# apiVersion: kustomize.config.k8s.io/v1beta1
# kind: Kustomization

# namespace: apps

# # THIS IS THE MISSING LINK
# # It tells Kustomize: "Include the YAML coming from the pipe"
# resources:
#   - ./base-helm.yaml


# # 1. Automatic Linkerd Injection for all pods in this folder
# commonAnnotations:
#   linkerd.io/inject: enabled

# # 2. Manage your Graph and Config as Kustomize-managed secrets/configs
# # This ensures that if router.json changes, the pods perform a rolling restart.
# configMapGenerator:
#   - name: router-configs
#     files:
#       - config.yaml
#       - router.json

# # 3. Fix the ServiceAccount conflict if the Helm chart tries to create it
# patches:
#   - target:
#       kind: ServiceAccount
#       name: cosmo-router
#     patch: |-
#       apiVersion: v1
#       kind: ServiceAccount
#       metadata:
#         name: cosmo-router
#         annotations:
#           kustomize.config.k8s.io/behavior: merge
#   - target:
#       kind: Deployment
#       name: cosmo-router
#     patch: |-
#       apiVersion: apps/v1
#       kind: Deployment
#       metadata:
#         name: cosmo-router
#       spec:
#         template:
#           spec:
#             nodeSelector:
#               kubernetes.io/hostname: nworker
#             containers:
#               - name: cosmo-router
#                 volumeMounts:
#                   - name: config-volume
#                     # This overrides the Helm mount to use the Kustomize ConfigMap
#                     mountPath: /etc/cosmo 
#             volumes:
#               - name: config-volume
#                 configMap:
#                   name: router-configs