Pin image by digest and rename

Pin by immutable digest; newName+digest also settable in images: block

kustomize edit set image app=registry.example.com/app@sha256:<id>
tool
kustomize23 commands
tags
kustomizegitopssecurityk8s

More kustomize commands

  • Secret generator without hash suffix
    cat <<'EOF' >> kustomization.yaml secretGenerator: - name: db-creds literals: [PASSWORD=s3cr3t] generatorOptions: disableNameSuffixHash: true EOF

    note: disableNameSuffixHash keeps stable name but breaks rollout-on-change

  • Register CRD OpenAPI for merge keys
    cat <<'EOF' >> kustomization.yaml openapi: path: crd-schema.json EOF

    Teach kustomize CRD merge/list semantics so patches merge correctly

  • Build kustomization
    kustomize build ./overlays/prod

    Render all manifests for an overlay to stdout

  • Apply kustomization
    kubectl apply -k ./overlays/prod

    Build and apply kustomization in one step via kubectl

  • Diff kustomization
    kubectl diff -k ./overlays/prod

    Show what changes before applying

all 23 kustomize commands