diff --git a/ansible/arcodange/factory/playbooks/03_cicd.yml b/ansible/arcodange/factory/playbooks/03_cicd.yml
index 24f37d3..041d99f 100644
--- a/ansible/arcodange/factory/playbooks/03_cicd.yml
+++ b/ansible/arcodange/factory/playbooks/03_cicd.yml
@@ -228,6 +228,10 @@
           global:
             domain: argocd.arcodange.duckdns.org
           configs:
+            cm:
+              kustomize.buildOptions: "--enable-helm"
+              helm.enablePostRenderer: "true"
+              exec.enabled: "true"
             params:
               server.insecure: true # let k3s traefik do TLS termination
       ansible.builtin.copy: