--- title: The Kubernetes Kustomize KEP Kerfuffle | daily.dev description: An old controversy is dissected around Google merging the kustomize subcommand into kubectl, then backing it out weeks later after a security concern surfaced... canonical: https://daily.dev/posts/the-kubernetes-kustomize-kep-kerfuffle-bq2rwpbrd twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: The Kubernetes Kustomize KEP Kerfuffle | daily.dev og:description: An old controversy is dissected around Google merging the kustomize subcommand into kubectl, then backing it out weeks later after a security concern surfaced... og:url: https://daily.dev/posts/the-kubernetes-kustomize-kep-kerfuffle-bq2rwpbrd og:image: https://api.daily.dev/og/posts/bQ2rWPBRD.png og:image:alt: The Kubernetes Kustomize KEP Kerfuffle og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # The Kubernetes Kustomize KEP Kerfuffle **[Teleport](https://daily.dev/sources/teleport)** · 10 min read · 0 upvotes · 0 comments ## Summary An old controversy is dissected around Google merging the kustomize subcommand into kubectl, then backing it out weeks later after a security concern surfaced around local file access and program callouts. The piece walks through the Kubernetes Enhancement Proposal (KEP) process, the Helm vs Kustomize philosophical divide, complaints about kustomize skipping graduation criteria, gripes that cli-runtime is golang-only (locking out other language clients), and the broader governance question of whether Google fast-tracked a feature outside normal consensus. It closes noting a reworked kustomize subcommand integration KEP was merged and concerns moved to follow-up threads. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Kustomize, Kpt, Porch, and ConfigHub](https://daily.dev/posts/kustomize-kpt-porch-and-confighub-344rfhkwo) · ITNEXT · 2 upvotes · 0 comments - [Cloud native application challenges: installing the walking skeleton](https://daily.dev/posts/cloud-native-application-challenges-installing-the-walking-skeleton-ew7cvjwvj) · The New Stack · 1 upvotes · 0 comments - [Same App, Two Clouds: Migrating from EKS to GKE with Kustomize Overlays](https://daily.dev/posts/same-app-two-clouds-migrating-from-eks-to-gke-with-kustomize-overlays-ndfrvocib) · ITNEXT · 0 upvotes · 0 comments - [Kubernetes gets minor version rollback](https://daily.dev/posts/kubernetes-gets-minor-version-rollback-qfydcuwrs) · Google Cloud · 0 upvotes · 0 comments --- Tags: [#open-source](https://daily.dev/tags/open-source), [#kubernetes](https://daily.dev/tags/kubernetes), [#helm](https://daily.dev/tags/helm) [View this post on daily.dev](https://daily.dev/posts/the-kubernetes-kustomize-kep-kerfuffle-bq2rwpbrd) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"The Kubernetes Kustomize KEP Kerfuffle","url":"https://daily.dev/posts/the-kubernetes-kustomize-kep-kerfuffle-bq2rwpbrd","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/the-kubernetes-kustomize-kep-kerfuffle-bq2rwpbrd"},"datePublished":"2026-08-23T12:23:16.185Z","dateModified":"2026-08-23T12:51:26.339Z","description":"An old controversy is dissected around Google merging the kustomize subcommand into kubectl, then backing it out weeks later after a security concern surfaced...","image":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","thumbnailUrl":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/the-kubernetes-kustomize-kep-kerfuffle-bq2rwpbrd","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"open-source,kubernetes,helm","timeRequired":"PT10M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"The Kubernetes Kustomize KEP Kerfuffle"}]} ```