Credential access
Reads manifest files that may include secret generators or config references.
brew
Install kustomize with Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, scoop, winget, zypper
Template-free customization of Kubernetes YAML manifests. Version 5.8.1 via Homebrew; verified from local package data.
agent safety
Agent safety answer
kustomize builds Kubernetes manifests that are commonly applied to clusters.
Remote mutation
Build is local, but output is intended for cluster mutation.
Publish/artifact risk
Can generate deployable Kubernetes artifacts.
Recommended control
Gate secret-generator inputs and downstream apply operations.
Agent-use guidance
Allow build output review; require approval before applying generated manifests or reading secret files.
install
Additional install commands
macOS
Homebrewverified · 100%
brew install kustomizelocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install kustomizeMacPorts ports tree · devel/kustomize/Portfile · source: api.github.com
Linux
Alpine Linux apkverified · 92%
sudo apk add kustomizeAlpine Linux edge package indexes · kustomize · source: dl-cdn.alpinelinux.org
Debian aptverified · 92%
sudo apt install golang-k8s-sigs-kustomize-devDebian stable package indexes · golang-k8s-sigs-kustomize-dev · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install kustomizeFedora Rawhide package metadata · kustomize · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#kustomizenixpkgs package indexes · kustomize · source: raw.githubusercontent.com
Arch Linux pacmanverified · 92%
sudo pacman -S kustomizeArch Linux sync databases · kustomize · source: geo.mirror.pkgbuild.com
openSUSE zypperverified · 92%
sudo zypper install kustomizeopenSUSE Tumbleweed package metadata · kustomize · source: download.opensuse.org
Windows
Chocolateyverified · 92%
choco install kustomizeChocolatey community package catalog · kustomize · source: community.chocolatey.org
Scoopverified · 92%
scoop install main/kustomizeScoop official bucket manifest trees · bucket/kustomize.json · source: api.github.com
Windows Package Managerverified · 92%
winget install --id Kubernetes.kustomize -eWindows Package Manager source index · Kubernetes.kustomize · source: cdn.winget.microsoft.com
overview
Package summary
Template-free customization of Kubernetes YAML manifests
Project links
Commands and aliases
- kustomize
history
Project history and usage
Kustomize is the Kubernetes SIG CLI tool for template-free customization of raw YAML manifests. It became especially significant after the `kustomize build` flow was embedded into kubectl v1.14.
Project history
Kustomize was created to customize Kubernetes resource YAML without mutating the base files and without introducing a general-purpose templating language. The README compares it to `make`, because desired transformations are declared in a file, and to `sed`, because the output is edited text.
The project's core model is the `kustomization.yaml` file. Users declare resources, generators, patches, labels, name transformations, bases, and overlays, then run `kustomize build` to emit deployable YAML. That model made it attractive to GitOps and package-management workflows where plain YAML remains reviewable.
Adoption history
Kustomize crossed from standalone Kubernetes SIG CLI project into kubectl when the v2.0.3 build flow was added to kubectl v1.14 in 2019. The embedded version stayed frozen through kubectl v1.20, then moved to v4.0.5 in kubectl v1.21 and continued being tracked in Kubernetes release notes.
A 2024 Kubernetes Enhancement Proposal proposed deprecating and removing Kustomize from kubectl, partly to let the two tools develop separately and reduce kubectl dependency weight. The same KEP records that after SIG Architecture discussion on October 17, 2024, the removal proposal was not pursued because widespread community adoption made removal disruptive.
How it is used
Users keep a base directory of Kubernetes YAML plus a `kustomization.yaml`, then create environment-specific overlays such as development, staging, and production. `kustomize build` emits the rendered YAML, commonly piped to `kubectl apply -f -` or used by GitOps controllers.
Why package nerds care
Kustomize is one of the most important Kubernetes packaging tools because it occupies a middle ground between raw manifests and full templating systems such as Helm. For package maintainers, it matters because it preserves upstream YAML as patchable source material, supports overlays cleanly, and exists both as a standalone binary and as a kubectl-integrated workflow.
Timeline
- 2018: Kustomize matured as a Kubernetes YAML customization tool under Kubernetes SIG CLI.
- 2019: kubectl v1.14 added the Kustomize v2.0.3 build flow.
- 2021: kubectl v1.21 updated the embedded Kustomize version to v4.0.5.
- 2024: A Kubernetes Enhancement Proposal to remove Kustomize from kubectl was not pursued after discussion because of widespread adoption.
Related projects
- Kustomize is related to kubectl, Kubernetes SIG CLI, Helm, GitOps controllers, Kubernetes manifests, Krew plugins, and configuration-management tools that transform YAML before applying it to clusters.
