# kustomize を Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget でインストール kustomize のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:kustomize ``` ## エージェント安全性の回答 kustomize builds Kubernetes manifests that are commonly applied to clusters. - **認証情報アクセス:** Reads manifest files that may include secret generators or config references. - **リモート変更:** Build is local, but output is intended for cluster mutation. - **公開/成果物リスク:** Can generate deployable Kubernetes artifacts. - **推奨コントロール:** Gate secret-generator inputs and downstream apply operations. - **エージェント利用ガイダンス:** Allow build output review; require approval before applying generated manifests or reading secret files. 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install kustomize ``` 証拠: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install kustomize ``` 証拠: MacPorts ports tree: devel/kustomize/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add kustomize ``` 証拠: Alpine Linux edge package indexes: kustomize from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install kustomize ``` 証拠: Debian stable package indexes: kustomize from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install kustomize ``` 証拠: Fedora Rawhide package metadata: kustomize from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#kustomize ``` 証拠: nixpkgs package indexes: kustomize from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S kustomize ``` 証拠: Arch Linux sync databases: kustomize from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install kustomize ``` 証拠: openSUSE Tumbleweed package metadata: kustomize from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install kustomize ``` 証拠: Chocolatey community package catalog: kustomize from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','kindle' - Scoop (92%): ```sh scoop install main/kustomize ``` 証拠: Scoop official bucket manifest trees: bucket/kustomize.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id Kubernetes.kustomize -e ``` 証拠: Windows Package Manager source index: Kubernetes.kustomize from https://cdn.winget.microsoft.com/cache/source.msix ## パッケージ情報 - **パッケージキー:** brew:kustomize - **パッケージマネージャ:** Homebrew - **バージョン:** 5.8.1 - **ソース概要:** Template-free customization of Kubernetes YAML manifests - **ホームページ:** - **リポジトリ:** - **最終更新:** 2026-07-27T21:58:48+02:00 - **生成日時:** 2026-08-03T19:37:03+00:00 ## 実行可能ファイル - kustomize (エイリアス) ## インストール挙動 - Bottle: 利用不可 ## バージョンと鮮度 - ページ生成日: 2026-08-03 - マネージャ版: 5.8.1 ## プロジェクトの歴史と使われ方 Kustomize is the Kubernetes SIG CLI tool for template-free customization of raw YAML manifests. It became especially significant after the `kustomize build` flow was embedded into kubectl v1.14. ### プロジェクトの歴史 Kustomize was created to customize Kubernetes resource YAML without mutating the base files and without introducing a general-purpose templating language. The README compares it to `make`, because desired transformations are declared in a file, and to `sed`, because the output is edited text. The project's core model is the `kustomization.yaml` file. Users declare resources, generators, patches, labels, name transformations, bases, and overlays, then run `kustomize build` to emit deployable YAML. That model made it attractive to GitOps and package-management workflows where plain YAML remains reviewable. ### 採用の歴史 Kustomize crossed from standalone Kubernetes SIG CLI project into kubectl when the v2.0.3 build flow was added to kubectl v1.14 in 2019. The embedded version stayed frozen through kubectl v1.20, then moved to v4.0.5 in kubectl v1.21 and continued being tracked in Kubernetes release notes. A 2024 Kubernetes Enhancement Proposal proposed deprecating and removing Kustomize from kubectl, partly to let the two tools develop separately and reduce kubectl dependency weight. The same KEP records that after SIG Architecture discussion on October 17, 2024, the removal proposal was not pursued because widespread community adoption made removal disruptive. ### 使われ方 Users keep a base directory of Kubernetes YAML plus a `kustomization.yaml`, then create environment-specific overlays such as development, staging, and production. `kustomize build` emits the rendered YAML, commonly piped to `kubectl apply -f -` or used by GitOps controllers. ### パッケージ好きにとっての重要性 Kustomize is one of the most important Kubernetes packaging tools because it occupies a middle ground between raw manifests and full templating systems such as Helm. For package maintainers, it matters because it preserves upstream YAML as patchable source material, supports overlays cleanly, and exists both as a standalone binary and as a kubectl-integrated