bitnami/sealed-secrets v0.41.0

sealed-secrets-v0.41.0

on GitHub

v0.41.0 (2026-10-23T10:03:24Z)

New v0.41.0 release!

Changelog

• 288199e Add terminating newline to end of prometheusrule.yaml (#2055)
• 265d4d6 Bump distroless/static from 5813399 to 9e0130b in /docker (#2076)
• c98e880 Bump distroless/static from f2ea270 to 5813399 in /docker (#2056)
• 7714d01 Bump github.com/onsi/ginkgo/v2 from 2.32.1 to 2.32.2 (#2058)
• a568dfc Bump github.com/onsi/ginkgo/v2 from 2.32.2 to 2.33.0 (#2061)
• c9caab6 Bump github.com/onsi/ginkgo/v2 from 2.33.0 to 2.33.1 (#2075)
• bcb6fea Bump github.com/onsi/gomega from 1.43.0 to 1.43.1 (#2062)
• a165588 Bump github.com/onsi/gomega from 1.43.1 to 1.44.0 (#2065)
• 19227f3 Bump github.com/prometheus/client_golang from 1.24.1 to 1.25.0 (#2071)
• 41e2c24 Bump go to 1.27.3 (#2077)
• 5c3f422 Bump golang.org/x/crypto from 0.56.0 to 0.57.0 (#2057)
• e257098 Bump golang.org/x/crypto from 0.57.0 to 0.58.0 (#2072)
• 8a988b0 Bump k8s.io/client-go from 0.37.0 to 0.37.1 (#2067)
• 821a9d4 Bump k8s.io/code-generator from 0.37.0 to 0.37.1 (#2064)
• c60c78d Release carvel package 2.20.0 (#2054)
• 6772bee Release notes 0.41.0 (#2078)
• 9e35500 controller: dynamically detect new, updated, and deleted sealing key secrets (#2034)
• b1aa620 feat(controller): heal manually modified Secrets (#2073)
• 5a7b730 fix(controller): remove redundant scheme registration from NewController (#2046)
• 9b8c749 fix(multidocyaml): do not panic on malformed YAML (#2074)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami/sealed-secrets/releases/download/v0.41.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami/sealed-secrets/releases/download/v0.41.0/kubeseal-0.41.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.41.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS:
The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch:
Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into
$GOPATH/bin with:

go install github.com/bitnami/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!