diff --git a/upstream/kustomization.yaml b/upstream/kustomization.yaml
new file mode 100644
--- /dev/null
+++ b/upstream/kustomization.yaml
@@ -0,0 +1,15 @@
+bases:
+  - pomerium-ingress-controller.yaml
+  - cert-manager-v1.12.0.yaml
+patchesStrategicMerge:
+  - "patch.yaml"
+
+patches:
+  - target:
+      kind: Deployment
+      name: pomerium
+      namespace: pomerium
+    patch: |-
+      - op: add
+        path: /spec/template/spec/containers/0/args/-
+        value: "--debug"