> ## Documentation Index
> Fetch the complete documentation index at: https://notes.kodekloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Installation of Kubeseal CLI

> This article provides installation steps for the Kubeseal CLI on Linux to convert Kubernetes Secrets into SealedSecrets.

Follow these steps to install the Kubeseal CLI on Linux. Kubeseal converts Kubernetes Secrets into SealedSecrets, allowing safe storage in Git.

## Prerequisites

* A working Kubernetes cluster
* `kubectl` configured and pointed at your cluster

<Callout icon="lightbulb" color="#1CB2FE">
  Kubeseal v0.23.0 is used here as an example. Replace `0.23.0` with the version you need:

  ```bash theme={null}
  export KUBESEAL_VERSION="0.23.0"
  ```
</Callout>

## Step 1: Download the Kubeseal Binary

Fetch the Linux AMD64 tarball from the official releases:

```bash theme={null}
wget -O kubeseal-${KUBESEAL_VERSION}-linux-amd64.tar.gz \
  "https://github.com/bitnami-labs/sealed-secrets/releases/download/v${KUBESEAL_VERSION}/kubeseal-${KUBESEAL_VERSION}-linux-amd64.tar.gz"
```

## Step 2: Extract the Executable

Unpack only the `kubeseal` binary from the archive:

```bash theme={null}
tar -xvzf kubeseal-${KUBESEAL_VERSION}-linux-amd64.tar.gz kubeseal
```

## Step 3: Install to Your PATH

Move `kubeseal` into `/usr/local/bin` for system-wide access:

```bash theme={null}
sudo install -m 755 kubeseal /usr/local/bin/kubeseal
```

## Step 4: Verify Connectivity

Ensure Kubeseal can talk to the Sealed Secrets controller by listing pods in the `kube-system` namespace:

```bash theme={null}
kubectl get pods -n kube-system
```

Example output:

```text theme={null}
NAME                                           READY   STATUS    RESTARTS   AGE
coredns-5d78c9869d-wm8sw                       1/1     Running   0          13h
etcd-minikube                                  1/1     Running   0          13h
kube-apiserver-minikube                        1/1     Running   0          13h
kube-controller-manager-minikube               1/1     Running   0          13h
kube-proxy-x6f9j                               1/1     Running   0          13h
kube-scheduler-minikube                        1/1     Running   0          13h
my-release-sealed-secrets-76b49fc554-wk717     1/1     Running   0          21s
storage-provisioner                            1/1     Running   1          13h
```

<Callout icon="lightbulb" color="#1CB2FE">
  Seeing the `my-release-sealed-secrets-*` pod in **Running** state means Kubeseal is installed and ready to use.
</Callout>

## References

* [Sealed Secrets GitHub Repository][sealed-secrets]
* [Kubeseal Releases][sealed-secrets-releases]

[sealed-secrets]: https://github.com/bitnami-labs/sealed-secrets

[sealed-secrets-releases]: https://github.com/bitnami-labs/sealed-secrets/releases

<CardGroup>
  <Card title="Watch Video" icon="video" cta="Learn more" href="https://learn.kodekloud.com/user/courses/introduction-to-sealed-secrets-in-kubernetes/module/0f3ed562-f151-48f9-bb8c-8d3a4dbb4fc3/lesson/f96bad90-6142-49d3-bacd-4714490b1273" />
</CardGroup>