diff --git a/pkgs/kubernetes/kubernetes/kube-aggregator/pkg.yaml b/pkgs/kubernetes/kubernetes/kube-aggregator/pkg.yaml
new file mode 100644
index 00000000000..2d2c84c5fa1
--- /dev/null
+++ b/pkgs/kubernetes/kubernetes/kube-aggregator/pkg.yaml
@@ -0,0 +1,4 @@
+packages:
+  - name: kubernetes/kubernetes/kube-aggregator@v1.33.0
+  - name: kubernetes/kubernetes/kube-aggregator
+    version: v1.25.4
diff --git a/pkgs/kubernetes/kubernetes/kube-aggregator/registry.yaml b/pkgs/kubernetes/kubernetes/kube-aggregator/registry.yaml
new file mode 100644
index 00000000000..751c09e9b28
--- /dev/null
+++ b/pkgs/kubernetes/kubernetes/kube-aggregator/registry.yaml
@@ -0,0 +1,40 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/main/json-schema/registry.json
+packages:
+  - name: kubernetes/kubernetes/kube-aggregator
+    type: http
+    repo_owner: kubernetes
+    repo_name: kubernetes
+    description: "Aggregator for Kubernetes-style API servers: dynamic registration, discovery summarization, secure proxy"
+    version_filter: not (Version matches "-(alpha|beta|rc)")
+    version_constraint: "false"
+    version_overrides:
+      - version_constraint: semver("<= 1.18.20")
+        no_asset: true
+      - version_constraint: semver("<= 1.25.4")
+        url: https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator
+        format: raw
+        supported_envs:
+          - linux
+        checksum:
+          type: http
+          url: https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator.sha256
+          algorithm: sha256
+      - version_constraint: "true"
+        url: https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator
+        format: raw
+        supported_envs:
+          - linux
+        checksum:
+          type: http
+          url: https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator.sha256
+          algorithm: sha256
+        cosign:
+          opts:
+            - --signature
+            - https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator.sig
+            - --certificate
+            - https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator.cert
+            - --certificate-identity
+            - "krel-staging@k8s-releng-prod.iam.gserviceaccount.com"
+            - --certificate-oidc-issuer
+            - "https://accounts.google.com"
diff --git a/pkgs/kubernetes/kubernetes/kube-aggregator/scaffold.yaml b/pkgs/kubernetes/kubernetes/kube-aggregator/scaffold.yaml
new file mode 100644
index 00000000000..5597855a35a
--- /dev/null
+++ b/pkgs/kubernetes/kubernetes/kube-aggregator/scaffold.yaml
@@ -0,0 +1,9 @@
+---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/main/json-schema/aqua-generate-registry.json
+# aqua - Declarative CLI Version Manager
+# https://aquaproj.github.io/
+# Other than name is optional. All initial values are just examples.
+name: kubernetes/kubernetes/kube-aggregator
+version_filter: not (Version matches "-(alpha|beta|rc)")
+# version_prefix: cli-
+# all_assets_filter: not (Asset matches "-cli")
diff --git a/registry.yaml b/registry.yaml
index 0f12fb912ce..30c6c3c23a0 100644
--- a/registry.yaml
+++ b/registry.yaml
@@ -44173,6 +44173,44 @@ packages:
             - "krel-staging@k8s-releng-prod.iam.gserviceaccount.com"
             - --certificate-oidc-issuer
             - "https://accounts.google.com"
+  - name: kubernetes/kubernetes/kube-aggregator
+    type: http
+    repo_owner: kubernetes
+    repo_name: kubernetes
+    description: "Aggregator for Kubernetes-style API servers: dynamic registration, discovery summarization, secure proxy"
+    version_filter: not (Version matches "-(alpha|beta|rc)")
+    version_constraint: "false"
+    version_overrides:
+      - version_constraint: semver("<= 1.18.20")
+        no_asset: true
+      - version_constraint: semver("<= 1.25.4")
+        url: https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator
+        format: raw
+        supported_envs:
+          - linux
+        checksum:
+          type: http
+          url: https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator.sha256
+          algorithm: sha256
+      - version_constraint: "true"
+        url: https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator
+        format: raw
+        supported_envs:
+          - linux
+        checksum:
+          type: http
+          url: https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator.sha256
+          algorithm: sha256
+        cosign:
+          opts:
+            - --signature
+            - https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator.sig
+            - --certificate
+            - https://dl.k8s.io/{{.Version}}/bin/{{.OS}}/{{.Arch}}/kube-aggregator.cert
+            - --certificate-identity
+            - "krel-staging@k8s-releng-prod.iam.gserviceaccount.com"
+            - --certificate-oidc-issuer
+            - "https://accounts.google.com"
   - name: kubernetes/kubernetes/kubeadm
     aliases:
       - name: kubernetes/kubeadm