bitnami/sealed-secrets v0.39.1

sealed-secrets-v0.39.1

on GitHub

v0.39.1 (2026-08-20T08:45:45Z)

New v0.39.1 release!

Changelog

• 83387fc Bump Golang to 1.26.6 (#2028)
• e81bbe4 Bump Golang to 1.26.7 (#2029)
• 08bbee2 Bump github.com/onsi/ginkgo/v2 from 2.32.0 to 2.32.1 (#2027)
• 74d25c0 Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#2026)
• aeb6bfb Release carvel package 2.19.2 (#2024)
• af17f82 Release notes 0.39.1 (#2030)
• 070ad16 test(controller): fix flaky TestReadKey RSA key comparison (#2021)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami/sealed-secrets/releases/download/v0.39.1/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami/sealed-secrets/releases/download/v0.39.1/kubeseal-0.39.1-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.39.1-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!