https://cybertoolchain.io/tools/sealed-secrets New releases and features in Sealed Secrets, tracked by The Cyber Toolchain. en Fri, 23 Oct 2026 10:12:21 GMT https://github.com/bitnami/sealed-secrets/releases/tag/v0.41.0 https://github.com/bitnami/sealed-secrets/releases/tag/v0.41.0 Fri, 23 Oct 2026 10:12:21 GMT Controller now dynamically reloads sealing keys and self-heals manually modified Secrets without a pod restart.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Controller dynamically detects new, updated, and deleted sealing key secrets at runtime — no pod restart required when keys are added, relabeled, or removed.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Controller heals manually modified Secrets by restoring them to the state defined by their parent SealedSecret. • The `--skip-recreate` controller flag now also suppresses restoration of manually modified Secrets (previously it only skipped recreation of deleted ones). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/releases/tag/helm-v2.20.0 https://github.com/bitnami/sealed-secrets/releases/tag/helm-v2.20.0 Thu, 10 Sep 2026 18:48:28 GMT Sealed Secrets helm-v2.20.0 lets you omit encrypted keys via null and hardens the `/v1/rotate` endpoint against decryption oracle abuse.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables `encryptedData` keys to be omitted from the unsealed Secret by setting the corresponding key to `null` in the SealedSecret template.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/releases/tag/helm-v2.19.0 https://github.com/bitnami/sealed-secrets/releases/tag/helm-v2.19.0 Thu, 18 Jun 2026 13:11:34 GMT Helm chart v2.19.0 adds ppc64le support, default Prometheus alerting rules for out-of-sync secrets, and tightened pod security defaults. • Adds ppc64le architecture support, enabling Sealed Secrets controller deployment on IBM POWER clusters. • Adds default PrometheusRule to the Helm chart that alerts when SealedSecrets are out of sync with their unsealed counterparts. • Updates security context defaults to comply with the Kubernetes restricted pod security standard profile. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.38.0 https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.38.0 Thu, 18 Jun 2026 12:35:53 GMT Sealed Secrets v0.38.0 adds ppc64le support, a default PrometheusRule for out-of-sync secrets, and updated pod security context defaults. • Adds ppc64le architecture support for the kubeseal client and controller binaries. • Adds a default PrometheusRule in the Helm chart to alert on out-of-sync sealed secrets. • Updates security context defaults in the Helm chart to comply with Kubernetes restricted pod security standards. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/releases/tag/v0.38.0 https://github.com/bitnami/sealed-secrets/releases/tag/v0.38.0 Thu, 18 Jun 2026 12:35:53 GMT Sealed Secrets v0.38.0 adds ppc64le support, default Prometheus alerting rules for out-of-sync secrets, and hardened pod security defaults. • Adds ppc64le architecture support, enabling Sealed Secrets controller and kubeseal to run on IBM Power (ppc64le) nodes. • Adds a default PrometheusRule to the Helm chart that alerts when SealedSecrets are out of sync with their unsealed counterparts. • Updates security context defaults in the Helm chart to comply with the Kubernetes restricted pod security standard profile. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.37.0 https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.37.0 Thu, 21 May 2026 14:35:09 GMT Sealed Secrets v0.37.0 exposes plaintext template.data values in the template rendering context. • Exposes plaintext `template.data` values in the template rendering context, enabling secrets to reference their own plaintext data during SealedSecret template rendering. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.34.0 https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.34.0 Thu, 18 Dec 2025 13:04:01 GMT Sealed Secrets v0.34.0 makes the controller's Kubernetes client QPS and Burst limits configurable. • Adds configurable QPS and Burst settings for the controller's Kubernetes client, enabling tuning of API server request rates. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.31.0 https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.31.0 Wed, 20 Aug 2025 09:55:09 GMT Sealed Secrets v0.31.0 adds watch support for Secrets in the controller. • Adds watch for Secrets in the controller, enabling the sealed-secrets controller to react to Secret changes in real time. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.27.3 https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.27.3 Thu, 05 Dec 2024 16:03:29 GMT Sealed Secrets v0.27.3 adds key TTL/cutoff Helm options, configurable max retries, and instance labels on Prometheus metrics. • Adds `keyttl` and `keycutofftime` options to the Helm chart for controlling sealing key lifecycle. • Adds configurable max retries for the controller. • Adds `app.kubernetes.io/instance` label to Prometheus metrics for better multi-instance observability. