# 使用 Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget 安装 kustomize 查看 kustomize 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:kustomize ``` ## 代理安全回答 kustomize builds Kubernetes manifests that are commonly applied to clusters. - **凭据访问:** Reads manifest files that may include secret generators or config references. - **远程变更:** Build is local, but output is intended for cluster mutation. - **发布/制品风险:** Can generate deployable Kubernetes artifacts. - **推荐控制:** Gate secret-generator inputs and downstream apply operations. - **代理使用指南:** Allow build output review; require approval before applying generated manifests or reading secret files. 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install kustomize ``` 证据: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install kustomize ``` 证据: MacPorts ports tree: devel/kustomize/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add kustomize ``` 证据: Alpine Linux edge package indexes: kustomize from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install kustomize ``` 证据: Debian stable package indexes: kustomize from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install kustomize ``` 证据: Fedora Rawhide package metadata: kustomize from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#kustomize ``` 证据: nixpkgs package indexes: kustomize from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S kustomize ``` 证据: Arch Linux sync databases: kustomize from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install kustomize ``` 证据: openSUSE Tumbleweed package metadata: kustomize from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install kustomize ``` 证据: Chocolatey community package catalog: kustomize from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','kindle' - Scoop (92%): ```sh scoop install main/kustomize ``` 证据: Scoop official bucket manifest trees: bucket/kustomize.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id Kubernetes.kustomize -e ``` 证据: Windows Package Manager source index: Kubernetes.kustomize from https://cdn.winget.microsoft.com/cache/source.msix ## 软件包事实 - **软件包键:** brew:kustomize - **软件包管理器:** Homebrew - **版本:** 5.8.1 - **来源摘要:** Template-free customization of Kubernetes YAML manifests - **主页:** - **仓库:** - **最后更新:** 2026-07-27T21:58:48+02:00 - **已生成:** 2026-08-03T19:37:03+00:00 ## 可执行文件 - kustomize (别名) ## 安装行为 - Bottle: 不可用 ## 版本和新鲜度 - 页面生成时间: 2026-08-03 - 管理器版本: 5.8.1 ## 项目历史与用法 Kustomize is the Kubernetes SIG CLI tool for template-free customization of raw YAML manifests. It became especially significant after the `kustomize build` flow was embedded into kubectl v1.14. ### 项目历史 Kustomize was created to customize Kubernetes resource YAML without mutating the base files and without introducing a general-purpose templating language. The README compares it to `make`, because desired transformations are declared in a file, and to `sed`, because the output is edited text. The project's core model is the `kustomization.yaml` file. Users declare resources, generators, patches, labels, name transformations, bases, and overlays, then run `kustomize build` to emit deployable YAML. That model made it attractive to GitOps and package-management workflows where plain YAML remains reviewable. ### 采用历史 Kustomize crossed from standalone Kubernetes SIG CLI project into kubectl when the v2.0.3 build flow was added to kubectl v1.14 in 2019. The embedded version stayed frozen through kubectl v1.20, then moved to v4.0.5 in kubectl v1.21 and continued being tracked in Kubernetes release notes. A 2024 Kubernetes Enhancement Proposal proposed deprecating and removing Kustomize from kubectl, partly to let the two tools develop separately and reduce kubectl dependency weight. The same KEP records that after SIG Architecture discussion on October 17, 2024, the removal proposal was not pursued because widespread community adoption made removal disruptive. ### 使用方式 Users keep a base directory of Kubernetes YAML plus a `kustomization.yaml`, then create environment-specific overlays such as development, staging, and production. `kustomize build` emits the rendered YAML, commonly piped to `kubectl apply -f -` or used by GitOps controllers. ### 为什么软件包爱好者会关心 Kustomize is one of the most important Kubernetes packaging tools because it occupies a middle ground between raw manifests and full templating systems such as Helm. For package maintainers, it matters because it preserves upstream YAML as patchable source material, supports overlays cleanly, and exists both as a standalone binary and as a kubectl-integrated workflow. ### 时间线 - 2018: Kustomize matured as a Kubernetes YAML customization tool under Kubernetes SIG CLI. - 2019: kubectl v1.14 added the Kustomize v2.0.3 build flow. - 2021: kubectl v1.21 updated the embedded Kustomize version to v4.0.5. - 2024: A Kubernetes Enhancement Proposal to remove Kustomize from kubectl was not pursued after discussion because of widespread adoption. ### Related projects - Kustomize is related to kubectl, Kubernetes SIG CLI, Helm, GitOps controllers, Kubernetes manifests, Krew plugins, and configuration-management tools that transform YAML before applying it to clusters. ### 来源 - - - - ## 安全说明 infrastructure mutation or orchestration signal. - **Geiger 风险:** orange / 中 - infrastructure mutation or orchestration signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: kustomization.yaml ## 其他软件包管理器记录 - Debian apt - golang-k8s-sigs-kustomize-dev - 5.6.0+ds-1: normalized package name match | Debian stable package indexes: golang-k8s-sigs-kustomize-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Customization of Kubernetes YAML configurations (library) | https://github.com/kubernetes-sigs/kustomize - Debian apt - kustomize - 5.6.0+ds-1+b2: normalized package name match | Debian stable package indexes: kustomize from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Customization of Kubernetes YAML configurations (program) | https://github.com/kubernetes-sigs/kustomize - Nix - kustomize: normalized package name match | nixpkgs package indexes: kustomize from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - apk - kustomize - 5.8.1-r3: normalized package name match | Alpine Linux edge package indexes: kustomize from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Template-free customization of Kubernetes YAML manifests | https://kustomize.io/ - apk - kustomize-bash-completion - 5.8.1-r3: normalized package name match | Alpine Linux edge package indexes: kustomize-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Bash completions for kustomize | https://kustomize.io/ - apk - kustomize-fish-completion - 5.8.1-r3: normalized package name match | Alpine Linux edge package indexes: kustomize-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fish completions for kustomize | https://kustomize.io/ - apk - kustomize-zsh-completion - 5.8.1-r3: normalized package name match | Alpine Linux edge package indexes: kustomize-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Zsh completions for kustomize | https://kustomize.io/ - dnf - kustomize - 5.8.1-2.fc45: normalized package name match | Fedora Rawhide package metadata: kustomize from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Customization of kubernetes YAML configurations | https://github.com/kubernetes-sigs/kustomize - pacman - kustomize - 5.8.1-1: normalized package name match | Arch Linux sync databases: kustomize from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Template-free customization of Kubernetes YAML manifests | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize - 5.8.1-1.4: normalized package name match | openSUSE Tumbleweed package metadata: kustomize from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Customization of kubernetes YAML configurations | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize-bash-completion - 5.8.1-1.4: normalized package name match | openSUSE Tumbleweed package metadata: kustomize-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash Completion for kustomize | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize-fish-completion - 5.8.1-1.4: normalized package name match | openSUSE Tumbleweed package metadata: kustomize-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fish Completion for kustomize | https://github.com/kubernetes-sigs/kustomize - zypper - kustomize-zsh-completion - 5.8.1-1.4: normalized package name match | openSUSE Tumbleweed package metadata: kustomize-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh Completion for kustomize | https://github.com/kubernetes-sigs/kustomize - MacPorts - kustomize: normalized package name match | MacPorts ports tree: devel/kustomize/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Chocolatey - kustomize: normalized package name match | Chocolatey community package catalog: kustomize from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','kindle' - Scoop - main/kustomize: normalized package name match | Scoop official bucket manifest trees: bucket/kustomize.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/kustomize.yml](https://github.com/mxcl/pkgdb/blob/main/combined/kustomize.yml) ## 来源 - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer