diff --git a/.gitea/workflows/validate.yaml b/.gitea/workflows/validate.yaml
index ec3f6e0..acb3d1c 100644
--- a/.gitea/workflows/validate.yaml
+++ b/.gitea/workflows/validate.yaml
@@ -71,10 +71,10 @@ jobs:
                 -strict \
                 -kubernetes-version 1.35.0 \
                 -schema-location default \
-                -ignore-missing-schemas
+                -ignore-missing-schemas \
                 -schema-location '.ci-schemas/{{.Group}}/{{.ResourceKind}}{{.KindSuffix}}.json' \
                 -schema-location '.ci-schemas/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \
-                -schema-location 'https://git.olb42.com/olb042/kubeconform/raw/branch/main/crdSchemas/{{ .ResourceKind }}_{{ .ResourceAPIVersion }}.json'
+                -schema-location 'https://git.olb42.com/olb042/kubeconform/raw/branch/main/crdSchemas/{{ .ResourceKind }}_{{ .ResourceAPIVersion }}.json' \
                 -summary
 
       - name: Apply bootstrap Application
diff --git a/ksops-cmp-config.yaml b/ksops-cmp-config.yaml
new file mode 100644
index 0000000..b7c9c19
--- /dev/null
+++ b/ksops-cmp-config.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ksops-cmp-config
+  namespace: argocd
+data:
+  plugin.yaml: |
+    apiVersion: argoproj.io/v1alpha1
+    kind: ConfigManagementPlugin
+    metadata:
+      name: ksops
+    spec:
+      version: v1.0
+      discover:
+        find:
+          glob: "**/ksops-generator.yaml"
+      generate:
+        command:
+          - kustomize
+          - build
+          - --enable-alpha-plugins
+          - --enable-exec
+          - .
\ No newline at end of file
diff --git a/manifest/overlays/production/kustomization.yaml b/manifest/overlays/production/kustomization.yaml
index 9e812e9..25b69f4 100644
--- a/manifest/overlays/production/kustomization.yaml
+++ b/manifest/overlays/production/kustomization.yaml
@@ -13,7 +13,8 @@ resources:
   - argocd-secret.sealed.secret.yaml
   - repo-creds-external.sealed.secret.yaml
   - repo-creds-internal.sealed.secret.yaml
-  - argocd-age-key.sealed.secret.yaml 
+  - argocd-age-key.sealed.secret.yaml
+  - ksops-cmp-config.yaml
 
 patches:
   - path: argocd-cm-patch.yaml