bitnami-labs/sealed-secrets v0.31.0

sealed-secrets-v0.31.0

on GitHub

v0.31.0 (2025-08-20T09:48:03Z)

New v0.31.0 release!

Changelog

• b0a847a Bump VIB action version and updates the service URL (#1770)
• 0fff860 Bump github.com/onsi/gomega from 1.37.0 to 1.38.0 (#1760)
• f6ed853 Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 (#1767)
• cf3bed4 Bump github.com/spf13/pflag from 1.0.6 to 1.0.7 (#1765)
• 60b609a Bump golang version to latest available one for 1.24 (#1769)
• 56c8e2c Bump golang.org/x/crypto from 0.39.0 to 0.40.0 (#1755)
• 0e10111 Bump golang.org/x/crypto from 0.40.0 to 0.41.0 (#1768)
• fee8825 Bump k8s.io/api from 0.33.2 to 0.33.3 (#1766)
• cf2a0a0 Bump k8s.io/client-go from 0.33.1 to 0.33.2 (#1749)
• c7cde46 Bump k8s.io/client-go from 0.33.2 to 0.33.3 (#1761)
• 1243157 Bump k8s.io/code-generator from 0.33.1 to 0.33.2 (#1752)
• 776e268 Bump k8s.io/code-generator from 0.33.2 to 0.33.3 (#1759)
• 716fcfe Fix keyrenewperiod template chart (#1756)
• b3055d9 Fix namespace validation to prevent mismatch errors (#1754)
• c7d5581 Release carvel package 2.17.3 (#1746)
• 5e46a80 Simplify VIB helm chart validation (#1771)
• 443107a Update release notes for v0.31.0 (#1772)
• 1aa1ec3 add watch for secrets (#1737)
• 5794c95 fix: metrics cleanup for deleted SealedSecrets (#1764)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.31.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.31.0/kubeseal-0.31.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.31.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!