diff --git a/docker/jenkins/Dockerfile b/docker/jenkins/Dockerfile
index 873b0273..25d7af8a 100644
--- a/docker/jenkins/Dockerfile
+++ b/docker/jenkins/Dockerfile
@@ -5,6 +5,8 @@ USER root
 ARG DOCKER_BUILDX_VERSION=0.36.1-1~debian.13~trixie
 ARG DOCKER_CE_CLI_VERSION=5:29.7.2-1~debian.13~trixie
 ARG DOCKER_COMPOSE_VERSION=5.4.0-1~debian.13~trixie
+ARG KUSTOMIZE_VERSION=5.7.0
+ARG TARGETARCH
 
 RUN apt-get update \
     && apt-get install -y --no-install-recommends \
@@ -26,6 +28,18 @@ RUN apt-get update \
       docker-buildx-plugin="${DOCKER_BUILDX_VERSION}" \
       docker-ce-cli="${DOCKER_CE_CLI_VERSION}" \
       docker-compose-plugin="${DOCKER_COMPOSE_VERSION}" \
+    && case "${TARGETARCH}" in \
+      amd64) KUSTOMIZE_SHA256="0d98f06d6d2c2c0ff8923cc136a517af74aaa187f1b9f3e17ff370d0625ede84" ;; \
+      arm64) KUSTOMIZE_SHA256="744bb1bc1854b6634dea9eaf6db2f401a734ed25d6837baa6f91157d79c27d5e" ;; \
+      *) echo "unsupported target architecture: ${TARGETARCH}" >&2; exit 1 ;; \
+    esac \
+    && curl -fsSL \
+      "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/v${KUSTOMIZE_VERSION}/kustomize_v${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz" \
+      -o /tmp/kustomize.tar.gz \
+    && echo "${KUSTOMIZE_SHA256}  /tmp/kustomize.tar.gz" | sha256sum -c - \
+    && tar -xzf /tmp/kustomize.tar.gz -C /usr/local/bin kustomize \
+    && chmod 0755 /usr/local/bin/kustomize \
+    && rm -f /tmp/kustomize.tar.gz \
     && rm -rf /var/lib/apt/lists/*
 
 COPY plugins.txt /usr/share/jenkins/ref/plugins.txt