Question: Ensuring CMP Plugin Invocation for Bootstrap Components with ${TEMPLATE_VAR_**} Interpolation

[david-VigneshN]

Context
I’m facing an intermittent issue with ArgoCD deployment. The /generate script reliably executes every 24 hours for each repository/ArgoCD application (on cache expiry or manual hard refresh) and interpolation of template variables such as ${TEMPLATE_VAR_**} works as expected. However, in between these scheduled runs, raw manifests containing ${TEMPLATE_VAR_**} sometimes get applied to the cluster without interpolation, resulting in misconfigured resources.

Current Helm/ArgoCD Configuration
A relevant excerpt from our Helm values and repo-server settings is shown below:

cmp:
  create: true
  plugins:
    argocd-cmp-kustomize:
      allowConcurrency: true
      discover:
        find:
          command:
            - /find
      generate:
        command:
          - /generate
      lockRepo: false
# ...
repoServer:
  extraContainers:
    - name: argocd-cmp-kustomize
      command: [/var/run/argocd/argocd-cmp-server]
      image: docker.**.com/prod/kaas/argocd-sidecar:*********
      # ...other config...
  # ...

• The /find command is configured to search for the existence of a kustomization.yaml file in the repository; if found, it triggers the plugin execution.

Observed Scheduling and Manifest Issues

• /generate runs every 24 hours and interpolation works.
• Sometimes, in between, raw manifests (with ${TEMPLATE_VAR_**}) are applied to the cluster, bypassing interpolation/plugin logic.

Questions for the Community

• Under what circumstances can raw manifests bypass CMP plugin interpolation and get applied to the cluster between scheduled /generate executions?
• Is there an explicit annotation, configuration, or best practice in ArgoCD to guarantee that the plugin is always triggered for all bootstrap components, especially with templates like ${TEMPLATE_VAR_**}?
• Are there additional configuration requirements (such as annotations or resource hooks) needed to enforce consistent plugin invocation for every sync event or app refresh?

Request for Community Help
If you have insight or experience with enforcing CMP plugin invocation or safeguarding against un-interpolated manifests, please share your best practices, documentation, or example configurations.

Thank you!