workflow. ### タイムライン - 2018: Kustomize matured as a Kubernetes YAML customization tool under Kubernetes SIG CLI. - 2019: kubectl v1.14 added the Kustomize v2.0.3 build flow. - 2021: kubectl v1.21 updated the embedded Kustomize version to v4.0.5. - 2024: A Kubernetes Enhancement Proposal to remove Kustomize from kubectl was not pursued after discussion because of widespread adoption. ### Related projects - Kustomize is related to kubectl, Kubernetes SIG CLI, Helm, GitOps controllers, Kubernetes manifests, Krew plugins, and configuration-management tools that transform YAML before applying it to clusters. ### ソース - - - - ## セキュリティノート infrastructure mutation or orchestration signal. - **Geiger リスク:** orange / 中 - infrastructure mutation or orchestration signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: kustomization.yaml ## 他のパッケージマネージャ記録 - Debian apt - golang-k8s-sigs-kustomize-dev - 5.6.0+ds-1: normalized package name match | Debian stable package indexes: golang-k8s-sigs-kustomize-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Customization of Kubernetes YAML configurations (library) | https://github.com/kubernetes-sigs/kustomize - Debian apt - kustomize - 5.6.0+ds-1+b2: normalized package name match | Debian stable package indexes: kustomize from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Customization of Kubernetes YAML configurations (program) | https://github.com/kubernetes-sigs/kustomize - Nix - kustomize: normalized package name match | nixpkgs package indexes: kustomize from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - apk - kustomize - 5.8.1-r3: normalized package name match | Alpine Linux edge package indexes: kustomize from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Template-free customization of Kubernetes YAML manifests | https://kustomize.io/ - apk - kustomize-bash-completion - 5.8.1-r3: normalized package name match | Alpine Linux edge package indexes: kustomize-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Bash completions for kustomize | https://kustomize.io/ - apk - kustomize-fish-completion - 5.8.1-r3: normalized package name match | Alpine Linux edge package indexes: kustomize-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fish completions for kustomize | https://kustomize.io/ - apk - kustomize-zsh-completion - 5.8.1-r3: normalized package name match | Alpine Linux edge package indexes: kustomize-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Zsh completions for kustomize | https://kustomize.io/ - dnf - kustomize - 5.8.1-2.fc45: normalized package name match | Fedora Rawhide package metadata: kustomize from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Customization of kubernetes YAML configurations | https://github.com/kubernetes-sigs/kustomize - pacman - kustomize - 5.8.1-1: normalized package name match | Arch Linux sync databases: kustomize from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Template-free customization of Kubernetes YAML manifests | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize - 5.8.1-1.4: normalized package name match | openSUSE Tumbleweed package metadata: kustomize from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Customization of kubernetes YAML configurations | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize-bash-completion - 5.8.1-1.4: normalized package name match | openSUSE Tumbleweed package metadata: kustomize-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash Completion for kustomize | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize-fish-completion - 5.8.1-1.4: normalized package name match | openSUSE Tumbleweed package metadata: kustomize-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fish Completion for kustomize | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize-zsh-completion - 5.8.1-1.4: normalized package name match | openSUSE Tumbleweed package metadata: kustomize-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh Completion for kustomize | https://github.com/kubernetes-sigs/kustomize - MacPorts - kustomize: normalized package name match | MacPorts ports tree: devel/kustomize/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Chocolatey - kustomize: normalized package name match | Chocolatey community package catalog: kustomize from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','kindle' - Scoop - main/kustomize: normalized package name match | Scoop official bucket manifest trees: bucket/kustomize.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/kustomize.yml](https://github.com/mxcl/pkgdb/blob/main/combined/kustomize.yml) ## ソース - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer