diff --git a/Makefile b/Makefile
index 8f30c4bce..f9edf7073 100644
--- a/Makefile
+++ b/Makefile
@@ -118,8 +118,10 @@ cache/%/kubectl-$(KUBECTL_VERSION): docker/kubectl.version
 
 cache/%/kustomize-$(KUSTOMIZE_VERSION): docker/kustomize.version
 	mkdir -p cache/$*
-	curl --fail -L -o $@ "https://github.com/kubernetes-sigs/kustomize/releases/download/v$(KUSTOMIZE_VERSION)/kustomize_$(KUSTOMIZE_VERSION)_`echo $* | tr - _`"
-	[ $* != "linux-amd64" ] || echo "$(KUSTOMIZE_CHECKSUM)  $@" | shasum -a 256 -c
+	curl --fail -L -o cache/$*/kustomize-$(KUSTOMIZE_VERSION).tar.gz "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv$(KUSTOMIZE_VERSION)/kustomize_v$(KUSTOMIZE_VERSION)_linux_amd64.tar.gz"
+	echo "$(KUSTOMIZE_CHECKSUM)  cache/$*/kustomize-$(KUSTOMIZE_VERSION).tar.gz" | shasum -a 256 -c
+	tar -m -C ./cache -xzf cache/$*/kustomize-$(KUSTOMIZE_VERSION).tar.gz kustomize
+	mv cache/kustomize $@
 
 cache/%/helm-$(HELM_VERSION):
 	mkdir -p cache/$*
diff --git a/docker/kustomize.version b/docker/kustomize.version
index fcfab90fb..69e467bde 100644
--- a/docker/kustomize.version
+++ b/docker/kustomize.version
@@ -1,2 +1,2 @@
-KUSTOMIZE_VERSION=3.2.0
-KUSTOMIZE_CHECKSUM=7db89e32575d81393d5d84f0dc6cbe444457e61ce71af06c6e6b7b6718299c22
+KUSTOMIZE_VERSION=3.5.4
+KUSTOMIZE_CHECKSUM=5cdeb2af81090ad428e3a94b39779b3e477e2bc946be1fe28714d1ca28502f6a