Skip to main content
Follow these steps to install the Kubeseal CLI on Linux. Kubeseal converts Kubernetes Secrets into SealedSecrets, allowing safe storage in Git.

Prerequisites

  • A working Kubernetes cluster
  • kubectl configured and pointed at your cluster
Kubeseal v0.23.0 is used here as an example. Replace 0.23.0 with the version you need:

Step 1: Download the Kubeseal Binary

Fetch the Linux AMD64 tarball from the official releases:

Step 2: Extract the Executable

Unpack only the kubeseal binary from the archive:

Step 3: Install to Your PATH

Move kubeseal into /usr/local/bin for system-wide access:

Step 4: Verify Connectivity

Ensure Kubeseal can talk to the Sealed Secrets controller by listing pods in the kube-system namespace:
Example output:
Seeing the my-release-sealed-secrets-* pod in Running state means Kubeseal is installed and ready to use.

References

Watch Video