認証情報アクセス
Reads manifest files that may include secret generators or config references.
brew
kustomize のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。
エージェント安全性
kustomize builds Kubernetes manifests that are commonly applied to clusters.
Reads manifest files that may include secret generators or config references.
Build is local, but output is intended for cluster mutation.
Can generate deployable Kubernetes artifacts.
Gate secret-generator inputs and downstream apply operations.
Allow build output review; require approval before applying generated manifests or reading secret files.
インストール
brew install kustomizelocal Homebrew formula metadata
sudo port install kustomizeMacPorts ports tree · devel/kustomize/Portfile · ソース: api.github.com
sudo apk add kustomizeAlpine Linux edge package indexes · kustomize · ソース: dl-cdn.alpinelinux.org
sudo apt install kustomizeDebian stable package indexes · kustomize · ソース: deb.debian.org
sudo dnf install kustomizeFedora Rawhide package metadata · kustomize · ソース: dl.fedoraproject.org
nix profile install nixpkgs#kustomizenixpkgs package indexes · kustomize · ソース: raw.githubusercontent.com
sudo pacman -S kustomizeArch Linux sync databases · kustomize · ソース: geo.mirror.pkgbuild.com
sudo zypper install kustomizeopenSUSE Tumbleweed package metadata · kustomize · ソース: download.opensuse.org
choco install kustomizeChocolatey community package catalog · kustomize · ソース: community.chocolatey.org
scoop install main/kustomizeScoop official bucket manifest trees · bucket/kustomize.json · ソース: api.github.com
winget install --id Kubernetes.kustomize -eWindows Package Manager source index · Kubernetes.kustomize · ソース: cdn.winget.microsoft.com
概要
Template-free customization of Kubernetes YAML manifests
履歴
Kustomize is the Kubernetes SIG CLI tool for template-free customization of raw YAML manifests. It became especially significant after the `kustomize build` flow was embedded into kubectl v1.14.
Kustomize was created to customize Kubernetes resource YAML without mutating the base files and without introducing a general-purpose templating language. The README compares it to `make`, because desired transformations are declared in a file, and to `sed`, because the output is edited text.
The project's core model is the `kustomization.yaml` file. Users declare resources, generators, patches, labels, name transformations, bases, and overlays, then run `kustomize build` to emit deployable YAML. That model made it attractive to GitOps and package-management workflows where plain YAML remains reviewable.
Kustomize crossed from standalone Kubernetes SIG CLI project into kubectl when the v2.0.3 build flow was added to kubectl v1.14 in 2019. The embedded version stayed frozen through kubectl v1.20, then moved to v4.0.5 in kubectl v1.21 and continued being tracked in Kubernetes release notes.
A 2024 Kubernetes Enhancement Proposal proposed deprecating and removing Kustomize from kubectl, partly to let the two tools develop separately and reduce kubectl dependency weight. The same KEP records that after SIG Architecture discussion on October 17, 2024, the removal proposal was not pursued because widespread community adoption made removal disruptive.
Users keep a base directory of Kubernetes YAML plus a `kustomization.yaml`, then create environment-specific overlays such as development, staging, and production. `kustomize build` emits the rendered YAML, commonly piped to `kubectl apply -f -` or used by GitOps controllers.
Kustomize is one of the most important Kubernetes packaging tools because it occupies a middle ground between raw manifests and full templating systems such as Helm. For package maintainers, it matters because it preserves upstream YAML as patchable source material, supports overlays cleanly, and exists both as a standalone binary and as a kubectl-integrated workflow.
セキュリティ状態
infrastructure mutation or orchestration signal.
リスク orange · 信頼度 中 · infrastructure
エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
kustomization.yaml実行可能ファイル
| コマンド | 種類 | 公開範囲 | メモ |
|---|---|---|---|
kustomize | cli | グローバル実行可能ファイル |
鮮度
これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。
https://github.com/kubernetes-sigs/kustomize
インストールメタデータ
| パッケージキー | brew:kustomize |
|---|---|
| バージョン | 5.8.1 |
| パッケージマネージャ | Homebrew |
| パッケージマネージャページ | https://formulae.brew.sh/formula/kustomize |
| ホームページ | https://github.com/kubernetes-sigs/kustomize |
| リポジトリ | https://github.com/kubernetes-sigs/kustomize |
| 上流ドキュメント | https://github.com/kubernetes-sigs/kustomize#readme |
| ライセンス | Apache-2.0 |
| ソースアーカイブ | https://github.com/kubernetes-sigs/kustomize/archive/refs/tags/kustomize/v5.8.1.tar.gz |
| ビルド依存関係 | go |
| Bottle | 利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | 未定義 |
| サービス | 宣言なし |
レジストリ情報
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | kustomize |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
ソースデータベース一致
一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。
golang-k8s-sigs-kustomize-dev 5.6.0+ds-1
Customization of Kubernetes YAML configurations (library)
https://github.com/kubernetes-sigs/kustomize
sudo apt install golang-k8s-sigs-kustomize-devkustomize 5.6.0+ds-1+b2
Customization of Kubernetes YAML configurations (program)
https://github.com/kubernetes-sigs/kustomize
sudo apt install kustomizekustomize
nix profile install nixpkgs#kustomizekustomize 5.8.1-r2
Template-free customization of Kubernetes YAML manifests
sudo apk add kustomizekustomize-bash-completion 5.8.1-r2
Bash completions for kustomize
sudo apk add kustomize-bash-completionkustomize-fish-completion 5.8.1-r2
Fish completions for kustomize
sudo apk add kustomize-fish-completionkustomize-zsh-completion 5.8.1-r2
Zsh completions for kustomize
sudo apk add kustomize-zsh-completionkustomize 5.8.1-1.fc45
Customization of kubernetes YAML configurations
https://github.com/kubernetes-sigs/kustomize
sudo dnf install kustomizekustomize 5.8.1-1
Template-free customization of Kubernetes YAML manifests
https://github.com/kubernetes-sigs/kustomize
sudo pacman -S kustomizekustomize 5.8.1-1.2
Customization of kubernetes YAML configurations
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomizekustomize-bash-completion 5.8.1-1.2
Bash Completion for kustomize
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomize-bash-completionkustomize-fish-completion 5.8.1-1.2
Fish Completion for kustomize
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomize-fish-completionkustomize-zsh-completion 5.8.1-1.2
Zsh Completion for kustomize
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomize-zsh-completionkustomize
sudo port install kustomizekustomize
choco install kustomizemain/kustomize
scoop install main/kustomizeソース経路
このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。
View the package source record on GitHub.