Sources
security posture
Risk level: orange
infrastructure mutation or orchestration signal.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- infrastructure mutation or orchestration signal
Signals
- text:kubernetes
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 1 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
kustomization.yaml
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
kustomize | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version5.8.1
manager updated
local dataok
upstreamcurrent
latest detectedkustomize/v5.8.1
https://github.com/kubernetes-sigs/kustomize
- infoNo package-manager update timestamp was available.low confidence
install metadata
Package metadata
| Package key | brew:kustomize |
|---|---|
| Version | 5.8.1 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/kustomize |
| Homepage | https://github.com/kubernetes-sigs/kustomize |
| Repository | https://github.com/kubernetes-sigs/kustomize |
| Upstream docs | https://github.com/kubernetes-sigs/kustomize#readme |
| License | Apache-2.0 |
| Source archive | https://github.com/kubernetes-sigs/kustomize/archive/refs/tags/kustomize/v5.8.1.tar.gz |
| Build dependencies | go |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | kustomize |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
golang-k8s-sigs-kustomize-dev 5.6.0+ds-1
Customization of Kubernetes YAML configurations (library)
https://github.com/kubernetes-sigs/kustomize
sudo apt install golang-k8s-sigs-kustomize-dev- Section: golang
- Architecture: all
- Source Package: kustomize
- 10 dependencies
- normalized package name match
- Matched by: Kustomize
Debian apt95%
kustomize 5.6.0+ds-1+b2
Customization of Kubernetes YAML configurations (program)
https://github.com/kubernetes-sigs/kustomize
sudo apt install kustomize- Section: golang
- Architecture: amd64
- Source Package: kustomize
- 1 dependencies
- normalized package name match
- Matched by: Kustomize
Nix95%
kustomize
nix profile install nixpkgs#kustomize- normalized package name match
- Matched by: Kustomize
apk95%
kustomize 5.8.1-r2
Template-free customization of Kubernetes YAML manifests
sudo apk add kustomize- License: Apache-2.0
- Architecture: x86_64
- Source Package: kustomize
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Kustomize
apk95%
kustomize-bash-completion 5.8.1-r2
Bash completions for kustomize
sudo apk add kustomize-bash-completion- License: Apache-2.0
- Architecture: x86_64
- Source Package: kustomize
- normalized package name match
- Matched by: Kustomize
apk95%
kustomize-fish-completion 5.8.1-r2
Fish completions for kustomize
sudo apk add kustomize-fish-completion- License: Apache-2.0
- Architecture: x86_64
- Source Package: kustomize
- normalized package name match
- Matched by: Kustomize
apk95%
kustomize-zsh-completion 5.8.1-r2
Zsh completions for kustomize
sudo apk add kustomize-zsh-completion- License: Apache-2.0
- Architecture: x86_64
- Source Package: kustomize
- normalized package name match
- Matched by: Kustomize
dnf95%
kustomize 5.8.1-1.fc45
Customization of kubernetes YAML configurations
https://github.com/kubernetes-sigs/kustomize
sudo dnf install kustomize- License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: kustomize
- 4 dependencies
- 2 provides
- normalized package name match
- Matched by: Kustomize
pacman95%
kustomize 5.8.1-1
Template-free customization of Kubernetes YAML manifests
https://github.com/kubernetes-sigs/kustomize
sudo pacman -S kustomize- License: Apache-2.0
- Architecture: x86_64
- 1 dependencies
- 1 optional deps
- normalized package name match
- Matched by: Kustomize
zypper95%
kustomize 5.8.1-1.2
Customization of kubernetes YAML configurations
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomize- License: Apache-2.0
- Category: System/Management
- Architecture: x86_64
- Source Package: kustomize
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Kustomize
zypper95%
kustomize-bash-completion 5.8.1-1.2
Bash Completion for kustomize
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomize-bash-completion- License: Apache-2.0
- Category: System/Shells
- Architecture: noarch
- Source Package: kustomize
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Kustomize
zypper95%
kustomize-fish-completion 5.8.1-1.2
Fish Completion for kustomize
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomize-fish-completion- License: Apache-2.0
- Category: System/Shells
- Architecture: noarch
- Source Package: kustomize
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Kustomize
zypper95%
kustomize-zsh-completion 5.8.1-1.2
Zsh Completion for kustomize
https://github.com/kubernetes-sigs/kustomize
sudo zypper install kustomize-zsh-completion- License: Apache-2.0
- Category: System/Shells
- Architecture: noarch
- Source Package: kustomize
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Kustomize
MacPorts95%
kustomize
sudo port install kustomize- normalized package name match
- Matched by: Kustomize
Chocolatey95%
kustomize
choco install kustomize- normalized package name match
- Matched by: Kustomize
Scoop95%
main/kustomize
scoop install main/kustomize- normalized package name match
- Matched by: Kustomize
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment