>_SecOpsLog_
All courses

Kustomize

Kustomize customizes Kubernetes YAML without a templating language: a base, then overlays and patches for each environment. This course covers kustomization.yaml, generators, strategic-merge and JSON6902 patches, transformers, and components, then remote bases and how Argo or Flux actually build the overlay. Rendering a manifest does not make it safe, and a remote base you do not pin is a supply-chain input.

Intermediate3 sections · 12 lessons · ~5h total · 14-question self-test
Start course
01

Kustomize fundamentals

4 lessons
01What Kustomize is: the overlay modelTemplate-free customization.12 min02kustomization.yaml & resourcesThe file that ties it together.12 min03ConfigMap & Secret generatorsGenerate config with hashes.12 min04Build & applykustomize build / kubectl -k.10 min
02

Overlays, patches & transformers

4 lessons
01Bases & overlaysdev, staging, prod from one base.14 min02Patches: strategic merge & JSON6902Change exactly what differs.14 min03Transformers: images, names, labelsCross-cutting edits declaratively.12 min04Components & reuseOptional, composable feature sets.12 min
03

Secrets, remote bases & GitOps

4 lessons
01Secrets done safelyGenerators, SOPS, and the pitfalls.14 min02Remote bases & supply chainPinning and trusting external bases.12 min03Kustomize vs Helm (and together)When to use which, or both.12 min04Kustomize in GitOps & securing itArgo/Flux, build, scan, deploy.14 min

Progress is saved in this browser only — no account required.

Final exam
Test yourself on everything
14 questions drawn from all 3 sections — every answer explained as you pick.
Start final exam