Credential-Zugriff
Reads manifest files that may include secret generators or config references.
brew
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für kustomize in AI-Agent-Workflows.
Agent-Sicherheit
kustomize builds Kubernetes manifests that are commonly applied to clusters.
Reads manifest files that may include secret generators or config references.
Build is local, but output is intended for cluster mutation.
Can generate deployable Kubernetes artifacts.
Gate secret-generator inputs and downstream apply operations.
Allow build output review; require approval before applying generated manifests or reading secret files.
Installation
brew install kustomizelocal Homebrew formula metadata
sudo port install kustomizeMacPorts ports tree · devel/kustomize/Portfile · Quelle: api.github.com
sudo apk add kustomizeAlpine Linux edge package indexes · kustomize · Quelle: dl-cdn.alpinelinux.org
sudo apt install kustomizeDebian stable package indexes · kustomize · Quelle: deb.debian.org
sudo dnf install kustomizeFedora Rawhide package metadata · kustomize · Quelle: dl.fedoraproject.org
nix profile install nixpkgs#kustomizenixpkgs package indexes · kustomize · Quelle: raw.githubusercontent.com
sudo pacman -S kustomizeArch Linux sync databases · kustomize · Quelle: geo.mirror.pkgbuild.com
sudo zypper install kustomizeopenSUSE Tumbleweed package metadata · kustomize · Quelle: download.opensuse.org
choco install kustomizeChocolatey community package catalog · kustomize · Quelle: community.chocolatey.org
scoop install main/kustomizeScoop official bucket manifest trees · bucket/kustomize.json · Quelle: api.github.com
winget install --id Kubernetes.kustomize -eWindows Package Manager source index · Kubernetes.kustomize · Quelle: cdn.winget.microsoft.com
Überblick
Template-free customization of Kubernetes YAML manifests
Verlauf
Kustomize is the Kubernetes SIG CLI tool for template-free customization of raw YAML manifests. It became especially significant after the `kustomize build` flow was embedded into kubectl v1.14.
Kustomize was created to customize Kubernetes resource YAML without mutating the base files and without introducing a general-purpose templating language. The README compares it to `make`, because desired transformations are declared in a file, and to `sed`, because the output is edited text.
The project's core model is the `kustomization.yaml` file. Users declare resources, generators, patches, labels, name transformations, bases, and overlays, then run `kustomize build` to emit deployable YAML. That model made it attractive to GitOps and package-management workflows where plain YAML remains reviewable.
Kustomize crossed from standalone Kubernetes SIG CLI project into kubectl when the v2.0.3 build flow was added to kubectl v1.14 in 2019. The embedded version stayed frozen through kubectl v1.20, then moved to v4.0.5 in kubectl v1.21 and continued being tracked in Kubernetes release notes.
A 2024 Kubernetes Enhancement Proposal proposed deprecating and removing Kustomize from kubectl, partly to let the two tools develop separately and reduce kubectl dependency weight. The same KEP records that after SIG Architecture discussion on October 17, 2024, the removal proposal was not pursued because widespread community adoption made removal disruptive.
Users keep a base directory of Kubernetes YAML plus a `kustomization.yaml`, then create environment-specific overlays such as development, staging, and production. `kustomize build` emits the rendered YAML, commonly piped to `kubectl apply -f -` or used by GitOps controllers.
Kustomize is one of the most important Kubernetes packaging tools because it occupies a middle ground between raw manifests and full templating systems such as Helm. For package maintainers, it matters because it preserves upstream YAML as patchable source material, supports overlays cleanly, and exists both as a standalone binary and as a kubectl-integrated workflow.
Sicherheitslage
infrastructure mutation or orchestration signal.
orange Risiko · mittel Konfidenz · infrastructure
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
kustomization.yamlExecutables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
kustomize | cli | globales Executable |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
https://github.com/kubernetes-sigs/kustomize
Installationsmetadaten
| Paketschlüssel | brew:kustomize |
|---|---|
| Version | 5.8.1 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/kustomize |
| Homepage | https://github.com/kubernetes-sigs/kustomize |
| Repository | https://github.com/kubernetes-sigs/kustomize |
| Upstream-Dokumentation | https://github.com/kubernetes-sigs/kustomize#readme |
| Lizenz | Apache-2.0 |
| Quellarchiv | https://github.com/kubernetes-sigs/kustomize/archive/refs/tags/kustomize/v5.8.1.tar.gz |
| Build-Abhängigkeiten | go |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | kustomize |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
golang-k8s-sigs-kustomize-dev 5.6.0+ds-1
Customization of Kubernetes YAML configurations (library)
https://github.com/kubernetes-sigs/kustomize
sudo apt install golang-k8s-sigs-kustomize-devkustomize 5.6.0+ds-1+b2
Customization of Kubernetes YAML configurations (program)
https://github.com/kubernetes-sigs/kustomize
sudo apt install kustomizekustomize
nix profile install nixpkgs#kustomizekustomize 5.8.1-r2
Template-free customization of Kubernetes YAML manifests
sudo apk add kustomizekustomize-bash-completion 5.8.1-r2
Bash completions for kustomize
sudo apk add kustomize-bash-completionkustomize-fish-completion 5.8.1-r2
Fish completions for kustomize
sudo apk add kustomize-fish-completionkustomize-zsh-completion 5.8.1-r2
Zsh completions for kustomize
sudo apk add kustomize-zsh-completionkustomize 5.8.1-1.fc45
Customization of kubernetes YAML configurations
https://github.com/kubernetes-sigs/kustomize
sudo dnf install kustomizekustomize 5.8.1-1
Template-free customization of Kubernetes YAML manifests
https://github.com/kubernetes-sigs/kustomize
sudo pacman -S kustomizekustomize 5.8.1-1.2
Customization of kubernetes YAML configurations
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomizekustomize-bash-completion 5.8.1-1.2
Bash Completion for kustomize
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomize-bash-completionkustomize-fish-completion 5.8.1-1.2
Fish Completion for kustomize
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomize-fish-completionkustomize-zsh-completion 5.8.1-1.2
Zsh Completion for kustomize
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomize-zsh-completionkustomize
sudo port install kustomizekustomize
choco install kustomizemain/kustomize
scoop install main/kustomizeQuellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.