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/releases/tag/v0.27.0 https://github.com/bitnami/sealed-secrets/releases/tag/v0.27.0 Thu, 20 Jun 2024 11:29:38 GMT v0.27.0 adds Sprig templating library and LoadBalancerClass support to Sealed Secrets. • Adds the `sprig` function library for use in template values during secret encryption • Adds support for specifying a custom `loadBalancerClass` for the Sealed Secrets controller service Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Thu, 15 Feb 2024 13:33:43 GMT Sealed Secrets v0.26.0 adds structured logging and a new `rbac.proxier` Helm config key • Adds `rbac.proxier` configuration option to the Helm chart • Introduces structured logging support in the Sealed Secrets controller and operator Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.25.0 https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.25.0 Thu, 18 Jan 2024 18:13:00 GMT Sealed Secrets v0.25.0 adds proxy environment variable support for certificate fetching • Supports fetching the certificate URL via proxy environment variables (`HTTP_PROXY`, `HTTPS_PROXY`, etc.) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Fri, 15 Dec 2023 10:44:04 GMT Sealed Secrets v0.24.5 adds Helm chart sources • Adds `sources` to the Helm chart Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Thu, 17 Aug 2023 12:31:59 GMT v0.23.1 allows changing default revisionHistoryLimit and adjusts securityContext • Adds `revisionHistoryLimit` as a configurable Helm value to control the default number of old ReplicaSets retained. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Mon, 17 Jul 2023 11:22:57 GMT Sealed Secrets v0.23.0 adds custom annotations/labels on keypairs, secret patching in CLI, and Helm config options. • Adds support for custom annotations and labels on sealing keypairs via `--annotations` and `--labels` flags. • Adds `--patch` flag to the CLI to update existing secrets instead of clobbering them. • Adds `namespacedRoles` option in the Helm chart to control RBAC scope. • Adds `--log-info-stdout` flag to the Helm chart for log output configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Thu, 15 Jun 2023 10:50:49 GMT Sealed Secrets v0.22.0 adds a flag to skip owner references and new status columns. • Adds additionalPrinterColumns for status and age in the CustomResourceDefinition Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Mon, 17 Apr 2023 15:28:27 GMT Sealed Secrets v0.20.5 now generates embedded ObjectMeta in CRDs and signs images with Cosign v2. • Signs container images using `Cosign v2` for improved supply chain security verification Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Wed, 15 Mar 2023 11:50:18 GMT Sealed Secrets v0.20.1 adds configurable cluster role names, automountServiceAccountToken control, and auto-recreation disabling. • Allows `clusterRoleName` to be parametrized via Helm for custom cluster role naming • Adds `automountServiceAccountToken: false` support in the controller deployment configuration • Introduces a mechanism to disable secret auto-recreation behavior Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Wed, 15 Feb 2023 12:58:17 GMT Sealed Secrets v0.19.5 adds automated Openshift controller tests and a Carvel package distribution • Adds automated controller testing on Openshift platforms via VMware Image Builder Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Thu, 22 Sep 2022 14:04:08 GMT kubeseal published as standalone container image and moved to its own package in v0.18.4 • Publish `kubeseal` in a container image Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Thu, 02 Jun 2022 16:07:11 GMT Sealed Secrets v0.18.0 adds multi-namespace watching and cosign image signing • Add capability to watch multiple namespaces • Sign container images with cosign Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Thu, 31 Mar 2022 13:48:23 GMT Sealed Secrets v0.17.4 adds kubeseal support for darwin/arm64 • Adds `kubeseal` binary support for darwin/arm64 architecture Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Thu, 27 Jan 2022 15:58:02 GMT Sealed Secrets v0.17.3 enables unsealing with empty encryptedData and adds RBAC rules for restricted environments • `unseal` now processes templates even when `encryptedData` is empty, allowing workflows that rely on template-only rendering • Controller pod now includes new RBAC rules enabling compatibility with Kubernetes clusters that enforce strict RBAC policies • `reencrypt` and `validate` commands support named ports defined in the Sealed Secret service configuration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md https://github.com/bitnami/sealed-secrets/blob/main/RELEASE-NOTES.md Tue, 14 Dec 2021 13:43:07 GMT Sealed Secrets v0.17.0 enables update-status by default with environment variable control. • Enables `--update-status` flag by default in the controller to reflect status information • Supports deactivating the new feature via `SEALED_SECRETS_UPDATE_STATUS=0` environment variable Breaking changes: • The controller now has `update-status` enabled by default; deployments that relied on the previous disabled state must set `SEALED_SECRETS_UPDATE_STATUS=0` to revert. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sealed-secrets