Kubeseal Developer Guide

June 15, 2026 ยท View on GitHub

Kubeseal component is a CLI tool that uses asymmetric crypto to encrypt secrets that only the controller can decrypt.

Download the Kubeseal source code

git clone https://github.com/bitnami/sealed-secrets.git $SEALED_SECRETS_DIR

The kubeseal sources are located under cmd/kubeseal/ and use packages from the pkg directory.

Building the kubeseal binary

make kubeseal

This builds the kubeseal binary in the working directory.

Running tests

To run the unit tests for kubeseal binary:

make test