diff --git a/infra/argocd/config/argocd-cm-kustomize-helm-patch.yaml b/infra/argocd/config/argocd-cm-kustomize-helm-patch.yaml
new file mode 100644
index 0000000..e019785
--- /dev/null
+++ b/infra/argocd/config/argocd-cm-kustomize-helm-patch.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-cm
+data:
+  configManagementPlugins: |
+    - name: kustomize-build-with-helm
+      generate:
+        command: [ "sh", "-c" ]
+        args: [ "kustomize build --enable-helm" ]
\ No newline at end of file
diff --git a/infra/argocd/config/argocd-cmd-params-cm-patch.yaml b/infra/argocd/config/argocd-cmd-params-cm-server-insecrure-patch.yaml
similarity index 80%
rename from infra/argocd/config/argocd-cmd-params-cm-patch.yaml
rename to infra/argocd/config/argocd-cmd-params-cm-server-insecrure-patch.yaml
index c0d45be..619973d 100644
--- a/infra/argocd/config/argocd-cmd-params-cm-patch.yaml
+++ b/infra/argocd/config/argocd-cmd-params-cm-server-insecrure-patch.yaml
@@ -3,4 +3,5 @@ kind: ConfigMap
 metadata:
   name: argocd-cmd-params-cm
 data:
+  # Traefik handles TLS
   server.insecure: "true"
\ No newline at end of file
diff --git a/infra/argocd/kustomization.yaml b/infra/argocd/kustomization.yaml
index 80aa7d4..4c91324 100644
--- a/infra/argocd/kustomization.yaml
+++ b/infra/argocd/kustomization.yaml
@@ -10,7 +10,9 @@ resources:
   - infrastructure.yaml
   - applications.yaml
 
-# Let Traefik manage TLS-termination
 patchesStrategicMerge:
-  - config/argocd-cmd-params-cm-patch.yaml
+  # Kustomize Helm plugin
+  - config/argocd-cm-kustomize-helm-patch.yaml
+  # Let Traefik manage TLS-termination
+  - config/argocd-cmd-params-cm-server-insecrure-patch.yaml