# Install kustomize with Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, scoop, winget, zypper Template-free customization of Kubernetes YAML manifests. Version 5.8.1 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:kustomize ``` ## Agent safety answer kustomize builds Kubernetes manifests that are commonly applied to clusters. - **Credential access:** Reads manifest files that may include secret generators or config references. - **Remote mutation:** Build is local, but output is intended for cluster mutation. - **Publish/artifact risk:** Can generate deployable Kubernetes artifacts. - **Recommended control:** Gate secret-generator inputs and downstream apply operations. - **Agent-use guidance:** Allow build output review; require approval before applying generated manifests or reading secret files. Additional install commands: ### macOS - Homebrew (100%): ```sh brew install kustomize ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install kustomize ``` Evidence: MacPorts ports tree: devel/kustomize/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add kustomize ``` Evidence: Alpine Linux edge package indexes: kustomize from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install golang-k8s-sigs-kustomize-dev ``` Evidence: Debian stable package indexes: golang-k8s-sigs-kustomize-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install kustomize ``` Evidence: Fedora Rawhide package metadata: kustomize from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#kustomize ``` Evidence: nixpkgs package indexes: kustomize from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S kustomize ``` Evidence: Arch Linux sync databases: kustomize from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install kustomize ``` Evidence: openSUSE Tumbleweed package metadata: kustomize from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install kustomize ``` Evidence: Chocolatey community package catalog: kustomize from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','kubectx' - Scoop (92%): ```sh scoop install main/kustomize ``` Evidence: Scoop official bucket manifest trees: bucket/kustomize.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id Kubernetes.kustomize -e ``` Evidence: Windows Package Manager source index: Kubernetes.kustomize from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:kustomize - **Package manager:** Homebrew - **Package manager page:** - **Version:** 5.8.1 - **Source summary:** Template-free customization of Kubernetes YAML manifests - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - kustomize (cli) - kustomize (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 5.8.1 - Local data: ok - Upstream repository: https://github.com/kubernetes-sigs/kustomize - Upstream latest detected: kustomize/v5.8.1 (current) - info: No package-manager update timestamp was available. ## Project history and usage Kustomize is the Kubernetes SIG CLI tool for template-free customization of raw YAML manifests. It became especially significant after the `kustomize build` flow was embedded into kubectl v1.14. ### Project history Kustomize was created to customize Kubernetes resource YAML without mutating the base files and without introducing a general-purpose templating language. The README compares it to `make`, because desired transformations are declared in a file, and to `sed`, because the output is edited text. The project's core model is the `kustomization.yaml` file. Users declare resources, generators, patches, labels, name transformations, bases, and overlays, then run `kustomize build` to emit deployable YAML. That model made it attractive to GitOps and package-management workflows where plain YAML remains reviewable. ### Adoption history Kustomize crossed from standalone Kubernetes SIG CLI project into kubectl when the v2.0.3 build flow was added to kubectl v1.14 in 2019. The embedded version stayed frozen through kubectl v1.20, then moved to v4.0.5 in kubectl v1.21 and continued being tracked in Kubernetes release notes. A 2024 Kubernetes Enhancement Proposal proposed deprecating and removing Kustomize from kubectl, partly to let the two tools develop separately and reduce kubectl dependency weight. The same KEP records that after SIG Architecture discussion on October 17, 2024, the removal proposal was not pursued because widespread community adoption made removal disruptive. ### How it is used Users keep a base directory of Kubernetes YAML plus a `kustomization.yaml`, then create environment-specific overlays such as development, staging, and production. `kustomize build` emits the rendered YAML, commonly piped to `kubectl apply -f -` or used by GitOps controllers. ### Why package nerds care Kustomize is one of the most important Kubernetes packaging tools because it occupies a middle ground between raw manifests and full templating systems such as Helm. For package maintainers, it matters because it preserves upstream YAML as patchable source material, supports overlays cleanly, and exists both as a standalone binary and as a kubectl-integrated workflow. ### Timeline - 2018: Kustomize matured as a Kubernetes YAML customization tool under Kubernetes SIG CLI. - 2019: kubectl v1.14 added the Kustomize v2.0.3 build flow. - 2021: kubectl v1.21 updated the embedded Kustomize version to v4.0.5. - 2024: A Kubernetes Enhancement Proposal to remove Kustomize from kubectl was not pursued after discussion because of widespread adoption. ### Related projects - Kustomize is related to kubectl, Kubernetes SIG CLI, Helm, GitOps