Secret generator without hash suffix

note: disableNameSuffixHash keeps stable name but breaks rollout-on-change

cat <<'EOF' >> kustomization.yaml secretGenerator: - name: db-creds literals: [PASSWORD=s3cr3t] generatorOptions: disableNameSuffixHash: true EOF
tool
kustomize23 commands
tags
kustomizesecretsgitopsk8s

More kustomize commands

  • Register CRD OpenAPI for merge keys
    cat <<'EOF' >> kustomization.yaml openapi: path: crd-schema.json EOF

    Teach kustomize CRD merge/list semantics so patches merge correctly

  • Build kustomization
    kustomize build ./overlays/prod

    Render all manifests for an overlay to stdout

  • Apply kustomization
    kubectl apply -k ./overlays/prod

    Build and apply kustomization in one step via kubectl

  • Diff kustomization
    kubectl diff -k ./overlays/prod

    Show what changes before applying

  • Add resource to kustomization
    kustomize edit add resource ./deployment.yaml

    Append a resource file to kustomization.yaml

all 23 kustomize commands