Sealed Secrets for Kubernetes Files

v0.30.0 (2025-06-12T10:04:50Z)

New v0.30.0 release!

Changelog

• 2c5002c7 Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#1723)
• e9b0179e Bump github.com/onsi/gomega from 1.36.3 to 1.37.0 (#1722)
• 963d7609 Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 (#1724)
• b8d74f83 Bump golang to 1.24.4 (#1743)
• 5d6dc33c Bump golang.org/x/crypto from 0.36.0 to 0.37.0 (#1721)
• 51bd3de1 Bump golang.org/x/crypto from 0.37.0 to 0.38.0 (#1731)
• d8abd619 Bump golang.org/x/crypto from 0.38.0 to 0.39.0 (#1742)
• bbdb0617 Bump golang.org/x/net from 0.37.0 to 0.38.0 in the go_modules group (#1725)
• b9687b77 Bump k8s.io/api from 0.32.3 to 0.33.0 (#1730)
• c92355e2 Bump k8s.io/api from 0.33.0 to 0.33.1 (#1733)
• a77d07ca Bump k8s.io/client-go from 0.32.3 to 0.33.0 (#1729)
• c480b8e0 Bump k8s.io/client-go from 0.33.0 to 0.33.1 (#1734)
• 2f2598d3 Bump k8s.io/code-generator from 0.32.3 to 0.33.0 (#1728)
• 24fdb09d Bump k8s.io/code-generator from 0.33.0 to 0.33.1 (#1732)
• 130b471d Bump to go1.24.1 (#1713)
• ab00d33c Fix potential controller sensitive data exposure by sprig template functions (#1703)
• 87c960e6 Fix typo in RBAC namespaced roles documentation (#1720)
• 40f39fb5 Release carvel package 2.17.2 (#1718)
• 6e0beae8 Release notes 0.30 (#1744)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

:::sh
kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.30.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

:::sh
curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.30.0/kubeseal-0.30.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.30.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS: The kubeseal client is available on homebrew:

:::sh
brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

:::sh
port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

:::sh
nix-env -iA nixpkgs.kubeseal

Other OS/Arch: Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into $GOPATH/bin with:

:::sh
go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

:::sh
$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!