controllers, Kubernetes manifests, Krew plugins, and configuration-management tools that transform YAML before applying it to clusters. ### Sources - - - - ## Security Notes infrastructure mutation or orchestration signal. - **Geiger risk:** orange / medium - infrastructure mutation or orchestration signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: kustomization.yaml ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** kustomize - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - golang-k8s-sigs-kustomize-dev - 5.6.0+ds-1: normalized package name match | Debian stable package indexes: golang-k8s-sigs-kustomize-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Customization of Kubernetes YAML configurations (library) | https://github.com/kubernetes-sigs/kustomize - Debian apt - kustomize - 5.6.0+ds-1+b2: normalized package name match | Debian stable package indexes: kustomize from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Customization of Kubernetes YAML configurations (program) | https://github.com/kubernetes-sigs/kustomize - Nix - kustomize: normalized package name match | nixpkgs package indexes: kustomize from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - apk - kustomize - 5.8.1-r2: normalized package name match | Alpine Linux edge package indexes: kustomize from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Template-free customization of Kubernetes YAML manifests | https://kustomize.io/ - apk - kustomize-bash-completion - 5.8.1-r2: normalized package name match | Alpine Linux edge package indexes: kustomize-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Bash completions for kustomize | https://kustomize.io/ - apk - kustomize-fish-completion - 5.8.1-r2: normalized package name match | Alpine Linux edge package indexes: kustomize-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fish completions for kustomize | https://kustomize.io/ - apk - kustomize-zsh-completion - 5.8.1-r2: normalized package name match | Alpine Linux edge package indexes: kustomize-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Zsh completions for kustomize | https://kustomize.io/ - dnf - kustomize - 5.8.1-1.fc45: normalized package name match | Fedora Rawhide package metadata: kustomize from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Customization of kubernetes YAML configurations | https://github.com/kubernetes-sigs/kustomize - pacman - kustomize - 5.8.1-1: normalized package name match | Arch Linux sync databases: kustomize from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Template-free customization of Kubernetes YAML manifests | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize - 5.8.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: kustomize from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Customization of kubernetes YAML configurations | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize-bash-completion - 5.8.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: kustomize-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Bash Completion for kustomize | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize-fish-completion - 5.8.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: kustomize-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Fish Completion for kustomize | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize-zsh-completion - 5.8.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: kustomize-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Zsh Completion for kustomize | https://github.com/kubernetes-sigs/kustomize - MacPorts - kustomize: normalized package name match | MacPorts ports tree: devel/kustomize/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Chocolatey - kustomize: normalized package name match | Chocolatey community package catalog: kustomize from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','kubectx' - Scoop - main/kustomize: normalized package name match | Scoop official bucket manifest trees: bucket/kustomize.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Related links - [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [kustomizer](https://www.automicvault.com/pkg/brew/kustomizer/) - Shares av.db curated category or tags: cli, cloud-infrastructure, configuration, kubernetes, kubernetes-configuration. - [naml](https://www.automicvault.com/pkg/brew/naml/) - Shares av.db curated category or tags: cli, cloud-infrastructure, configuration, kubernetes, yaml. - [helmify](https://www.automicvault.com/pkg/brew/helmify/) - Shares av.db curated category or tags: cli, cloud-infrastructure, kubernetes, yaml. - [kconf](https://www.automicvault.com/pkg/brew/kconf/) - Shares av.db curated category or tags: cli, cloud-infrastructure, configuration, kubernetes. - [kubetrim](https://www.automicvault.com/pkg/brew/kubetrim/) - Shares av.db curated category or tags: cli, cloud-infrastructure, configuration, kubernetes. - [tanka](https://www.automicvault.com/pkg/brew/tanka/) - Shares av.db curated category or tags: cli, cloud-infrastructure, configuration, kubernetes. - [vals](https://www.automicvault.com/pkg/brew/vals/) - Shares av.db curated category or tags: cli, cloud-infrastructure, configuration, kubernetes. - [argo](https://www.automicvault.com/pkg/brew/argo/) - Shares av.db curated category or tags: cli, cloud-infrastructure, kubernetes. ## Combined YAML source View the package source record on GitHub. [combined/kustomize.yml](https://github.com/automic-vault/db/blob/main/combined/kustomize.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer