bitnami-labs/sealed-secrets v0.35.0

sealed-secrets-v0.35.0

on GitHub

v0.35.0 (2026-02-12T10:21:46Z)

New v0.35.0 release!

Changelog

• 59229e6 Bump distroless/static from 4b2a093 to cd64bec in /docker (#1866)
• b10d5a5 Bump distroless/static from cd64bec to 972618c in /docker (#1874)
• 82464d4 Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.5 (#1864)
• 3119d46 Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 (#1873)
• 095adae Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 (#1865)
• 1f8a26f Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 (#1872)
• acf20ac Bump go 1.25.7 (#1880)
• a0efe66 Bump golang.org/x/crypto from 0.46.0 to 0.47.0 (#1863)
• 04e8a50 Bump golang.org/x/crypto from 0.47.0 to 0.48.0 (#1875)
• 8596d09 Bump k8s.io/code-generator from 0.34.3 to 0.35.0 (#1858)
• 200e239 Bump various GitHub action versions (#1878)
• a156930 Release carvel package 2.18.0 (#1857)
• 7f8477c Release notes for 0.35.0 (#1879)
• 06c339b Update client-go and api 0.35.0 (#1868)
• 964f096 Update k8s versions (#1877)
• 946bc04 use my namespace as key namespace (#1867)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.35.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.35.0/kubeseal-0.35.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.35.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!