.32.2 (#1691)
• 3350c69c Bump k8s.io/client-go from 0.32.2 to 0.32.3 (#1705)
• 956395bd Bump k8s.io/code-generator from 0.32.0 to 0.32.1 (#1677)
• 8b81e0d5 Bump k8s.io/code-generator from 0.32.1 to 0.32.2 (#1693)
• 4520217e Bump k8s.io/code-generator from 0.32.2 to 0.32.3 (#1708)
• ab16dfb5 Bump to go1.23.7 (#1714)
• 30c1d2dd Fix register a key using secret creationTimestamp instead of certificate validity timestamp (#1681)
• 0d9cfaf9 Release Notes for 0.29.0 (#1715)
• bd31ab89 Release carvel package 2.17.1 (#1676)
• c66a23dd Update environment k8s version on CI (#1688)
• d23a4a47 Update go tooling to 1.23.6 (#1686)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

:::sh
kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.29.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

:::sh
curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.29.0/kubeseal-0.29.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.29.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS: The kubeseal client is available on homebrew:

:::sh
brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

:::sh
port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

:::sh
nix-env -iA nixpkgs.kubeseal

Other OS/Arch: Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into $GOPATH/bin with:

:::sh
go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

:::sh
$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!