Kustomize Exec-Plugin deprecated

[dickescheid]

I noticed the Exec-Plugin for Kustomize is slated for deprecation:

https://kubectl.docs.kubernetes.io/guides/extending_kustomize/exec_plugins/

[devstein]

Hi @dickescheid thanks for making an issue and flagging. I've been watching the development of the KRM-style kustomize plugins and will work to transition KSOPS to a Containerized KRM Function. I'll post updates to this ticket. Contributions are always welcome!

Exec functions have no built-in security model. Kustomize does not provide an execution sandbox of any kind. Accordingly, plugins intended for distribution should be built as Containerized KRM Functions whenever possible. Exec functions are generally expected to be bespoke to a particular Kustomization and embedded within its directory.

[james-callahan]

I think the deprecation notice may have been a bit eager. I have a comment over here

[shay-berman]

Can you clarify @devstein if exec plugin or go plugin are becoming deprecation?
Which kustomzie sops tool is recoomanded to use?

[devstein]

Hi @shay-berman the plan is to migrate KSOPS to a KRM Exec Function. There is no explicit timeline for the migration, nor is there a timeline for kustomize to drop support for the current plugin style (exec/go).

We are still using KSOPS at Viaduct internally and will continue to for the foreseeable future.

As you know there are several kustomize SOPS tools. They all accomplish the same task and you can't go wrong with any. Each plugin has a slightly different UX, so it's a matter of preference/usage pattern. I'd recommend KSOPS, but I'm am definitely biased 😄