I assume you mean sanctions in general, not UN sanctions specifically. Russia as a permanent member of the UN security council can veto any resolution, so there is little point in even trying to push something through UN.
Trivial to work around using _envsubst_ utility (part of _gettext_).
If you write something like:
name: app-$KUSTOMIZE_NAMESPACE
and run
`kubectl kustomize | envsubst "$(printf '${%s} ' ${!KUSTOMIZE_} ${!CI_} ${!GITLAB_*})" | kubectl apply -f -` it will substitute the env vars that match the wildcard.
