Accès aux identifiants
Reads manifest files that may include secret generators or config references.
brew / rang 307
Installer kustomize avec Homebrew
Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de kustomize pour les workflows d'agents IA.
sécurité des agents
Réponse sur la sécurité des agents
kustomize builds Kubernetes manifests that are commonly applied to clusters.
Modification distante
Build is local, but output is intended for cluster mutation.
Risque de publication ou d'artéfact
Can generate deployable Kubernetes artifacts.
Contrôle recommandé
Gate secret-generator inputs and downstream apply operations.
Conseils d'utilisation par les agents
Allow build output review; require approval before applying generated manifests or reading secret files.
installation
Commandes d'installation supplémentaires
macOS
Homebrewvérifié · 100%
brew install kustomizeprovider-native install command
aperçu
Résumé du paquet
Template-free customization of Kubernetes YAML manifests
Liens du projet
Commandes et alias
- kustomize
historique
Historique du projet et usages
Kustomize is the Kubernetes SIG CLI tool for template-free customization of raw YAML manifests. It became especially significant after the `kustomize build` flow was embedded into kubectl v1.14.
Historique du projet
Kustomize was created to customize Kubernetes resource YAML without mutating the base files and without introducing a general-purpose templating language. The README compares it to `make`, because desired transformations are declared in a file, and to `sed`, because the output is edited text.
The project's core model is the `kustomization.yaml` file. Users declare resources, generators, patches, labels, name transformations, bases, and overlays, then run `kustomize build` to emit deployable YAML. That model made it attractive to GitOps and package-management workflows where plain YAML remains reviewable.
Historique d'adoption
Kustomize crossed from standalone Kubernetes SIG CLI project into kubectl when the v2.0.3 build flow was added to kubectl v1.14 in 2019. The embedded version stayed frozen through kubectl v1.20, then moved to v4.0.5 in kubectl v1.21 and continued being tracked in Kubernetes release notes.
A 2024 Kubernetes Enhancement Proposal proposed deprecating and removing Kustomize from kubectl, partly to let the two tools develop separately and reduce kubectl dependency weight. The same KEP records that after SIG Architecture discussion on October 17, 2024, the removal proposal was not pursued because widespread community adoption made removal disruptive.
Modes d'utilisation
Users keep a base directory of Kubernetes YAML plus a `kustomization.yaml`, then create environment-specific overlays such as development, staging, and production. `kustomize build` emits the rendered YAML, commonly piped to `kubectl apply -f -` or used by GitOps controllers.
Pourquoi les passionnés de paquets s'y intéressent
Kustomize is one of the most important Kubernetes packaging tools because it occupies a middle ground between raw manifests and full templating systems such as Helm. For package maintainers, it matters because it preserves upstream YAML as patchable source material, supports overlays cleanly, and exists both as a standalone binary and as a kubectl-integrated workflow.
Chronologie
- 2018: Kustomize matured as a Kubernetes YAML customization tool under Kubernetes SIG CLI.
- 2019: kubectl v1.14 added the Kustomize v2.0.3 build flow.
- 2021: kubectl v1.21 updated the embedded Kustomize version to v4.0.5.
- 2024: A Kubernetes Enhancement Proposal to remove Kustomize from kubectl was not pursued after discussion because of widespread adoption.
Related projects
- Kustomize is related to kubectl, Kubernetes SIG CLI, Helm, GitOps controllers, Kubernetes manifests, Krew plugins, and configuration-management tools that transform YAML before applying it to clusters.
Sources
posture de sécurité
Niveau de risque : orange
infrastructure mutation or orchestration signal.
Classificateur de risque
risque orange · confiance moyen · infrastructure
Pourquoi
- infrastructure mutation or orchestration signal
Signaux
- text:kubernetes
Comportement d'installation
- Aucune métadonnée de bottle Homebrew n’a été enregistrée.
Revue recommandée
Avant une utilisation sans surveillance par un agent, vérifiez si l'outil lit des identifiants en clair, écrit un état distant, publie des artefacts ou lance des plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
kustomization.yaml
exécutables
Exécutables installés
| Commande | Type | Exposition | Note |
|---|---|---|---|
kustomize | exécutable | exécutable indexé | Découvert depuis l'index local des exécutables. |
fraîcheur
Version et fraîcheur
Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.
page générée2026-08-03
version du gestionnaire5.8.1
gestionnaire mis à jour2026-07-27
données localesinconnu
amontnon disponible
dernière version détectéenon détecté
- OKAucun avertissement de fraîcheur n'a été généré.
métadonnées d'installation
Métadonnées du paquet
| Clé du paquet | brew:kustomize |
|---|---|
| Version | 5.8.1 |
| Gestionnaire de paquets | Homebrew |
| Page d'accueil | https://github.com/kubernetes-sigs/kustomize |
| Dépôt | https://github.com/kubernetes-sigs/kustomize |
| Dernière mise à jour | 2026-07-27T21:58:48+02:00 |
| Pulse | updated |
| Bouteille | non enregistré |
| Service | aucun déclaré |
piste source
Généré depuis les données du dépôt
Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Sources utilisées
- Geiger risk classifier
- Nucleus package database
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation