diff --git a/blog/nlb-security/bootstrap-w-docker.tmpl b/blog/nlb-security/bootstrap-w-docker.tmpl
index 0d89ab4..3db4c17 100755
--- a/blog/nlb-security/bootstrap-w-docker.tmpl
+++ b/blog/nlb-security/bootstrap-w-docker.tmpl
@@ -13,6 +13,9 @@ curl -Lo kubectl \
   https://storage.googleapis.com/kubernetes-release/release/v${kubectl_version}/bin/linux/amd64/kubectl
 curl -Lo docker-compose \
    https://github.com/docker/compose/releases/download/${compose_version}/docker-compose-$(uname -s)-$(uname -m)
+curl -L https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/v${kustomize_version}/kustomize_v${kustomize_version}_linux_amd64.tar.gz \
+   | tar -zxvf - -C .
+
 chmod +x kubectl kind docker-compose
 
 cd /usr/local
diff --git a/blog/nlb-security/instance.tf b/blog/nlb-security/instance.tf
index f62dce0..7cb7e55 100644
--- a/blog/nlb-security/instance.tf
+++ b/blog/nlb-security/instance.tf
@@ -37,7 +37,7 @@ resource "aws_instance" "public" {
   user_data                   = (var.private ? 
                                   templatefile("${path.module}/bootstrap.tmpl", {}) :
                                   templatefile("${path.module}/bootstrap-w-docker.tmpl",
-                                      { kind_version = "0.6.1", kubectl_version = "1.17.0", golang_version = "1.13.5", compose_version = "1.25.0" }))
+                                      { kind_version = "0.6.1", kubectl_version = "1.17.0", golang_version = "1.13.5", compose_version = "1.25.0" , kustomize_version = "3.5.3"}))
 
   tags = {
     Name = random_id.key.hex