v0.34.0 (2025-12-18T12:57:00Z)

New v0.34.0 release!

Changelog

• 3687f78caf3ad660fa5b41c98830a108ad13d1fb Add kseal to README (#1852)
• e5291a89dc1fc83ffb362999c4c81ef156893a3a Bump distroless/static from 87bce11 to 4b2a093 in /docker (#1846)
• a82bbb98b9252cf5041f12147406322d93a01272 Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 (#1843)
• 5769e179439113c7c9ef0be45a33067b61bc01d5 Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 (#1844)
• 621f4dcf65a95ad1ac7228795e32b3519d7f4dcd Bump golang version to the latest available 1.24 (#1854)
• 10ee3827ce9b15ffaf3c441f017a5328f336cc43 Bump golang.org/x/crypto from 0.43.0 to 0.44.0 (#1835)
• 138a3f4178c6eb257e050e4c2b787a02ad196e40 Bump golang.org/x/crypto from 0.44.0 to 0.45.0 in the go_modules group across 1 directory (#1840)
• 8419bc0afe346ffaa34e690f578a056890e866b3 Bump golang.org/x/crypto from 0.45.0 to 0.46.0 (#1845)
• 1d475b79d3b856c7db093af6b58879d517ede23a Bump k8s.io/client-go from 0.34.1 to 0.34.2 (#1837)
• fe2623161b2941fdf50b01d7f0bba0f4ef57f5cc Bump k8s.io/client-go from 0.34.2 to 0.34.3 (#1848)
• b29793634d3fa3da6c89030a6c83a61731af9201 Bump k8s.io/code-generator from 0.34.1 to 0.34.2 (#1839)
• cc5517f8d191fa444bfc665d55726b5d83d9eb34 Bump k8s.io/code-generator from 0.34.2 to 0.34.3 (#1850)
• 987f10aa7706312e2f289f87c959208b27a95813 Make controllers kubeclient QPS & Burst configurable. (#1834)
• 68ae133fd56c567ed7bec67cf1ad17c09dc0e179 Release carvel package 2.17.9 (#1830)
• fd30a3eb590170d99e5d62df254d097a2c131144 Release notes 0.34.0 (#1855)
• 11b065c9578e8edc37f0465b3a23428b34bc1d83 use default method to watch for key secrets (#1831)

Installation Instructions

Cluster-side

Install the SealedSecret CRD and server-side controller into the kube-system namespace:

kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.34.0/controller.yaml

Client-side

Install the client-side tool into /usr/local/bin/:

Linux x86_64:

curl -OL "https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.34.0/kubeseal-0.34.0-linux-amd64.tar.gz"
tar -xvzf kubeseal-0.34.0-linux-amd64.tar.gz kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal

macOS: The kubeseal client is available on homebrew:

brew install kubeseal

MacPorts:

The kubeseal client is available on MacPorts:

port install kubeseal

Nixpkgs

The kubeseal client is available on Nixpkgs: (DISCLAIMER: Not maintained by bitnami-labs)

nix-env -iA nixpkgs.kubeseal

Other OS/Arch: Binaries for other OS/arch combinations are attached to this release below.

If you just want the latest client tool, it can be installed into $GOPATH/bin with:

go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

You can specify a release tag or a commit SHA instead of main.

The go install command will place the kubeseal binary at $GOPATH/bin:

$(go env GOPATH)/bin/kubeseal

Release Notes

Please read the RELEASE_NOTES which contain among other things important information for those upgrading from previous releases.

Thanks!